Halo Security
Halo Security offers web, API, mobile, network, wireless, social engineering and red team pentests with one retest round, plus attack surface management and PCI ASV scanning.
Visit Halo Security Back to comparison
Last checked 9 November 2026. Facts come from Halo Security's own public pages, linked below.
At a glance
| Type | PTaaS platform |
|---|---|
| Headquarters | Not published |
| Services listed | Web application penetration testing, API penetration testing, Mobile app penetration testing, Network penetration testing, Wireless penetration testing, Social engineering testing, Red teaming, Vulnerability assessment source |
| Delivery | hybrid Pentests plus an attack surface management platform; the page does not say who runs each test. |
| Scope | Web apps: yes APIs: yes Cloud: not published Network: yes Mobile: yes AI apps: not published |
| Pricing model | custom quote |
| Turnaround | Not published |
| Retesting | One round of retesting is included; Halo verifies fixes and issues an updated report. source |
| Sample report | not published |
| Compliance mentioned | SOC 2, HIPAA, PCI DSS |
| Integrations | Integrations page linked at /integrations/ (not read) |
Pricing
Prices are not published. You need to ask for a quote.
No prices. Pentests get a fixed-price quote based on scope after a scoping call; a plans page exists at /start but was not read.
Credentials
- PCI SSC Approved Scanning Vendor, certificate 5078-01-11 evidence
Our assessment
Editorial judgment by Excession Labs, based on the facts above. Not a rating.
Good fit when
Teams that want pentests and external attack surface monitoring from one vendor, with one retest round included.
Tradeoffs
No prices or turnaround. The page says Halo is not a CREST Accredited Member. Only report screenshots, no downloadable sample.
Sources
- Halo Security homepage (checked 9 November 2026)
See something wrong or out of date? Send a correction.
Compare with
- Astra SecurityAstra sells annual pentest plans from an autonomous test to manual expert testing, plus separate DAST, API and cloud scanner plans, all with prices on its…
- BreachLockBreachLock offers human-led pentesting as a service from an in-house team, alongside attack surface discovery and an autonomous testing product. Pricing is…
- BugcrowdBugcrowd sells pen testing as a service in Standard, Plus and Max tiers across web, mobile, network, API, IoT, cloud and AI targets, with a sample report for…
- CobaltCobalt sells pentests through a platform that connects buyers with a network of vetted freelance testers, plus an autonomous pentest product. Work is bought…