Every year, we use a new penetration tester to get a fresh perspective, and with Cybri I was thoroughly impressed by the quality of the penetration testing work they performed. They were able to identify vulnerabilities in an older web application that hasn’t been updated in years and had already been reviewed by numerous other penetration testing companies and scan tools.

I also appreciate that they are a US-based company with US-based penetration testers. In the past, we’ve had offshore penetration testers from other companies, which was inconvenient because it required multiple IPs to be whitelisted due to our GeoIP blocks.

They were also very flexible and accommodating when we ran into some delays with team members on our side. Review collected by and hosted on G2.com.

Overall, I didn’t run into any issues, though payment was required in full up front. Some penetration testing companies I’ve worked with previously offered a small split-payment arrangement, but I don’t really see the upfront payment requirement as a negative. Review collected by and hosted on G2.com.