Company lists · Data refreshed September 2026

Top 25 Vulnerability assessment firms based in the United States

RevenueBase identified 904 company matches for vulnerability assessment firms associated with the United States as of September 2026 and tracks 14,828 professional contacts across them, including 5,116 with verified work emails. New York is the largest hub.

This list covers company matches for vulnerability assessment firms associated with the United States, found by RevenueBase SmartSearch using the meaning of business descriptions in its company graph at Exact. Ranked by professionals tracked, largest first. Rows show recorded descriptions where available, Exact search membership and the snapshot date. Data refreshed September 22, 2026.

Published by RevenueBase, a B2B data infrastructure company. This list was built with RevenueBase SmartSearch, the natural-language company search RevenueBase customers use to build their own targeted lists and unlock verified emails and direct dials at the companies on them. How these lists are built and judged.

How to read this list RevenueBase SmartSearch · Exact Recorded Sep 22, 2026 How this list was built
904Companies
14,828Contacts tracked
5,116Verified emails
Explore this list → Free signup · no credit card · 500 free credits

The 25 largest vulnerability assessment firms based in the United States

Ranked by team size
Top 25 of 904 company matches for vulnerability assessment firms based in the United States, ordered by professional contacts tracked in RevenueBase, largest first. Recorded Sep 22, 2026. The RevenueBase SmartSearch column shows Exact match membership in this saved search. Click a contact count to view that company's people. Totals use company locations recorded by RevenueBase; the displayed preview is a smaller selection.
#CompanyRevenueBase SmartSearchHeadquartersEmployeesContacts
1Exact matchSan Francisco, CA, United StatesHQ recorded Sep 22, 2026n/a3,649 contacts →

Exact match

“We are a crowdsourced security company that safeguards organizations' assets from sophisticated threat actors before they can strike-by uniting our customers with trusted hackers…”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
2Exact matchReston, VA, United StatesHQ recorded Sep 22, 20261,001-5,0001,232 contacts →

Exact match

“GuidePoint Security provides trusted cybersecurity expertise, solutions, and services that help organizations make informed decisions and minimize risk.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
3Exact matchChicago, IL, United StatesHQ recorded Sep 22, 2026501-1,000874 contacts →

Exact match

“Trustwave, a LevelBlue Company, is a globally recognized cybersecurity leader that reduces cyber risk and fortifies organizations against disruptive and damaging cyber threats.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
4Exact matchBurlington, MA, United StatesHQ recorded Sep 22, 2026201-500486 contacts →

Exact match

“Pentera provides AI-powered Automated Security Validation for enterprise security teams.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
5Exact matchNashville, TN, United StatesHQ recorded Sep 22, 2026201-500272 contacts →

Exact match

“Prescient Security is a global cybersecurity and compliance firm delivering risk-based audits, advanced penetration testing, and end-to-end framework support.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
6Exact matchAlbuquerque, NM, United StatesHQ recorded Sep 22, 2026201-500244 contacts →

Exact match

“Securin is obsessed with helping leaders continuously improve their security posture.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
7Exact matchRedwood City, CA, United StatesHQ recorded Sep 22, 2026201-500237 contacts →

Exact match

“Synack is the leader in human-led and agentic AI-powered Penetration Testing as a Service (PTaaS), transforming offensive security to help organizations proactively reduce risk…”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
8Exact matchSan Francisco, CA, United StatesHQ recorded Sep 22, 202651-200208 contacts →

Exact match

“TAC Security (NSE: TAC) TAC Security, a leading publicly listed global cybersecurity company specializing in vulnerability management, today serves clients across 100 countries…”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
9Exact matchCharlotte, NC, United StatesHQ recorded Sep 22, 2026n/a206 contacts →

Exact match

“A veteran-owned cybersecurity company focused on penetration testing, security training, and compliance.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
10Exact matchReston, VA, United StatesHQ recorded Sep 22, 20261,001-5,000204 contacts →

Exact match

“MindPoint Group, a Quantum Sky company, is a cybersecurity specialist trusted by U.S.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
11Exact matchGlobally Distributed, United StatesHQ recorded Sep 22, 2026201-500182 contacts →

