Find a pentest company with ISACA
24 companies have this certification
ISACA Certifications
ISACA, originally founded in 1969 as the Information Systems Audit and Control Association, was established by a small group of individuals who recognized the need for a centralized source of information and guidance in the growing field of auditing controls for computer systems. The organization evolved from focusing solely on audit professionals to addressing broader information security, governance, and assurance needs. ISACA developed several well-known certifications including the Certified Information Systems Auditor (CISA) in 1978, followed by the Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), and Certified in the Governance of Enterprise IT (CGEIT).
ISACA certifications are highly valued in the penetration testing and cybersecurity industry because they demonstrate a comprehensive understanding of IT governance, risk management, and security frameworks that contextualize technical testing work. While penetration testers focus on identifying vulnerabilities through hands-on technical assessments, ISACA credentials—particularly CISA and CISM—validate their ability to understand the broader organizational risk landscape, communicate findings to management effectively, and align security testing with business objectives and compliance requirements. Many penetration testing firms employ or seek ISACA-certified professionals to bridge the gap between technical security testing and strategic risk advisory services, making their offerings more comprehensive and valuable to enterprise clients who need both technical depth and business-aligned security guidance.
RITC Cybersecurity
IT Services and IT Consulting company specializing in cybersecurity; offers penetration testing services confirmed by company categories and service pages; 4 employees with 100% YoY growth; founded 2014; headquartered in Scottsdale, AZ.
CovertThreat
Cybersecurity consulting firm specializing in penetration testing, vulnerability management, and digital forensics; 2 employees with 100% YoY growth; headquartered in Miami, Florida, United States; offers dedicated penetration testing services through multiple website pages.
KirkpatrickPrice
IT services and consulting firm specializing in information security assurance, including penetration testing, PCI audits, and risk assessments; 90 employees (+8.4% YoY), $6.8M revenue, founded 2005, Nashville, TN; provides advanced ethical hacking and vulnerability assessments, serving over 2,000 clients worldwide.
Opacc, Inc.
Virginia-based strategic advisory, cyber operations, and private security firm supporting government and private clients; offers penetration testing services as part of their cybersecurity offerings; headquartered in Tysons Corner, VA.
Diverto
Croatia-based cybersecurity company providing penetration testing, security assessments, and compliance consulting; explicitly states offering penetration tests of applications, infrastructure, IoT, ICS, social engineering, and red/purple teaming; founded in Croatia, reinforcing its regional focus.
Risk Analysis Consultants
Czech cybersecurity company based in Prague with over 30 years of experience in information security; specializes in penetration testing services, with active capabilities demonstrated through service listings and job postings. Focuses on delivering fast, effective solutions tailored to client needs.
SECNORA®
Cybersecurity and GRC consulting firm specializing in penetration testing; 22 employees with +15.4% YoY growth; registered in Estonia but headquartered in Grapevine, Texas, USA; founded 2018; CREST accredited; offers services in cybersecurity, network security, security training, and compliance.
Stop wasting time on security questionnaires
ResponseHub uses AI to automate your security questionnaire responses. 100% confidence, save days, unblock deals.
Silverskin Information Security Oy
Cybersecurity company based in Helsinki, Finland, specializing in app security and continuous penetration testing; 20 employees (+18.2% YoY growth), $13.8M revenue, founded 2009. Focuses on secure-by-design advisory, security assessment, and embedding security into digital processes; operates in IT services and consulting industry.
KBE Intelligence
KBE Intelligence is a Italy-based private cybersecurity company specializing in risk management, threat detection, and penetration testing; with 3 employees (+20% YoY growth), founded in 2005, they focus on security assessments, governance, and data protection, offering cybersecurity services, academy, and seminars.
Safetech Innovations
Cybersecurity company specializing in penetration testing, security consulting, and incident response; offers CREST-accredited pentest services for web, mobile, cloud, and network environments; 47 employees (+6.5% YoY growth); founded 2011; headquartered in Bucharest, Romania.
Soitron
Slovak IT services company based in Bratislava; provides cybersecurity solutions including penetration testing, with documented case studies demonstrating security assessment capabilities and deployment of security sensors.
Cxo Security Pty Ltd
Australian cybersecurity firm based in Sydney; specializes in penetration testing, external pentesting, and red teaming services; registered in New South Wales with ABN 14 648 798 618; maintains an AU-specific page (sekuro.io/au).
Access 2 Networks (A2N)
Cybersecurity company headquartered in Mississauga, Ontario, Canada; provides penetration testing services including vulnerability assessments, web app testing, external/internal/wireless pentests, and Red Team engagements.
KBE Information Security
Canadian cybersecurity company based in Toronto, Ontario; provides cyber security services including penetration testing and vulnerability assessments; emphasizes proactive security and protecting information infrastructure.
Advertise on pentest.fyi
You could be here!
ADAN SECURE / ADAN SYSTEMS SOLUTIONS S DE RL DE CV
Cybersecurity and business consulting firm based in Mexico; specializes in penetration testing, security solutions, and government IT services with 9 employees and 23.1% YoY growth; founded in 2016, with expertise in vulnerability analysis, forensics, and security research.
Purple Security
Purple Security is a private cybersecurity firm specializing in penetration testing, security consulting, compliance, and security intelligence, with a focus on offensive security (Red Team) and infrastructure security; 4 employees with 20% YoY growth; headquartered in Monterrey, Mexico; provides web, mobile, and infrastructure vulnerability analysis, training, and tailored cybersecurity services, serving the Mexican market.
Scitum S.A. de C.V.
Mexico-based IT services and cybersecurity company with 716 employees; the largest information security integrator in Latin America, specializing in penetration testing and vulnerability assessments for OT environments; founded in 1998; global rank #1,723,111, local rank #24,429 in Mexico.
BINAR10 S.A.C.
Peruvian cybersecurity company founded in 2008; specializes in ethical hacking, penetration testing, adversary simulation, and security standards automation; headquartered in Lima, Peru; known for high-integrity professionals and comprehensive security services.
NobleProg Uruguay
IT training and consulting provider based in Uruguay; offers penetration testing services with engagement options like Solutions Architect on Demand, Project Mode, and Staff Augmentation; website domain ends in .uy, confirming local presence.
INTfinity Consulting Pte. Ltd.
Cybersecurity company specializing in penetration testing, digital forensics, and incident response; 5 employees with 66.7% YoY growth; based in Bukit Merah, Singapore; offers consultancy and proactive security solutions.
SecureAX
SecureAX is a Singapore-based cybersecurity and cloud hosting provider specializing in web email hosting, managed IT services, and penetration testing; licensed by CSRO to perform pentest services, with headquarters at 435 Orchard Road, Wisma Atria, Singapore. The company offers large mailbox sizes, cost savings, and comprehensive managed cloud and IT solutions.
Sakra Edutech
Malaysia-based cybersecurity training and consulting company; offers penetration testing services and related training programs like CompTIA PenTest+; headquartered in Petaling Jaya, Selangor, with active social media presence.
Multimatics ID
Indonesia-based professional training and consulting firm specializing in digital innovation, capacity building, and certification; offers penetration testing services with demonstrated client engagements including Bank MUFG, and employs 51 employees with 13% YoY growth.
Cyber Octet Pvt Ltd
Indian cybersecurity company based in Ahmedabad, Gujarat; provides penetration testing, vulnerability assessments, and offensive security services, including live attack simulations; specializes in web and network pentests.