What Trustline does

Trustline is a Saudi Arabia-based cybersecurity SaaS company founded in 2021 and headquartered in Riyadh's Front Business District. It operates a crowdsourced security testing platform that connects enterprise customers with a globally distributed community of vetted ethical hackers. The platform is delivered as four products: Trustline Assessment (penetration testing), Trustline Review (code review combining automated scanning with human analysis), Trustline VDP (vulnerability disclosure program management), and Trustline Bounty (bug bounty programs). The company emphasizes a curated hacker base screened to the "top 1%" and embeds compliance reporting against Saudi regulatory frameworks (NCA, SAMA, CITC) as well as international standards such as PCI-DSS and HIPAA, with native integrations into Jira and Slack to fit enterprise developer and security workflows.

The business model is enterprise-oriented, with quote-based pricing on assessment, review, and bounty engagements rather than self-serve subscription tiers. Customers are primarily regulated Saudi enterprises, with the broader ethical-hacker supply sourced globally. The company is currently repositioning under the Nua brand at nuasecurity.com, signaling an intended expansion from crowdsourced testing into a broader cybersecurity platform. No funding rounds, headcount, customer logos, or revenue figures have been disclosed in the available data, which limits visibility into commercial scale and runway.

Name

Trustline

Legal name

Trustline Company

Website

https://trustline.sa

Company type

Private

Founded year

2021

Operating status

Operating

Short description

Trustline is a Saudi Arabia-based cybersecurity SaaS platform that connects enterprises with a vetted global community of ethical hackers to run penetration tests, code reviews, vulnerability disclosure programs, and bug bounty engagements.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371)

akta.pro primary industry

Marketplace & Platform Trust & Safety (Buyer/Seller Abuse) (HDADALAI)

Keywords

• Crowdsourced security testing
• Penetration testing services
• Bug bounty platform
• Code review services
• Vulnerability disclosure program

Headquarters

HQ city

Riyadh

HQ country

Saudi Arabia

HQ region

Middle East

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Subscription-based SaaS Platform Access: Organizations subscribe to the Trustline platform to access crowdsourced security testing services, including vulnerability disclosure programs and bug bounty management.
2. Penetration Testing Services: On-demand penetration testing conducted by vetted security experts with pricing based on scope, duration, and testing type.
3. Code Review as a Service: Continuous code review services using both automated tools and expert manual analysis, billed based on codebase scope and frequency.
4. Bounty/Reward Management: Platform facilitates bounty payments to ethical hackers for valid vulnerability findings, with flexible account balance management for customers.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels8 records

Core offering

Trustline operates a crowdsourced cybersecurity SaaS platform that connects organizations with a vetted global community of ethical hackers to continuously detect, manage, and remediate software vulnerabilities across web applications, mobile applications, APIs, and external network infrastructure. The company sells access to its platform through subscription tiers and offers managed penetration testing, code review, vulnerability disclosure, and bug bounty programs supported by professional triage services.

Product overview

Trustline is a cybersecurity platform-as-a-service provider that offers a unified platform for discovering and managing security vulnerabilities through crowdsourced ethical hackers. The product portfolio consists of four core offerings: Trustline Assessment (continuous penetration testing), Trustline Review (secure code review as a service), Trustline VDP (vulnerability disclosure program), and Trustline Bounty (bug bounty program). These products work together to enable organizations to detect, manage, and remediate security vulnerabilities across web applications, mobile applications, APIs, external network infrastructure, and source code.

Differentiator

Problem solved

Functional benefit

Products and services

• Trustline Assessment Continuous penetration testing platform that enables organizations to achieve regulatory compliance across web and mobile applications, APIs, and external network infrastructure through a crowdsourced community of ethical hackers. Designed for organizations requiring ongoing security validation of digital assets.
• Trustline Review Secure code review as a service combining automated tools with expert manual analysis to identify and mitigate vulnerabilities in software source code. Supports compliance with NCA, SAMA, CITC, PCI-DSS, and HIPAA standards. Aimed at software development organizations seeking continuous source code security validation.
• Trustline VDP (Vulnerability Disclosure Program) Vulnerability disclosure program that allows organizations to receive vulnerability reports from security researchers through a structured and secure process, enabling responsible disclosure of security findings with triage support.
• Trustline Bounty Bug bounty program that rewards ethical hackers for discovering and reporting valid vulnerabilities, providing organizations with continuous security testing through incentivized researcher participation and bounty payment management.

Quantifiable outcome

• Initial vulnerability report review within 5-10 working days
• +1 more outcomes

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

Feature7 records

Partnerships

One partnership is on record.

• Jira (Atlassian)coreTechnology or IntegrationTrustline has integrated with Jira to enable streamlined task management for partners. This integration empowers partners to be more efficient and productive by connecting vulnerability findings directly into their development workflows, allowing teams to track and manage remediation tasks seamlessly.

Scale indicators4 records

Recent moves5 records

Expansion highlights4 records

Direct peers

• YesWeHack: YesWeHack operates a crowdsourced vulnerability disclosure and bug bounty platform with strong European and emerging-market presence. It competes with Trustline on VDP and Bounty programs and has growing MENA coverage.
• Intigriti: Intigriti is a European-headquartered bug bounty and crowdsourced security platform with an expanding global researcher community. It is a direct competitor, particularly relevant given Trustline's ambitions beyond Saudi Arabia.
• HackerOne: HackerOne is the global leader in crowdsourced bug bounty and vulnerability disclosure platforms, connecting organizations with a community of ethical hackers. It is the most direct competitor to Trustline's Bounty and VDP products and operates at significantly larger scale across geographies including MENA.
• Bugcrowd: Bugcrowd offers a crowdsourced cybersecurity platform combining bug bounty, vulnerability disclosure, and pentesting services backed by a curated researcher community. It competes head-to-head with Trustline Assessment and Trustline Bounty for enterprise security-testing budgets.
• Synack: Synack provides crowdsourced penetration testing with a vetted, elite researcher community and an AI-augmented platform, with strong enterprise and government customer bases. It is a direct comparable to Trustline's continuous security testing model.
• Cobalt: Cobalt runs a pentest-as-a-service marketplace connecting organizations with vetted security testers for on-demand and continuous pentesting. It competes directly with Trustline Assessment on the pentest workflow, triage, and Jira-style integrations.

Emerging players

• Pentera: Pentera offers automated security validation and continuous pentesting using simulated attack techniques. It is an emerging adjacent player competing for the same continuous security testing budget as Trustline Assessment, though with a different technology approach.
• Detectify: Detectify offers automated external attack surface monitoring and crowdsourced vulnerability research (Detectify Crowdsource). It overlaps with Trustline Assessment on continuous web/application testing but leans more on automation than human pentesters.

Broad incumbents

• Snyk: Snyk is a broad developer-security platform spanning code, open-source dependencies, containers, and infrastructure. Its code-review and application-security capabilities overlap with Trustline Review, though Snyk is a much larger incumbent with global reach.
• Veracode: Veracode provides application security testing including static analysis, dynamic analysis, and software composition analysis. It is a broader incumbent that competes with Trustline Review in secure code review for enterprise customers.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Trustline