Best Penetration Testing Services - Page 3

How Many Penetration Testing Services Products Does G2 Track?

Total Products under this Category: 268

Category Stats (Nov 2026)

  • Average Rating: 4.76/5 (↑0.01 vs Oct 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Cybri (+0.52%) - Among all products in this category, Cybri recorded the largest rating increase compared to last month

Last updated: November 02, 2026

How Does G2 Rank Penetration Testing Services Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 1,100+ Authentic Reviews
  • 268+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Penetration Testing Services

G2 Grid® for Penetration Testing Services plotting products by satisfaction and market presence

Highlighted products: PlutoSec, Vynox Security PTaaS, CyStack Security Services, Insight Assurance, ThreatSpike, CyberFortify, Packetlabs, and Thoropass Pentesting.

Underlying data: [Grid® JSON](https://www.g2.com/categories/penetration-testing-services/grids.json?focus%5B%5D=plutosec&focus%5B%5D=vynox-security-ptaas&focus%5B%5D=cystack-security-services&focus%5B%5D=insight-assurance&focus%5B%5D=threatspike&focus%5B%5D=cyberfortify&focus%5B%5D=packetlabs-ltd-packetlabs&focus%5B%5D=thoropass-pentesting)

Securin Security Services

Assure is Securin’s managed security services offering, helping organizations move from identifying vulnerabilities to reducing proven risk. It brings together Vulnerability Management as a Service, Penetration Testing as a Service, and Zero-Day Research. Services can be used independently or combined into one coordinated program supported by Securin’s vulnerability intelligence and offensive security practitioners. Vulnerability Management as a Service provides continuous scanning across networks and applications, with a dedicated team that analyzes, prioritizes, and reports findings. Rather than relying on severity scores alone, Securin evaluates weaponization, active threat activity, exploitability, asset criticality, and business impact. Clients receive actionable guidance to help remediation teams address the exposures attackers are most likely to use. Penetration Testing as a Service tests networks, web and mobile applications, APIs, cloud environments, and critical systems from an attacker’s perspective. Securin practitioners use real-world tactics and controlled exploitation to uncover vulnerabilities, misconfigurations, blind spots, and attack paths automated scanners may miss. Testing aligns with MITRE ATT&CK, NIST SP 800-115, and relevant compliance requirements, with findings delivered as they are validated. Zero-Day Research combines AI-augmented discovery with expert review and lab validation. Every qualifying finding is proven with a working proof of concept, coordinated with the affected vendor, and tracked through remediation and disclosure. Disclosure follows a structured process aligned to ISO/IEC 29147 and 30111. As a CISA-sponsored CVE Numbering Authority and GCVE Numbering Authority, Securin can assign identifiers directly and publish technical advisories. Clients running multiple Assure services use a single team across research, validation, and remediation, without transferring context between vendors.

Average Rating: 4.2/5.0

Total Reviews: 3

Who Is the Company Behind Securin Security Services?

  • Seller: Securin
  • Year Founded: 2021
  • HQ Location: Albuquerque, New Mexico, United States
  • LinkedIn® Page: www.linkedin.com
    242 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 67% Large, 33% Small

What Are Recent G2 Reviews of Securin Security Services?

Trilight Security Services

Trilight Security is a cybersecurity services provider and managed security service provider with a team of qualified experts. In addition to managed security, we offer such services penetration testing to predict possible hackers’ ways of intrusion; cybersecurity consulting to develop corporate security policy and internal procedures; assessment of current state of cybersecurity infrastructure and suggestions as to its modernization. We also provide ISO 27001 and GDPR compliance services, cybersecurity incident investigation, cybersecurity outsourcing and other related services. We detect, investigate, respond to threats before they disrupt business or take necessary steps to minimize or eliminate their potential or real impact. To provide our cybersecurity and IT services we work with solutions and technologies by Splunk, Symantec, Tenable, Fortinet, McAfee, Cisco, Juniper, VMware, Citrix, Microsoft, Amazon. For businesses from SMB to large enterprises we are a single source for cybersecurity and IT advice, services, solutions delivering business value, efficiency and productivity. We measure our success through the success of our customers and contribution to the cause of building secure digitalized businesses and communities. Cybersecurity goes hand in hand with efficiency and reliability of hardware and software used to operate your business. We are very good at implementing, upgrading and supporting IT infrastructures of enterprise level. We dramatically reduce the number of operational security and IT personnel our customers need to hire, train and retain to maintain high cybersecurity level and efficiency of IT systems. And with our strong focus on building trusted and lasting relationships we will make our cooperation as efficient and affordable as possible.

