Penetration Testing Providers
A penetration test puts a human tester against your systems to find what an attacker could actually reach, as opposed to what a scanner reports as theoretically vulnerable. Tests are commissioned either to satisfy a framework such as SOC 2 or PCI DSS, or because a customer questionnaire demands one.
All 134 providers as a table
| Provider | Based | 24/7 | Certifications | Compliance | Price / seat | Quotes |
|---|---|---|---|---|---|---|
| Sierra Experts | Pittsburgh, PA | Yes | 5 | HIPAA | $60–90 | Get quotes |
| ITECS | Dallas, TX | Yes | 5 | HIPAA, PCI DSS, CMMC | Not disclosed | Get quotes |
| Advanticom | Monroeville, PA | Yes | 1 | ISO 27001 | Not disclosed | Get quotes |
| Petronella Technology Group | Raleigh, NC | Yes | 1 | CMMC, HIPAA, SOC 2, PCI DSS, NIST 800-171 | Not disclosed | Get quotes |
| 7tech | San Antonio, TX | Yes | None on record | CMMC, HIPAA, NIST | $96–179 | Get quotes |
| IT Integrations | Fort Worth, TX | Yes | None on record | HIPAA, SOC 2, HITRUST | $95–95 | Get quotes |
| IT Pro Source | Not stated | Yes | None on record | HIPAA, CMMC, NIST 800-171, PCI DSS | $100–250 | Get quotes |
| SkyNet MTS | Worthington, OH | Yes | None on record | HIPAA, SOC 2, PCI DSS | $125–175 | Get quotes |
| Centre Technologies, Inc. | Not stated | Yes | 6 | CMMC, HIPAA | Not disclosed | Get quotes |
| AIRIAM MDT LLC | Not stated | Yes | 5 | NIST | Not disclosed | Get quotes |
| Cambay Solutions LLC | Katy, TX | Yes | 5 | HIPAA, FERPA | Not disclosed | Get quotes |
| ECF Data LLC | Las Vegas, NV | Not disclosed | 4 | CMMC | Not disclosed | Get quotes |
| Meriplex Communications | Houston, TX | Yes | 3 | HIPAA, PCI DSS, CMMC | Not disclosed | Get quotes |
| Aldridge | Not stated | Yes | 2 | HIPAA, PCI DSS, NIST, CMMC | Not disclosed | Get quotes |
| Digital Boardwalk Inc. | Pensacola, FL | Yes | 1 | CMMC, HIPAA, NIST 800-171 | Not disclosed | Get quotes |
| ERGOS Technology Partners, Inc. | Houston, TX | Yes | 1 | SOC 2, HIPAA, NIST, CMMC, PCI DSS | Not disclosed | Get quotes |
| ITS | Not stated | Yes | 1 | HIPAA, SOC 2 | Not disclosed | Get quotes |
| Accent Consulting | Lafayette, IN | Yes | None on record | CMMC, HIPAA, NIST | Not disclosed | Get quotes |
| AdRem Systems | Reston, VA | Yes | None on record | CMMC, HIPAA, NIST | Not disclosed | Get quotes |
| Advanced Networks | Los Angeles, CA | Yes | None on record | HIPAA, CMMC, SOC 2, PCI DSS | Not disclosed | Get quotes |
| Affiliated Resource Group | Dublin, OH | Yes | None on record | HIPAA, NIST | Not disclosed | Get quotes |
| B&L PC Solutions | Hauppauge, NY | Yes | None on record | HIPAA, PCI DSS | Not disclosed | Get quotes |
| BEL Network Integration & Support | Chester, VA | Yes | None on record | CMMC, HIPAA, NIST | Not disclosed | Get quotes |
| Bytagig | Clackamas, OR | Yes | None on record | CMMC, HIPAA, NIST | Not disclosed | Get quotes |
| Certified NETS | St. Louis, MO | Yes | None on record | CMMC, HIPAA | Not disclosed | Get quotes |
| CISPOINT | Columbia, MD | Yes | None on record | CMMC, PCI DSS, HIPAA | Not disclosed | Get quotes |
