Skip to content

Categories · Certification

OSCP

Firms that list Offensive Security Certified Professional practitioners. Typical for pentest shops. As listed — we do not invigilate exams.

6 companies. Refine by location, capabilities, or team size to find the right fit.

Atlant Security

Consultancy / pentest

Founder-led pentest, vCISO, and compliance consulting.

GRC Application security

Sofia, BG· 1-49 people

NCC Group

Consultancy / pentest

Global pentest, research, and cyber resilience consultancy.

Application security Security operations

Manchester, GB· 1000+ people

Trail of Bits

Consultancy / pentest

High-assurance security engineering, audits, and research.

Application security AI security

New York, US· 50-249 people

Bishop Fox

Consultancy / pentest

Offensive security consultancy and Cosmos continuous pentest.

Application security Security operations

Phoenix, US· 250-499 people

Offensive Security

Training

OSCP, Kali Linux, and hands-on offensive training.

Human risk Application security

New York, US· 250-499 people

Mandiant

Consultancy / pentest

Incident response, threat intel, and Mandiant Advantage — now Google Cloud.

Security operations Threat & vulnerability

Reston, US· 1000+ people

FAQ

What does OSCP mean on this index?

Companies that list OSCP. Company attestations (ISO 27001, SOC 2) are held by the firm. Practitioner credentials (OSCP, GPEN) are held by people on staff. We do not audit certificates or invigilate exams.

Is the order paid?

No. Organic order is recency. Promoted shelves are labeled and separate. That is the opposite of buying a rank.

How do I get listed under OSCP?

Submit a company and tick the certifications you actually hold. We review before anything is public. Paid plans buy a labeled shelf, not a silent bump in this list.

Why is a staff exam on a company directory?

Buyers shortlist pentest and training firms by who sits on the engagement. OSCP and GPEN are company filters here, not a people directory.