Penetration testing platforms
These 6 penetration testing providers are software platforms that deliver penetration testing. Most SOC 2 and ISO audits expect a recent penetration test, and any of these providers say they can run one.
Updated 1 Oct 2026. How we research- Firms listed (of penetration testing providers)
- 6
- Published prices
- $95 to $9,999 3 firms, each linked to its source
- Checked in an official register
- 0 of 6 The rest show "Firm states"
FiltersClear all
Astra SecurityNot yet checkedPentest platform- Starting price
- From $2,999
- Legal entity
- Not stated
- Accreditations
- Firm states
BreachLock Inc.Not yet checkedPentest platform, United States- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Firm states
- CobaltNot yet checkedPentest platform
- Starting price
- From $3,500
- Legal entity
- Not stated
- Accreditations
- Firm states
HackerOneNot yet checkedPentest platform- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Firm states
Pentest-Tools.comNot yet checkedPentest platform- Starting price
- From $95
- Legal entity
- Not stated
- Accreditations
- Firm states
Red SentryNot yet checkedPentest platform- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Firm states
No firms match these filters. Clear all filters
How to choose a penetration testing provider
Check what is in scope (web app, API, cloud, mobile), who does the testing, and whether the report is acceptable to your auditor. Ask about re-testing after you fix findings.
Some providers are firms with testers on staff and some are platforms that match you with testers. Both can work, so ask who is accountable for the report.
Do I need a penetration test for SOC 2?
It is not strictly required, but many auditors and customers expect a recent one.
What does CREST accredited mean?
CREST is a body that accredits penetration testing companies. We show it only when the firm states it or a register confirms it.
How is this list ordered?
By the sort you choose. The default is the number of verified credentials, then alphabetical. Payment never changes the order, and a Featured slot is shown apart from the results and labelled as paid.