| Cloudavize | Dallas, TX | Yes | None on record | HIPAA, CMMC, NIST | Not disclosed | Get quotes |
| COMNEXIA | Roswell, GA | Yes | None on record | HIPAA | Not disclosed | Get quotes |
| Complete IT | Austin, TX | Yes | None on record | HIPAA, PCI DSS | Not disclosed | Get quotes |
| CompuOne | Not stated | Yes | None on record | HIPAA, CMMC, PCI DSS, NIST | Not disclosed | Get quotes |
| Computerease | Collinsville, IL | Yes | None on record | HIPAA, NIST, SOC 2 | Not disclosed | Get quotes |
| Corporate Technologies | Eden Prairie, MN | Yes | None on record | HIPAA | Not disclosed | Get quotes |
| Data-Tech | Tampa, FL | Yes | None on record | CMMC, SOC 2 | Not disclosed | Get quotes |
| Endurance IT | Virginia Beach, VA | Yes | None on record | CMMC, GDPR, HIPAA | Not disclosed | Get quotes |
| Exigent Technologies | Not stated | Yes | None on record | HIPAA, SOC 2 | $150–300 | Get quotes |
| Fusion Factor | San Marcos, CA | Yes | None on record | CMMC | Not disclosed | Get quotes |
| GXA | Richardson, TX | Yes | None on record | HIPAA, SOC 2, PCI DSS, FERPA | Not disclosed | Get quotes |
| HoustonTech | Houston, TX | Yes | None on record | HIPAA, PCI DSS, NIST, CMMC | Not disclosed | Get quotes |
| Integrated Network Concepts | Avon Lake, OH | Yes | None on record | SOC 2 | Not disclosed | Get quotes |
| Intelecis | Fullerton, CA | Yes | None on record | HIPAA, CMMC, NIST 800-171, PCI DSS | Not disclosed | Get quotes |
| IP Services | Eugene, OR | Yes | None on record | NIST, SOC 2 | Not disclosed | Get quotes |
| IT Acceleration | King of Prussia, PA | Yes | None on record | HIPAA, SOC 2, NIST, ISO 27001, 21 CFR Part 11 | Not disclosed | Get quotes |
| LBMC Technology Solutions | Brentwood, TN | Yes | None on record | HIPAA, SOC 2, NIST | Not disclosed | Get quotes |
| LeadingIT | Woodstock, IL | Yes | None on record | HIPAA, PCI DSS | Not disclosed | Get quotes |
| MDL Technology | North Kansas City, MO | Yes | None on record | ISO 27001, CMMC, HIPAA, NIST | Not disclosed | Get quotes |
| Nexigen | Newport, KY | Yes | None on record | SOC 2, HIPAA | Not disclosed | Get quotes |
| NorCal IT Solution | Not stated | Yes | None on record | SOC 2, HIPAA, PCI DSS, NIST, ISO 27001, GDPR | Not disclosed | Get quotes |
| OrLANtech | Maitland, FL | Yes | None on record | CMMC | Not disclosed | Get quotes |
| Pearl Solutions Group | St. Charles, MO | Yes | None on record | CMMC, HIPAA, NIST | Not disclosed | Get quotes |
| PGH Networks | Pittsburgh, PA | Yes | None on record | CMMC, HIPAA | Not disclosed | Get quotes |
| Power Consulting Group | Not stated | Yes | None on record | HIPAA, PCI DSS | Not disclosed | Get quotes |
| Rx Technology | San Antonio, TX | Yes | None on record | HIPAA, PCI DSS | Not disclosed | Get quotes |
| Secure Networks ITC | San Diego, CA | Yes | None on record | HIPAA, CMMC, NIST | Not disclosed | Get quotes |
| SecureTech | San Antonio, TX | Yes | None on record | HIPAA, CMMC | Not disclosed | Get quotes |
| Sigma Information Group | Austin, TX | Yes | None on record | SOC 2, HIPAA, CMMC | Not disclosed | Get quotes |
