Oppida
Oppida is a New York City-based IT security services firm delivering penetration testing, source code review, compliance audits, and red team engagements to 2000+ enterprise clients across banking, defense, finance, and online gambling verticals over 18+ years.
- Company typePrivate
- Founded2017
- HeadquartersNew York, United States
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Oppida does
Oppida is a private New York City-headquartered IT security services firm that has been operating for 18+ years, delivering penetration testing, source code review, compliance audits, and red team engagements to 2000+ enterprise clients. Its customer base is concentrated in regulated, trust-sensitive verticals — banking and financial services (Visa, BNP Paribas, Société Générale, Crédit Agricole), defense and aerospace (Airbus, Thales, EADS, DCNS), and online gambling (PokerStars, bwin, Betstars) — where security vendors are selected on demonstrated track record rather than price. Engagements span web, network, infrastructure, database, and mobile penetration testing; multi-language source code review (C, C++, Java, Python, PHP, Ruby, C#, Go, JavaScript, Elixir); compliance gap analysis against SOC 1 & 2, Common Criteria, PCI-DSS, OWASP, and SEI CERT; and full-scope attack simulation combining computer hacking, phishing, social engineering, rogue device implantation, physical intrusion, and CCTV replay.
The underlying technology is a practitioner-led methodology executed through industry-standard tools rather than proprietary platforms. Source code analysis relies on HP Fortify, Coverity, and Klocwork; penetration testing uses nmap, Nessus, Metasploit, Arachni, Acunetix, and sqlmap across black-box, gray-box, and white-box methodologies. The delivery model follows a structured Plan–Audit–Report process that includes remediation assistance and re-testing to verify fixes. There is no disclosed AI/ML capability, no proprietary automation platform, and no SDK or API surface; the company's competitive position is built on human expertise, methodology discipline, and 18 years of accumulated client trust.
Oppida monetizes exclusively through professional services: project-based engagements and multi-year retainers sold via direct enterprise field sales. Pricing is quote-based, calibrated to scope, complexity, and engagement duration, with no public rate card. The company operates from a single disclosed office at 60 Broad Street in Manhattan with no subsidiaries, no disclosed parent company, no funding history, and no public ownership information, indicating a closely-held private operating entity whose scale and headcount are not transparent in available data.
Oppida firmographics
Firmographics- Name
- Oppida
- Website
- https://oppida.us
- Company type
- Private
- Founded year
- 2017
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Oppida is a New York City-based IT security services firm delivering penetration testing, source code review, compliance audits, and red team engagements to 2000+ enterprise clients across banking, defense, finance, and online gambling verticals over 18+ years.
- Ownership category
- akta.pro rank
Oppida industry classification
Industry- Product category
- Cybersecurity Consulting Services
- NAICS
- Computer Systems Design and Related Services (54151), Other Scientific and Technical Consulting Services (54169)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)
Keywords
Where Oppida is headquartered
LocationHeadquarters
- HQ city
- New York
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Oppida business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Technology or R&D, Marketing or Sales
Revenue model
- Professional Security Services: Project-based professional services including penetration testing, source code reviews, compliance audits, and red team engagements. Services are delivered through structured audit processes (Plan, Audit, Report) and billed on a per-engagement or retainer basis for enterprise clients.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Custom enterprise engagement |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels1 record
Oppida product offering
Product offeringCore offering
Oppida is an IT security services firm that delivers technical security testing, source code reviews, compliance audits, and full-scope red team attack simulations to enterprise clients. Services are delivered through a structured Plan-Audit-Report methodology covering networks, web applications, databases, mobile devices, operating systems, hypervisors, and firmware across multiple programming languages and frameworks. The company provides end-to-end security assessment services including remediation assistance and re-testing to verify fixes.
Product overview
Oppida is an IT security services company providing a unified suite of testing and audit services. The portfolio consists of four core service offerings: Source Code Reviews (analyzing applications, operating systems, hypervisors, and firmware for vulnerabilities), Penetration Testing (assessing networks, web applications, databases, and mobile devices), Compliance Audits (evaluating against SOC 1 & 2, Common Criteria, PCI-DSS, and secure coding standards), and Red Team Services (full-scope attack simulation combining technical attacks, physical intrusion, and social engineering). Supporting services include Social Engineering and Technical Testing, all delivered through a structured Plan-Audit-Report process over 18+ years of operation.
