Company lists · Data refreshed September 2026

Top 25 Security code review companies based in the United States

RevenueBase identified 110 security code review companies headquartered in the United States as of September 2026 and tracks 1,110 professional contacts across them, including 245 with verified work emails. San Francisco is the largest hub.

This list covers security code review companies headquartered in the United States, matched on what each company actually does as described in its own words. Ranked by team size, largest first. Every row shows the company's own description, its RevenueBase Smart Search rating, and when it was last checked. Data refreshed September 29, 2026.

Published by RevenueBase, a B2B data infrastructure company. This list was built with RevenueBase Smart Search, the natural-language company search RevenueBase customers use to build their own targeted lists and unlock verified emails and direct dials at the companies on them. How these lists are built and judged.

How to read this list HQ checked on every row RevenueBase Smart Search rating on every row Refreshed Sep 29, 2026 86% judged on-target in blind review
110Companies
1,110Contacts tracked
245Verified emails
Explore this list → Free signup · no credit card · 500 free credits

The 25 largest security code review companies based in the United States

Ranked by team size
Top 25 of 110 security code review companies based in the United States, ranked by team size, largest first. Data refreshed Sep 29, 2026. RevenueBase Smart Search rates how each company's information relates to security code review companies: strong evidence (its own description names it), partial (names part of it), indirect (matched on the rest of its profile rather than the description shown). Click a contact count to view that company's people.
#CompanyRevenueBase Smart SearchHeadquartersEmployeesContacts
1Partial evidenceAlexandria, VA, United StatesHQ checked Sep 29, 2026n/a113 contacts →

Partial evidence

“Strategic Security is an IT Security consulting firm that provides in-depth technical security assessments of your network, web application, and regulatory compliance gap analysis…”

Source: RevenueBase Database · checked Sep 29, 2026
2Indirect evidenceNashville, United StatesHQ checked Sep 29, 202611-5060 contacts →

Indirect evidence

“We make cybersecurity easy and understandable.”

Source: RevenueBase Database · checked Sep 29, 2026
3Partial evidenceSterling, VA, United StatesHQ checked Sep 29, 202611-5040 contacts →

Partial evidence

“Kyrus is a security innovation company solving the world's hardest computer security problems.”

Source: RevenueBase Database · checked Sep 29, 2026
4Partial evidenceSeattle, WA, United StatesHQ checked Sep 29, 202611-5039 contacts →

Partial evidence

“Anvil is an information security consulting firm focused on top tier consulting.”

Source: RevenueBase Database · checked Sep 29, 2026
5Partial evidenceBaltimore, MD, United StatesHQ checked Sep 29, 202611-5033 contacts →

Partial evidence

“Companies come to ISE when they need to find and fix their security vulnerabilities and prove their tech is secure.”

Source: RevenueBase Database · checked Sep 29, 2026
6Strong evidenceSan Francisco, CA, United StatesHQ checked Sep 29, 202611-5023 contacts →

Strong evidence

“CodeAnt AI is the agentic code security platform, combining defense and offense in a single self-learning engine.”

Source: RevenueBase Database · checked Sep 29, 2026
7Partial evidenceWoburn, MA, United StatesHQ checked Sep 29, 202611-5022 contacts →

Partial evidence

“Primeon is a leader in enterprise-wide application security, pen-testing (all web apps & smartphone apps security tests - all device flavors), cloud computing application Security…”

Source: RevenueBase Database · checked Sep 29, 2026
8Indirect evidenceLuray, VA, United StatesHQ checked Sep 29, 20261-1018 contacts →

Indirect evidence

“Strong Crypto Innovations is a leading cybersecurity services firm that performs testing on critical technology systems.”

Source: RevenueBase Database · checked Sep 29, 2026
9Partial evidenceNew York, NY, United StatesHQ checked Sep 29, 202611-5017 contacts →

Partial evidence

“Include Security is a premiere security consulting company executing thousands of assessments of all types of technology for hundreds of clients since 2011.”

Source: RevenueBase Database · checked Sep 29, 2026
10Partial evidence8 Market Pl, United StatesHQ checked Sep 29, 202611-5017 contacts →

Partial evidence

“Auxin Security is a Maryland-based cybersecurity, Data science, Risk, and compliance firm with Services and Consulting.”

