A-LIGN
A-LIGN offers tiered penetration tests across external and internal networks, web apps, cloud, hybrid and OT/ICS, with red team, social engineering and vulnerability assessment as related services.
Visit A-LIGN Back to comparison
Last checked 9 November 2026. Facts come from A-LIGN's own public pages, linked below.
At a glance
| Type | Consultancy |
|---|---|
| Headquarters | Not published |
| Services listed | Network penetration testing, Web application penetration testing, Cloud penetration testing, OT and ICS penetration testing, Red teaming, Social engineering testing, Vulnerability assessment source |
| Delivery | human-led Pen tests by OSCP/OSCE/OSEE-certified testers, in Professional, Premium, Elite and Custom packages; pentest and audit teams are separate. |
| Scope | Web apps: yes APIs: not published Cloud: yes Network: yes Mobile: not published AI apps: not published |
| Pricing model | custom quote |
| Turnaround | Not published |
| Retesting | Not stated. The page mentions RADAR monitoring between annual tests (Elite package). source |
| Sample report | not published |
| Compliance mentioned | SOC 2, ISO 27001, PCI DSS, CMMC, FedRAMP |
| Integrations | RADAR continuous-monitoring platform (Elite package) |
Pricing
Prices are not published. You need to ask for a quote.
No prices on the page. Contact sales for a quote.
Credentials
- Authorized C3PAO for CMMC (company-wide, as stated by A-LIGN) evidence
Our assessment
Editorial judgment by Excession Labs, based on the facts above. Not a rating.
Good fit when
Teams buying a compliance-linked pentest in a tiered package from an audit firm.
Tradeoffs
No prices, turnaround, retest terms or sample report. API, mobile and AI scope are not named on the pentest page. Credential shown is company-wide, not pentest-specific.
Sources
- A-LIGN penetration testing (checked 9 November 2026)
- A-LIGN homepage (checked 9 November 2026)
See something wrong or out of date? Send a correction.
Compare with
- Compass SecurityCompass Security, Rapperswil, Switzerland, is a CREST-listed provider. It tests applications, APIs, networks, mobile, social engineering, OT and AI, and…
- JUMPSECJUMPSEC is a UK security consultancy. Its AI penetration testing service covers apps, chatbots and large language models, with the OWASP LLM Top 10 as a…
- Pen Test PartnersPen Test Partners is a cyber security consultancy offering manual pentesting, red teaming and compliance services across many sectors. A PTaaS subscription…
- Prescient SecurityPrescient Security sells human-led pentests from $3,000 and $6,000, an AI pentester priced per asset, and security assessments such as CASA and SWIFT CSP.