Differentiator
Problem solved
Functional benefit
Quantifiable outcome
- 2000+ clients served across banking, insurance, finance, IT, defense, and online gambling industries
Companies that use Oppida
Customer profileNamed customers12 records
Segments4 records
Ideal customer profiles4 records
Oppida technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature4 records
Oppida partnerships and signals
Strategic signalScale indicators2 records
Recent moves4 records
Expansion highlights3 records
Oppida competitors and assessment
Company assessmentBroad incumbents
- Optiv: US cybersecurity solutions integrator and services provider with a large enterprise footprint in advisory, pen testing, and managed security — an incumbent alternative for the same enterprise buyers Oppida targets.
- Mandiant (Google Cloud): Google-owned incident response and security consulting firm offering red team, pen testing, and threat intelligence at global scale — competes with Oppida on enterprise security assessments within the same customer base.
- Trustwave: Large global cybersecurity vendor offering managed security, penetration testing, and compliance services as part of a broader MSSP portfolio — competes with Oppida on enterprise testing but with much wider service breadth.
Direct peers
- NetSPI: US-based penetration testing and offensive-security firm serving large enterprises with platform-augmented testing services — a direct boutique competitor with similar service lines and customer profile.
- Bishop Fox: US-based boutique offensive-security firm specializing in penetration testing, red team operations, and security assessments for Fortune 500 enterprise clients, with a comparable boutique scale and service portfolio.
- Trail of Bits: US cybersecurity research and consulting firm focused on software security, code review, and applied research — directly comparable to Oppida's source code review and secure-coding compliance work.
- NCC Group: UK-listed cybersecurity consultancy offering penetration testing, source code review, red teaming, and compliance audit services to global enterprise clients — the closest large-scale direct comparable to Oppida's service mix.
- Kudelski Security: Switzerland-based cybersecurity services arm of the Kudelski Group providing pen testing, red team, and managed security services to European enterprise and government clients — comparable on regulated-vertical focus and EMEA exposure.
- IOActive: Global security consultancy offering penetration testing, code review, and hardware/firmware security assessments across enterprise and embedded-systems clients, mirroring Oppida's multi-domain offensive security scope.
Emerging players
- Positive Technologies: International cybersecurity firm combining offensive-security services with proprietary scanning and testing products — an emerging player whose blend of services and tooling could pressure pure-services firms like Oppida.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat3 records
Key risks6 records
Key highlights6 records
Customer concentration
Oppida social profiles
Digital presenceOppida compliance and trust
Trust signalCompliance3 records
Oppida financial estimates
Financial estimateRevenue estimate
Valuation estimate
Oppida leadership team
Management profileNumber of profiles
Oppida funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Oppida M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Oppida
What does Oppida do?
Oppida is an IT security services firm that delivers technical security testing, source code reviews, compliance audits, and full-scope red team attack simulations to enterprise clients. Services are delivered through a structured Plan-Audit-Report methodology covering networks, web applications, databases, mobile devices, operating systems, hypervisors, and firmware across multiple programming languages and frameworks. The company provides end-to-end security assessment services including remediation assistance and re-testing to verify fixes.
Is Oppida a public or private company?
Oppida is a private company. It is classified as unknown and is currently operating.
When was Oppida founded?
Oppida was founded in 2017. It employs 11 to 50 people.
Where is Oppida based?
Oppida is headquartered in New York, United States, in the North America region.
How does Oppida make money?
One revenue line is on record: professional Security Services.
Who are Oppida's main competitors?
Broad incumbents on record are Optiv, Mandiant (Google Cloud) and Trustwave. Direct peers are NetSPI, Bishop Fox, Trail of Bits, NCC Group, Kudelski Security and IOActive. Positive Technologies is listed as an emerging player.
Does Oppida have an API?
No public API is recorded for Oppida.
What industry is Oppida in?
Oppida's product category is Cybersecurity Consulting Services. Its primary akta.pro industry code is BPAKAHAA, Managed Security Services (MSSP) & 24/7 SOC Operations. Its NAICS code is 54151 and its SIC code is 7370.