Can anyone recommend a pentest vendor? We're US based and looking to limit the scope to ~7 endpoints hosted between an A...

·Oct 07, 2026 04:12 PM·

Can anyone recommend a pentest vendor? We're US based and looking to limit the scope to ~7 endpoints hosted between an AWS account, GCP project, and Azure subscription. The CISA CyHy scans are great but my management still wants to contract one annually.

7 comments

· Sorted by Oldest

Jamie F.
·
·
i've used kulkan.com across multiple gigs now & like their work.. happy to intro if you want
💜1
Jake T.
·
·
Thanks! I'll take a look at them now!
Rudy M.
·
·
FWIW - Here's a useful ref too soc2.fyi/#…
Jake T.
·
·
Oh that's perfect. Thanks!
Nathan W.
·
·
Big fan of Black Hills Information Security: blackhillsinfosec.com/services/web-appllication-testing Awesome customer service and good prices for solid, technical work
💜1
dslodowick
·
·
We use BreachLock and have been very pleased with their engagement and reporting. Retest is simple and can be performed ad-hoc to validate remediation.
💜1
Corey H.
·
·
We use BreachLock and they are easy to work with and get a test scheduled.
💜1

Jamie F.
·
·
i've used kulkan.com across multiple gigs now & like their work.. happy to intro if you want
💜1
Jake T.
·
·
Thanks! I'll take a look at them now!
Rudy M.
·
·
FWIW - Here's a useful ref too soc2.fyi/#…
Jake T.
·
·
Oh that's perfect. Thanks!
Nathan W.
·
·
Big fan of Black Hills Information Security: blackhillsinfosec.com/services/web-appllication-testing Awesome customer service and good prices for solid, technical work
💜1
dslodowick
·
·
We use BreachLock and have been very pleased with their engagement and reporting. Retest is simple and can be performed ad-hoc to validate remediation.
💜1
Corey H.
·
·
We use BreachLock and they are easy to work with and get a test scheduled.
💜1