Average Rating: 5.0/5.0

Total Reviews: 3

Who Is the Company Behind Trilight Security Services?

Who Uses This Product?

  • Company Size: 67% Small, 33% Large

What Are Recent G2 Reviews of Trilight Security Services?

What Are G2 Users Discussing About Trilight Security Services?

Xenex

Since 2011, CloudAccess, Inc. (DBA XeneX) has been delivering cybersecurity Security Operations Center as a Service with the most advanced technology platform and mature delivery framework, addressing threat detection and response, compliance, cyber insurance, and security operations requirements. 100% agnostic and transparent, XeneX integrates over 17 modules reporting to the same cross-correlation engine. This means that XeneX customers can address their immediate needs based on their priorities while maintaining a strategic roadmap for a full cybersecurity deployment. With a comprehensive compliance module and real-time mapping to many industry standard frameworks including MITRE ATT&CK, XeneX makes it easy to meet compliance and cyber insurance requirements. Combining both signature and AI-based technologies, XeneX achieves unprecedented accuracy in detection of cybersecurity threats with supervised as well as autonomous response for remediation. Complementing XeneX’s advanced cybersecurity platform is its mature SOC delivery process which ensures that critical incidents are addressed in near real-time 7/24/365. XeneX specializes in full cybersecurity lifecycle management including assessments, installation and configuration of the latest cybersecurity products, monitoring, incident management, and remediation services. Developed by XeneX, the platform integrates several cybersecurity tools including SOAR, XDR, Log Management, SIEM, EDR, MDR, among many other modules. 100% agnostic, XeneX can ingest security data from any source and from anywhere. Some of the XeneX services include but not limited to malware free backup and restore, immutable storage in the cloud, automated cadence of disaster recovery server availability, phishing awareness and training, endpoint protection, patch management, MFA, cybersecurity policies and procedures, cybersecurity assessments, vulnerability scans and penetration tests, cloud security (AWS, GCP, Azure), O365 and Google Workspace security, and all infrastructure device security monitoring.

Average Rating: 5.0/5.0

Total Reviews: 10

Who Is the Company Behind Xenex?

Who Uses This Product?

  • Company Size: 50% Small, 40% Medium

What Are Recent G2 Reviews of Xenex?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

CyberX - The Ethical Hacking Services

CyberX - The Ethical Hacking Services, a top Portuguese company specializing in security audits, offers services including Penetration Testing (pentest), Code Analysis (SAST), Vulnerability Assessment, Red Teaming, Phishing Campaigns, and Workshops. Our team consists of specialized and internationally certified Ethical Hackers who, in synergy with management, are dedicated to delivering results with an exceptional degree of precision and quality. Proudly, we are a company without borders. Technology has allowed us to transcend geographical limitations, enabling our business model to be effective globally. Our employees, working from diverse locations, are committed to serving companies worldwide, reflecting our status as a leader in the industry.

Average Rating: 5.0/5.0

Total Reviews: 3

Who Is the Company Behind CyberX - The Ethical Hacking Services?

Who Uses This Product?

  • Company Size: 67% Small, 33% Large

What Are Recent G2 Reviews of CyberX - The Ethical Hacking Services?

Echo Secure

Echo Secure is a UK-based CREST Pathway cybersecurity consultancy specialising in penetration testing and red teaming.The company brings over a decade of offensive security experience across a wide range of industries and environments. Engagements are delivered by a senior-led team holding certifications including OSCP, CRT, CRTO, and CISSP. All assessments combine manual testing with automated tooling to identify vulnerabilities that scanners alone will miss. Echo Secure operates as a lean consultancy where scoping, sign-off, and delivery are handled directly by the technical team, allowing for fast turnaround times with the ability to mobilise testing within 24 hours when required. Services - External Infrastructure - Internal Infrastructure - Web Application - API - Mobile Application - Wireless - Cloud - OT / Hardware - Red Teaming Methodology Testing is carried out in line with industry-recognised frameworks including OWASP, PTES, and OSSTMM, tailored to the scope and objectives of each engagement. Deliverables Each engagement includes a detailed technical report with an executive summary, risk-rated findings, evidence of exploitation, and clear remediation guidance. Free retesting is included to verify that identified vulnerabilities have been resolved.