Source: RevenueBase Database · checked Sep 29, 2026
11Partial evidenceOverland Park, KS, United StatesHQ checked Sep 29, 20261-1014 contacts →

Partial evidence

“TrustFoundry is a full service security firm that focuses on penetration testing and secure design.”

Source: RevenueBase Database · checked Sep 29, 2026
12Partial evidenceRockville, MD, United StatesHQ checked Sep 29, 202611-5014 contacts →

Partial evidence

“Wolfpack Security is a boutique application security firm focused on high-signal manual pentesting.”

Source: RevenueBase Database · checked Sep 29, 2026
13Strong evidenceTampa, FL, United StatesHQ checked Sep 29, 202611-5013 contacts →

Strong evidence

“Ethical hacking : Vulnerability Assessment, Penetration Testing, Source Code Security Testing, Apps Security Testing, ATM and PoS pentesting, transactional switches testing…”

Source: RevenueBase Database · checked Sep 29, 2026
14Partial evidenceCheyenne, WY, United StatesHQ checked Sep 29, 202611-5011 contacts →

Partial evidence

“We make world's top security practices available even to startups.”

Source: RevenueBase Database · checked Sep 29, 2026
15Partial evidenceAnnapolis, MD, United StatesHQ checked Sep 29, 202611-5010 contacts →

Partial evidence

“In 2004, we founded KoreLogic to build an IT security company that was respected for the quality of its work and the caliber of our staff.”

Source: RevenueBase Database · checked Sep 29, 2026
16Partial evidenceWest Des Moines, IA, United StatesHQ checked Sep 29, 20261-1010 contacts →

Partial evidence

“Puma Security specializes in cloud security, DevOps automation, and security assessments.”

Source: RevenueBase Database · checked Sep 29, 2026
17Partial evidenceMedford, NY, United StatesHQ checked Sep 29, 202611-508 contacts →

Partial evidence

“Code We Trust, by Source Code Inspection, demystifies the software code evaluation process.”

Source: RevenueBase Database · checked Sep 29, 2026
18Partial evidenceSan Francisco, CA, United StatesHQ checked Sep 29, 20261-108 contacts →

Partial evidence

“Corgea automatically secures your vulnerable source code.”

Source: RevenueBase Database · checked Sep 29, 2026
19Strong evidenceHammonton, NJ, United StatesHQ checked Sep 29, 20261-108 contacts →

Strong evidence

“We are coding security professionals with varying backgrounds in writing code, assessing application security, and advising the most security minded organizations in the world.”

Source: RevenueBase Database · checked Sep 29, 2026
20Partial evidenceSan Francisco, CA, United StatesHQ checked Sep 29, 202611-508 contacts →

Partial evidence

“Web pentesting with Defensive Security and Offensive Security.”

Source: RevenueBase Database · checked Sep 29, 2026
21Strong evidenceSalt Lake City, United StatesHQ checked Sep 29, 20261-108 contacts →

Strong evidence

“Code Security.”

Source: RevenueBase Database · checked Sep 29, 2026
22Partial evidenceAlbany, NC, United StatesHQ checked Sep 29, 202611-508 contacts →

Partial evidence

“Cyber Castellum is a cybersecurity consulting firm focused on helping organizations identify vulnerabilities, mitigate risk, and strengthen their overall security posture.”

Source: RevenueBase Database · checked Sep 29, 2026
23Partial evidenceAlexandria, VA, United StatesHQ checked Sep 29, 202611-507 contacts →

Partial evidence

“PatchAdvisor is a complete IT security firm focused on providing world class IT security services to our clients.”

Source: RevenueBase Database · checked Sep 29, 2026
24Strong evidenceSan Francisco, CA, United StatesHQ checked Sep 29, 202611-506 contacts →

Strong evidence

“Founded by security engineers from Tesla and Google, ZeroPath empowers developers to ship secure code faster.”

Source: RevenueBase Database · checked Sep 29, 2026
25Partial evidenceClearwater, FL, United StatesHQ checked Sep 29, 202611-506 contacts →

Partial evidence

“We are a cybersecurity company, we provide ethical hacking, Red Team, vulnerability analysis, code analysis, social engineering, follow-up in ISO27001, PCI, ISO27032, NIST, CIS…”

Source: RevenueBase Database · checked Sep 29, 2026

Showing 25 of 110 security code review companies based in the United States

See the full list, filter by size, metro and specialty, and get verified emails and direct dials for all 245 reachable decision-makers.