Exact match

“With 30 years of experience in cyber defense, DeepSeas is trusted by nearly clients around the world, including Fortune 100 enterprises and mid-market organizations, municipality…”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
12Exact matchMenlo Park, CA, United StatesHQ recorded Sep 22, 202651-200154 contacts →

Exact match

“RedSeal is an agentless, AI enabled exposure management platform for hybrid and remote infrastructure.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
13Exact matchColchester, VT, United StatesHQ recorded Sep 22, 202651-200151 contacts →

Exact match

“nuHarbor is a U.S-based cybersecurity firm trusted by public sector and critical infrastructure organizations nationwide.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
14Exact matchLos Altos, CA, United StatesHQ recorded Sep 22, 202651-200149 contacts →

Exact match

“AttackIQ® is trusted by top organizations worldwide to validate security controls in real time.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
15Exact matchAustin, TX, United StatesHQ recorded Sep 22, 202651-200145 contacts →

Exact match

“Praetorian helps enterprises reduce material risk by revealing their environment exactly as an attacker would.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
16Exact matchSunnyvale, CA, United StatesHQ recorded Sep 22, 202651-200138 contacts →

Exact match

“SafeBreach is on a mission to help organizations have certainty in their security.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
17Exact matchSan Jose, CA, United StatesHQ recorded Sep 22, 202651-200116 contacts →

Exact match

“NST Cyber is a leading provider of Threat Exposure Management to Global banks and Forbes companies.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
18Exact matchBaton Rouge, LA, United StatesHQ recorded Sep 22, 202651-200115 contacts →

Exact match

“TraceSecurity is a leading cybersecurity services company, providing a broad range of services and solutions in IT security compliance, risk and vulnerability management, and…”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
19Exact matchAlexandria, VA, United StatesHQ recorded Sep 22, 2026n/a113 contacts →

Exact match

“Strategic Security is an IT Security consulting firm that provides in-depth technical security assessments of your network, web application, and regulatory compliance gap analysis…”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
20Exact matchDenver, CO, United StatesHQ recorded Sep 22, 202651-200111 contacts →

Exact match

“DirectDefense provides enterprise risk assessments, penetration testing, ICS/SCADA security services, and 24/7 managed security services for companies of all sizes.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
21Exact matchFolsom, CA, United StatesHQ recorded Sep 22, 2026201-500109 contacts →

Exact match

“West Advanced Technologies, Inc.(WATI) is a California-headquartered technology solutions provider, delivering 100% success for clients from government agencies, tech companies…”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
22Exact matchSeattle, WA, United StatesHQ recorded Sep 22, 202651-200107 contacts →

Exact match

“IOActive is a trusted partner for Global enterprises, providing research-fueled security services across all industries.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
23Exact matchAnnapolis, MD, United StatesHQ recorded Sep 22, 202651-200103 contacts →

Exact match

“SIXGEN provides world-class cybersecurity services and products to protect government organizations and commercial industries.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
24Exact matchSarasota, FL, United StatesHQ recorded Sep 22, 202651-20093 contacts →

Exact match

“Nucleus is the exposure management platform enterprise and government security leaders rely on to reduce cyber risk at scale.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase
25Exact matchJacksonville, FL, United StatesHQ recorded Sep 22, 202651-20073 contacts →

Exact match

“OnDefend specializes in advanced cybersecurity testing that delivers ongoing security validation across the most complex technology environments.”

Recorded in the RevenueBase company graph · Sep 22, 2026 · View company records in RevenueBase

Showing 25 of 904 vulnerability assessment firms based in the United States

See the full list, filter by size, metro and specialty, and access 5,116 tracked professional contacts with verified work emails. Direct dials are available where recorded.

Free signup · no credit card

View the full list →

Vulnerability assessment firms based in the United States at a glance

As of Sep 22, 2026
34.5%Verified-email coverage
16.4Average contacts per company
1-10Median size (employees)
4.0%Largest-city concentration · New York
Sep 22, 2026Page data refreshed

Companies by employee count

1-10
565
11-50
275
51-200
50
201-500
10
501-1,000
1
1,001-5,000
3

Email recency for this list is measured worldwide rather than for United States, so it is reported there. Company counts and contact totals on this page are exact for United States, over 904 companies.

