Independent and free for buyers. We don't do audits. We help you find and compare the firms that do.

Penetration testing for healthcare and healthtech

These 46 penetration testing providers say they work with healthcare and healthtech. Most SOC 2 and ISO audits expect a recent penetration test, and any of these providers say they can run one.

Updated 1 Oct 2026. How we research
Get 3 to 5 quotes
Firms listed (of penetration testing providers)
46
Published prices
$300 to $60,000 · ₹150,000 to ₹800,000
7 firms, each linked to its source
Checked in an official register
11 of 46
Filters
Credentials
Price
Works with
Also offers
Region
Firm type
46 matching firms
  • Prescient Security & Assurance logo
    Audit firm and certification body and consultant, United StatesSOC 1SOC 2SOC 3ISO 27001
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Verified
    Get a quoteProfileChecked 1 Oct 2026
  • Aprio logo
    Aprio2 verified
    Audit firmSOC 1SOC 2SOC 3ISO 27001
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Verified
    Get a quoteProfileChecked 1 Oct 2026
  • BARR Advisory logo
    BARR Advisory2 verified
    Audit firm and certification body and consultantSOC 1SOC 2SOC 3ISO 27001
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Verified
    Get a quoteProfileChecked 1 Oct 2026
  • ControlCase logo
    ControlCase2 verified
    Audit firm, United StatesPCI DSSISO 27001HITRUSTSOC 2
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Verified
    Get a quoteProfileChecked 1 Oct 2026
  • DigitalXRAID logo
    DigitalXRAID2 verified
    Consultant, United KingdomSOC 2ISO 27001Cyber EssentialsPCI DSS
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Verified
    Get a quoteProfileChecked 1 Oct 2026
  • Audit firm and certification body, United StatesSOC 1SOC 2SOC 3PCI DSS
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Verified
    Get a quoteProfileChecked 1 Oct 2026
  • 360 Advanced logo
    360 Advanced1 verified
    Audit firm and certification body, United StatesSOC 1SOC 2SOC 3HIPAA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Verified
    Get a quoteProfileChecked 1 Oct 2026
  • AARC-3601 verified
    Audit firm, United StatesSOC 1SOC 2SOC 3ISO 27001
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Verified
    Get a quoteProfileChecked 1 Oct 2026
  • Drummond Group logo
    Drummond Group1 verified
    Audit firm, United StatesSOC 2ISO 27001PCI DSSHIPAA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Verified
    Get a quoteProfileChecked 1 Oct 2026
  • GRSee1 verified
    Consultant and audit firmSOC 2SOC 3ISO 27001ISO 42001
    Starting price
    From $15,000
    Legal entity
    Not stated
    Accreditations
    Verified
    Get a quoteProfileChecked 1 Oct 2026
  • VISTA InfoSec1 verified
    Consultant, IndiaPCI DSSSOC 2ISO 27001GDPR
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Verified
    Get a quoteProfileChecked 1 Oct 2026
  • Agency logo
    AgencyNot yet checked
    ConsultantSOC 2ISO 27001GDPRHIPAA
    Starting price
    From $2,500
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Akant logo
    AkantNot yet checked
    Consultant, France. Signs as AKANT SASISO 27001ISO 27701ISO 42001SOC 2
    Starting price
    Not published
    Legal entity
    Firm states
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • AuditVisor logo
    AuditVisorNot yet checked
    Audit firm, United StatesSOC 2HIPAAPCI DSSGDPR
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Brown Edwards logo
    Brown EdwardsNot yet checked
    Audit firm, United StatesSOC 1SOC 2
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • CGVantage (formerly CyberGuard Advantage) logo
    Audit firmSOC 1SOC 2SOC 3PCI DSS
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • CobaltNot yet checked
    Pentest platformSOC 2ISO 27001PCI DSSHIPAA
    Starting price
    From $3,500
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • CyberSapiens logo
    CyberSapiensNot yet checked
    Audit firm, AustraliaSOC 1SOC 2SOC 3ISO 27001
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Cybertryzub Infosec Private Limited logo
    Certification body, India. Signs as Cybertryzub Infosec Private LimitedISO 27001PCI DSSHIPAASOC 2
    Starting price
    Not published
    Legal entity
    Firm states
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • DNX Solutions logo
    DNX SolutionsNot yet checked
    Consultant, Australia. Signs as DNX SolutionsSOC 2ISO 27001ISO 42001PCI DSS
    Starting price
    Not published
    Legal entity
    Firm states
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Echelon Risk + Cyber logo
    Echelon Risk + CyberNot yet checked
    ConsultantSOC 2ISO 27001HIPAACMMC
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • FinAudit CPA logo
    FinAudit CPANot yet checked
    Audit firm, United StatesSOC 1SOC 2SOC 3ISO 27001
