# Cobalt

Cobalt is a cybersecurity company based in the United States, founded in 2013. It has 3 products listed on CybersecTools.

> PtaaS provider combining a SaaS platform with vetted pentesters for offensive security.

Source: https://cybersectools.com/companies/cobalt · Updated February 2026

## Quick facts

- Category: [Offensive Security](https://cybersectools.com/categories/offensive-security-testing)
- Type: Products and services
- Headquarters: United States
- Founded: 2013
- Products listed: 3
- Website: [cobalt.io](https://cobalt.io/)

## What does Cobalt do?

Cobalt is a cybersecurity company that operates in the Pentest as a Service (PtaaS) space, combining a SaaS platform with a vetted community of penetration testers. The company was founded on the premise that traditional penetration testing methods could be improved through technology and a curated network of security experts.

Cobalt's platform delivers offensive security services to over 1,500 customers. Its core offerings include penetration testing across web applications, cloud infrastructure, APIs, and network environments. Additional services include Digital Risk Assessments, which identify publicly available information about an organization, and Secure Code Reviews, which evaluate the security of software development processes.

The company targets organizations seeking to meet compliance requirements through comprehensive security testing, as well as those looking to proactively identify and remediate vulnerabilities. Cobalt's approach integrates human expertise with a technology platform to facilitate real-time reporting, remediation tracking, and collaboration between development, security, and operations teams.

Cobalt has particular expertise in SaaS security testing, addressing cloud-specific vulnerabilities such as container misconfigurations, IAM weaknesses, API exposures, and multi-tenancy risks. Its methodology follows a structured process: scoping, reconnaissance, access attempts, exploitation, findings analysis, and remediation recommendations.

The company is fully remote, with Scandinavian roots and operations based in the United States. It has received recognition from G2, Cybersecurity Breakthrough Awards, and Fortress Cyber Security Awards, among others.

Categories: [Offensive Security](https://cybersectools.com/categories/offensive-security-testing), [Exposure & Vulnerability Management](https://cybersectools.com/categories/exposure-vulnerability-management), [Application Security](https://cybersectools.com/categories/application-security)

## Cobalt products

- [Cobalt Attack Surface Monitoring](https://cybersectools.com/tools/cobalt-attack-surface-monitoring): Continuous external asset discovery and monitoring with daily domain scans. (commercial)
- [Cobalt DAST](https://cybersectools.com/tools/cobalt-dast): Automated DAST tool for continuous web app and API vulnerability scanning. (commercial)
- [Cobalt Offensive Security Platform](https://cybersectools.com/tools/cobalt-offensive-security-platform): PTaaS platform for managing pentests, DAST, and attack surface monitoring. (commercial)

---

More on Cobalt: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=company-md