Average Rating: 4.8/5.0

Total Reviews: 2

Who Is the Company Behind Echo Secure?

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of Echo Secure?

Hacker Simulations LLC

Hacker Simulations LLC is a cybersecurity firm specializing in comprehensive penetration testing and offensive security solutions designed to help organizations identify and mitigate vulnerabilities in their digital infrastructures. Founded in 2021 and headquartered in New York City, the company has quickly established itself as a trusted partner for businesses seeking to enhance their security posture across various platforms, including web applications, mobile applications, AI/LLM applications, internal networks, and cloud environments. As a penetration testing service provider, Hacker Simulations LLC caters to a diverse range of industries, including finance, healthcare, technology, and retail. The firm’s target audience includes IT security teams, compliance officers, and business leaders who recognize the importance of proactive security measures in today’s threat landscape. By offering tailored solutions, the company addresses specific use cases such as vulnerability assessments, security audits, and risk management strategies, ensuring that clients can effectively safeguard their assets against potential cyber threats. One of the key features of Hacker Simulations LLC’s offerings is its thorough approach to penetration testing. The firm employs a combination of automated tools and manual techniques to simulate real-world attacks, providing clients with a comprehensive understanding of their security weaknesses. This dual approach not only enhances the accuracy of the findings but also allows for more nuanced insights into how vulnerabilities can be exploited by malicious actors. Additionally, the company emphasizes the importance of continuous security assessments, helping organizations stay ahead of evolving threats. Hacker Simulations LLC distinguishes itself through its commitment to delivering actionable intelligence. After conducting penetration tests, the firm provides detailed reports that outline vulnerabilities, potential impacts, and prioritized recommendations for remediation. This focus on clarity and usability ensures that clients can effectively implement security improvements and foster a culture of security awareness within their organizations. Furthermore, the firm’s expertise in various application types, including AI/LLM applications, positions it as a forward-thinking leader in the cybersecurity space, ready to tackle the unique challenges posed by emerging technologies. Overall, Hacker Simulations LLC serves as a vital resource for organizations aiming to bolster their cybersecurity defenses. By leveraging its specialized knowledge and comprehensive testing methodologies, the firm empowers clients to proactively address vulnerabilities, ultimately enhancing their resilience against cyber threats in an increasingly complex digital landscape.

Average Rating: 5.0/5.0

Total Reviews: 2

Who Is the Company Behind Hacker Simulations LLC?

Who Uses This Product?

  • Company Size: 50% Medium, 50% Small

What Are Recent G2 Reviews of Hacker Simulations LLC?

Lorikeet Security

Lorikeet Security is an offensive security company built for the modern threat landscape. We deliver penetration testing, Attack Surface Management, and AI-powered security tooling to organizations that need more than a checkbox — they need to know exactly where they're exposed and how bad it really is. Our team brings real-world red team experience across web application security, network infrastructure, OSINT, and social engineering. Every engagement is led by practitioners who think like attackers, because that's exactly what we are. What sets us apart is how we've productized that expertise. Lorikeet's platform combines continuous ASM with Penetration Testing as a Service — so clients aren't just getting a point-in-time report. They're getting an ongoing security partnership backed by automation, AI-assisted analysis, and human validation. From startups passing their first SOC 2 audit to enterprises managing complex attack surfaces, Lorikeet Security gives security teams and business leaders the visibility and confidence to stay ahead of the threats that matter. We don't just find vulnerabilities. We help you understand what they mean — and what to do about them.

Average Rating: 5.0/5.0

Total Reviews: 2

Who Is the Company Behind Lorikeet Security?

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of Lorikeet Security?

