Skip to content
777 Sourcing.

Capability

penetration testing

Suppliers
540
States & provinces
56
Countries
9

540 penetration testing suppliers across 56 states and provinces in 9 countries. Profiles show capabilities, materials, certifications, and facility locations so you can compare shops and build a shortlist.

Suppliers

DIZZYNET, LLC

BETHESDA, MD

SydanTech is a provider of expert services to the Federal Government, Fortune 500 companies, and other organizations, with over twenty years of program experience supporting critical safety, life and limb, and trade-critical missions for the US Government. The firm is ISO 9001, ISO/IEC 20000-1, and ISO/IEC 27001 certified and CMMI ML3 appraised.

AI/ML integrationCloud EngineeringCyber securityDevSecOpsexpert consultingHealthcare servicesIncident responseinformation assuranceInformation Technologyinfrastructure protectionproject managementsafety trainingSCADA/ICS Security Assessmentssecurity operationssoftware developmentVulnerability assessment

DK Carr and Associates, LLC was launched in 2013 by Debi Carr to help small healthcare entities and private practices with cybersecurity and HIPAA HITECH compliance. The company provides HIPAA compliance consulting, security risk and gap analysis, penetration testing, incident/breach response, and staff cyber training, and is certified as a Women's Business Enterprise by the Women's Business Enterprise National Council.

breach responseCyber TrainingHIPAA compliance consultingIncident responsesecurity risk and gap analysisworkshops and speaking engagements

Dobbs Defense Solutions, LLC (D2S) is a Service Disabled Veteran Owned Small Business (SDVOSB), Women Owned Small Business (WOSB), HUBZone, and 8(a) certified company with offices in Landover and Baltimore, Maryland. It delivers information technology, cybersecurity, business consulting, and training solutions to Department of Defense, federal civilian agencies, state and local governments, and commercial enterprises nationwide.

AI-driven automationbusiness intelligenceCloud migrationconfiguration managementcustom application developmentCybersecurityData Analyticsenterprise IT servicesHelp desk supportIncident responsemachine learningSharePoint solutionsSystems Integrationtraining

Dominion Security Partners is an enterprise cybersecurity firm headquartered in Richmond, Virginia, serving clients throughout the Mid-Atlantic and Southeast. Its client base includes Fortune 500 companies, large enterprises, SMBs, and federal, state, and local governments. The firm offers penetration testing, risk assessments, cybersecurity consulting, managed security services, and GRC SaaS platforms, and reports 100+ assessments completed, a 94% client retention rate, and 0 post-engagement breaches.

24/7 SOC monitoringCloud Security Posture Assessmentcompliance readiness assessmentCybersecurity consultingEndpoint detection and response (EDR) managementGRC platform deployment and managementmanaged security servicesM&A security due diligencered team operationsrisk assessmentsSecurity architecture reviewSIEM management and tuningSocial engineering and phishing simulationsthreat detection and incident responsevirtual CISO servicesvulnerability management

DOTWAVE SOLUTIONS LLC

PORTER RANCH, CA

DotWave Solutions is a cybersecurity consulting firm founded by award-winning professor Dr. Oludotun "Dot" Oni. It supports public sector and regulated organizations with hands-on defense operations and executive-level cyber advisory, serving federal government, state/local/education (SLED), energy and utilities, and private enterprise.

cyber risk advisory and assessmentCybersecurity consultingIncident responsemanaged detection and responsevCISO-level program oversight

DOVER NETWORKS LLC

ELLICOTT CITY, MD

Dover Networks delivers advanced cyber operations, training, software development, and infrastructure engineering to government and commercial partners. Founded in 2010, the company provides full-spectrum cyber capabilities supporting the military, intelligence, and national security communities, including vulnerability research, penetration testing, incident response, CNO tool development, immersive cyber training environments, and bare metal and virtualized infrastructure engineering.

attacker-perspective analysisbare metal and virtualized environmentsCNO tool developmentcyber learning management systemsCyber Trainingfull-stack software engineeringIncident responseinfrastructure engineeringNetwork architectureVulnerability Research

DOX ELECTRONICS INC

ROCHESTER, NY

Dox Electronics provides IT support, cybersecurity, and compliance consulting services based in Rochester, New York, serving manufacturing, defense, finance, healthcare, education, and government sectors. With more than 40 years of experience, Dox offers penetration testing, security assessments, compliance audits, cloud services, and managed IT support.

Cloud migrationcompliance auditsfirewall configurationintrusion preventionIT consultingmanaged cloud servicessecurity assessmentsSIEMVPN solutionsvulnerability management

DRAGOS INC

HANOVER, MD

Dragos provides industrial cybersecurity solutions for operational technology (xOT) environments, safeguarding critical infrastructure from those trying to disrupt it. Its offerings include the Dragos Platform for asset visibility, network monitoring, vulnerability and exposure management, threat detection and response, and AI acceleration via Dragos EmberAI, along with OT cyber threat intelligence and professional services.

Incident responsemanaged security monitoringOT cybersecuritypurple team exercisesred team servicestabletop exercisesthreat detectionthreat intelligenceVulnerability assessment

DREAMERS INC.

