Menu
Cobalt
Cobalt is a SOC 2 support firm in San Francisco, CA, USA providing penetration testing, founded in 2013. Fast-moving product and security teams that need on-demand penetration tests they can launch in days, with findings and retests tracked in a platform and wired into developer workflows.
Free. Side-by-side on price, timeline, and fit. Pick one firm. Have one call.
Who should hire Cobalt?
Fast-moving product and security teams that need on-demand penetration tests they can launch in days, with findings and retests tracked in a platform and wired into developer workflows.
What makes Cobalt different?
A pioneer of pentest-as-a-service that pairs a vetted global tester community (Cobalt Core) with a platform delivering reports markedly faster than traditional engagements.
Pricing: Cobalt does not publish a standard price. Pricing depends on scope, environment, and engagement model — request a quote to get a current figure.
Cobalt FAQ
Answers templated from this firm's directory record and preserved in FAQPage schema.
What does Cobalt do for SOC 2?
Cobalt is a SOC 2 support firm providing penetration testing. It does not issue the SOC 2 report itself; an independent CPA firm attests. Fast-moving product and security teams that need on-demand penetration tests they can launch in days, with findings and retests tracked in a platform and wired into developer workflows.
Where is Cobalt based?
Cobalt is based in San Francisco, CA, USA, and supports SOC 2 work remotely. The firm has operated since 2013.
Does Cobalt publish pricing?
Cobalt does not publish a standard price. Pricing for penetration testing work depends on scope, environment, and engagement model, so request a quote to get a current figure.
Compare Cobalt with the right-fit firms
Tell us your scope and SOC 2 timeline. We send it to Cobalt and a couple of other firms that fit, and they reply with a ballpark. Anonymous until you pick.
Run a firm? Claim or feature this listing. Placement never reorders matching — fit comes first.