Skip to content
777 Sourcing.

Capability

penetration testing

Suppliers
540
States & provinces
56
Countries
9

540 penetration testing suppliers across 56 states and provinces in 9 countries. Profiles show capabilities, materials, certifications, and facility locations so you can compare shops and build a shortlist.

Suppliers

Applied Fundamentals Consulting, LLC provides customized training programs, operational support, and enhanced technical services to the United States Government and private sector firms operating in the federal market. Its professionals have Intelligence and Operations backgrounds, and its technical engineers offer corporate flexibility and responsiveness. The company's contract schedules allow all U.S. Government entities to utilize its broad range of services.

advanced malware discoverycustomized training programsfull mission profile exercisesmicroelectronicsoperational supportrisk managementtechnical supportvulnerability analysis

AiTech (Applied Information Technology, LLC) is a woman-owned small-business information technology and security firm working in government and commercial contracting. Since 2011 it has provided customer-focused security and cyber solutions to eliminate information security risks and mitigate threats, taking a systematic approach to solving IT and information assurance needs.

access controldisaster recovery planningIT consultingNetwork protectionsecurity administrationSecurity auditssecurity compliance assessmentsecurity training and awarenesssystem maintenanceUser Management

Providing Absolute Mission Assurance in a Dynamic and Hostile Cyber Environment Protecting America's Weapons Platforms Securing Critical Infrastructure Worldwide Supporting the Warfighter Cybersecurity AIT’s Cyber Mission Assurance Capabilities team (CMAC) leverages more than 20 years of expertise to deliver full-scope cybersecurity solutions that: Defend critical infrastructure Protect weapons systems Shield information technology assets Learn More > Engineering The multi-disciplined, highly specialized AIT engineers with diverse backgrounds offer agile support to achieve a full range of mission critical objectives: Full life-cycle IT design Architecture and implementation Advanced system development with hardware, software, and systems engineering Learn More > Intelligence AIT transforms data into actionable intelligence, leveraging a rich history of operational and analytical.

Cybersecurityhardware and software engineeringHUMINTIncident responseintelligence analysisIT design and architectureMASINTOSINTrisk managementSIGINTSystems Engineeringvulnerability assessments

APPLIED LOGIC LLC

LORTON, VA

Applied Logic LLC provides Information Technology solutions to organizations and partners, helping them improve performance and achieve their goals by leveraging technology and human resources. The company has offices and employees distributed throughout the globe, with locations in Lorton, VA (North HQ), Daytona Beach, FL (South HQ), Orlando, FL, and Houston, TX. Applied Logic specializes in Information Security, Application Development, and AI Engineering.

24/7 Service Desk OperationsAI Engineeringapplication developmentCloud Infrastructure Architecture and Designcompliance assessmentsData Aggregation/Integrationdata visualizationforensicsinformation securityInfrastructure Automationintelligent process automationintrusion detectionLLM & RAG Integrationmachine learningmanaged security servicesnetwork operations centersecurity operations center

APSIS Solutions Inc. is a healthcare IT consulting firm founded in Tampa, Florida in 2012 by Renbert McLean. It implements and optimizes Epic, Oracle Health (Cerner), and MEDITECH environments for health systems nationwide, provides credentialed healthcare IT staffing on a 48-hour deployment SLA, and delivers HIPAA and SOC 2 cybersecurity, cloud and database infrastructure, and analytics engineering across Epic Cogito, Clarity, Caboodle and SlicerDicer. It is MBE-certified and NAICS-registered.

Azure/AWS/GCP migrationCIO/CMIO advisoryEHR implementationEpic Cogito/Clarity/Caboodle analyticsETL designHIPAA risk assessmentsIncident responseIT staffingManaged It ServicesSOC monitoringSQL Server & Oracle DBA support

AQUIA INC.

MOUNT AIRY, MD

Aquia Inc. is a Service-Disabled Veteran-Owned Small Business (SDVOSB) that helps federal agencies and state governments modernize systems and processes. Since 2021 it has delivered cloud, cybersecurity, AI, data engineering, design, DevSecOps, and software engineering services, and was named the 2024 SDVOSB of the Year by the Department of Health and Human Services.

AI strategy and use case identificationCI/CD pipeline implementationcloud migration and optimizationContainerization and orchestrationcontinuous ATOdata pipeline design and operationsgenerative AI platform developmentLegacy system modernizationmachine learning development and deploymentpurple teamingsoftware engineeringthreat modelingUX/UI Designvulnerability management and remediationzero trust strategy and implementation

Arcane Defense Solutions provides cybersecurity services including malware analysis, digital forensics and incident response, reverse engineering and vulnerability research, threat hunting, penetration testing, security architecture, and security operations/SOC support. The team maintains security clearances and supports government agencies, defense contractors, and critical infrastructure organizations, with experience in FAR/DFARS, NIST, CMMC, and ISO 27001 compliance.

digital forensicsexploit developmentIncident responseMalware Analysisreverse engineeringsecurity architectureSIEM tuningSOC operationsthreat huntingVulnerability ResearchYARA signature development

