Company lists · Data refreshed October 2026

Top 25 Vulnerability assessment and penetration testing software companies based in the United States

RevenueBase identified 730 company matches for vulnerability assessment and penetration testing software companies associated with the United States as of October 2026 and tracks 17,454 professional contacts across them, including 6,555 with verified work emails. San Francisco is the largest hub.

This list covers company matches for vulnerability assessment and penetration testing software companies associated with the United States, found by RevenueBase SmartSearch using the meaning of business descriptions in its company graph at Exact. Ranked by professionals tracked, largest first. Rows show recorded descriptions where available, Exact search membership and the snapshot date. Data refreshed October 20, 2026.

Published by RevenueBase, a B2B data infrastructure company. This list was built with RevenueBase SmartSearch, the natural-language company search RevenueBase customers use to build their own targeted lists and unlock verified emails and direct dials at the companies on them. How these lists are built and judged.

How to read this list RevenueBase SmartSearch · Exact Recorded Oct 20, 2026 How this list was built
730Companies
17,454Contacts tracked
6,555Verified emails
Explore this list → Free signup · no credit card · 500 free credits

The 25 largest vulnerability assessment and penetration testing software companies based in the United States

Ranked by team size
Top 25 of 730 company matches for vulnerability assessment and penetration testing software companies based in the United States, ordered by professional contacts tracked in RevenueBase, largest first. Recorded Oct 20, 2026. The RevenueBase SmartSearch column shows Exact match membership in this saved search. Click a contact count to view that company's people. Totals use company locations recorded by RevenueBase; the displayed preview is a smaller selection.
#CompanyRevenueBase SmartSearchHeadquartersEmployeesContacts
1Exact matchSan Francisco, CA, United StatesHQ recorded Oct 20, 2026n/a3,195 contacts →

Exact match

“We are a crowdsourced security company that safeguards organizations' assets from sophisticated threat actors before they can strike-by uniting our customers with trusted hackers…”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
2Exact matchBoston, MA, United StatesHQ recorded Oct 20, 20261,001-5,0001,146 contacts →

Exact match

“Snyk, the leader in secure AI software development, empowers organizations to build fast and stay secure by unleashing developer productivity and reducing business risk.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
3Exact matchParamus, NJ, United StatesHQ recorded Oct 20, 2026501-1,0001,056 contacts →

Exact match

“Checkmarx helps the world’s largest enterprises get ahead of application risk without slowing down development.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
4Exact matchAustin, TX, United StatesHQ recorded Oct 20, 2026n/a699 contacts →

Exact match

“The Synack Red Team is a private freelance security research team that spans 6 continents and over 80 countries.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
5Exact matchMinneapolis, MN, United StatesHQ recorded Oct 20, 2026501-1,000591 contacts →

Exact match

“NetSPI® pioneered Penetration Testing as a Service (PTaaS) and leads the industry in modern, continuous pentesting.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
6Exact matchBurlington, MA, United StatesHQ recorded Oct 20, 2026501-1,000540 contacts →

Exact match

“Veracode is a global leader in Application Risk Management for the AI era.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
7Exact matchSan Francisco, CA, United StatesHQ recorded Oct 20, 2026201-500517 contacts →

Exact match

“Horizon3.ai answers the two most important questions in cybersecurity: If someone tried to compromise us, would we hold up?”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
8Exact matchBurlington, MA, United StatesHQ recorded Oct 20, 2026201-500477 contacts →

Exact match

“Pentera provides AI-powered Automated Security Validation for enterprise security teams.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
9Exact matchTempe, AZ, United StatesHQ recorded Oct 20, 2026201-500348 contacts →

Exact match

“Bishop Fox is recognized as the leading authority in offensive security, providing solutions ranging from continuous penetration testing, red teaming, and attack surface…”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
10Exact matchSan Francisco, CA, United StatesHQ recorded Oct 20, 2026201-500330 contacts →

Exact match

“Finding exposures was never the hard part.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
11Exact matchSan Francisco, CA, United StatesHQ recorded Oct 20, 2026201-500325 contacts →