LOS ANGELES, CA

Dreamers Inc. is a team of scientists and builders specializing in AI and decentralized systems for over a decade. They deliver high-performing products built to hold up at scale, with work routinely involving high-performance computing, GPU systems, and hands-on cybersecurity. Their team includes math and computer science PhDs and individuals from companies such as Google, AWS, SpaceX, Tesla, and Anthropic.

AI developmentCybersecuritydecentralized systemsGPU systemshigh-performance computingmachine learningretrieval-augmented generation

DRIFTLINE TECHNICAL, LLC

EAST GRAND RAPIDS, MI

Driftline Technical is a defense technology and services provider delivering mission-critical solutions in electronic warfare, advanced communications, cybersecurity, and IT modernization to the U.S. government and public and private sectors. The company specializes in secure edge and cloud computing products and full-spectrum C5I integration and design, with expertise across cyber operations, intelligence, and network engineering.

ATO supportC5I integration and designcounter-UAS detection, tracking, and neutralizationendpoint protectionenterprise IT architecture and modernizationoffensive and defensive cyber servicesred team/blue teamsecure communications and network resiliencesecure system designsensor fusion (radar, optical, acoustic, RF)Zero Trust Architectures

DTS FIBER

MINDEN, NV

DTS (Digital Technology Solutions) provides end-to-end IT services in Reno, Minden, and surrounding areas of Northern Nevada and Northern California. Services include cybersecurity, network cabling, cloud services, VoIP phone services, fiber internet, managed services, network services, surveillance camera services, and VMware virtualization. DTS has been helping businesses since 2014 and offers 24/7/365 support.

24/7 monitoringCloud migrationcompliance managementCybersecurityFiber Internetmanaged IT supportnetwork cablingnetwork infrastructure designsurveillance systemsVMware VirtualizationVOIP

DueNorth Security LLC provides independent information security risk assessments and advisory services conducted by certified information security professionals. Assessments map to recognized frameworks such as NIST CSF, HIPAA, and others, and include a one-year plan to improve security and remediate risk. The company also offers compliance and audit readiness consulting.

audit readinessemployee trainingpolicy creationrisk remediationSecurity consultingsecurity risk assessmentsocial engineering testingvulnerability scanning

DUNCAN DISTRIBUTION CO LLC

SIMI VALLEY, CA

Hummingbird Networks provides information technology products and IT services across the USA, supplying networking equipment and offering services such as strategic consulting, solution design, installation and configuration, cybersecurity assessments, and managed IT support. Founded in 2004, the company is based in Simi Valley, California.

Configuration and installationDesign and build consultingmanaged IT supportNetwork cable installationsecurity assessmentssocial engineeringVoice and video readiness assessmentWeb vulnerability assessmentWireless network assessment

DUOLARK LLC

DANIA, FL

Cyberdefense Today: Building Construction Solutions to Secure Your Tomorrows with Effective Floor Restoration and Slip and Fall Risk Reduction.Cyberdefense Today To Secure Your Tomorrows Cyberdefense Today To Secure Your Tomorrows Cyberdefense Today To Secure Your Tomorrows Cyberdefense Today To Secure Your Tomorrows| Cyber Security | Digital Forensics Consulting Services To Secure Your Business Learn more about our shared future DUOLARK CYBERSECURITY Products, SERVICES AND SOLUTIONSEnterprise Digital Forensics Investigation Specialists Enterprise Digital Forensics Investigation Specialists Enterprise Digital Forensics Investigation Specialists We uncover and interpret digital data wherever it is. Whether it is on a network, a mobile device, multiple cloud applications (AWS, Azure, Google) we can consolidate it and forensically analyze it. Is your network slowing down? Suspect you might.

cloud data backupCybersecurity consultingdigital forensics investigationhealthcare data audit and remediationmanaged security servicesnetwork security design and implementation

DUSTWUN

BURBANK, CA

DUSTWUN is a veteran-owned security company providing bespoke security solutions including executive protection, armored vehicles, GSOC monitoring, and intelligence-driven risk management worldwide. Its team draws from military, law enforcement, and protective operations backgrounds, including former U.S. Army Special Forces, Navy SEALs, and former CIA, FBI, and DEA professionals.

AI weapon detectionarmored vehicle buildsdrone detectionExecutive protectionGSOC monitoringK9 detectionprotective intelligencered team operationsthreat vulnerability assessmentsTSCM

DYNAMIC QUEST, LLC

GREENSBORO, NC

Dynamic Quest is a managed IT services provider (MSP) founded in 2000, serving small and medium-sized businesses with comprehensive, reliable, and hassle-free managed IT solutions. The company is CMMC Level 2 certified and recognized on the MSP 501 list in 2025 and 2026. It has over 100 engineers, architects, and IT support professionals and provides 24x7x365 support.

backup and disaster recoverycloud servicesCMMC certificationco-managed IT servicesCybersecurityDigital transformationHelp desk supportIT consultingmanaged detection and responseManaged It Servicesserver migration

