Independent and free for buyers. We don't do audits. We help you find and compare the firms that do.

Penetration testing platforms

These 6 penetration testing providers are software platforms that deliver penetration testing. Most SOC 2 and ISO audits expect a recent penetration test, and any of these providers say they can run one.

Updated 1 Oct 2026. How we research
Get 3 to 5 quotes
Firms listed (of penetration testing providers)
6
Published prices
$95 to $9,999
3 firms, each linked to its source
Checked in an official register
0 of 6
The rest show "Firm states"
Filters
Price
Also offers
Region
6 matching firms
  • Astra Security logo
    Astra SecurityNot yet checked
    Pentest platformSOC 2ISO 27001HIPAA
    Starting price
    From $2,999
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • BreachLock Inc. logo
    BreachLock Inc.Not yet checked
    Pentest platform, United StatesSOC 2ISO 27001PCI DSSHIPAA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • CobaltNot yet checked
    Pentest platformSOC 2ISO 27001PCI DSSHIPAA
    Starting price
    From $3,500
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • HackerOne logo
    HackerOneNot yet checked
    Pentest platformSOC 2ISO 27001GDPRDORA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Pentest-Tools.com logo
    Pentest-Tools.comNot yet checked
    Pentest platformSOC 2ISO 27001PCI DSSHIPAA
    Starting price
    From $95
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Red Sentry logo
    Red SentryNot yet checked
    Pentest platformSOC 2ISO 27001HIPAAPCI DSS
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026

How to choose a penetration testing provider

Check what is in scope (web app, API, cloud, mobile), who does the testing, and whether the report is acceptable to your auditor. Ask about re-testing after you fix findings.

Some providers are firms with testers on staff and some are platforms that match you with testers. Both can work, so ask who is accountable for the report.

Related lists
Do I need a penetration test for SOC 2?

It is not strictly required, but many auditors and customers expect a recent one.

What does CREST accredited mean?

CREST is a body that accredits penetration testing companies. We show it only when the firm states it or a register confirms it.

How is this list ordered?

By the sort you choose. The default is the number of verified credentials, then alphabetical. Payment never changes the order, and a Featured slot is shown apart from the results and labelled as paid.