Schellman
Schellman, a Tampa-based compliance and attestation firm, offers application, network, mobile, cloud, physical, hardware/IoT, social engineering, red team and AI red team testing.
Visit Schellman Back to comparison
Last checked 9 November 2026. Facts come from Schellman's own public pages, linked below.
At a glance
| Type | Consultancy |
|---|---|
| Headquarters | United States |
| Services listed | Web application penetration testing, API penetration testing, Network penetration testing, Wireless penetration testing, Mobile app penetration testing, Cloud penetration testing, Physical penetration testing, IoT penetration testing, Red teaming, Social engineering testing, AI and LLM penetration testing source |
| Delivery | human-led Penetration tests by background-checked staff testers, led by a manager under a director; part of a compliance and attestation firm. |
| Scope | Web apps: yes APIs: yes Cloud: yes Network: yes Mobile: yes AI apps: yes |
| Pricing model | custom quote |
| Turnaround | Not published |
| Retesting | Not stated on the page. source |
| Sample report | public source |
| Compliance mentioned | SOC 2, PCI DSS, ISO 27001, FedRAMP, CMMC, HITRUST, HIPAA, DORA |
| Integrations | Not published |
Pricing
Prices are not published. You need to ask for a quote.
No prices. The page links a scoping request.
Credentials
- Accredited FedRAMP 3PAO (as stated by Schellman) evidence
- Qualified Security Assessor (QSA) and PA-QSA for P2PE (as stated by Schellman) evidence
Our assessment
Editorial judgment by Excession Labs, based on the facts above. Not a rating.
Good fit when
Organizations that already need audits or attestations and want pen testing from the same firm.
Tradeoffs
No prices, turnaround or retest terms. The sample report link was named on the page but its URL was not opened. Credential evidence is the firm's own page, not the accrediting body's directory.
Sources
- Schellman penetration testing (checked 9 November 2026)
See something wrong or out of date? Send a correction.
Compare with
- A-LIGNA-LIGN offers tiered penetration tests across external and internal networks, web apps, cloud, hybrid and OT/ICS, with red team, social engineering and…
- Compass SecurityCompass Security, Rapperswil, Switzerland, is a CREST-listed provider. It tests applications, APIs, networks, mobile, social engineering, OT and AI, and…
- JUMPSECJUMPSEC is a UK security consultancy. Its AI penetration testing service covers apps, chatbots and large language models, with the OWASP LLM Top 10 as a…
- Pen Test PartnersPen Test Partners is a cyber security consultancy offering manual pentesting, red teaming and compliance services across many sectors. A PTaaS subscription…