NBS System Managed Hosting

NBS System is an expert in managed hosting, specialized in two line of work: * Ecommerce Hosting (Magento & Hybris) * Very high security environments The company now is leader in France regarding Magento EE & Hybris hosting and owns meaningful references in Europe. Being a pentest company at the origin, we also developed high security environment, where we host sensitive sites/data that our customer want to keep out of reach from menaces like DDoS, SQL Injection, XSS, overflows, etc.

Average Rating: 4.0/5.0

Total Reviews: 2

Who Is the Company Behind NBS System Managed Hosting?

  • Seller: NBS System
  • Year Founded: 1999
  • HQ Location: Champs-sur-Marne, FR
  • LinkedIn® Page: www.linkedin.com
    26 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Medium, 50% Small

What Are Recent G2 Reviews of NBS System Managed Hosting?

What Are G2 Users Discussing About NBS System Managed Hosting?

Rapid7 Security Services

Rapid7 transforms data into insight, empowering IT and security professionals to progress and protect their organizations.

Average Rating: 3.5/5.0

Total Reviews: 12

Who Is the Company Behind Rapid7 Security Services?

  • Seller: Rapid7
  • Year Founded: 2000
  • HQ Location: Boston, MA
  • LinkedIn® Page: www.linkedin.com
    8,746 employees on LinkedIn®
  • Ownership: NASDAQ:RPD
  • Total Revenue (USD mm): $411

Who Uses This Product?

  • Company Size: 33% Large, 33% Medium

What Are Recent G2 Reviews of Rapid7 Security Services?

What Are G2 Users Discussing About Rapid7 Security Services?

ScienceSoft

ScienceSoft USA Corporation, doing business as ScienceSoft, is an AI transformation and software development company founded in 1989. With 750+ experts, it serves clients in 80+ countries and 30+ industries, with strong expertise in healthcare (HIPAA-compliant EHR/EMR, telemedicine, diagnostics), insurance (underwriting and claim management automation, automated fraud detection) and investment (investment portfolio management, investor portals, trading apps). ScienceSoft also delivers AI solutions across domains. Recognized by IAOP, Financial Times, Inc. 5000, and Newsweek, the company holds ISO 9001, ISO/IEC 27001, and ISO 13485 certifications.

Average Rating: 4.8/5.0

Total Reviews: 4

Who Is the Company Behind ScienceSoft?

Who Uses This Product?

  • Company Size: 50% Small, 25% Medium

What Are Recent G2 Reviews of ScienceSoft?

SECURIGEEK

Founded in 2021 and headquartered in Montévrain (Greater Paris / Île-de-France), SECURIGEEK is a specialized B2B cybersecurity audit and advisory firm serving SMEs and mid-market companies (50 to 5,000 employees) across France. Core services: Microsoft 365 & Entra ID security audits (aligned with CIS Benchmarks, including a 1-day IT team training workshop), penetration testing (web, API, external/internal infrastructure, Active Directory), IAM & Entra ID governance, fractional CISO (RSSI externalisé), ISO 27001 / NIS2 / DORA compliance readiness, and the Bpifrance Diag Cybersécurité (8 days, €8,800 excl. VAT, 50% subsidized subject to eligibility). Methodologies rely on public ANSSI guidelines and CIS benchmarks. Initial scoping call within 48 business hours.

Average Rating: 4.8/5.0

Total Reviews: 2

Who Is the Company Behind SECURIGEEK?

Who Uses This Product?

  • Company Size: 50% Large, 50% Medium

What Are Recent G2 Reviews of SECURIGEEK?

SecurityMetrics

SecurityMetrics secures peace of mind for organizations that handle sensitive data. From local shops to some of the world’s largest brands, SecurityMetrics helps businesses achieve data security with penetration testing, vulnerability scanning, gap analysis, security consulting, managed services and compliance mandates (PCI, CMMC, HIPAA, GDPR, HITRUST). SecurityMetrics is a CMMC Certified Registered Provider Organization (RPO), PCI certified Approved Scanning Vendor (ASV), Qualified Security Assessor (QSA), Certified Forensic Investigator (PFI), and Managed Security provider with over 25 years of data security experience. They have tested over 100 million systems for data security and compliance. They are privately held and headquartered in Orem, Utah, where they maintain a Security Operations Center (SOC) and 24/7 multilingual technical support.

Average Rating: 4.8/5.0

Total Reviews: 47

Who Is the Company Behind SecurityMetrics?