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • GRC Concierge logo
    GRC ConciergeNot yet checked
    Consultant, CanadaSOC 2ISO 27001HIPAA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • HackerOne logo
    HackerOneNot yet checked
    Pentest platformSOC 2ISO 27001GDPRDORA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • IS Partners logo
    IS PartnersNot yet checked
    Audit firm and certification body, United StatesSOC 1SOC 2SOC 3ISO 27001
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • ISSPL Limited (IRQS)Not yet checked
    Certification body, India. Signs as ISSPL LimitedISO 27001ISO 27701SOC 2GDPR
    Starting price
    From $3,000
    Legal entity
    Firm states
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Kobalt.io logo
    Kobalt.ioNot yet checked
    ConsultantSOC 2ISO 27001ISO 42001HIPAA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • LBMC logo
    LBMCNot yet checked
    Audit firm, United StatesSOC 1SOC 2SOC 3HIPAA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Logic Weave logo
    Logic WeaveNot yet checked
    Consultant, AustraliaISO 27001SOC 2
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Mirai SecurityNot yet checked
    ConsultantSOC 2ISO 27001CMMCFedRAMP
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Oread Risk & Advisory logo
    Oread Risk & AdvisoryNot yet checked
    Audit firm and consultantHIPAAPCI DSS
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Penti logo
    PentiNot yet checked
    Consultant, United States. Signs as Certypie IncSOC 2ISO 27001HIPAAGDPR
    Starting price
    From $300
    Legal entity
    Firm states
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Periculo logo
    PericuloNot yet checked
    Consultant, United KingdomISO 27001ISO 42001HIPAATISAX
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Pivot Point Security logo
    Pivot Point SecurityNot yet checked
    Consultant, United StatesISO 27001CMMCSOC 2PCI DSS
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Realize Security Ltd logo
    Realize Security LtdNot yet checked
    Consultant, United Kingdom
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Red Sentry logo
    Red SentryNot yet checked
    Pentest platformSOC 2ISO 27001HIPAAPCI DSS
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Rhymetec logo
    RhymetecNot yet checked
    Consultant, United States. Signs as Rhymetec LLCSOC 1SOC 2ISO 27001ISO 42001
    Starting price
    Not published
    Legal entity
    Firm states
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Seiso logo
    SeisoNot yet checked
    Consultant, United StatesISO 27001SOC 2CMMCHIPAA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Software Secured logo
    Software SecuredNot yet checked
    Consultant, CanadaSOC 2ISO 27001HIPAAPCI DSS
    Starting price
    From $5,400
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Strike Security logo
    Strike SecurityNot yet checked
    Consultant
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Tagore AS logo
    Tagore ASNot yet checked
    Consultant, Norway. Signs as Tagore ASISO 27001SOC 2GDPR
    Starting price
    Not published
    Legal entity
    Firm states
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Tevora logo
    TevoraNot yet checked
    ConsultantCMMCFedRAMPHITRUSTHIPAA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Trava SecurityNot yet checked
    Consultant, United StatesISO 42001FedRAMPGDPRSOC 2
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Uzado logo
    UzadoNot yet checked
    Consultant, CanadaSOC 2ISO 27001GDPRPCI DSS
    Starting price
    From $24,000
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Wattlecorp Cybersecurity Labs logo
    ConsultantDORAISO 27001GDPRPCI DSS
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Zero Day CPA logo
    Zero Day CPANot yet checked
    Audit firm, United StatesSOC 1SOC 2SOC 3HIPAA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026

How to choose a penetration testing provider

Check what is in scope (web app, API, cloud, mobile), who does the testing, and whether the report is acceptable to your auditor. Ask about re-testing after you fix findings.

Some providers are firms with testers on staff and some are platforms that match you with testers. Both can work, so ask who is accountable for the report.

Related lists
Do I need a penetration test for SOC 2?

It is not strictly required, but many auditors and customers expect a recent one.

What does CREST accredited mean?

CREST is a body that accredits penetration testing companies. We show it only when the firm states it or a register confirms it.

How is this list ordered?

By the sort you choose. The default is the number of verified credentials, then alphabetical. Payment never changes the order, and a Featured slot is shown apart from the results and labelled as paid.