Additional Info

CompanyCobalt
Company size100 - 499 employees
WebsiteCobalt.io

Nomination Highlights

Cobalt provides a Pentest as a Service (PtaaS) platform that is modernizing the traditional, static penetration testing model. With a globally distributed team Cobalt is transforming pentesting by providing streamlined processes, developer integrations, and on-demand pentesters who have undergone rigorous vetting. With Cobalt, customers can build their pentest program in as little as five minutes and start a pentest in 24 hours.

Fueled by a global talent pool of certified freelancers, Cobalt’s Pentest as a Service (PtaaS) platform delivers actionable results that empower agile teams to pinpoint, track, and remediate software vulnerabilities.

Key Benefits of using a PtaaS:

–Ability to start a pentest in as little as 24 hours and stay agile with development cycles

–Built-in analytics to report on the health of your pentest program

–Communicate in real-time with pentesters to improve efficiency and eliminate traditional back and forth email

–Findings populate your developer’s backlog with Jira/GitHub integrations so that vulnerabilities are addressed in tandem with your SDLC.

The above list encompasses how businesses benefit from PtaaS. However, it also impacts the security community more broadly by activating a network of practitioners who are empowered based on skills, not location.

At Cobalt, this marketplace — known as the Cobalt Core — surfaces opportunities for passionate hackers who love breaking things and want reliable income.

Cobalt has turned the old school bug bounty model on its head by asking, “What if, instead of pitting people against each other, we encouraged collaboration? What if we gave businesses the ability to ‘spin up’ a team that’s tailor-made to the specifications of their engagement?”

The answer: we would be unleashing the true power of PtaaS, enabling customers to work smarter, develop faster, and with less risk. We’d be delivering on the promise of a more secure world.

How we are different

2020 was a landmark year for Cobalt. The company conducted over 1,500 pentests and found over 12,500 vulnerabilities among its 700+ customers while maintaining an average NPS score of 70. Revenue grew by 59% YoY and in August Cobalt raised $29M in Series B funding.


3 ways Cobalt’s PtaaS approach epitomized innovation and creativity in the pursuit of solving real-world customer challenges:


--Collapsing timelines to better fight cybercrime. Cobalt is on a mission to be the interface to the global security workforce, empowering security practitioners based on skills, not location. We are breaking the industry stranglehold held by legacy security consultancies, who have acted as gatekeepers to the world of penetration testing (sometimes called “ethical hacking”).


--Activating a diverse global talent base. Consultancies choose testers for an engagement based on who has capacity and time, when really it should be based upon whose hacking expertise is the best fit. The Cobalt philosophy is that, though automation and AI are disruptive forces in the world of enterprise tech, when it comes to pentesting the manual element will never become obsolete. There are entire classes of issues that can only be discovered manually, by humans. The smart pentester is a combination of both. We use technology to empower people, which produces the best of both worlds.


--Bringing pentesting into the DevSecOps continuum. Software has become decentralized and developers push enhancements at warp speed, releasing monthly, weekly, daily. Pentesting, is not agile. It creates a schism between security and engineering teams-- because a pentest does not fit the scrum approach. You cannot run one on demand. At least, not until Cobalt came along. By upending the traditional pentest model, Cobalt created a better way to enable SaaS businesses to maintain agile software development practices without sacrificing security.


About this category: Pentest-as-a-Service (PtaaS)

The Cybersecurity Excellence Awards recognize pentest-as-a-service providers. The category covers penetration testing delivered as an ongoing service through a platform, with human testers, continuous results and retesting.

An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region. Entry packages, sponsorship and public votes do not affect the jury's scores.

Related categories

Cobalt, 2021 Gold Award winner, Pentest-as-a-Service (PtaaS) — Cybersecurity Excellence Awards
4Votes

Share this nomination

Community Choice voting for the 2021 season closed on July 10, 2021.

What is the Community Choice Award?

A separate award decided by public vote, independent of the jury awards. Each completed share of a profile on LinkedIn, Facebook or X counted as one vote.

2027 award season

  1. Nominations closeFebruary 27, 2027
  2. Jury winners announcedWeek of March 22
  3. Community Choice voting closesJuly 10, 2027

Nominate in this category

Enter a nomination in Pentest-as-a-Service (PtaaS). Review takes about one business day.

Start a nomination