Penetration testing firms, sorted by what you need tested.
Ranked lists when you want a firm to test your defenses, practical guides when you are planning, scoping or budgeting a test. New penetration testing lists and guides appear here as soon as they’re published.
Common questions
How do I choose a penetration testing company?
Start with what you need tested: a web app, your network, cloud setup, mobile apps or your physical sites. Then shortlist firms that do mostly manual testing in that area, ask who will actually run the test, and request a sample report before you sign.
How much does a penetration test cost?
Most firms price by tester-days. A focused web app or external network test is usually a small fixed fee, while larger scopes and red team engagements run into the tens of thousands. Our penetration testing cost guide breaks down what drives the quote.
What is the difference between a penetration test and red teaming?
A penetration test tries to find as many weaknesses as possible in a defined scope. Red teaming is a longer, goal-based exercise that tests whether your people and defenses can detect and stop a realistic attacker.
How do you rank the firms on these lists?
Our editors review each firm’s services, testing approach, team, certifications and client feedback. Sponsored placements are always labeled.
Run a penetration testing firm?
Get your company considered for ReVerb's ranked lists and company showcase