Skip to content
777 Sourcing.

Capability

penetration testing

Suppliers
540
States & provinces
56
Countries
9

540 penetration testing suppliers across 56 states and provinces in 9 countries. Profiles show capabilities, materials, certifications, and facility locations so you can compare shops and build a shortlist.

Suppliers

FIVE 9 GROUP INC

FAIRFAX, VA

Five 9 Group, Inc. is a provider of Information Technology (IT) solutions and services including Agile software development, DevOps, cloud computing, cloud enablement, advanced data solutions, IT infrastructure modernization, and operations and maintenance (O&M). The company serves federal, state, and local government, providing mission-critical IT services and managed services worldwide. Its name references 99.999% availability.

agile developmentapplication developmentCloud migrationdatabase administrationdata center consolidationDevOpsdisaster recovery planningGIS data analytics and visualizationsecurity vulnerability assessmentssoftware testingsystems administration

FJORD LLC

FOUNTAIN HILLS, AZ

Fjord.AI is an offensive security and AI research firm that runs red team operations, hunts for vulnerabilities, and publishes CVEs, applying AI to go deeper and faster than conventional testing. The team has performed penetration testing and vulnerability research across sensitive environments including the Intelligence Community, Department of War, defense contractors, federal agencies, federal judiciary, state and local government, healthcare systems, and Fortune 100 companies.

AI security researchAttack surface monitoringcloud security reviewsdigital recon & OSINTred team operationsVulnerability Research

FLASHINTELL INC

DUMFRIES, VA

FlashIntell Inc. is a small business dedicated to supporting federal, state, and local agencies with mission-driven cybersecurity services. It provides tailored security governance and compliance, security assessments, risk management, and continuous monitoring to help partners meet evolving security standards, reduce risk, and protect critical systems and data.

Business Continuity & Disaster Recovery Managementcloud securitycontinuous monitoringIncident responseNIST Risk Management Framework (RMF)POA&M managementPolicy managementrisk assessmentSecurity Assessment & Authorization (SA&A)Security Governance & Compliancevulnerability management

FLEXKEY

CHARLOTTE, NC

FlexKey is a national IT solutions advisor and reseller serving government, healthcare, and education sectors. It provides digital workspace solutions, cybersecurity, networking, data center, and end-user computing services, with engagements starting from assessment through design, deployment, documentation, and knowledge transfer.

Cloud consultingCybersecurityData center deploymentend-user computingfirewallload balancingManaged It Servicesnetworking implementationStaff augmentationswitchingZTNA

FOCUS CONNECT

DENVER, CO

FocusConnect is a Denver-based provider of managed IT, cybersecurity, and compliance engineering for mid-market and enterprise organizations. Founded by CEO Jacqueline Specht, the company brings leadership, engineering, cybersecurity, compliance, and managed services together under one framework, serving most verticals nationwide with on-site network installations.

24/7 threat monitoringAI security and governancecloud securityCMMC L2 compliance supportcompliance managementfractional engineeringIncident responseM&A IT due diligence and integrationmanaged ITnetwork design and managementobservabilityon-site network installationsTier I-III supportvCIO fractional leadership

For7ress is a cybersecurity company focused on protecting organizations' digital assets from cybercrime. It offers penetration testing (internal, external, web and mobile applications), professional consulting and cyber intelligence services, SIEM implementation, legal advice on cybercrime and corporate fraud, online reputation and crisis management, data science applied to the market, and cybersecurity training. The company states its mission is to safeguard the world's information and ensure everyone's data is protected at all times.

cyber intelligencedigital identity monitoringethical hackingfraud investigationOSINTSIEM implementationtrainingVulnerability assessment

FOREFRONT TECHNOLOGY INC

CLEVELAND, OH

ForeFront Technology Inc. is a managed service provider (MSP) offering secure, scalable IT solutions including strategy and consulting, network and systems infrastructure, cybersecurity, AI strategy, cloud architecture, surveillance solutions, data cabling, and hardware procurement. The company follows a Design, Build, Secure, Manage approach and serves clients from offices in Cleveland, Ohio; Columbus, Ohio; and Wheeling, West Virginia.

AI implementationCloud migrationcybersecurity monitoringhardware procurementManaged It Servicesnetwork design and implementationstructured cablingsurveillance system deploymentvCIO/vCISO advisory

Forsyte IT Solutions is a cybersecurity provider offering managed security services and its flagship Microsoft-native platform, Guardian 365. Guardian 365 delivers 24x7x365 SOC monitoring, managed detection and response, threat hunting, incident response, identity protection, and continuous posture improvement. Forsyte serves higher education, K-12 education, state and local government, healthcare, nonprofits, and commercial organizations.