Dynamic Security Concepts, Inc. (DSCI) is a woman-owned small business with offices in Mays Landing, New Jersey, and Arlington, Virginia, incorporated in October 1995 by Susan K. Hopkins. DSCI employs approximately 50 full-time management, technical, and administrative professionals focused on systems engineering, test and evaluation, human factors engineering, information security, process improvement, and program and data management for government agencies.

data managementhuman factors engineeringinformation securitynetwork intrusion detection supportprocess improvementprogram managementrisk assessmentsecurity tool evaluationSystems Engineeringtest and evaluation

ECFIRST

WAUKEE, IA

ecfirst provides compliance, risk and information security solutions, including cybersecurity assessments, penetration testing, social engineering, red team exercises, and managed compliance. It offers certification training such as Certified HIPAA Professional (CHP), CMMC Certified Professional (CCP), CMMC Certified Assessor (CCA), and AI Cyber Risk Professional (aiCRP), along with toolkits and templates for HIPAA, CMMC, NIST, ISO 27001, PCI DSS, GDPR and other frameworks.

certification trainingCybersecurity Assessmentmanaged compliancered team exercisesrisk assessmentsocial engineering

ECHELON RISK, LLC

AUSTIN, TX

Echelon Risk + Cyber is an award-winning risk and cybersecurity consulting firm providing vCISO and MSSP leadership for mid-market organizations, aligned with compliance across regulated industries. The firm offers managed security services, offensive security and adversary simulation, defensive security and hardening, risk advisory and GRC, and AI risk and security, serving industries including financial services, higher education, healthcare, technology and SaaS, and the Defense Industrial Base.

AI governanceBusiness continuity and disaster recoveryCompliance Readiness AssessmentsCybersecurity awareness trainingGRCincident response planningmanaged security servicespurple teamingRed Teamingrisk assessmentsSecurity Team as a Servicetabletop exercisesthreat huntingvCISOvulnerability management

ECN IT Solutions provides managed IT services for small businesses with 15-80 employees, currently serving Arizona and Southern California. Services include help desk support, cybersecurity, backup and disaster recovery, Microsoft 365 support, IT strategy and professional services, and cloud services. ECN specializes in CMMC Compliance and NIST 800-171 implementation for defense contractors and is scheduled for CMMC assessment to become one of the first CMMC accredited MSPs in Arizona.

audit preparation and supportbackup and disaster recoverycloud servicesCMMC compliancecontinuous monitoringCybersecurityHelp desk supportManaged It ServicesMicrosoft 365 supportNIST 800-171 implementationonsite and offsite replicationpatch managementsecurity awareness trainingvulnerability scanning

EDWARD DAVIS LLC

BOSTON, MA

The Edward Davis Company (EDC) is a security consulting and crisis management firm founded by former Boston Police Commissioner Ed Davis. It advises organizations on risk mitigation, compliance and emergency response, operating at the intersection of physical security and technology. EDC provides customized security services through a team of investigators, security and technology experts.

cyber risk assessmentdeep web threat monitoringdrone monitoringEvent securityExecutive protectionInvestigative servicesmanaged security servicesperimeter securityphysical security assessmentresiliency planningrisk managementSecurity consultingthreat monitoring

e-Forensics is a Miami, Florida based firm providing state-of-the-art solutions in cybersecurity, digital forensics, and e-discovery. It serves law firms, Fortune 500 companies, private investigators, and law enforcement throughout the Americas, with certified bilingual specialists who have testified in multiple jurisdictions. The firm has been serving clients since 2000.

digital forensicse-discoveryESI managementevidence acquisitionevidence analysisexpert witness testimonyfile carvingforensic imagingonline reputation managementreceivershipsrisk assessmentsvulnerability assessments

EHR RESOURCES LLC

MANHATTAN, KS

EHR Resources is a veteran-owned, healthcare-only compliance and security advisory firm serving hospitals, clinics, multi-site provider groups, critical access hospitals, and business associates. Since 2011 it has helped organizations turn HIPAA obligations into documented, defensible evidence, combining strategic compliance leadership with technical security execution.

Audit preparationCJIS readiness auditsHIPAA Security Risk Analysisincident response planningNIST SP 800-66 and 800-30 assessmentspolicy and procedure developmentsecurity awareness trainingvendor risk reviewVulnerability assessment

What our clients say after the audit closes Governance Director, Tealium ISO 42001 - Tealium “Over the past two years, Elevate has provided consistent, responsive service and completed all deliverables at a high level of quality and on time. They have supported internal audit, risk assessment, and professional services across a wide variety of global regulations and compliance frameworks. The Elevate team has been a great partner for Tealium.” Read the case study VP of Finance Consolidated Water “Elevate has provided our company, Consolidated Water Co. Ltd., with more than 15 years of outstanding service. They have served in an internal auditor capacity and have proven to be highly valuable in ensuring that we have met and continue to meet the financial reporting control requirements for public companies under the Sarbanes-Oxley Act.” Read the case study GRC Director Fortune 500 Company.

AI governancecontinuous monitoringcontrol mappingdocumentation buildsGap assessmentsinternal auditmock auditsrisk assessmentvulnerability management

Related capabilities

Other processes offered by the shops that list penetration testing.

Browse all capabilities