# Red teaming companies: compared, with sources

Source: https://pentestcompare.com/services/red-teaming/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

Red team services compared from each provider's own pages, with the NIST definition, rules of engagement to agree, price drivers and seven questions to ask first.

> **Short answer:** A red team exercise tests whether people, process and tools stop a realistic attack, with a stated objective. NIST defines a red team as a group authorized to emulate an adversary's attack capabilities. This page lists providers whose own pages state red teaming, A to Z, and gives the rules of engagement and questions to settle before you sign.

Red teaming companies sell a different thing from pentest firms, though many sell both. A red team exercise has an objective, such as reaching a data store, and measures whether your people and tools notice. The table lists providers whose own pages state red teaming, A to Z and unranked, checked on 9 November 2026.

| Provider | Type | Delivery | Web | API | Cloud | AI apps | Published price | Turnaround | Retest | Sample report |
|---|---|---|---|---|---|---|---|---|---|---|
| [A-LIGN](https://pentestcompare.com/providers/a-lign/) | Consultancy | human-led | yes | unknown | yes | unknown | custom quote | Not published | Not stated. The page mentions RADAR monitoring between annual tests (Elite package). | not published |
| [Bishop Fox](https://pentestcompare.com/providers/bishop-fox/) | Offensive security consultancy | human-led | yes | yes | yes | yes | not published | Not published | Not published | not published |
| [BreachLock](https://pentestcompare.com/providers/breachlock/) | PTaaS platform | hybrid | yes | yes | yes | unknown | custom quote | Pentests can be scoped and started within 24-48 hours. | Free manual retests: 1 (Standard), 2 (Extended), custom (Extensive). The PTaaS product text also promises unlimited retesting. | on request |
| [Bridewell](https://pentestcompare.com/providers/bridewell/) | Cyber security services provider | human-led | yes | yes | yes | yes | custom quote | Not published | Not published | on request |
| [Claranet](https://pentestcompare.com/providers/claranet/) | Managed services and cyber security provider | human-led | yes | yes | unknown | unknown | custom quote | Not published | Retesting is included as part of the engagement. | not published |
| [Cobalt](https://pentestcompare.com/providers/cobalt/) | PTaaS platform | hybrid | yes | yes | yes | yes | $3,500 per test | Autonomous Pentest: findings in 24 hours. Annual tiers: start within 3 / 2 / 1 business days (Standard / Premium / Enterprise); footnote says start times vary by engagement type. | Comparison table: free retesting for 6 months (Standard) or 12 months (Premium, Enterprise). FAQ says unlimited on-demand retesting during the contract term. The two statements differ. | on request |
| [Compass Security](https://pentestcompare.com/providers/compass-security/) | Consultancy | human-led | yes | yes | yes | yes | custom quote | Not published | Not published | on request |
| [Cyberis (Cyberis Reply)](https://pentestcompare.com/providers/cyberis/) | Penetration testing and cyber security consultancy | human-led | yes | unknown | yes | yes | custom quote | Not published | Not published | not published |
| [CYBRI](https://pentestcompare.com/providers/cybri/) | Penetration testing consultancy | human-led | yes | yes | yes | yes | $5,000 starts at, per engagement | From 5 business days (Web Application and Custom), 10 (Web, API, Cloud or AI), 15 (Multiple Apps). | Remediation testing is included in the $9,500 and $20,000 tiers. Unlimited remediation testing with an extended window is listed as an add-on. The Web Application tier does not state it. | not published |
| [DeepStrike](https://pentestcompare.com/providers/deepstrike/) | Penetration testing consultancy | human-led | yes | unknown | yes | unknown | custom quote | Basic plan: start pentest within 48 hours. | The services page says free unlimited re-testing; the pricing page says free remediation retesting for 12 months. Both are shown. | not published |
| [Equixly](https://pentestcompare.com/providers/equixly/) | Autonomous testing platform | automated | yes | yes | unknown | yes | custom quote | Not published | Revalidates whenever applications and AI systems change; no separate retest policy is stated. | not published |