Identity and Access SecurityIncident responsemanaged detection and responseMicrosoft Defender XDR deploymentMicrosoft Entra identity securityMicrosoft Purview data protectionMicrosoft Sentinel managementsecurity assessmentssecurity operations center monitoringthreat huntingvulnerability managementZero Trust strategy

FORTALICE SOLUTIONS LLC

CHARLOTTE, NC

Fortalice Solutions is a cybersecurity firm founded by Theresa Payton, the first female White House Chief Information Officer. Led by former White House experts, the company helps clients reduce risk, strengthen systems, and protect executives and brands through tailored cybersecurity services grounded in real-world experience.

cyber strategy and compliancedark web threat monitoringethical hackingexecutive digital protectionincident investigationsnetwork and application testingtabletop exercisestraining

FORTIDM TECHNOLOGIES LLC

PLAINSBORO, NJ

Fortidm Technologies LLC, founded in 2005, is a Princeton, NJ based professional service IT systems integration and management consulting firm delivering cybersecurity, compliance and cloud solutions for commercial and government clients. It is a contract holder of GSA MAS Schedule 70 and GSA Highly Adaptable Cyber Security Services (HACS).

Cloud migrationcompliance managementdata backup and recoveryIncident responseIT consultingnetwork design and implementationrisk assessmentSIEM/MSSPvulnerability management

Fortified Health Security provides tailored cybersecurity solutions for healthcare organizations, ensuring patient data protection and regulatory compliance. It is an MSSP partner for healthcare systems in the U.S. and across the globe, offering Advisory and Threat Defense services with a 24/7 Threat Defense center and dedicated security analysts.

24/7 SOCAttack surface monitoringIncident responseManaged connected medical device securityManaged endpoint detection and responseManaged phishing servicesManaged security awareness trainingmanaged SIEMManaged XDRRed Teamingsecurity risk assessmentsthird-party risk managementvirtual CISO servicesVulnerability threat management

FORTREUM, LLC

LEESBURG, VA

Fortreum is a Top 5 FedRAMP 3PAO, Cyber-AB authorized CMMC C3PAO, and ANAB-accredited ISO certification body founded in 2020 by Michael Carter and James Leach. The company delivers independent assessment and advisory services across compliance frameworks including FedRAMP, CMMC, SOC 1 & 2, ISO 27001, HIPAA, PCI DSS, and GovRAMP, backed by its patented AI-native compliance automation platform (KOVR/XRAMP).

cloud penetration testingCMMC assessmentcompliance automationcontinuous monitoringFedRAMP assessmentgap analysisHIPAA assessmentsISO 27001 certificationPCI DSS assessmentred team exercisesSOC 1 & 2 audits

FORZAVIE LLC

WILLIAMSBURG, VA

Forzavie provides computer security solutions to safeguard data and devices. Its team of cybersecurity professionals offers a comprehensive suite of services designed to be flexible and scalable for organizations of any size, from small businesses to Fortune 500 companies. The company is located in Williamsburg, VA.

compliance consultingIncident responsemanaged security servicessecurity awareness trainingVulnerability assessment

Foxhole Technology is an employee-owned, Service-Disabled Veteran-Owned Small Business founded in 2007 as an IT Engineering firm. It provides cybersecurity, software development, systems engineering, and test & evaluation solutions to federal civilian and defense agencies and commercial clients.

AI/MLArchitecture/Infrastructure ModernizationBig Data and Data Sciencecloud optimizationcybersecurity engineeringDevSecOpsIncident responseresearch and developmentreverse engineeringSOC operationsSoftware/Application DevelopmentSystems & Network EngineeringTest & EvaluationThreat Hunt and Forensicsvulnerability management

mission is to impact the lives touched by technology. To that end, our vision is to help 6,000 businesses realize their goals through technology. Who We Are. Our mission is to impact the lives touched by technology. To that end, our vision is to help 6,000 businesses realize their goals through technology. Our values. These seven principles highlight our fundamental beliefs as a team and as a business. Our core values attract and unite individuals focused on building a stable, desirable work environment and providing exceptional solutions we are proud of. Our values. These seven principles highlight our fundamental beliefs as a team and as a business. Our core values attract and unite individuals focused on building a stable, desirable work environment and providing exceptional solutions we are proud of. Elite Raving Fan Culture Constructive Communication Humble & Adaptable Teach &.

Cloud services including hybrid cloud, virtualization, backup-as-a-service, disaster recovery, secure cloud hostingCMMC compliance supportCybersecurity monitoring from a Security Operations Center (SOC)Epic ConsultingIT project planning and implementationManaged It ServicesvCISO consulting

Freewater Technologies is a Service-Disabled Veteran-Owned Small Business (SDVOSB) founded in 2005 that provides cybersecurity training, certification, and security services to the Department of Defense, government agencies, and commercial organizations. It is an NICCS education and training provider offering instructor-led certification training aligned to the NICE Framework, plus customized security course development and delivery.

custom security course developmentIncident responseinstructor-led trainingnetwork security monitoringsocial engineering testingVulnerability assessment

