cybersecuritycompanies.

focus

Application security

Application security is a focus on this index.

Specializations
FAQ
What is a application security cybersecurity company?

A firm whose primary offering sits in application security. This index lists companies, not SKUs — products live on the company profile.

Is the order paid?

No. Companies are alphabetical by default. You can sort by team size or date added. Promoted shelves are labeled and separate.

How do I get listed in Application security?

Submit a company. We review before anything is public. Paid plans buy a labeled shelf, not a silent bump in this list.

Why is this a focus rather than a tool category?

Buyers shortlist firms. Tools change names; the company is the contract.

Companies 148

TrustInSoft

FR · Product vendor

Static code analysis and formal verification for C, C++ and Rust software.

Application security

Net Runners Cybersecurity

MN · Consultancy / pentest

Application security testing, secure development and code review.

Application security

Appknox

SG · Product vendor

Mobile application vulnerability testing and binary security analysis.

Application security

Appdome

US · Product vendor

Mobile application hardening, fraud prevention and runtime protection.

Application security

Promon

NO · Product vendor

Application shielding, runtime threat detection and app protection.

Application security

Guardsquare

BE · Product vendor

Mobile application hardening and security testing for Android and iOS.

Application security

Data Theorem

US · Product vendor

Application and API security testing with software supply chain analysis.

Application security

NowSecure

US · Product vendor

Mobile application security testing and privacy risk analysis.

Application security

Ostorlab

US · Product vendor

Automated mobile and web application security testing.

Application security

Escape

FR · Product vendor

Application discovery, API security testing and automated vulnerability validation.

Application security

42Crunch

IE · Product vendor

API contract auditing, security testing and runtime protection.

Application security

Pynt

IL · Product vendor

API discovery and dynamic application security testing.

Application security

Impart Security

US · Product vendor

Application and API runtime protection with inline threat enforcement.

Application security

Salt Security

US · Product vendor

API discovery, security posture assessment and attack protection.

Application security

Cequence Security

US · Product vendor

API protection, bot defence and application abuse prevention.

Application security

Traceable

US · Product vendor

API discovery, application threat protection and security analytics.

Application security

Endor Labs

US · Product vendor

Application code scanning and software dependency risk management.

Application security

Socket

US · Product vendor

Software supply chain security and malicious dependency detection.

Application security

Mend.io

US · Product vendor

Application security testing and software dependency management.

Application security

OX Security

US · Product vendor

Application security posture management from source code to runtime.

Application security

Apiiro

US · Product vendor

Application risk discovery, code governance and security prioritisation.

Application security

Protectt.ai

IN · Product vendor

Mobile application runtime protection and application security testing.

Application security

Beagle Security

US · Product vendor

Automated web application penetration testing and vulnerability assessment.

Application security · Offensive security

StackHawk

US · Product vendor

Dynamic application and API security testing for development teams.

Application security

Bright Security

US · Product vendor

Dynamic application testing, vulnerability validation and remediation support.

Application security

Pixee

US · Product vendor

Application vulnerability triage and automated code remediation.

Application security

Codacy

PT · Product vendor

Code security analysis, quality checks and development policy enforcement.

Application security

Boost Security

CA · Product vendor

Application security, software supply chain protection and developer security tools.

Application security

Arnica

US · Product vendor

Application security testing and automated developer remediation workflows.

Application security

Kiuwan

US · Product vendor

Static application security testing and software composition analysis.

Application security

AppCheck

GB · Product vendor

Automated web application, API and infrastructure vulnerability testing.

Application security

Slash Digital Lab

Bogotá, CO · Consultancy / pentest

Web and API penetration testing with manual validation and clear evidence.

Application security · Threat & vulnerability

Positive Technologies

Moscow, RU · Product vendor

Security products for vulnerability management, monitoring and attack prevention.

Threat & vulnerability · Security operations

NSFOCUS

Beijing, CN · Product vendor

DDoS defense, application protection and threat intelligence products.

Network security · Application security
Identity reviewed

DBAPP Security

Hangzhou, CN · Product vendor

Data, application and security operations products from Hangzhou.

Data protection · Application security

AmnBAN

Tehran, IR · Consultancy / pentest

Penetration testing, red teaming and security assessment services in Tehran.

Threat & vulnerability · Application security

Nitro Team

KZ · Consultancy / pentest

Penetration testing, incident response and security architecture services.

Threat & vulnerability · Application security
Identity reviewed

Cyber Security Group

Tbilisi, GE · Consultancy / pentest

Web application protection and penetration testing from Tbilisi.

