What Vumetric does

Vumetric Solutions Inc. is a Toronto-based penetration testing and cybersecurity assessment firm founded in 2007 and operating in approximately 11-50 employees across dual headquarters in Toronto, Canada and Las Vegas, USA. The company delivers manual, expert-led offensive security engagements — covering external and internal network testing, web/mobile/API application testing, cloud (AWS, Azure, GCP) security, medical device and IoT security, SCADA/ICS, red team assessments, and social engineering — under an ISO 9001-certified quality management system, with work performed entirely in-house by testers holding elite credentials such as OSCP, OSWE, OSEP, OSEE, CRTO, GPEN, GWAPT, and CEH. Its service portfolio is mapped to compliance frameworks including PCI-DSS, FDA 510(k), SOC 2, ISO 27001, and GDPR, enabling the company to produce attestations required by regulated buyers.

The company monetizes primarily through project-based professional services priced on a per-engagement basis (with publicly referenced budget bands ranging from under $10K to over $100K) and through a recurring Pentest-as-a-Service (PTaaS) platform that is listed on AWS Marketplace and Azure Marketplace and supports on-demand project management, real-time progress tracking, and historical result comparison. Vumetric serves more than 400 organizations per year across five continents, with named clients including Toyota, Siemens, GE, Westlake Chemical, Zimmer Biomet, Spineguard, Decathlon, WWF, and Boys & Girls Clubs of America. Go-to-market combines a consultative enterprise field-sales motion (phone, contact form, dedicated account management) with a self-service quoting tool for SMB/mid-market buyers and content-driven inbound marketing across blog, whitepapers, case studies, and review platforms (4.9 Clutch, 4.8 Gartner). In 2024, Vumetric was acquired by TELUS Communications Inc. and now operates as "Vumetric by TELUS," integrating its penetration testing capability into TELUS's broader North American cybersecurity portfolio.

Name

Vumetric

Legal name

Vumetric Solutions Inc.

Website

https://vumetric.com

Company type

Private

Founded year

2007

Operating status

Operating

Headcount range

11–50 employees

Short description

Vumetric is an ISO 9001-certified penetration testing firm delivering manual, expert-led offensive security assessments (network, application, cloud, medical device, IoT, SCADA) and compliance attestations to 400+ organizations annually across five continents, now operating as Vumetric by TELUS following its 2024 acquisition.

Ownership category

akta.pro rank

Product category

Penetration Testing Services

NAICS

Other Computer Related Services (541519), Testing Laboratories and Services (54138)

SIC

Services-Testing Laboratories (8734)

akta.pro primary industry

Penetration Testing Platforms (PTaaS) (HDADAHAG)

akta.pro secondary industries

Vulnerability Management & Penetration Testing Services (BPAEADAD), Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG), Vulnerability Management, Pen Testing & Attack Surface Management (ASM) (HLACAJAN), IoT Vulnerability Assessment, Penetration Testing & Risk Audits (HSAHAJAC)

Keywords

• Penetration testing services
• Cybersecurity assessments
• Application security testing
• Pentest as a service
• Vulnerability management

Headquarters

HQ city

Toronto

HQ country

Canada

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Penetration Testing Services: Professional penetration testing services billed on a per-project basis, with scope defined in Statements of Work. Pricing is determined by the type of test (network, application, device, cloud), scope (IP addresses, endpoints, features), and expertise required. Projects are quoted individually with all-inclusive flat fees. Additional services include compliance-specific testing, red team assessments, and social engineering simulations.
2. Pentest-as-a-Service (PTaaS) Platform Subscription: The PTaaS platform enables ongoing cybersecurity assessments through a subscription model, allowing organizations to manage pentest projects continuously. Platform access is available via AWS and Azure Marketplaces, suggesting a consumption or subscription-based revenue component.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels7 records

Core offering

Vumetric provides penetration testing and cybersecurity assessment services covering network, web/mobile/API applications, cloud, medical device, IoT, SCADA/ICS, and wireless environments, along with compliance audits (PCI DSS, HIPAA, SOC 2, ISO 27001, HITRUST, NIST). The firm also offers a proprietary Pentest-as-a-Service (PTaaS) platform available on the AWS and Azure Marketplaces for continuous, on-demand testing engagements. Customers include banks, healthcare organizations, retailers, government agencies, and industrial operators requiring external validation of their security posture.

Product overview

Vumetric offers a comprehensive portfolio of penetration testing and cybersecurity assessment services organized around a core PTaaS (Pentest-as-a-Service) platform. The PTaaS platform serves as the central hub for managing on-demand cybersecurity projects, tracking progress, and comparing historical results. Core testing services include network penetration testing (external, internal, wireless), application security testing (web, mobile, API), and specialized testing for cloud, medical devices, IoT, SCADA/ICS, and social engineering. Enterprise-level offerings include cybersecurity audits, ransomware readiness assessments, and remote work security audits. The company also provides compliance-focused pentesting for PCI-DSS, FDA, SOC 2, ISO 27001, and GDPR requirements. All services are delivered by certified experts holding elite industry certifications (OSCP, GWAPT, CRTO, etc.) and are backed by ISO 9001-certified processes.