| [Giskard](https://pentestcompare.com/providers/giskard/) | AI-assisted testing service | hybrid | unknown | yes | unknown | yes | $0 no billing unit given | Not published | Giskard says it re-runs every test until the fix is confirmed. | not published |
| [Hadrian](https://pentestcompare.com/providers/hadrian/) | Autonomous testing platform | hybrid | yes | unknown | unknown | unknown | From EUR 1,250 per test, excluding VAT | Most tests finish within 24 to 48 hours; same-day start possible. | Not published | not published |
| [Halo Security](https://pentestcompare.com/providers/halo-security/) | PTaaS platform | hybrid | yes | yes | unknown | unknown | custom quote | Not published | One round of retesting is included; Halo verifies fixes and issues an updated report. | not published |
| [Integrity360](https://pentestcompare.com/providers/integrity360/) | Cyber security services provider | human-led | yes | yes | yes | unknown | custom quote | Not published | Continuous retest options are mentioned. | not published |
| [IOActive](https://pentestcompare.com/providers/ioactive/) | Security consultancy | human-led | unknown | unknown | unknown | yes | not published | Not published | Not published | not published |
| [JUMPSEC](https://pentestcompare.com/providers/jumpsec/) | Consultancy | human-led | unknown | unknown | unknown | yes | custom quote | Not published | Not stated. The page recommends testing quarterly or semi-annually and after significant changes. | not published |
| [Lakera](https://pentestcompare.com/providers/lakera/) | Application security platform | hybrid | unknown | unknown | unknown | yes | custom quote | Not published | Not published | not published |
| [LRQA (Nettitude)](https://pentestcompare.com/providers/lrqa-nettitude/) | Assurance and cyber security provider (Nettitude is now part of LRQA) | human-led | yes | unknown | yes | yes | custom quote | Mobile tests: start within two weeks and usually at least three days per application. | Not published | not published |
| [Mindgard](https://pentestcompare.com/providers/mindgard/) | Application security platform | hybrid | unknown | yes | unknown | yes | custom quote | Not published | Teams can retest fixes; Assure re-triggers when the AI system changes. | not published |
| [NetSPI](https://pentestcompare.com/providers/netspi/) | Penetration testing as a service (PTaaS) | human-led | yes | yes | yes | yes | not published | Not published | Not published | not published |
| [Packetlabs](https://pentestcompare.com/providers/packetlabs/) | Penetration testing consultancy | human-led | yes | yes | yes | yes | custom quote | Not published | The homepage says Packetlabs supports security teams with retesting; terms (window, number of rounds, cost) are not published. | on request |
| [Parameter](https://pentestcompare.com/providers/parameter/) | AI-assisted testing service | automated | yes | yes | unknown | unknown | custom quote | First findings in 24 hours; most runs finish the same day they start. | Free re-testing is listed for Single App and inherited by higher tiers. | public |
| [Payatu](https://pentestcompare.com/providers/payatu/) | Security consultancy | hybrid | yes | yes | yes | yes | $3,500 per test (starts from) | Not published | Re-validation of fixes: 1 round (Express, Critical and High), 1 round (Expert, all severities), 2 rounds (Enterprise, all severities). | not published |
| [Pen Test Partners](https://pentestcompare.com/providers/pen-test-partners/) | Consultancy | human-led | yes | yes | yes | yes | custom quote | PTaaS: scoped within minutes and can start immediately; results in real time, short report at the end of the test window. Standard pen tests: Not published. | Not published | not published |
| [Penligent](https://pentestcompare.com/providers/penligent/) | AI-assisted testing service | automated | yes | unknown | unknown | unknown | $0 per month | What takes humans a week, Penligent takes an hour (homepage tagline). | Pro includes task re-runs, scheduled recurring runs and risk re-scans to verify fixes. Limits and credit use are not stated. | public |
| [Pentera](https://pentestcompare.com/providers/pentera/) | Autonomous testing platform | hybrid | yes | yes | yes | unknown | custom quote | Not published | Remediation is followed by re-testing; the FAQ says it revalidates fixes. | not published |
