# Penetration testing as a service for enterprise buyers: what AI models recommend, November 2026

Gane Index, November 2026 Edition. Asked as "penetration testing service" and as "pentest-as-a-service provider", six framings each, to fourteen models with search on, on behalf of an enterprise B2B company. Page: https://www.gane.ai/index/it/security/penetration-testing-as-a-service/enterprise

**Standing:** NetSPI leads with 30% of first choices; verdict contested. 50 first choices across the direct, paraphrase, budget and scale prompts.

## First-choice share

| Rank | Product | Share | Negative rate | Labels |
|---|---|---|---|---|
| 1 | [NetSPI](https://www.gane.ai/index/it/vendors/netspi/index.md) | 30% | 3% | 39 |
| 2 | [Synack](https://www.gane.ai/index/it/vendors/synack/index.md) | 16% | 5% | 41 |
| 3 | [Cobalt](https://www.gane.ai/index/it/vendors/cobalt/index.md) | 12% | 6% | 48 |
| 4 | [Bishop Fox](https://www.gane.ai/index/it/vendors/bishop-fox/index.md) | 12% | 6% | 31 |
| 6 | [NCC Group](https://www.gane.ai/index/it/vendors/ncc-group/index.md) | 2% | 4% | 25 |
| 7 | [Mandiant](https://www.gane.ai/index/it/vendors/mandiant/index.md) | 2% | 0% | 17 |
| 8 | [Rapid7](https://www.gane.ai/index/it/vendors/rapid7/index.md) | 2% | 0% | 15 |
| 9 | [BreachLock](https://www.gane.ai/index/it/vendors/breachlock/index.md) | 2% | 0% | 14 |
| 10 | [IBM X-Force Red](https://www.gane.ai/index/it/vendors/ibm-x-force-red/index.md) | 2% | 0% | 11 |
| 18 | [Coalfire](https://www.gane.ai/index/it/vendors/coalfire/index.md) | 0% | 6% | 18 |
| 19 | [HackerOne PTaaS](https://www.gane.ai/index/it/vendors/hackerone-ptaas/index.md) | 0% | 16% | 19 |
| 20 | [Praetorian](https://www.gane.ai/index/it/vendors/praetorian/index.md) | 0% | 0% | 13 |

Rank is by share of first choices among all 98 products named; products with the same share are tied, and the order among them carries no meaning. The table lists those with at least 10 labels.

## Each model's first choice on the direct prompt

- Claude Haiku 4.5: no first choice
- GPT-5.4 mini: Cobalt; alternatives HackerOne PTaaS, NetSPI
- Gemini 3.5 Flash: Cobalt; alternatives Bishop Fox, Bugcrowd PTaaS, HackerOne PTaaS, Mandiant
- Perplexity Sonar: NetSPI; alternatives Bishop Fox, Cobalt, Mandiant, Synack
- Grok 4.20: Bishop Fox; alternatives Bugcrowd PTaaS, Cobalt, NetSPI, Rapid7
- Mistral Small: Bishop Fox, Cybri; alternatives BreachLock, Rapid7
- DeepSeek V4 Flash: Bishop Fox; alternatives IBM X-Force Red, Mandiant, NCC Group, NetSPI
- Llama 4 Maverick: NetSPI
- Qwen 3.7 Flash: Mandiant; alternatives Bishop Fox, Cobalt Security, Deloitte, KPMG
- Kimi K2: Bishop Fox, Deloitte; alternatives BreachLock, Coalfire, Cobalt, Mandiant
- GLM 4.7 FlashX: Invicti, Rapid7; alternatives Bishop Fox, Coalfire, Cobalt, NCC Group
- MiniMax M2.5: Astra Security, Invicti; alternatives Bishop Fox, Cybri, Rapid7
- GPT-6 Luna: Bishop Fox; alternatives Cobalt, NCC Group
- Muse Glimmer 30B: Bishop Fox, IBM X-Force Red, NCC Group, NetSPI; alternatives Coalfire, GuidePoint Security, Kroll, Optiv