ARCH SYSTEMS LLC

BALTIMORE, MD

HI! WE ARE INNOVATORS HI! WE ARE INNOVATORS We deliver secure, mission-driven technology that empowers government agencies to achieve lasting impact. WELCOME TO ARCH SYSTEMS Transforming Government Through AI, Cloud, and Modernization Arch Systems helps federal agencies accelerate mission outcomes through artificial intelligence, cloud engineering, cybersecurity, data intelligence, and human-centered digital transformation. Explore Capabilities Schedule a Consultation INNOVATION AWARDS IN THE FEDERAL SPACE 0 + FEDERAL PROGRAMS SUPPORTED 0 + FEDERAL AGENCIES SERVED 0 + YEARS SUPPORTING GOVERNMENT MISSIONS 0 + Innovation We listen first, challenge conventional thinking, and deliver innovative solutions that solve our customers’ most critical mission challenges. Security We protect mission critical systems through resilient architectures, strong cybersecurity practices, and compliance.

AI/MLCI/CD automationCloud Engineeringcontainerizationcontinuous monitoringCybersecuritydata intelligenceDevSecOpsEnterprise architecturehuman-centered designIT investment managementKubernetes

ARCLATTICE, INC

BELMONT, MA

ArcLattice is a security-first technology modernization firm for small and local businesses, offering managed IT, cybersecurity, AI adoption, and automation done end-to-end. It is a Certified Service-Disabled Veteran-Owned Small Business. The company provides consulting, security retainers, penetration testing, compliance engagements, AI automation, and custom software and platforms, with engagement tracking through its own shared workspace portal.

AI automationcompliance readinesscontinuous monitoringcontrol mappingCybersecuritylog triagemanaged ITpolicy draftingsoftware developmentvulnerability triage

ARCYBR

HAVRE DE GRACE, MD

ArCybr is an accredited C3PAO (Third-Party CMMC Auditing Firm) that provides auditing services and guidance to help organizations achieve DFARS and CMMC Level 2 requirements. Founded in 2021 by CEO Claudine Adams as a woman-owned business, ArCybr was certified as a C3PAO in December 2022 by the Defense Industrial Base Cybersecurity Assessment Center (DIBCAC).

CMMC assessmentDefensive Cyber Operationsgap analysisinformation security governancemock assessmentspatching and scanningpolicy creation and implementationrisk managementrisk management framework supportvulnerability management

ARDUS TECHNOLOGIES LLC

LEESBURG, VA

Ardus Technologies is a joint-venture cybersecurity firm founded by Solvitur Systems and ClearFocus Technologies. It offers cybersecurity and IT services including risk management, incident response, compliance, security operations, security engineering, security assessments, privacy and data protection, cyber threat intelligence, cloud modernization, and program and project management, delivered by certified professionals from both founding companies.

application modernizationCloud migrationcloud-native developmentcompliancecybersecurity risk managementCyber Threat Intelligencedata classificationIncident responseIT auditprivacy impact assessmentsprogram and project managementsecurity code reviewsSecurity Engineeringsecurity operationsthreat modelingvulnerability assessments

ARENA TECHNICAL, LLC

ROCKVILLE, MD

Arena Technical, LLC (AT) is a full service, woman owned, information technology consulting and staffing organization. AT delivers qualified IT consultants and technical resources across industries, working closely with clients and teams to reach and exceed goals, from legacy to leading edge technologies.

Certification and accreditationenterprise network solutionsinfrastructure engineeringIT consultingIT staffingPMO consultingproject managementtraining course design and developmentvulnerability scanning

ARGO CYBER SYSTEMS, LLC

PENSACOLA, FL

Argo Cyber Systems is a cybersecurity firm headquartered in Pensacola, Florida, providing 24/7 digital threat monitoring, vulnerability assessments, consulting, and managed security services for businesses and government entities. It is a Service-Disabled Veteran-Owned Small Business with decades of experience in intelligence, cyber, and engineering fields, and supports DHS CISA missions including Security Operations Center, CIRT, and Threat Hunt expertise.

24/7 cyber security monitoringasset discoverybehavioral monitoringCMMC assessments and certificationconsultingcustom software developmentendpoint detection and responseincident response and investigationintrusion detectionsecurity operations centerthreat huntingthreat intelligence, forensics and responseVulnerability assessment

Argus Cybersecurity Solutions provides cybersecurity services for businesses of all sizes, focusing on digital asset protection, risk assessments, and vulnerability management. Their team supports federal and commercial organizations with cloud security compliance and security control assessments.

AI analyticscloud security compliancecustom web application developmentFedRAMP security assessmentsGRC program managementLLM-based analyticsNIST 800-53 security control assessmentrisk assessmentsSecurity auditsvulnerability scanning

Founded in 2012, Argus Cyber is a WBENC-certified Woman Business Enterprise (WBE) and SBA-certified Woman Owned Small Business (WOSB) specializing in Cyber Defense. Argus supports agencies and organizations across the Department of Defense, Intelligence Community, Federal Civilian sector, and Commercial industry, transforming actionable threat intelligence into proactive and preventative measures.