Free signup · no credit card

View the full list →

Security code review companies based in the United States at a glance

As of Sep 29, 2026
22.1%Verified-email coverage
10.1Average contacts per company
1-10Median size (employees)
10.9%Largest-city concentration · San Francisco
Sep 29, 2026Page data refreshed

Companies by employee count

1-10
71
11-50
30
51-200
8
201-500
1

Email recency for this list is measured worldwide rather than for United States, so it is reported there. Company counts and contact totals on this page are exact for United States, over 110 companies.

How this list was built

Company categories are rarely black and white. RevenueBase reads each company's own description of its business to decide whether it belongs among security code review companies, so some rows will be adjacent to the category rather than pure plays. The description and RevenueBase Smart Search rating on every row are there so you can check each match yourself.

Source
The RevenueBase company graph: 60 million companies and 398.9 million professional contacts resolved from primary sources, queried with RevenueBase Smart Search, the natural-language company search available to every RevenueBase user.
What qualifies
Companies headquartered in the United States whose own description of what they do matches “security code review companies”. Matching reads each company's description, not its industry code or its name.
RevenueBase Smart Search
RevenueBase Smart Search is how this list is assembled and how each row is rated. RevenueBase's data engine and AI assess a company's LinkedIn profile, information supplied directly by the company, its website and other publicly available information, then relate it to a category defined in a user's own words. Each row is rated strong evidence (its own description names security code review companies), partial evidence (it names part of the category) or indirect evidence (the description shown names none of it and the match rests on the rest of the company's profile). The description supporting each rating is quoted on the row.
What we exclude
Companies whose own description does not clearly place them among security code review companies, and records with no verified work email. Companies headquartered outside United States are excluded even when they keep an office there.
Match quality
In blind human judging of this matching method, 86% of matched companies were on target. Expect roughly 1 in 7 rows to be adjacent to the category rather than a pure play. Every row shows the company's own description and its RevenueBase Smart Search rating so you can judge each match yourself. Read the full methodology: how the lists are built, how the judging worked, and what the figure means.
Ranking
Team size, largest first: companies are ordered by the number of professionals RevenueBase tracks at each one. Employee ranges shown are reported bands, for context.
Verification
Every listed company carries at least one verified work email, 245 across the full list. Contacts re-verify on a rolling cadence, and each contact's own verification date is shown inside RevenueBase.
Refresh
This page's figures were pulled from the company graph on September 29, 2026. Lists refresh periodically as the graph is re-checked.
Corrections
Wrong category, wrong headquarters, or a company that has closed? Use “Report an issue” on any row. Reports go to the RevenueBase Data Team and feed back into the company graph.

Frequently asked

What is RevenueBase Smart Search?

RevenueBase Smart Search is how RevenueBase decides which companies belong on this list and how strongly each one fits. Its data engine and AI assess a company's LinkedIn profile, information supplied directly by the company, its website and other publicly available information, then relate it to the category the list is about. Each row is rated strong evidence when the company's own description names security code review companies, partial evidence when it names part of the category, and indirect evidence when the description shown names none of it and the match rests on the rest of the company's profile.

How many security code review companies are there based in the United States?

RevenueBase identified 110 security code review companies headquartered in the United States as of September 2026, matched on each company's own description of what it does rather than its industry code.

What is the largest company on this list?

Strategic Security, headquartered in Alexandria, tops this list with the largest team on record.

Which city has the most security code review companies?

San Francisco leads with 12 headquartered companies, followed by New York (6) and Austin (3).

How do I get contact information for these companies?

A free RevenueBase account lets you run this exact search and work the top results, verified emails and direct dials included. Upgrading unlocks all 245 verified decision-maker contacts tracked across these 110 companies.

How current is this list?

The list refreshes periodically as the company graph is re-checked. This page's figures were pulled on September 29, 2026.

Ready to reach these companies? Verified emails and direct dials for all 110 security code review companies based in the United States. Start with a free account, no credit card.

Download this list →

Related lists

About this data

RevenueBase is a B2B data infrastructure company. Its company graph covers 60 million companies and 398.9 million professional contacts, with emails verified on a rolling cadence rather than scraped once and left to decay. These company lists are generated directly from that graph with RevenueBase Smart Search, the same natural-language company search every RevenueBase user has: describe a market in plain words, get the companies that match, and add verified emails and direct dials for the people at them. It is the same data that powers RevenueBase's B2B data products, and a free account includes 500 credits to start. How these lists are built and judged.