Nice To E-Meet You!



    What marketing services do you need for your project?

    Penetration testing firms, sorted by what you need tested.

    Ranked lists when you want a firm to test your defenses, practical guides when you are planning, scoping or budgeting a test. New penetration testing lists and guides appear here as soon as they’re published.

    • 87 Guides and ranked lists
    • 5 Location lists
    • 71 Domain Rating

    Penetration testing firms

    All 21

    Ranked firms for network, infrastructure and full-scope penetration tests, from senior-led boutiques to large testing teams.

    Show 12 more Show less

    Red teaming and adversary simulation

    All 7

    Goal-based attack simulations that test whether your people and defenses can spot and stop a real attacker.

    Physical and social engineering testing

    All 3

    Firms that test your buildings, access controls and staff with covert entry, phishing and pretexting.

    Application, web and mobile security

    All 15

    Testers and AppSec firms for web apps, APIs and iOS and Android apps.

    Show 6 more Show less

    Cloud, DevSecOps, IoT and devices

    All 12

    Security testing for cloud environments, build pipelines, wireless networks, IoT and embedded hardware.

    Show 3 more Show less

    Pricing, scoping and buying a test

    All 19

    What penetration tests cost, what moves the quote and how to prepare before you hire a firm.

    Show 10 more Show less

    Certifications and training

    All 16

    The certifications and courses that matter when you hire testers or build an in-house red team.

    Show 8 more Show less

    Common questions

    How do I choose a penetration testing company?

    Start with what you need tested: a web app, your network, cloud setup, mobile apps or your physical sites. Then shortlist firms that do mostly manual testing in that area, ask who will actually run the test, and request a sample report before you sign.

    How much does a penetration test cost?

    Most firms price by tester-days. A focused web app or external network test is usually a small fixed fee, while larger scopes and red team engagements run into the tens of thousands. Our penetration testing cost guide breaks down what drives the quote.

    What is the difference between a penetration test and red teaming?

    A penetration test tries to find as many weaknesses as possible in a defined scope. Red teaming is a longer, goal-based exercise that tests whether your people and defenses can detect and stop a realistic attacker.

    How do you rank the firms on these lists?

    Our editors review each firm’s services, testing approach, team, certifications and client feedback. Sponsored placements are always labeled.

    Run a penetration testing firm?

    Get your company considered for ReVerb's ranked lists and company showcase

    Submit your company