Differentiator

Problem solved

Functional benefit

Brands

• Vumetric PTaaS Platform: Pentest-as-a-Service (PTaaS) platform designed for organizations to manage cybersecurity assessments on-demand, view previous results, track real-time progress, and manage team permissions. Available on AWS and Azure Marketplaces.

Products and services

• Pentest-as-a-Service (PTaaS) Platform Proprietary SaaS platform for managing on-demand and continuous penetration testing engagements; available on AWS Marketplace and Microsoft Azure Marketplace for enterprise buyers seeking streamlined procurement.
• External Penetration Testing Black-box testing of internet-facing infrastructure, systems, and networks to identify exploitable vulnerabilities from an outside attacker perspective.
• Internal Penetration Testing Assessment of internal networks simulating threats from insiders, compromised devices, or attackers who have already breached the perimeter.
• Web Application Penetration Testing Manual security testing of web applications to identify vulnerabilities such as injection flaws, authentication issues, and business-logic defects using OWASP-aligned methodologies.
• Mobile Application Penetration Testing Security assessment of iOS and Android mobile applications covering client-side code, backend APIs, and data storage.
• API Penetration Testing Testing of REST, SOAP, and GraphQL APIs for authentication, authorization, input validation, and data exposure weaknesses.
• Cloud Penetration Testing Security testing of AWS, Microsoft Azure, and Google Cloud environments including configuration review, IAM analysis, and workload exploitation.
• Medical Device Penetration Testing Security assessment of connected medical devices and healthcare equipment for FDA and HIPAA-aligned compliance and patient safety risk.
• IoT Penetration Testing

Quantifiable outcome

• 4.9 rating on Clutch (enterprise pentest reviews)
• +1 more outcomes

Named customers18 records

Segments10 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

Three partnerships are on record, tiered core and supporting.

• TELUS Communications Inc.coreStrategic or Co-development PartnerVumetric is an affiliate of TELUS Communications Inc., acquired by TELUS to advance cyber protection for North American businesses. The acquisition integrates Vumetric's penetration testing expertise into TELUS's broader cybersecurity portfolio. Vumetric operates under the 'Vumetric by TELUS' brand and provides cybersecurity assessment services as part of TELUS's portfolio.
• Amazon Web Services (AWS)supportingTechnology or IntegrationVumetric's Pentest-as-a-Service (PTaaS) platform is available on the AWS Marketplace, allowing AWS customers to discover, evaluate, and purchase Vumetric's penetration testing services through AWS's procurement infrastructure.
• Microsoft AzuresupportingTechnology or IntegrationVumetric's Pentest-as-a-Service (PTaaS) platform is available on the Azure Marketplace, enabling Microsoft Azure customers to procure Vumetric's cybersecurity assessment services through the Azure Marketplace.

Scale indicators3 records

Recent moves7 records

Expansion highlights5 records

Broad incumbents

• HackerOne: HackerOne combines a large bug bounty marketplace with PTaaS-style pentest platform offerings; it is a broader incumbent in offensive security with overlapping pentest capabilities aimed at enterprise and government customers similar to Vumetric's.
• NCC Group: NCC Group is a global cybersecurity services and consulting firm offering extensive penetration testing, red team, and SCADA/ICS assessments, overlapping with Vumetric's enterprise and industrial cybersecurity testing footprint.
• Trustwave: Trustwave delivers managed security services and offensive security testing including application, network, and database penetration testing, competing with Vumetric for enterprise and government cybersecurity spend.
• Rapid7: Rapid7's Metasploit and Insight Platform underpin vulnerability management and attack-surface testing, and its services arm provides pentest offerings — adjacent incumbent with overlapping buyer and similar risk-prioritization workflows to Vumetric.

Emerging players

• Pentera: Pentera is an automated security validation platform that continuously emulates attacker techniques across network, cloud, and endpoints — competing for the same budget pool as Vumetric by accelerating test cycles and reducing manual dependency.
• Astra Security: Astra Security provides a PTaaS platform with continuous automated plus manual penetration testing for SaaS and e-commerce customers — an emerging player competing with Vumetric in the SMB/startup tier of Vumetric's segmentation.

Direct peers

• BreachLock: BreachLock offers a subscription-based PTaaS platform combining automated scanners with certified human pentesters for network, application, and cloud testing — directly comparable to Vumetric's hybrid SaaS-plus-services model.
• Bishop Fox: Bishop Fox is a boutique offensive security firm providing application, network, cloud, and IoT/embedded penetration testing with elite tester credentials — directly comparable to Vumetric's specialist service portfolio and talent strategy.
• Cobalt: Cobalt operates a leading Pentest-as-a-Service (PTaaS) platform that connects organizations to a community of vetted pentesters with on-demand scoping, real-time reporting, and integrations into dev workflows — the closest direct competitor to Vumetric's PTaaS model.
• NetSPI: NetSPI is a large penetration testing and offensive security services firm with a PTaaS-style platform serving Fortune 500 enterprises, directly comparable to Vumetric in both services portfolio (network, app, cloud) and platform-led delivery.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/vumetric
• Facebookfacebook.com/vumetric
• LinkedInlinkedin.com/company/vumetric

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Vumetric