Exact match

“Cobalt is the pioneer in pentesting as a service and a leader in offensive security services.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
12Exact matchAlbuquerque, NM, United StatesHQ recorded Oct 20, 2026201-500239 contacts →

Exact match

“Securin is an AI-native cybersecurity company that helps organizations discover, validate, prioritize, and mobilize against exploitable risk, before attackers can act.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
13Exact matchSan Francisco, CA, United StatesHQ recorded Oct 20, 202651-200234 contacts →

Exact match

“TAC Security (NSE: TAC) TAC Security, a leading publicly listed global cybersecurity company specializing in vulnerability management, today serves clients across 100 countries…”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
14Exact matchCharlotte, NC, United StatesHQ recorded Oct 20, 2026n/a226 contacts →

Exact match

“A veteran-owned cybersecurity company focused on penetration testing, security training, and compliance.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
15Exact matchNY, United StatesHQ recorded Oct 20, 2026201-500195 contacts →

Exact match

“Kualitatem empowers businesses to deliver quality software.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
16Exact matchSan Francisco, CA, United StatesHQ recorded Oct 20, 202651-200185 contacts →

Exact match

“Fluid Attacks helps companies prevent, detect, manage and remediate vulnerabilities across their application attack surface.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
17Exact matchLos Altos, CA, United StatesHQ recorded Oct 20, 202651-200155 contacts →

Exact match

“AttackIQ is the leader in threat-informed Continuous Threat Exposure Management (CTEM), helping organizations continuously validate defenses, break attack paths, and reduce threat…”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
18Exact matchNew York, NY, United StatesHQ recorded Oct 20, 202651-200147 contacts →

Exact match

“BreachLock is a global leader in Continuous Attack Surface Discovery and Penetration Testing.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
19Exact matchSunnyvale, CA, United StatesHQ recorded Oct 20, 202651-200133 contacts →

Exact match

“SafeBreach is on a mission to help organizations have certainty in their security.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
20Exact matchSarasota, FL, United StatesHQ recorded Oct 20, 202651-200125 contacts →

Exact match

“Nucleus is the exposure management platform enterprise and government security leaders rely on to reduce cyber risk at scale.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
21Exact matchAustin, TX, United StatesHQ recorded Oct 20, 202651-200125 contacts →

Exact match

“Praetorian helps enterprises reduce material risk by revealing their environment exactly as an attacker would.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
22Exact matchSeattle, WA, United StatesHQ recorded Oct 20, 202651-200112 contacts →

Exact match

“IOActive is a trusted partner for Global enterprises, providing research-fueled security services across all industries.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
23Exact matchSan Jose, CA, United StatesHQ recorded Oct 20, 202651-200112 contacts →

Exact match

“NST Cyber is a leading provider of Threat Exposure Management to Global banks and Forbes companies.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
24Exact matchFolsom, CA, United StatesHQ recorded Oct 20, 2026201-500104 contacts →

Exact match

“West Advanced Technologies, Inc.(WATI) is a California-headquartered technology solutions provider, delivering 100% success for clients from government agencies, tech companies…”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase
25Exact matchSan Jose, CA, United StatesHQ recorded Oct 20, 202611-50102 contacts →

Exact match

“FireCompass is an Agentic AI platform for autonomous penetration testing and red teaming across Web, API, and infrastructure.”

Recorded in the RevenueBase company graph · Oct 20, 2026 · View company records in RevenueBase

Showing 25 of 730 vulnerability assessment and penetration testing software companies based in the United States

See the full list, filter by size, metro and specialty, and access 6,555 tracked professional contacts with verified work emails. Direct dials are available where recorded.

Free signup · no credit card

View the full list →

Vulnerability assessment and penetration testing software companies based in the United States at a glance

As of Oct 20, 2026
37.6%Verified-email coverage
23.9Average contacts per company
1-10Median size (employees)
6.4%Largest-city concentration · San Francisco
Oct 20, 2026Page data refreshed

Companies by employee count

1-10
403
11-50
243
51-200
57
201-500
19
501-1,000
3
1,001-5,000
4
10001+
1

Email recency for this list is measured worldwide rather than for United States, so it is reported there. Company counts and contact totals on this page are exact for United States, over 730 companies.