Who Uses This Product?

  • Top Industries: Financial Services, Computer Software
  • Company Size: 40% Small, 36% Medium

What Do G2 Reviewers Say About SecurityMetrics?

AI-generated summary from verified user reviews

Pros
  • Users value the ongoing monitoring of SecurityMetrics, ensuring effective compliance with PCI requirements continuously.
  • Users value the ongoing monitoring provided by SecurityMetrics, ensuring consistent PCI compliance and security measures.
Cons
  • Users feel that the vulnerability scanning feature needs improvement to cover all scan types for better effectiveness.
  • Users feel the vulnerability scanning could be improved as it currently misses some types of scans.
  • Users find the vulnerability scanning inadequate as it fails to cover all necessary types of scans.

What Are Recent G2 Reviews of SecurityMetrics?

What Are G2 Users Discussing About SecurityMetrics?

Trava Security

Security that runs. Trava Security is the security team you don’t have to build. We operate your full security and compliance program under one team and one contract: compliance, penetration testing, managed detection and response, and vCISO leadership. Our customers have a 100% audit pass rate, and we get them audit-ready up to 3x faster. We built AI into how we work, not on top of it. Purpose-built agents and workflows let our experts cover more ground and move faster, and a human reviews every deliverable. AI-powered, human-governed. Whether you’re a growing company facing your first enterprise security review or a mid-market team running a complex program, we right-size the program to where you are and keep it running as you grow. What we run for you - Managed compliance programs: SOC 2, ISO 27001, 27701, 9001, 22301, 42001, HITRUST, HIPAA, PCI DSS, FedRAMP, CMMC, GDPR and privacy - vCISO: Security leadership and board-ready reporting without a full-time hire - Penetration testing and red teaming - MXDR: Managed extended detection and response - Vulnerability management

Average Rating: 4.9/5.0

Total Reviews: 30

Who Is the Company Behind Trava Security?

  • Seller: Trava
  • Company Website:
  • Year Founded: 2020
  • HQ Location: Indianapolis, Indiana, United States
  • LinkedIn® Page: www.linkedin.com
    19 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 73% Small, 27% Medium

What Do G2 Reviewers Say About Trava Security?

AI-generated summary from verified user reviews

Pros
  • Users value the efficient certification process of Trava Security, enabling timely SOC2 certification with expert support.
  • Users value the expert support for compliance management provided by Trava Security, ensuring timely certifications and confidence during audits.
  • Users appreciate the excellent customer support from Trava Security, which facilitates timely SOC2 certification and addresses issues promptly.
  • Users value the expertise and support from Trava Security, enabling swift and effective SOC2 certification processes.
  • Users commend Trava Security for their efficient issue resolution, ensuring smooth audits and timely certification support.

What Are Recent G2 Reviews of Trava Security?

Autodata

Autodata is a cyber security focused I.T. service provider with additional capabilities around networking, data centre and end-user compute.

Average Rating: 3.5/5.0

Total Reviews: 1

Who Is the Company Behind Autodata?

  • Seller: Autodata
  • Year Founded: 1986
  • HQ Location: London, GB
  • LinkedIn® Page: www.linkedin.com
    49 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Small

What Are G2 Users Discussing About Autodata?

BharatSec Penetration Testing & VAPT

Private bug hunting is a targeted approach to identifying and fixing vulnerabilities in your company's software, systems, and networks without the exposure and potential risks of public bug hunting programs. Instead of opening your systems to a broad audience, we work with a select group of trusted security experts who thoroughly test your systems for weaknesses. This method ensures that vulnerabilities are discovered and resolved confidentially, protecting your business from potential exploits and maintaining your security and reputation.

Average Rating: 4.5/5.0

Total Reviews: 1

Who Is the Company Behind BharatSec Penetration Testing & VAPT?

  • Seller: Bharat Security
  • Year Founded: 2022
  • HQ Location: Giridih, IN
  • LinkedIn® Page: www.linkedin.com
    26 employees on LinkedIn®
  • Ownership: Privately Held

Who Uses This Product?

  • Company Size: 100% Medium

What Are Recent G2 Reviews of BharatSec Penetration Testing & VAPT?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated October 3, 2024