| Solution Builders | Bloomington, MN | Yes | None on record | HIPAA, PCI DSS, GLBA, NIST, CMMC | Not disclosed | Get quotes |
| Stratify IT | New York, NY | Yes | None on record | HIPAA, CMMC, NIST 800-171 | Not disclosed | Get quotes |
| Tech Hero | Orlando, FL | Yes | None on record | HIPAA, CMMC | Not disclosed | Get quotes |
| TechHeights | Irvine, CA | Yes | None on record | CMMC, NIST 800-171, ITAR, SOC 2 | Not disclosed | Get quotes |
| TeknaByte | Indianapolis, IN | Yes | None on record | CMMC, HIPAA, NIST, FERPA, FINRA | Not disclosed | Get quotes |
| Thriveon | Eden Prairie, MN | Yes | None on record | HIPAA, CMMC, NIST, PCI DSS, SOC 2, GLBA, CJIS | Not disclosed | Get quotes |
| Triton Technologies | Worcester, MA | Yes | None on record | HIPAA, CMMC, SOC 2, PCI DSS, NIST | Not disclosed | Get quotes |
| TruAdvantage | San Jose, CA | Yes | None on record | HIPAA, PCI DSS | Not disclosed | Get quotes |
| UOTech | Plainview, NY | Yes | None on record | HIPAA, SOC 2, PCI DSS | Not disclosed | Get quotes |
| Uprite Services, LLC | Not stated | Yes | None on record | HIPAA, CMMC | $91–138 | Get quotes |
| Upward Technology | Portland, OR | Yes | None on record | CMMC, NIST | Not disclosed | Get quotes |
| 911 IT | South Jordan, UT | Yes | None on record | CMMC, HIPAA, PCI DSS | Not disclosed | Get quotes |
| Accellis Technology Group | Cleveland, OH | Yes | None on record | None on record | Not disclosed | Get quotes |
| ACTS360 | Plant City, FL | Yes | None on record | HIPAA, CMMC | Not disclosed | Get quotes |
| AhelioTech | Columbus, OH | Yes | None on record | CMMC, GLBA, HIPAA, NIST | Not disclosed | Get quotes |
| Amnet | Colorado Springs, CO | Not disclosed | None on record | CJIS, CMMC, HIPAA, SOC 2 | Not disclosed | Get quotes |
| ANC Group | Greenville, SC | Yes | None on record | HIPAA, NIST, PCI DSS, GDPR | Not disclosed | Get quotes |
| Applied Tech | Madison, WI | Yes | None on record | SOC 2 | Not disclosed | Get quotes |
| ArcLight Group | Tulsa, OK | Yes | None on record | HIPAA, SOC 2, CMMC | Not disclosed | Get quotes |
| AT-NET Services | Charlotte, NC | Yes | None on record | HIPAA, PCI DSS, CMMC, NIST | Not disclosed | Get quotes |
| Attentus Technologies | Seattle, WA | Yes | None on record | CMMC, HIPAA, NIST, SOC 2 | Not disclosed | Get quotes |
| Auxzillium | Medford, MA | Not disclosed | None on record | HIPAA, CMMC, NIST, PCI DSS | Not disclosed | Get quotes |
| Bay Computing | San Francisco, CA | Yes | None on record | HIPAA, PCI DSS, NIST, CMMC, GLBA | Not disclosed | Get quotes |
| Catapult Tech Solutions | Indianapolis, IN | Yes | None on record | HIPAA | Not disclosed | Get quotes |
| CCB Technology | Mount Pleasant, WI | Yes | None on record | HIPAA | Not disclosed | Get quotes |
| Coeus | Phoenix, AZ | Yes | None on record | HIPAA, CMMC | Not disclosed | Get quotes |
| Colorado Hi-Tech Solutions | Colorado Springs, CO | Not disclosed | None on record | HIPAA | Not disclosed | Get quotes |
| Combined Technology | Tulsa, OK | Yes | None on record | HIPAA | Not disclosed | Get quotes |