Cloud migrationcyber defenseCyber Threat IntelligenceDevSecOpsIncident responseintrusion detectionMalware Analysisrisk assessmentssecurity architecturesecurity operationsVulnerability assessment

ARIES SECURITY LLC

WILMINGTON, DE

Aries Security, founded in 2008 by Brian Markus, manufactures the Capture The Packet cyber training range and skills assessment suite, and develops Pathfinder, an edge-deployed private AI appliance. The company provides cyber training, skills assessment, custom challenge content, and event management for federal, military, and commercial organizations.

AI/MLcustom content developmentcyber training and skills assessmentdigital forensics and incident responseevent managementhardware developmentOSINTRed Teamreverse engineeringsoftware development

Aristi is a cybersecurity firm based in the Washington DC metro area. Founded in 2008, it helps organizations navigate the evolving cyber-threat landscape, delivering customized expertise in managing cyber risks, protecting critical information, and achieving compliance with government and industry standards. It serves federal agencies, cloud service providers, and commercial enterprises.

compliance gap analysiscontinuous monitoringsecurity assessment planningsecurity awareness and trainingsecurity testingsystem security plan developmentvulnerability scanning

ARMISON TECH, INC.

ALDIE, VA

Armison Tech is a minority owned small business headquartered in Northern Virginia, founded in 2012, serving clients in both the public and private sectors across the United States. It provides cyber security services, consulting services, and technology solutions, with expertise in cybersecurity, information operations management, data analytics, and computer network operations.

computer software engineering and developmentimplementation and integrationOperational Planningoperational research and analysisresearch and developmentSecurity consultingsystems analysisSystems Engineeringtechnical program managementtechnical trainingVulnerability assessment

Founded in 2015 in Puerto Rico, Armor Technology Solutions provides vendor-agnostic IT security consulting, advanced technology solutions, and compliance services to organizations of all sizes, from small businesses to Fortune 100 companies. The team holds certifications including CISSP, CHP, ITIL, and PMI, and follows frameworks such as NIST, HIPAA, SOX, PCI DSS, ISO 27001, ITIL, and CIS Controls.

Business Continuity & DR PlanningCompliance & Governancedata loss preventionIT Security Staffingsecurity awareness trainingSecurity Design & Architecturesecurity risk assessmentsSIEM implementationvulnerability assessments

ARRAKIS CONSULTING INC

SAN TAN VALLEY, AZ

Arrakis Consulting is a full-featured Information Technology and Cybersecurity company covering information security, compliance, governance, audit, and regulatory environments. It is CMMC Level 2 Compliant and registered in SPRS, and is a Service-Disabled Veteran-Owned Small Business (SDVOSB). The company offers compliance and audit services, penetration testing, training, managed services (MSP/MSSP), and proprietary compliance platforms.

cloud assessmentscompliance auditinghosting servicesmanaged security servicespolicy developmentrisk assessmenttrainingVendor due diligencevulnerability assessments

ARRISON GROUP LLC

CONCORD, NC

The Arrison Group is a multi-functional asset protection firm and security consulting firm providing tailor-made security solutions to businesses. Services include proactive risk assessments, customized security solutions, incident response and disaster recovery, industry compliance, physical security, event and executive security, security training and education, information protection, program management, business operations consulting, and web design.

CCTV programmingdisaster recovery planningfirewall designIncident responsemulti-factor authenticationrisk assessmentssecurity trainingvulnerability scansweb design

ASC SOFTTECH LLC

ISELIN, NJ

ASC Softtech LLC is a niche IT solutions and services provider founded in 2017 and headquartered in Iselin, New Jersey. It serves industries including banking and financial services, insurance, healthcare, retail, telecom, construction, aerospace, and manufacturing, and is a certified member of the National Minority Supplier Development Council (NMSDC).

AI/ML/NLPapplication developmentapplication maintenanceCloud migrationCybersecurityData Management TransformationDigital transformationidentity & access managementInfrastructure Designproduction supportQuality engineeringRPASOC

ASPIS CONSULTING

KANSAS CITY, MO

Aspis Consulting is a cybersecurity and professional services consulting firm based in Kansas City, Missouri. Founded by a former federal agency CISO, it specializes in protecting digital assets while also offering information technology, management consulting, and administrative support professional services. It serves commercial, government, and small & midsized business clients.

Administrative supportCybersecuritydark web monitoringdigital forensic investigationIncident responsemanaged detection & responsemarketing servicesrecruitingRegulatory Compliancerisk managementsecurity awareness trainingStaff augmentationvulnerability scanning

ASSURA INC

GLEN ALLEN, VA

Assura is a cybersecurity company providing cybersecurity consulting services, managed security services, and cyber risk assessments. It protects, monitors, responds, and defends 24/7/365, helps organizations pass regulatory audits, and delivers cybersecurity to companies and organizations of all sizes. Its AuditArmor® Audit Defense Guarantee backs its compliance work.

audit defenseCyber risk assessmentsCybersecurity consultinggovernance risk and compliancemanaged security servicessecurity awareness trainingsecurity monitoring and responsevulnerability management

Related capabilities

Other processes offered by the shops that list penetration testing.

Browse all capabilities