Application security · Threat & vulnerability
Identity reviewed

VulnXperts Consultancy W.L.L

Muharraq, BH · Consultancy / pentest

Penetration testing and security assessments for web applications, mobile applications and APIs.

Threat & vulnerability · Application security
Identity reviewed

REDTEAM.PL

Warszawa, PL · Consultancy / pentest

Penetration testing, red teaming, threat hunting and incident response services.

Threat & vulnerability · Application security
Identity reviewed

CyberSafeHaven Consulting

Bengaluru, IN · Consultancy / pentest

Application and cloud security consulting, cyber risk management and AI governance support.

Application security · Cloud security
Identity reviewed

Breach Craft

Havertown, US · Consultancy / pentest

Penetration testing, vulnerability assessments, social engineering tests and virtual CISO consulting.

Threat & vulnerability · Application security
Identity reviewed

Framework Security

Austin, US · Consultancy / pentest

Cyber risk assessments, compliance readiness, penetration testing and application security consulting.

GRC · Threat & vulnerability
Identity reviewed

Virtue Security

New York, US · Consultancy / pentest

Application, network and cloud penetration testing services.

Application security · Network security
Identity reviewed

Zigrin Security

Poznań, PL · Consultancy / pentest

Web and mobile application penetration testing, network testing and vulnerability assessment.

Application security · Threat & vulnerability
Identity reviewed

North IT

Middlesbrough, GB · Consultancy / pentest

Web, mobile and API penetration testing, secure code audits and network security testing.

Application security · Threat & vulnerability
Identity reviewed

phew

Auckland, NZ · Consultancy / pentest

Penetration testing for web applications, mobile applications, APIs and networks.

Application security · Threat & vulnerability
Identity reviewed

Z-Labs

Sopot, PL · Consultancy / pentest

Adversary simulation, penetration testing and software security services.

Threat & vulnerability · Application security
Identity reviewed

Secario Labs

Sofia, BG · Consultancy / pentest

Application security and penetration testing through offensive security engagements.

Application security · Threat & vulnerability
Identity reviewed

Pilotcore

Ottawa, CA · Consultancy / pentest

DevSecOps implementation, cloud security and compliance readiness for regulated teams.

Cloud security · Application security
Identity reviewed

Lambda Bit

Plovdiv, BG · Consultancy / pentest

Application security, vulnerability assessments and penetration testing.

Application security · Threat & vulnerability
Identity reviewed

Watabe Digital

Dar es Salaam, TZ · Consultancy / pentest

Cybersecurity services and audits alongside secure software and digital systems development.

Application security · GRC
Identity reviewed

CodeNex

Chișinău, MD · Consultancy / pentest

Cybersecurity consulting, DevOps and cloud infrastructure engineering.

Cloud security · Application security
Identity reviewed

DSecure.me

Wrocław, PL · Consultancy / pentest

Penetration testing, threat modelling and security testing for web, mobile, API and AI applications.

Application security · Threat & vulnerability
Identity reviewed

Up Secure

Gdańsk, PL · Consultancy / pentest

Cybersecurity consulting, privacy engineering, application security and compliance readiness.

GRC · Data protection
Identity reviewed

Enciphers

Noida, IN · Consultancy / pentest

Penetration testing, red team assessments, security automation and cloud security reviews.

Application security · Cloud security
Identity reviewed

CoreSentinel

Sydney, AU · Consultancy / pentest

Penetration testing for applications, networks, wireless systems and large language models.

Application security · Threat & vulnerability

DarkPoint Security

Toronto, CA · Consultancy / pentest

Penetration testing and red teaming across networks, applications and cloud infrastructure.

Application security · Cloud security
Identity reviewed

Cynance

London, GB · Consultancy / pentest

Application security reviews, penetration testing and secure development consulting.

Application security · Threat & vulnerability
Identity reviewed

Sencode

Middlesbrough, GB · Consultancy / pentest

Penetration testing for web and mobile applications, networks, APIs and cloud environments.

Application security · Cloud security
Identity reviewed

Ideal Solutions

Islamabad, PK · Consultancy / pentest

Penetration testing and vulnerability assessments for websites, applications and IT infrastructure.

Application security · Threat & vulnerability
Identity reviewed

Cyber Security Advisor

Kyiv, UA · Consultancy / pentest

Penetration testing, red teaming, smart contract audits and secure development consulting.

Application security · Threat & vulnerability
Identity reviewed

SECUREU

Bengaluru, IN · Consultancy / pentest

Vulnerability assessments, penetration testing, DevSecOps consulting and data loss prevention services.

