Cobalt

Cobalt is an independent testing company founded in 2013, headquartered in San Francisco, the USA, with 201-500 people. It offers Penetration testing, Secure code review, Red teaming, Security testing. Certificates confirmed by a register entry: CREST. It publishes no rate card. Data checked on September 2, 2026.

Profile checkedSeptember 2, 202612 sourceswww.cobalt.io

Best suited for

Security focus
Cobalt offers Penetration testing, Secure code review, Red teaming, Security testing; holds CREST, each confirmed by a register entry or the certificate itself; publishes 2 case studies.
Security testing is offered, together with either penetration testing or a verified ISO/IEC 27001 certificate, and at least one published case study.
Nearshore for the EU
Cobalt delivers from the USA, Germany, the UK.
At least one delivery location in the EU or the EEA, or in Ukraine, Georgia, Serbia or Moldova.

Facts

Comparable facts about Cobalt. Every field is shown, including the ones the company has not published.
Headquarters	San Francisco, the USA
Delivery locations	the USA, Germany, the UK
Team size	201-500 people
Founded	2013
Ownership	Independent
Services	Penetration testing, Secure code review, Red teaming, Security testing
Industries	Banking, SaaS, Healthcare, Insurance
Frameworks	Not published
Engagement models	Managed testing service, Continuous testing program, On-demand testing
Client stages	Enterprises
Certificates	CRESTregister entry
Signs a BAA / GDPR DPA	Not confirmed / Yes
Published rates	Not published
Minimum project	Not published
Onboarding	Not published
Crowd tester pool	500cobalt.io
Device lab	Not published

Reviews on external platforms

No external review profile found.

This catalog collects no reviews of its own. Review counts and scores are aggregates from external platforms, shown with the date they were read.

Named clients

Personiocobalt.io
Zest AIcobalt.io
DigitalRoutecobalt.io
Syndiocobalt.io
PowerSchoolcobalt.io
Insuritycobalt.io
StartEnginecobalt.io
Progynypublicly tradedcobalt.io
Flexportcobalt.io
Vonagecobalt.io
Egnytecobalt.io
MuleSoftcobalt.io
Pendocobalt.io
Sentara Healthcarecobalt.io
Smarshcobalt.io

Rankings this company appears in

Industry: Banking position 22 of 74
Industry: Insurance position 8 of 28
Industry: Healthcare position 25 of 78
Industry: SaaS position 7 of 23
Type of testing: Security testing position 16 of 47
Type of testing: Penetration testing position 17 of 41
Type of testing: Red teaming position 8 of 24
Type of testing: Secure code review position 4 of 10
Engagement model: a managed testing service position 13 of 42
Engagement model: on-demand testing position 6 of 11
Engagement model: a continuous testing program position 6 of 12
Client stage: enterprises position 13 of 34
Delivery location: the USA position 26 of 54
Delivery location: the UK position 8 of 28
Delivery location: Germany position 6 of 11
Delivery location: Europe position 34 of 72
Delivery proximity: nearshore for a buyer in the EU position 34 of 57

Sources

Cobalt: homepageChecked on September 2, 2026
Cobalt company page on LinkedInChecked on September 2, 2026
Cobalt Labs: company profile on CREST accreditation marketplace (registry)Checked on September 2, 2026
Cobalt profile on ClutchChecked on September 2, 2026
Cobalt: Customer Success Stories (customers hub)Checked on September 2, 2026
Cobalt: ServicesChecked on September 2, 2026
Cobalt: ComplianceChecked on September 2, 2026
Cobalt: Trust CenterChecked on September 2, 2026
Cobalt: AboutChecked on September 2, 2026
Cobalt customer case study: SyndioChecked on September 2, 2026
Cobalt customer case study: asset management software companyChecked on September 2, 2026
Cobalt blog: "Cobalt. Connected Intelligent Security." (rebrand announcement from Crowdcurity)Checked on September 2, 2026

Every field on this profile records which of these sources it came from. The profile was last rebuilt from them on September 2, 2026. A field no source confirms is left empty rather than estimated.

Published by QA Rating

Every fact about a company comes from a listed source. A field without a source stays empty. A certificate counts as confirmed only when a registry, certificate or auditor report backs it; a certificate the company only claims about itself is published separately, under that label. Vendors can request a correction at hello@qa-rating.com. A correction is applied when it comes with a public source. Last checked on September 2, 2026.

Badge for your site

If you work at Cobalt, you can put a badge linking to this profile on your own site. It is free, it is not tied to any tier, and the badges page explains what each badge claims and when it should come down.

Cobalt

<a href="https://qa-rating.com/companies/cobalt/">
  <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="Cobalt listed in QA Rating">
    <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/>
    <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">Cobalt</text>
    <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Listed in QA Rating</text>
  </svg>
</a>

<a href="https://qa-rating.com/companies/cobalt/">
  <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="Cobalt: profile checked 2026 in QA Rating">
    <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/>
    <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">Cobalt</text>
    <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Profile checked 2026</text>
  </svg>
</a>

<a href="https://qa-rating.com/companies/cobalt/">
  <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="Cobalt grouped under Nearshore for the EU in QA Rating, 2026">
    <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/>
    <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">Cobalt</text>
    <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Nearshore for the EU, 2026</text>
  </svg>
</a>

<a href="https://qa-rating.com/companies/cobalt/">
  <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="Cobalt grouped under Security focus in QA Rating, 2026">
    <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/>
    <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">Cobalt</text>
    <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Security focus, 2026</text>
  </svg>
</a>