PentestIQ
PentestIQ is a San Francisco-based penetration testing company that delivers AI-assisted, subscription-based security assessments across web, mobile, API, network, and cloud environments to a global base of 1,000+ enterprise and federal customers, supported by U.S.-based security engineers.
- Company typePrivate
- Founded-
- HeadquartersSan Francisco, United States
- Headcount1–10
- GTM typeB2B
- OfferingServices
What PentestIQ does
PentestIQ is a San Francisco-based penetration testing services company that delivers AI-assisted security assessments combined with U.S.-based human security engineers. Its product surface spans web application, mobile, API, network, and cloud penetration testing, alongside phishing simulation and a Managed Security Program, with Smart Reports, Playbooks, and a Data Driven Security layer packaged into the recurring offering.
The company's go-to-market centers on a subscription-based pricing model with monthly and annual plans, positioning itself as a continuous testing provider rather than a project-based consultancy. Compliance coverage includes SOC 2, PCI, HIPAA, ISO 27001, and HITRUST, which makes the platform directly relevant to security and audit buyers in regulated industries. PentestIQ also operates a multi-tier channel partner program with Microsoft, AWS, Google Cloud, Vanta, Drata, and other compliance and security platforms, distributing through hyperscaler marketplaces and compliance ecosystems in addition to direct sales.
PentestIQ claims more than 1,000 customers globally and references enterprise and federal logos including Coinbase, Samsung, Honeywell, Exelon, the Air Force, and Clemson University, though no revenue split by customer or segment is disclosed. The company is privately held, reports a headcount in the 1-10 range, and has not disclosed external funding, leadership hires, or M&A activity in the available data.
PentestIQ firmographics
Firmographics- Name
- PentestIQ
- Legal name
- PentestIQ
- Website
- https://pentestiq.com
- Company type
- Private
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- PentestIQ is a San Francisco-based penetration testing company that delivers AI-assisted, subscription-based security assessments across web, mobile, API, network, and cloud environments to a global base of 1,000+ enterprise and federal customers, supported by U.S.-based security engineers.
- Ownership category
- akta.pro rank
PentestIQ industry classification
Industry- Product category
- Penetration Testing Services
- NAICS
- Testing Laboratories and Services (541380)
- SIC
- Services-Testing Laboratories (8734)
- akta.pro primary industry
- Vulnerability Management & Penetration Testing Services (BPAEADAD)
Keywords
Where PentestIQ is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
PentestIQ business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations
Revenue model
- Subscription-based Penetration Testing Services: PentestIQ generates revenue primarily through subscription-based pentesting services with monthly or annual billing cycles. Customers pay recurring fees for security audits, with billing in advance on a recurring periodic basis. The service includes free retesting and remediation assistance as part of the subscription.
- Compliance Testing Services: Revenue generated from penetration testing services specifically designed to help customers achieve compliance certifications including SOC 2, ISO 27001, PCI, and HIPAA. These are delivered as part of the subscription service.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | Enterprise Penetration Testing Subscription |
| Subscription | Annual | Annual Enterprise Subscription |
| Freemium | Monthly | Free Trial |
Go-to-market motion2 records
Distribution channels2 records
Marketing channels5 records
PentestIQ product offering
Product offeringCore offering
PentestIQ delivers subscription-based penetration testing services through the pentestIQ platform, combining U.S.-based application security engineers with AI-assisted vulnerability discovery. The service covers web applications, mobile apps, APIs, networks, cloud infrastructure, and phishing simulations, with Smart Reports that surface findings in real time, customizable Playbooks that define each audit's scope, and Data Driven Security analytics that connect insights across successive pentest cycles. The company positions this offering to meet compliance requirements for SOC 2, PCI, HIPAA, HITRUST, and ISO 27001 certifications, with free retesting and remediation assistance included.
Product overview
PentestIQ is a unified penetration testing platform that combines AI-assisted security audits with U.S.-based security engineers. The core offering consists of the pentestIQ Platform, Smart Reports, Playbooks, and Data Driven Security features that work together to deliver comprehensive security assessments. The platform supports multiple testing types including Web Application, Mobile Application, API, Network, Cloud, and Phishing Simulation services. All services are augmented by AI and data science to improve vulnerability detection over time. The company also offers a Managed Security Program for companies needing ongoing security program support, and Compliance Penetration Testing specifically designed to meet SOC 2, ISO 27001, PCI, and HIPAA requirements.
Differentiator
Problem solved
Functional benefit
Products and services
- Web Application Penetration Testing Manual penetration testing service for web applications that evaluates security issues and delivers actionable remediation guidance to engineering and security teams.
- Mobile Application Penetration Testing Manual penetration testing service for iOS and Android mobile applications that identifies security vulnerabilities and provides actionable remediation guidance.
- API Penetration Testing Manual penetration testing service for API services that evaluates security issues and provides actionable guidance for remediation.
- Network Penetration Testing Manual penetration testing service for network and cloud services that evaluates security issues and provides actionable remediation guidance.
- Cloud Penetration Testing Manual penetration testing service for cloud-based network and infrastructure services, including supply chain layer coverage, that evaluates security issues and provides actionable remediation guidance.
- Phishing Simulation Social engineering attack simulation service that gauges organizational susceptibility to phishing campaigns and provides insights into human vulnerabilities.
- Compliance Penetration Testing Manual pentesting services executed by U.S.-based security engineers to satisfy compliance frameworks including SOC 2, ISO 27001, PCI, and HIPAA, with audit-trail reporting.
- Managed Security Program Managed security program service providing security policies, procedures, questionnaire handling, awareness training, and due diligence support for companies establishing or expanding security efforts.