Application security · Threat & vulnerability
Identity reviewed

Curios

Antwerpen, BE · Consultancy / pentest

Security assessments, cloud security reviews, managed DevSecOps and virtual CISO consulting.

Cloud security · Application security
Identity reviewed

DevBrows

Bodeli, IN · Consultancy / pentest

Security assessments, enterprise buyer security reviews and AI security readiness consulting for SaaS startups.

Application security · GRC
Identity reviewed

Aurian Security

Sydney, AU · Consultancy / pentest

Network and application penetration testing, security assurance and managed security services.

Application security · Threat & vulnerability
Identity reviewed

Zerosource

Surry Hills, AU · Consultancy / pentest

Whitebox penetration testing, code and architecture reviews, DevSecOps and cloud security consulting.

Application security · Cloud security
Identity reviewed

Securinc

Singapore, SG · Consultancy / pentest

Application and network penetration testing, cloud security assessments and cybersecurity consulting.

Application security · Cloud security
Identity reviewed

PRSecurity Services

Surat, IN · MSSP / managed

Penetration testing and managed SOC, endpoint detection and firewall services.

Security operations · Threat & vulnerability

NullStrike Security

Kharsan, IN · Consultancy / pentest

Penetration testing for cloud infrastructure, web applications, APIs and AI systems.

Application security · Cloud security
Identity reviewed

Cyber Security Pentesting

Mississauga, CA · Consultancy / pentest

Penetration testing, application and cloud security reviews and social engineering assessments.

Application security · Cloud security
Identity reviewed

Intelsentrix

Kaunas, LT · Consultancy / pentest

Application and network penetration testing, source code reviews and recurring security assessments.

Application security · Threat & vulnerability
Identity reviewed

Verentix

Pimpri-Chinchwad, IN · Consultancy / pentest

Penetration testing for applications, APIs, cloud infrastructure, ATMs and industrial systems.

Application security · Cloud security

Wise Cloud

Valbonne, FR · Consultancy / pentest

Application, infrastructure and cloud penetration testing and security remediation consulting.

Application security · Cloud security
Identity reviewed

Peakhour

Chatswood, AU · Product vendor

Web application and API protection, bot management and traffic filtering tools.

Application security · Network security
Identity reviewed

D3C Consulting

Milton, CA · Consultancy / pentest

Identity and access management assessments, implementation and application security consulting.

Identity · Application security
Identity reviewed

Data Next Step

Montréal, CA · Consultancy / pentest

Application security consulting, cybersecurity strategy, compliance support and AI security services.

Application security · GRC
Identity reviewed

Ghost Protocol

Sri Jayawardenepura Kotte, LK · Consultancy / pentest

Penetration testing, security audits and infrastructure hardening alongside software engineering.

Application security · Threat & vulnerability
Identity reviewed

ArmadilCo

Plovdiv, BG · Consultancy / pentest

Medical device security architecture, threat modeling, SBOM management and penetration testing.

Cyber-physical · Application security
Identity reviewed

Pentest Factory

Geldern, DE · Consultancy / pentest

Penetration testing, workstation security assessments and phishing simulations.

Application security · Threat & vulnerability
Identity reviewed

RansomLeak

Tallinn, EE · Product vendor

A security awareness training platform with phishing simulations and developer security exercises.

Human risk · Application security
Identity reviewed

Syncode

Sarajevo, BA · Consultancy / pentest

Application and network penetration testing alongside secure software development.

Application security · Threat & vulnerability
Identity reviewed

Modern Security

Burlington, CA · Training

Security engineering education with courses on AI security.

AI security · Application security
Identity reviewed

Redline Cyber Security

Lake Orion, US · Consultancy / pentest

Application and network penetration testing and security control assessments.

Application security · Threat & vulnerability
Identity reviewed

Cyber Pantheon

Huntsville, US · Consultancy / pentest

Penetration testing, cloud security reviews, threat intelligence and incident response.

Application security · Cloud security
Identity reviewed

Adversis

Kalispell, US · Consultancy / pentest

Penetration testing, AI red teaming, product security reviews and compliance consulting.

Application security · AI security
Identity reviewed

ITUNeed

Fairfax, US · Consultancy / pentest

Cloud and web security consulting alongside business IT services.

Cloud security · Application security
Identity reviewed

Trace

Brooklyn, US · Product vendor

A penetration testing platform combining automated testing, human review and remediation reports.

Application security · Threat & vulnerability
Identity reviewed

Cyphere

Altrincham, GB · Consultancy / pentest

Network, application, cloud and wireless penetration testing services.

Application security · Cloud security
Identity reviewed

Exosys Cybersecurity

Ayent, CH · Consultancy / pentest

Network security consulting, penetration testing, secure infrastructure design and software audits.