FROM THE ROCKIES LLC

COEUR D ALENE, ID

From the Rockies LLC is a Colorado-based service and technology company with 35+ years of hands-on internet and software experience. It designs automation, security, and custom software systems for home and office, serving clients everywhere. The company also published a book, 'Stop the Hack!', a non-technical guide to passwords, prevention and privacy.

automationcomputer securitycross-platform migrationsCustom CRM developmentinventory automationmainframe-to-modern migrationprogramming and coding

FRONTIER TECHNOLOGY INC

HUNTSVILLE, AL

FTI Defense delivers AI-powered mission analytics, modeling and simulation, and defensive cyber software plus tech-enabled services to support U.S. military and intelligence communities across sea, space, air, land, and cyber domains. Its integrated software ecosystem is built on a mission data platform and includes products such as WOPR, AI Sidekick, Cortex, Nevi, and Avya. The company states 40+ years of experience in government data systems and more than $350 million of U.S. government investment in its technology portfolio.

AI and Machine Learningdata integrationdata visualizationDefensive CyberLogistics Analysismodel-based systems engineeringmodeling and simulationpredictive analyticsradio frequency analysissoftware developmentsynthetic environment and data generationwargaming

FRSECURE LLC

EDINA, MN

FRSecure is an information security company that builds better security cultures and programs for organizations. It offers services including Virtual CISO, incident response, risk assessment, penetration testing, vulnerability management, and compliance preparation, and states it does not sell third-party products.

attack simulationCloud Security AssessmentCMMCgap assessmentIncident responsePCI DSS QSAPurple Teamrisk assessmentSOC 2 audit preparationsocial engineeringtabletop exercisesvendor risk managementvirtual CISOvulnerability managementvulnerability scanning

FSI TECH

GILROY, CA

FSi Tech provides IT cyber security solutions, bridging the IT security gap for over 20 years. The company helps organizations close security gaps into one cohesive solution, partnering with leading technology companies to provide an in-depth approach to IT security, network security, and cloud security services.

cloud securityidentity managementIncident responseIT securitynetwork securitysecurity awareness training

of page Software Development We go beyond offering services,we solve challenges. From creating seamless user experiences and building memorable brands to driving agile development, strengthening security with Dev Sec Ops, and ensuring fast disaster recovery, we help you deliver impact where it matters most. Cloud Migration and Integration We help you unlock the full potential of the cloud. By migrating, securing, and optimizing your existing cloud environments, we integrate emerging technologies that bring resources closer to your users and expand your reach like never before. Cybersecurity Fusion Technology empowers organizations to stay ahead of cyber threats. We provide comprehensive support in penetration testing, incident response, cyber hunting, and risk and vulnerability management — with a focus on protecting high-value assets. Our experts also craft policies that ensure strict.

agile developmentbiometrics integrationCloud migrationcyber huntingDevSecOpsIncident responserisk and vulnerability managementsoftware developmentSystems Engineering

or contact@fyrmassociates.com About Us Overview FYRM Associates is an information security and cyber security professional services organization that specializes in security analysis, testing, and training. Founded in 2008, FYRM has offered custom consulting services that help organizations with their information security and cyber security initiatives. Experience FYRM’s consultants average over a decade of experience, are highly skilled and well respected in the information security industry. Our technical team has information security experience with Fortune 500 companies, Federal Agencies and small and medium-sized businesses. No matter the size of your organization, with FYRM Associates you can have information security and cyber security initiatives completed correctly, quickly and within budget. Copyright 2008-2025 FYRM Associates, Inc.

application securityaudit supportcompliance consultingPurple TeamRed Teamingrisk assessmentssecure coding trainingsocial engineering

GALAXY CONSULTING LLC

FORT WASHINGTON, MD

Galaxy Consulting, LLC is a Service-Disabled Veteran-Owned Small Business (SDVOSB) based in Fort Washington, Maryland, providing IT infrastructure, cybersecurity, and professional services to federal and state government agencies and their industry partners. It is a Cyber-AB authorized CMMC Registered Provider Organization (RPO) with a Registered Practitioner on staff, helping DoD contractors prepare for CMMC Level 1 and Level 2 self-assessments.

CMMC compliance advisorygap assessmentHelp desk supportIT system design and integrationprogram managementremediationsecurity architecture designsoftware developmentSPRS submission supportSSP documentation

Gateway Government Solutions, Inc. is a CA Certified Value Added Reseller (VAR) providing data, cybersecurity, and infrastructure solutions to federal, state, and local government agencies. Founded by senior government technology experts, the company helps agencies modernize through cloud infrastructure, enterprise data, storage and backup, cybersecurity, generative AI, and optical fiber connectivity, following a discover, design, deliver, and sustain approach.

attack simulationbackup and disaster recoverychatbotscloud infrastructureData Analyticsdata governanceETL/ELT pipelinesfiber deploymentfiber network designnetwork assessmentsrobotic process automationtrenching

Related capabilities

Other processes offered by the shops that list penetration testing.

Browse all capabilities