Quantifiable outcome
- Meet compliance requirements for SOC 2 Type II, PCI DSS, HIPAA, and ISO 27001 certifications
- +3 more outcomes
Companies that use PentestIQ
Customer profileNamed customers15 records
Segments3 records
Ideal customer profiles3 records
PentestIQ technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration2 records
AI capability4 records
Feature5 records
PentestIQ partnerships and signals
Strategic signalPartnerships
Ten partnerships are on record, tiered core and minor.
- MicrosoftcoreMicrosoft partnership through which PentestIQ's penetration testing services are distributed alongside Microsoft's security and cloud solutions. Enables partners to deliver comprehensive security packages to customers.
- VantacoreVanta partnership for continuous security compliance monitoring. Integration enables customers to combine pentesting with automated compliance tracking.
- UnitcoreUnit is both a customer and partner, collaborating with PentestIQ on security testing for banking-as-a-service platforms.
- SyncteracoreSynctera partnership for security testing in the fintech and banking infrastructure space, helping partners achieve compliance requirements.
- Amazon Web Services (AWS)coreAWS partnership providing cloud security penetration testing services. AWS marketplace presence extends distribution reach to AWS customers.
- DratacoreDrata partnership for security and compliance automation, enabling integrated compliance and pentesting workflows for joint customers.
- HoundDog AIminorHoundDog AI partnership for AI-powered security solutions, complementing PentestIQ's AI-assisted penetration testing capabilities.
- Treasury PrimeminorTreasury Prime partnership for security testing in the banking and fintech space, supporting compliance and security needs.
- Google CloudcoreGoogle Cloud partnership for cloud security penetration testing services. Enables delivery of security testing for Google Cloud infrastructure.
- BolsterminorBolster partnership for automated threat monitoring and phishing protection, complementing PentestIQ's penetration testing services.
Scale indicators3 records
Recent moves5 records
Expansion highlights5 records
PentestIQ competitors and assessment
Company assessmentDirect peers
- NetSPI: Enterprise pentesting and vulnerability management provider with a platform (Resolve) and deep human-expert pool, competing for the same mid-market and enterprise compliance pentest deals PentestIQ targets.
- Bishop Fox: Boutique offensive-security firm offering web, mobile, network, and cloud penetration testing plus adversarial simulation — the closest traditional-services competitor to PentestIQ's manual pentesting menu.
- HackerOne: Bug-bounty and pentest-as-a-service marketplace backed by a global researcher community — overlaps with PentestIQ on pentest delivery and on the customer segment buying continuous offensive security.
- Cobalt: Pentest-as-a-Service platform that connects customers to vetted penetration testers via a SaaS workflow, with on-demand scoping, real-time collaboration, and integration with dev tools — directly overlapping PentestIQ's subscription pentest positioning.
- Bugcrowd: Crowdsourced security platform offering bug bounties, pen testing as a service, and attack surface management — competes for the same SaaS and enterprise customers seeking continuous offensive testing.
Broad incumbents
- Secureworks: Large MSSP with managed vulnerability assessment, red team, and compliance testing services — broader portfolio incumbent competing for enterprise pentest and SOC 2/PCI engagements.
- NCC Group: Global cybersecurity services firm with large-scale penetration testing, red teaming, and compliance assurance practices — competes for enterprise and regulated-industry pentest engagements.
- Rapid7: Public cybersecurity vendor offering vulnerability management, managed detection, and penetration testing services — broader portfolio player overlapping PentestIQ in penetration testing and compliance.
Emerging players
- Plextrac: Pentest reporting and workflow platform used by offensive-security teams and MSSPs — overlaps on the reporting, collaboration, and remediation workflow that PentestIQ delivers via its Smart Reports and Platform.
- Horizon3.ai: AI-driven autonomous penetration testing platform (NodeZero) that automates exploitation and reporting — competes with PentestIQ's AI-augmented positioning by attempting to reduce reliance on human testers.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights6 records
Customer concentration
PentestIQ social profiles
Digital presencePentestIQ compliance and trust
Trust signalCompliance5 records
PentestIQ financial estimates
Financial estimateRevenue estimate
Valuation estimate
PentestIQ leadership team
Management profileNumber of profiles
PentestIQ funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
PentestIQ M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about PentestIQ
What does PentestIQ do?
PentestIQ delivers subscription-based penetration testing services through the pentestIQ platform, combining U.S.-based application security engineers with AI-assisted vulnerability discovery. The service covers web applications, mobile apps, APIs, networks, cloud infrastructure, and phishing simulations, with Smart Reports that surface findings in real time, customizable Playbooks that define each audit's scope, and Data Driven Security analytics that connect insights across successive pentest cycles. The company positions this offering to meet compliance requirements for SOC 2, PCI, HIPAA, HITRUST, and ISO 27001 certifications, with free retesting and remediation assistance included.
Is PentestIQ a public or private company?
PentestIQ is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was PentestIQ founded?
PentestIQ was founded in -1. It employs 1 to 10 people.
Where is PentestIQ based?
PentestIQ is headquartered in San Francisco, United States, in the North America region.
How does PentestIQ make money?
Two revenue lines are on record. Subscription-based Penetration Testing Services are the primary driver. The others are compliance Testing Services.
Who are PentestIQ's main competitors?
Direct peers on record are NetSPI, Bishop Fox, HackerOne, Cobalt and Bugcrowd. Broad incumbents are Secureworks, NCC Group and Rapid7. Emerging players are Plextrac and Horizon3.ai.
Does PentestIQ have an API?
No public API is recorded for PentestIQ.
What industry is PentestIQ in?
PentestIQ's product category is Penetration Testing Services. Its primary akta.pro industry code is BPAEADAD, Vulnerability Management & Penetration Testing Services. Its NAICS code is 541380 and its SIC code is 8734.