Federacy

Federacy offers manual penetration testing and bug bounty services to help organizations meet security and compliance requirements across web, mobile, APIs, and external networks. They provide ongoing engagement, attacker-style testing, and cISO-like guidance with reports and attestation letters.

Federacy conducts manual penetration testing with a methodology aligned to OWASP ASVS, OWASP Testing Guide, NIST SP 800-53A, and OSSTMM. Services include penetration tests (3+ weeks active testing with 100+ hours and 200+ tests), on-demand reports and letters of attestation, remediation guidance, and ongoing year-long support via Slack. They also offer bug bounty programs (disclosure programs) with scoped research, report triage, and remediation advice, plus a managed option with a Federacy badge and Slack-based remediation support. Pricing starts at a fixed pentest price and monthly bug bounty tiers.

Who it’s for: Organizations seeking security testing and vendor security assessments to satisfy SOC2, ISO 27001, HIPAA, and vendor requests; startups and enterprises needing ongoing security guidance and bug bounty programs.

Public pricing pages and multiple service offerings; clearly articulated products (Pen Tests, Bug Bounty) and ongoing support; investor/partner testimonials mentioned; active marketing pages (pricing, solutions).