## Sources the answers cite

71 of 84 answers came back with a source list, from 14 of 14 models. Sites named in the most answers:

- synack.com: 35 answers, 67 citations
- stingrai.io: 34 answers, 59 citations
- techrepublic.com: 18 answers, 18 citations
- cloudsecuritypartners.com: 16 answers, 16 citations
- cybri.com: 15 answers, 18 citations
- deepstrike.io: 14 answers, 16 citations
- atlantsecurity.com: 14 answers, 14 citations
- softwaretestinghelp.com: 12 answers, 12 citations

Pages named in the most answers:

- https://techrepublic.com/article/best-penetration-testing-companies (18 answers)
- https://cloudsecuritypartners.com/blog/best-penetration-testing-companies (15 answers)
- https://stingrai.io/blog/best-enterprise-penetration-testing-companies-2026 (14 answers)
- https://cybri.com/blog/best-network-penetration-testing-companies (12 answers)
- https://synack.com/blog/best-penetration-testing-companies (12 answers)
- https://versprite.com/resources/blog/best-penetration-testing-firms-compared-2026 (11 answers)
- https://atlantsecurity.com/blog/top-penetration-testing-companies (10 answers)
- https://clutch.co/it-services/cybersecurity/penetration-testing (9 answers)
- https://underdefense.com/blog/penetration-testing-services (9 answers)
- https://cobalt.io/platform/pricing (8 answers)

## Warned against

- Cobalt: 3 of 48 labels negative. "Cobalt: Uses a credit-based model that requires active management to avoid credit expiration, which can be less predictable." (Llama 4 Maverick, negative prompt)
- HackerOne PTaaS: 3 of 19 labels negative. "Crowdsourced testing and PTaaS provide broad researcher reach, but consistency and tester specialization should be governed carefully for sensitive enterprise scopes." (Perplexity Sonar, comparative prompt)
- Tenable Nessus: 3 of 3 labels negative. "Avoid purely automated scanners (e.g., basic Nessus) for enterprises" (Grok 4.20, direct prompt)
- Bugcrowd PTaaS: 2 of 9 labels negative. "crowdsourced penetration testing platforms like Bugcrowd, HackerOne, and Synack can be powerful for certain use cases, but they are not universally suitable for large enterprises" (Llama 4 Maverick, negative prompt)

## Movement since October 2026

Floor: 11 points of share, measured on the calibration repeat.
Same leader: NetSPI at 30%.

- NetSPI: 46% to 30%, −16. Cleared the floor by 5 points · rank 1 of 98, unchanged.
- Bishop Fox: 4% to 12%, +8. Inside the floor by 3 points · rank 5 → 4 of 98.
- Synack: 23% to 16%, −7. Inside the floor by 4 points · rank 2 of 98, unchanged.
- BreachLock: 6% to 2%, −4. Inside the floor by 7 points · rank 4 → 9 of 98.
- Bugcrowd PTaaS: 4% to 0%, −4. Inside the floor by 7 points · rank 6 → 23 of 98.
- NCC Group: 0% to 2%, +2. Inside the floor by 9 points · rank 9 → 6 of 98.
- Rapid7: 0% to 2%, +2. Inside the floor by 9 points · rank 10 → 8 of 98.
- IBM X-Force Red: 0% to 2%, +2. Inside the floor by 9 points · rank 50 → 10 of 98.
- Astra Security: 0% to 2%, +2. Inside the floor by 9 points · rank 12 → 13 of 98.
- Cobalt: 12% to 12%, ±0. Inside the floor by 11 points · rank 3 of 98, unchanged.
- Mandiant: 2% to 2%, ±0. Inside the floor by 11 points · rank 7 of 98, unchanged.
- Coalfire: 0% to 0%, ±0. Inside the floor by 11 points · rank 13 → 18 of 98.

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.