| [Pentest People](https://pentestcompare.com/providers/pentest-people/) | Penetration testing provider (part of WorkNest Secure) | human-led | yes | yes | yes | yes | custom quote | Not published | Not published | not published |
| [Pentest-Tools.com](https://pentestcompare.com/providers/pentest-tools/) | Vulnerability scanning and pentest platform | hybrid | yes | yes | yes | yes | from $96 per month, 16 assets | Not published | Unlimited rescans on all paid plans (tool scans). | not published |
| [Penti](https://pentestcompare.com/providers/penti/) | AI-assisted testing service | hybrid | yes | yes | yes | yes | $20 per month ($216 per year billed annually) | Pentests done in hours, not months (tagline). On the free first test, agents start within an hour. No per-plan turnaround is stated. | Every plan includes free unlimited retests. | not published |
| [Prescient Security](https://pentestcompare.com/providers/prescient-security/) | Consultancy | hybrid | yes | yes | yes | unknown | from $6,000 per engagement (scope-based) | Not published | Cait: up to 2 retests within 30 days of each scan. No retest terms stated for Traditional and Compliance pentests. | not published |
| [Raxis](https://pentestcompare.com/providers/raxis/) | Consultancy | human-led | yes | yes | yes | yes | custom quote | Quote requests answered usually in one business day; PTaaS findings appear in real time. | Retesting is built into the PTaaS workflow; Raxis Attack includes year-round retesting of fixes. | public |
| [Rhino Security Labs](https://pentestcompare.com/providers/rhino-security-labs/) | Penetration testing firm | human-led | yes | unknown | yes | unknown | not published | Not published | Not published | public |
| [Schellman](https://pentestcompare.com/providers/schellman/) | Consultancy | human-led | yes | yes | yes | yes | custom quote | Not published | Not stated on the page. | public |
| [Secure Ideas](https://pentestcompare.com/providers/secure-ideas/) | Consultancy | human-led | yes | yes | unknown | unknown | $8,160 per test (flat fee, starting) | Testing usually starts two to four weeks after contracting; one to two weeks of testing. | Not included by default; retesting is listed as a factor that can change the quote. | public |
| [Securitum](https://pentestcompare.com/providers/securitum/) | Consultancy | human-led | yes | unknown | yes | yes | 640 EUR to 890 EUR per man day | Not published. Typical engagement length is 1 to 4 weeks for a single application or area. | Not published | public |
| [Software Secured](https://pentestcompare.com/providers/software-secured/) | Consultancy | human-led | yes | yes | yes | yes | custom quote | Quote within 48 hours; scheduling in 3-6 weeks, sometimes sooner; report within 48-72 hours of pentest completion. | Request retesting within 12 months of report delivery; auto-scheduled within 2 weeks. PTaaS page says unlimited retesting. | not published |
| [SPLX](https://pentestcompare.com/providers/splx/) | Application security platform | automated | unknown | yes | unknown | yes | custom quote | Not published | No retest policy; testing is described as continuous. | not published |
| [Stingrai](https://pentestcompare.com/providers/stingrai/) | Penetration testing consultancy and platform | hybrid | yes | yes | yes | yes | US$3,000 per assessment | Autonomous Pentest: same-day results. | Automated retests are listed on the Autonomous plan; the page says retests are included in the fixed plans. No window is stated. | public |
| [SySS](https://pentestcompare.com/providers/syss/) | Consultancy | human-led | yes | yes | yes | yes | custom quote | Not published. A Quick Penetration Test option can start right after the order and is done remotely. | A retest after fixes confirms the fixes work and checks for new attack points. | not published |
| [TrustedSec](https://pentestcompare.com/providers/trustedsec/) | Security consultancy | human-led | unknown | unknown | yes | yes | not published | Not published | Not published | not published |
| [usd AG](https://pentestcompare.com/providers/usd-ag/) | Consultancy | human-led | unknown | unknown | yes | yes | custom quote | Not published | Not published | not published |
| [Vumetric](https://pentestcompare.com/providers/vumetric/) | Penetration testing consultancy | human-led | yes | yes | yes | unknown | custom quote | Most penetration tests can be performed within a couple of days, but some span several weeks or months depending on complexity. | Not stated | on request |