How this list was built

The recorded descriptions help you assess these company matches. Check a company’s website for its current services and locations.

Source
The RevenueBase company graph: 60 million companies and 398.9 million professional contacts resolved from primary sources, queried with RevenueBase SmartSearch, the natural-language company search available to every RevenueBase user.
What qualifies
Company records associated with the United States whose business descriptions match “vulnerability assessment firms” by meaning at the Exact setting. Descriptions are compiled in the RevenueBase company graph from public websites, profiles and company information where available; they are not guaranteed quotations from the company's website.
RevenueBase SmartSearch
Describe a niche company in your own words to find businesses by meaning. Exact, Similar, Related and Broad control the breadth of RevenueBase SmartSearch. This saved list uses Exact. Each row's Exact match badge shows inclusion in that search, not an individual score or a service-quality judgment.
Public preview
The public preview omits records without a verified work email. Where headquarters information is recorded, preview rows are also filtered to this page’s location. Dataset totals and geographic summaries describe the full matched records before these preview filters.
Match quality
RevenueBase's August 25, 2026 study assessed 4,198 description/company pairs across matching settings. The publisher reports 86% good or better at Exact. This evaluates the method across queries; it does not audit this individual list. Recorded company descriptions, where available, help you judge each match yourself. Read the full methodology: how the lists are built and what the study measures.
Ranking
Team size, largest first: companies are ordered by the number of professionals RevenueBase tracks at each one. Employee ranges shown are reported bands, for context.
Verification
Every displayed company carries at least one verified work email. RevenueBase tracks 5,116 professional contacts with verified work emails across the full matched dataset. Contacts re-verify on a rolling cadence, and each contact's own verification date is shown inside RevenueBase.
Refresh
This page's figures were pulled from the company graph on September 22, 2026. Lists refresh periodically as the graph is re-checked.
Record context
Company records and descriptions can change. Check the company's website for its current services and locations.

Frequently asked

What is RevenueBase SmartSearch?

RevenueBase SmartSearch finds niche companies by the meaning of their business descriptions in the RevenueBase company graph. Exact, Similar, Related and Broad control how closely companies must fit your description. This list uses Exact for “vulnerability assessment firms”; each Exact match badge shows search membership, not an individual similarity or quality score.

How many vulnerability assessment firms are there based in the United States?

RevenueBase identified 904 company matches for vulnerability assessment firms associated with the United States as of September 2026, using the meaning of business descriptions at Exact. This is the recorded matched set in the RevenueBase company graph.

What is the largest company on this list?

Bugcrowd tops the displayed preview by professional contacts tracked in RevenueBase. Recorded headquarters appear in the company rows.

Which city has the most vulnerability assessment firms?

New York leads with 36 company records, followed by Austin (23) and San Francisco (23).

How do I get contact information for these companies?

A free RevenueBase account lets you run this exact search and work limited free results with 500 credits to start. Upgrading provides access to the 5,116 professional contacts with verified work emails tracked across these 904 companies; direct dials are available where recorded.

How current is this list?

The list refreshes periodically as the company graph is re-checked. This page's figures were pulled on September 22, 2026.

Ready to reach these companies? Verified emails and direct dials for all 904 vulnerability assessment firms based in the United States. Start with a free account, no credit card.

Download this list →

Related lists

About this data

RevenueBase is a B2B data infrastructure company. Its company graph covers 60 million companies and 398.9 million professional contacts, with emails verified on a rolling cadence rather than scraped once and left to decay. These company lists are generated directly from that graph with RevenueBase SmartSearch, the same natural-language company search every RevenueBase user has: describe a market in plain words, get the companies that match, and add verified emails and direct dials for the people at them. It is the same data that powers RevenueBase's B2B data products, and a free account includes 500 credits to start. How these lists are built and judged.