Network security · Application security

Remote Dev Force

Las Vegas, US · Consultancy / pentest

Penetration testing alongside software development and engineering services.

Application security · Threat & vulnerability
Identity reviewed

ExodusSec

Miami, US · Consultancy / pentest

Penetration testing, red team exercises and social engineering assessments.

Application security · Cloud security
Identity reviewed

TrustFoundry

Overland Park, US · Consultancy / pentest

Application, network, mobile and cloud penetration testing.

Application security · Cloud security
Identity reviewed

Asteros

Atlanta, US · Consultancy / pentest

Penetration testing with remediation reports for application security and compliance assessments.

Application security · Threat & vulnerability
Identity reviewed

Forces Unseen

Des Plaines, US · Consultancy / pentest

Application, infrastructure and emerging technology security assessments.

Application security · Network security
Identity reviewed

Affordable Pentesting

Bozeman, US · Consultancy / pentest

Network, application, cloud and wireless penetration testing services.

Application security · Cloud security
Identity reviewed

Refactor Security

Miami, US · Consultancy / pentest

Penetration testing, secure code and architecture reviews and AI security assessments.

Application security · AI security
Identity reviewed

Kage Okami

Columbia, US · Consultancy / pentest

Penetration testing and adversary emulation for networks and applications.

Application security · Threat & vulnerability
Identity reviewed

APT Security Management

North Charleston, US · Consultancy / pentest

Penetration testing and security assessments for networks, applications and cloud environments.

Threat & vulnerability · Application security
Identity reviewed

HAVEN6

Tampa, US · Consultancy / pentest

Network, cloud, web and mobile penetration testing for security and compliance programs.

Threat & vulnerability · Cloud security
Identity reviewed

Voke Cyber

Rock Hill, US · Consultancy / pentest

Web, API, mobile and cloud security assessments and AI penetration testing.

Application security · Cloud security
Identity reviewed

SiegePal

San Diego, US · Consultancy / pentest

Penetration testing, cloud security reviews and cybersecurity compliance consulting.

AI security · Application security
Identity reviewed

Cerber Tech

New York, US · Product vendor

The WP Cerber WordPress security plugin with malware scanning, anti-spam and activity monitoring.

Application security · Threat & vulnerability
Identity reviewed

Hackveil Security

Bengaluru, IN · Consultancy / pentest

Web and mobile application penetration testing.

Application security · Threat & vulnerability
Identity reviewed

R Protocols

Chennai, IN · Consultancy / pentest

Penetration testing, security assessments and external risk monitoring for product teams.

Application security · Threat & vulnerability
Identity reviewed

SecureBlock

Maglenča, HR · Consultancy / pentest

Penetration testing and social engineering assessments with collaborative remediation workflows.

Application security · Threat & vulnerability
Identity reviewed

Rule4

Boulder, US · Consultancy / pentest

Cybersecurity strategy, application and cloud security consulting and incident response.

Application security · Cloud security
Identity reviewed

Shriji Solutions

Surendranagar, IN · Consultancy / pentest

Web security consulting alongside website and software development.

Application security
Identity reviewed

BlackTrace Software & Cyber Defense

Cranston, US · Consultancy / pentest

Cybersecurity consulting, security audits and risk assessments alongside software engineering.

Application security · GRC

TeraSense, Inc.

Baltimore, US · Consultancy / pentest

Cybersecurity consulting, DevSecOps, and cloud infrastructure engineering.

Application security · Cloud security
Identity reviewed

Binary Security AS

Oslo, NO · Consultancy / pentest

Penetration testing, secure code review, and cloud security assessment.

Application security · Cloud security
Identity reviewed

Elaborit

Lewes, US · Consultancy / pentest

Penetration testing, compliance consulting, and DevSecOps support.

Threat & vulnerability · GRC
Identity reviewed

Zelvin Security

Knoxville, US · Consultancy / pentest

Network, cloud, and application penetration testing.

Threat & vulnerability · Cloud security
Identity reviewed

Nethemba

Bratislava, SK · Consultancy / pentest

Penetration testing and security audits.

Application security · Threat & vulnerability
Identity reviewed

Pradeo

Montpellier, FR · Product vendor

Mobile threat defense and application security.

Endpoint security · Application security
Identity reviewedVerified plan

Aikido Security

Ghent, BE · Product vendor

Developer-focused application and cloud security scanning.

Application security · Cloud security
Identity reviewed

Intigriti

Antwerp, BE · Product vendor

Bug bounty programs and crowdsourced security testing.