## What does red teaming cover?

A red team is, in the NIST glossary wording (citing CNSSI 4009-2022), "a group of people authorized and organized to emulate a potential adversary's attack or exploitation capabilities". The aim is to show defenders which measures work in a live setting.

That differs from a pentest, which lists as many weaknesses as it can in a set scope. For the full comparison, read [red team vs penetration testing](https://penetrationtestservices.com/guides/red-team-vs-penetration-testing/). Many providers also list social engineering and physical testing as part of an exercise. See [social engineering testing providers](/services/social-engineering-testing/) and [physical penetration testing providers](/services/physical-penetration-testing/).

## Who needs a red team, and when?

You need one when basic fixes are in place and you want to test detection and response. Without that, a red team will find easy paths that a pentest would also find, at a higher price. Typical buyers have a security operations team or a managed detection service and want to know if it works.

A test of one web app or API does not need a red team. Start with a [scoped pentest](/guides/best-penetration-testing-companies/) and move up when the findings are few.

## What should you ask red team providers?

Settle these seven points in writing before you sign.

| Question | What a clear answer looks like |
|---|---|
| What is the objective? | One sentence, such as "read a record from the finance database". |
| Who knows about the test? | A named small group that can call the exercise off. |
| Which actions are off limits? | A list: data deletion, denial of service, named systems. |
| What is the starting access? | External, or assumed breach with a stated account. |
| What are the stop conditions? | Triggers that pause the test, such as a real incident. |
| Is a purple team session offered? | Yes or no, and whether it costs extra. |
| What does the report contain? | Timeline, detections that fired, detections that missed. |

NIST SP 800-115 says legal advisors should always be involved in intrusive tests. Have your counsel read the rules of engagement.

## What drives the price of red team services?

Price follows the length of the exercise, the number of operators, the objective, whether physical or social engineering is included, and the retest or purple team option. The "Published price" column shows only prices that a provider lists. Red team work is usually quoted after scoping, so "custom quote" is the normal entry. The [penetration testing cost](/guides/penetration-testing-cost/) guide has sourced ranges for related work.

## How do you read the table?

The table includes any provider whose pages state red teaming as a service. That is a wide net, so it includes platforms that also sell autonomous or AI-assisted testing. Check the Type and Delivery columns first. A row that says "autonomous testing platform" does not describe a human-led adversary exercise.

Compliance scheme names appear on each provider page, not in this table. Pen Test Partners, for example, lists CBEST and TIBER in its compliance mentions in our dataset. Open the provider page for the source.

## What scoping mistakes weaken a red team exercise?

An objective that is too broad ("find anything") turns the exercise into a pentest. Too many people knowing about it ruins detection testing. Unwritten stop conditions cause arguments when a real alert fires. Finally, no one budgets time to fix findings, so the next exercise repeats the first. Write the objective, the circle of knowledge and the stop conditions before kickoff.

## Questions

### What is the difference between red teaming and penetration testing?

A pentest looks for many weaknesses in a defined scope and usually has defenders aware. A red team pursues an objective and also tests detection and response. Our red team vs pentest guide on penetrationtestservices.com has a full comparison table.

### What is assumed breach?

The exercise starts with access the attacker already has, such as a standard employee laptop or account. It skips the time spent on initial entry and tests what happens next: movement, privilege and detection. Agree the starting access in writing.

### What is a purple team exercise?

The attackers and defenders work together and share what each side sees, step by step. It trains detection faster than a covert test. Ask whether a provider offers a purple team format as an option.

### Do the providers in the table run TIBER or CBEST tests?

Only where the row says so. The dataset records TIBER and CBEST mentions, with the source, only for providers whose own pages name them. Check the provider page and the scheme owner before you assume it.

## Sources

- [NIST CSRC Glossary: red team (CNSSI 4009-2022)](https://csrc.nist.gov/glossary/term/red_team)
- [NIST SP 800-115: Technical Guide to Information Security Testing and Assessment](https://csrc.nist.gov/pubs/sp/800/115/final)
- [Pen Test Partners homepage (compliance mentions in the dataset)](https://www.pentestpartners.com/)
- [PentestCompare methodology](https://pentestcompare.com/methodology/)