How this list was built

The recorded descriptions help you assess these company matches. Check a company’s website for its current services and locations.

Source
The RevenueBase company graph: 60 million companies and 398.9 million professional contacts resolved from primary sources, queried with RevenueBase SmartSearch, the natural-language company search available to every RevenueBase user.
What qualifies
Company records associated with the United States whose business descriptions match “vulnerability assessment and penetration testing software companies” by meaning at the Exact setting. Descriptions are compiled in the RevenueBase company graph from public websites, profiles and company information where available; they are not guaranteed quotations from the company's website.
RevenueBase SmartSearch
Describe a niche company in your own words to find businesses by meaning. Exact, Similar, Related and Broad control the breadth of RevenueBase SmartSearch. This saved list uses Exact. Each row's Exact match badge shows inclusion in that search, not an individual score or a service-quality judgment.
Public preview
The public preview omits records without a verified work email. Where headquarters information is recorded, preview rows are also filtered to this page’s location. Dataset totals and geographic summaries describe the full matched records before these preview filters.
Match quality
RevenueBase's August 25, 2026 study assessed 4,198 description/company pairs across matching settings. The publisher reports 86% good or better at Exact. This evaluates the method across queries; it does not audit this individual list. Recorded company descriptions, where available, help you judge each match yourself. Read the full methodology: how the lists are built and what the study measures.
Ranking
Team size, largest first: companies are ordered by the number of professionals RevenueBase tracks at each one. Employee ranges shown are reported bands, for context.
Verification
Every displayed company carries at least one verified work email. RevenueBase tracks 6,555 professional contacts with verified work emails across the full matched dataset. Contacts re-verify on a rolling cadence, and each contact's own verification date is shown inside RevenueBase.
Refresh
This page's figures were pulled from the company graph on October 20, 2026. Lists refresh periodically as the graph is re-checked.
Record context
Company records and descriptions can change. Check the company's website for its current services and locations.

Frequently asked

What is RevenueBase SmartSearch?

RevenueBase SmartSearch finds niche companies by the meaning of their business descriptions in the RevenueBase company graph. Exact, Similar, Related and Broad control how closely companies must fit your description. This list uses Exact for “vulnerability assessment and penetration testing software companies”; each Exact match badge shows search membership, not an individual similarity or quality score.

How many vulnerability assessment and penetration testing software companies are there based in the United States?

RevenueBase identified 730 company matches for vulnerability assessment and penetration testing software companies associated with the United States as of October 2026, using the meaning of business descriptions at Exact. This is the recorded matched set in the RevenueBase company graph.

What is the largest company on this list?

Bugcrowd tops the displayed preview by professional contacts tracked in RevenueBase. Recorded headquarters appear in the company rows.

Which city has the most vulnerability assessment and penetration testing software companies?

San Francisco leads with 47 company records, followed by New York (42) and Austin (27).

How do I get contact information for these companies?

A free RevenueBase account lets you run this exact search and work limited free results with 500 credits to start. Upgrading provides access to the 6,555 professional contacts with verified work emails tracked across these 730 companies; direct dials are available where recorded.

How current is this list?

The list refreshes periodically as the company graph is re-checked. This page's figures were pulled on October 20, 2026.

Ready to reach these companies? Verified emails and direct dials for all 730 vulnerability assessment and penetration testing software companies based in the United States. Start with a free account, no credit card.

Download this list →

Related lists

About this data

RevenueBase is a B2B data infrastructure company. Its company graph covers 60 million companies and 398.9 million professional contacts, with emails verified on a rolling cadence rather than scraped once and left to decay. These company lists are generated directly from that graph with RevenueBase SmartSearch, the same natural-language company search every RevenueBase user has: describe a market in plain words, get the companies that match, and add verified emails and direct dials for the people at them. It is the same data that powers RevenueBase's B2B data products, and a free account includes 500 credits to start. How these lists are built and judged.