Penetration testing firms in Canada

BALANCED+ Unclaimed

IT and security firm providing ISO 27001 gap assessments, policy development, control implementation and audit preparation for clients, and does not issue certificates.

Mississauga, Ontario · SOC 2 readiness, ISO 27001, Penetration testing, Compliance advisory, Canadian privacy, Cloud compliance

Frameworks: SOC 2, ISO 27001, PIPEDA, PHIPA

Bishop Fox Unclaimed

Offensive security firm offering application cloud and network penetration testing plus red teaming and attack surface testing.

Tempe, Arizona, United States · Penetration testing, Cloud compliance, AI security

Cobalt Unclaimed

Pentest as a service provider covering application network cloud and API testing plus red teaming and secure code review.

Penetration testing, Cloud compliance, AI security

Frameworks: HIPAA

Compass IT Compliance Unclaimed

Firm selling virtual CISO engagements staffed by veteran security professionals on a full or part-time basis, alongside compliance and testing services.

SOC 2 readiness, Penetration testing, vCISO, Compliance advisory, Cloud compliance

Frameworks: SOC 2, HIPAA, PCI DSS, NIST CSF

GuardsArm Unclaimed

Security firm offering compliance readiness consulting for ISO 27001, SOC 2, HIPAA and PCI DSS alongside vCISO and monitoring services, and does not issue certificates.

Edmonton, Alberta · SOC 2 readiness, ISO 27001, Penetration testing, vCISO, Compliance advisory, Cloud compliance

Frameworks: SOC 2, ISO 27001, HIPAA, PCI DSS

IRM Consulting & Advisory Unclaimed

Consultancy offering ISO 27001 and ISO 42001 gap assessments and readiness work, fractional vCISO services and penetration testing, and does not issue certificates.

Toronto, Ontario · SOC 2 readiness, ISO 27001, ISO 42001, Penetration testing, vCISO, Compliance advisory, Cloud compliance, AI security

Frameworks: SOC 2, ISO 27001, ISO 42001, NIST CSF

Mirai Security Unclaimed

Vancouver consultancy offering a SOC 2 gap assessment against the Trust Services Criteria plus a virtual security office and other GRC work. Not a CPA firm and does not sign SOC 2 opinions.

Vancouver, British Columbia · SOC 2 readiness, ISO 27001, Penetration testing, vCISO, Compliance advisory, Cloud compliance

Frameworks: SOC 2, ISO 27001

NetSPI Unclaimed

Offensive security company providing application network cloud mainframe hardware and AI penetration testing through a delivery platform.

Minneapolis, Minnesota, United States · Penetration testing, Cloud compliance, AI security

Packetlabs Unclaimed

Canadian offensive security firm offering manual infrastructure application cloud and IoT penetration testing plus adversary simulation for mid-market and enterprise clients.

Toronto, Ontario · Penetration testing, Cloud compliance, AI security

Frameworks: SOC 2

Parabellyx Cybersecurity Unclaimed

Ontario firm delivering penetration testing as a service across applications infrastructure AI and operational technology plus compliance advisory work.

Richmond Hill, Ontario · Penetration testing, Compliance advisory, Cloud compliance, AI security

Frameworks: SOC 2, ISO 27001

PlutoSec Unclaimed

Canadian cybersecurity company selling manual penetration testing across web APIs networks cloud mobile and Active Directory plus red team and wireless testing.

Etobicoke, Ontario · Penetration testing, Compliance advisory, Cloud compliance

Frameworks: SOC 2, ISO 27001, HIPAA, PCI DSS, NIST CSF, PHIPA

Rhino Security Labs Unclaimed

Boutique offensive security firm offering web application network mobile cloud and social engineering penetration testing.

Penetration testing, Cloud compliance

Software Secured Unclaimed

Canadian penetration testing firm working mainly with SaaS companies on web API mobile infrastructure cloud and AI testing with compliance ready reporting.

Ottawa, Ontario · Penetration testing, Compliance advisory, Cloud compliance, AI security

Frameworks: SOC 2, ISO 27001, HIPAA, PCI DSS

Stingrai Unclaimed

Toronto penetration testing firm running web mobile network and cloud tests plus red teaming and physical assessments through a testing platform with human validation.

Toronto, Ontario · Penetration testing, Cloud compliance, AI security

Frameworks: SOC 2, ISO 27001, HIPAA, PCI DSS

Vumetric Cybersecurity Unclaimed

Canadian penetration testing provider covering network application hardware and cloud testing with reporting aimed at PCI DSS SOC 2 and ISO 27001 requirements.

Toronto, Ontario · Penetration testing, Compliance advisory, Cloud compliance

Frameworks: SOC 2, ISO 27001, PCI DSS

Workstreet Unclaimed

Security and compliance services firm that prepares clients for the SOC 2 audit through gap analysis, implementation planning and observation period support, and guides them through the external audit rather than signing the opinion.

100+ · SOC 2 readiness, Penetration testing, vCISO, Compliance advisory, Trust center, Cloud compliance, Security questionnaires

Frameworks: SOC 2, ISO 27001