| CompassMSP | Not stated | Yes | None on record | HIPAA, HITRUST, CMMC, NIST | Not disclosed | Get quotes |
| Computerbilities | Cary, NC | Yes | None on record | None on record | Not disclosed | Get quotes |
| Connected Technology | Ronkonkoma, NY | Yes | None on record | HIPAA, NIST, CMMC | Not disclosed | Get quotes |
| Contigo Technology | Austin, TX | Yes | None on record | CMMC, HIPAA, NIST | Not disclosed | Get quotes |
| CR-T | American Fork, UT | Yes | None on record | HIPAA, PCI DSS | Not disclosed | Get quotes |
| Digiwest Managed Services | Portland, OR | Yes | None on record | HIPAA, PCI DSS, SOC 2 | Not disclosed | Get quotes |
| Diverse Tech Services | Indianapolis, IN | Yes | None on record | None on record | Not disclosed | Get quotes |
| DP Solutions | Columbia, MD | Yes | None on record | CMMC | Not disclosed | Get quotes |
| DPC Technology | Jacksonville, FL | Not disclosed | None on record | HIPAA | Not disclosed | Get quotes |
| DVD Networks | Richmond, VA | Yes | None on record | None on record | Not disclosed | Get quotes |
| Dynamic Computing | Seattle, WA | Not disclosed | None on record | CMMC, HIPAA, NIST, PCI DSS | Not disclosed | Get quotes |
| eCreek IT | Denver, CO | Not disclosed | None on record | HIPAA, CMMC, SOC 2 | Not disclosed | Get quotes |
| eSudo Technology Solutions | San Jose, CA | Yes | None on record | HIPAA, FINRA | Not disclosed | Get quotes |
| Executech | South Jordan, UT | Yes | None on record | CMMC | Not disclosed | Get quotes |
| Flexible IT | Hauppauge, NY | Not disclosed | None on record | SOC 2 | Not disclosed | Get quotes |
| Foresite Cybersecurity | Overland Park, KS | Yes | None on record | NIST | Not disclosed | Get quotes |
| Fusion Managed IT | Greenville, SC | Yes | None on record | SOC 2, HIPAA | Not disclosed | Get quotes |
| Harbour Technology Consulting | Springboro, OH | Yes | None on record | HIPAA, PCI DSS | Not disclosed | Get quotes |
| inTech Consulting | Kent, WA | Yes | None on record | HIPAA, CMMC, SOC 2, PCI DSS, NIST 800-171, ITAR | Not disclosed | Get quotes |
| Intrust IT | Cincinnati, OH | Yes | None on record | CMMC | Not disclosed | Get quotes |
| ISNY | Not stated | Yes | None on record | HIPAA, GLBA, SOC 2, PCI DSS, CMMC, ISO 27001, NIST 800-171 | Not disclosed | Get quotes |
| IT GOAT | Dallas, TX | Yes | None on record | CMMC, HIPAA, NIST, PCI DSS, SOC 2 | Not disclosed | Get quotes |
| Kloud9 IT | Cleveland, OH | Not disclosed | None on record | CMMC, NIST | Not disclosed | Get quotes |
| KME Systems | Irvine, CA | Yes | None on record | HIPAA, PCI DSS, SOC 2, CMMC | Not disclosed | Get quotes |
| Matrixforce | Tulsa, OK | Not disclosed | None on record | NIST, HIPAA | Not disclosed | Get quotes |
| Merit Technologies | Greenville, SC | Not disclosed | None on record | HIPAA | Not disclosed | Get quotes |
| Mindcore | Delray Beach, FL | Yes | None on record | SOC 2, PCI DSS, ISO 27001, HIPAA, GDPR | Not disclosed | Get quotes |
| Mytech Partners | Not stated | Not disclosed | None on record | CMMC | Not disclosed | Get quotes |
| NetWize | Salt Lake City, UT | Yes | None on record | HIPAA, PCI DSS | Not disclosed | Get quotes |
