Compare vendors / Cobalt
Cobalt
Pentest-as-a-service firm with tiered LLM and RAG testing
Human-led engagementsAgents and tools
Cobalt sells AI and LLM pentests through its pentest-as-a-service platform at three levels: prompt injection, isolated LLM, and RAG-enabled LLM, plus testing of agentic workflows, access controls and backend integrations. Tests are human-led by the Cobalt Core, with AI used for recon and triage, and findings appear in real time with reproduction steps. It is bought with Cobalt credits; no amounts are published.
Best for: Scoped, repeatable LLM and RAG pentests bought like other app pentests.
Ownership not disclosed
- ✓ Maps to OWASP
- – Maps to MITRE ATLAS
- – Maps to the EU AI Act
- – SOC 2 or ISO 27001
Worth knowing before you sign
- HQ, funding and certifications not verified in our research.
- Maps to OWASP LLM Top 10 only.
Sources
Work at Cobalt? Send corrections with a source to editors@bestairedteamingcompanies.com. We fix verified errors within five business days.
Compare with
- Mindgard AI red teaming firm: human-led tests plus an automated platform
- Gray Swan AI AI security lab: agent red teaming, lab evals and the Arena
- HiddenLayer AI security platform with automated red teaming and model scanning
- Trail of Bits Security research consultancy with an AI/ML assurance practice
- Pillar Security Agent security platform with agentic red teaming