Application security · Threat & vulnerability
Identity reviewedVerified plan

Detectify

Stockholm, SE · Product vendor

Attack surface monitoring and web application security testing.

Attack surface · Application security
Identity reviewed

Jscrambler

Porto, PT · Product vendor

Client-side JavaScript protection and payment page monitoring.

Application security
Identity reviewedVerified plan

Char49

Lisbon, PT · Consultancy / pentest

Security research and penetration testing.

Application security · Threat & vulnerability
Identity reviewed

Pentest-Tools.com

Bucharest, RO · Product vendor

Online penetration testing and vulnerability scanning tools.

Threat & vulnerability · Application security
Identity reviewedVerified plan

Feroot Security

Toronto, CA · Product vendor

Client-side web security and payment page monitoring.

Application security
Identity reviewed

Kratikal

Noida, IN · Consultancy / pentest

Penetration testing and security compliance services.

Application security · Threat & vulnerability
Identity reviewedVerified plan

CyStack

Hanoi, VN · Product vendor

Security testing and vulnerability management.

Application security · Threat & vulnerability
Identity reviewedVerified plan

GMO Cybersecurity by Ierae

Tokyo, JP · Consultancy / pentest

Penetration testing and vulnerability assessment.

Application security · Threat & vulnerability
Identity reviewedVerified plan

Penta Security

Seoul, KR · Product vendor

Web application protection and database encryption.

Application security · Data protection
Identity reviewedVerified plan

Hacken

Tallinn, EE · Consultancy / pentest

Blockchain security audits and testing.

Application security

RedShield

Wellington, NZ · MSSP / managed

Managed web application protection.

Application security
Identity reviewed

SafeStack

Auckland, NZ · Training

Secure development training for software teams.

Human risk · Application security
Identity reviewedVerified plan

Kasada

Sydney, AU · Product vendor

Bot mitigation for websites and APIs.

Application security
Identity reviewedVerified plan

Zerocopter

Groningen, NL · Product vendor

Coordinated vulnerability disclosure and ethical hacking.

Application security · Threat & vulnerability
Identity reviewedVerified plan

Strike

Miami, US · Product vendor

Continuous penetration testing.

Application security · Threat & vulnerability
Identity reviewed

Conviso

Curitiba, BR · Product vendor

Application security management and secure development services.

Application security
Identity reviewedVerified plan

Fluid Attacks

Medellín, CO · Product vendor

Continuous application security testing.

Application security
Identity reviewed

Secuna

Taguig, PH · Consultancy / pentest

Penetration testing and vulnerability disclosure programs.

Application security · Threat & vulnerability
Identity reviewedVerified plan

cloudsineAI

Singapore, SG · Product vendor

Web application and generative AI security.

Application security · AI security
Identity reviewed

Atlant Security

Sofia, BG · MSSP / managed

Founder-led pentest, vCISO, and compliance consulting.

GRC · Application security
Identity reviewedPromoted

Snyk

Boston, US · Product vendor

Developer-first SCA, SAST, and container security.

Application security · Cloud security
Identity reviewedVerified plan

GitGuardian

Paris, FR · Product vendor

Secrets detection in git, tickets, and production.

Application security · Data protection
Identity reviewedVerified plan

Lakera

Zurich, CH · Product vendor

Guardrails for LLM applications in production.

AI security · Application security
Identity reviewedVerified plan

NCC Group

Manchester, GB · Consultancy / pentest

Global pentest, research, and cyber resilience consultancy.

Application security · Security operations
Identity reviewedVerified plan

Semgrep

Detroit, US · Product vendor

Open-source SAST and a commercial code security platform.

Application security
Identity reviewedVerified plan

Trail of Bits

New York, US · Consultancy / pentest

High-assurance security engineering, audits, and research.

Application security · AI security
Identity reviewedVerified plan

Bishop Fox

Phoenix, US · Consultancy / pentest

Offensive security consultancy and Cosmos continuous pentest.

Application security · Security operations
Identity reviewedVerified plan

Wiz

New York, US · Product vendor

Cloud security graph for code-to-cloud risk.

Cloud security · Application security
Verified plan

Aqua Security

Boston, US · Product vendor

Cloud-native application protection from code to runtime.

Cloud security · Application security
Identity reviewedVerified plan

Offensive Security

New York, US · Training

OSCP, Kali Linux, and hands-on offensive training.

Human risk · Application security
Identity reviewedVerified plan

Cloudflare

San Francisco, US · Product vendor

CDN, WAF, Zero Trust, and bot management on a global edge.

Network security · Application security
Identity reviewedPromoted