| Network Security Associates | Las Vegas, NV | Not disclosed | None on record | HIPAA | Not disclosed | Get quotes |
| NexusTek | Greenwood Village, CO | Yes | None on record | CMMC | Not disclosed | Get quotes |
| NSN Management | Tulsa, OK | Yes | None on record | HIPAA, PCI DSS, SOC 2 | Not disclosed | Get quotes |
| NSOCIT | Washington, DC | Yes | None on record | HIPAA, ISO 27001, SOC 2, GDPR | Not disclosed | Get quotes |
| Opseva | Palatka, FL | Yes | None on record | HIPAA, CJIS | Not disclosed | Get quotes |
| Orion Network Solutions | Bethesda, MD | Yes | None on record | CMMC, HIPAA | Not disclosed | Get quotes |
| Parachute | Not stated | Yes | None on record | SOC 2, HIPAA | Not disclosed | Get quotes |
| ParksideTech | Phoenix, AZ | Yes | None on record | HIPAA, PCI DSS | Not disclosed | Get quotes |
| PC LAN Services | Milwaukee, WI | Yes | None on record | HIPAA, NIST, PCI DSS | Not disclosed | Get quotes |
| Powerful IT Systems | Sussex, WI | Yes | None on record | HIPAA, PCI DSS, SOC 2 | Not disclosed | Get quotes |
| Results Technology | Overland Park, KS | Yes | None on record | SOC 2 | Not disclosed | Get quotes |
| Right Hand Technology Group | Canonsburg, PA | Not disclosed | None on record | CMMC, HIPAA, NIST, ISO 27001, SOC 2, PCI DSS | Not disclosed | Get quotes |
| Securafy | Independence, OH | Yes | None on record | NIST, CJIS, HIPAA, GLBA, CMMC | Not disclosed | Get quotes |
| Snap Tech IT | Cumming, GA | Not disclosed | None on record | CMMC, SOC 2, NIST | Not disclosed | Get quotes |
| Sourcepass | Not stated | Yes | None on record | HIPAA, FINRA, SOC 2, ISO 27001 | Not disclosed | Get quotes |
| Stasmayer | North Charleston, SC | Not disclosed | None on record | PCI DSS | Not disclosed | Get quotes |
| Summit Digital Networks | Cincinnati, OH | Not disclosed | None on record | HIPAA | Not disclosed | Get quotes |
| TAZ Networks | Brighton, MI | Not disclosed | None on record | CMMC, HIPAA | Not disclosed | Get quotes |
| The MIT Pro | Austin, TX | Yes | None on record | SOC 2 | Not disclosed | Get quotes |
| Veracity Technologies | Minnetonka, MN | Yes | None on record | SOC 2 | Not disclosed | Get quotes |
| Xantrion | Lafayette, CA | Yes | None on record | SOC 2 | Not disclosed | Get quotes |
| Xceltek | Tulsa, OK | Yes | None on record | HIPAA, PCI DSS, SOC 2, CMMC, NIST | Not disclosed | Get quotes |
Common questions
How does this differ from a vulnerability scan?
A scan enumerates known weaknesses automatically and cheaply. A penetration test involves a person attempting to chain those weaknesses into real access. Quotes that look unusually low are frequently scans with a report attached.
Should our IT provider run it?
Preferably not the provider who built and manages the environment. The value of the exercise comes from independence.
Is retesting included?
Sometimes, sometimes billed separately. Confirm before signing — a report with no retest confirms nothing was fixed.
Related
What penetration testing costs · SOC 2 · HIPAA · Penetration testing · MDR providers