GetPentest

Penetration testing firms in Quebec

Firms in the GetPentest directory based in Quebec. Most compliance work is done remotely, so treat location as a tie-breaker rather than a filter.

9 firms.

Penetration testing firms in Quebec

Certi360 Unclaimed

Laval information security consultancy offering compliance and certification support for ISO 27001, SOC 2 and PCI DSS plus penetration testing. Not a CPA firm and does not sign SOC 2 opinions.

Laval, Quebec · SOC 2 readiness, ISO 27001, Penetration testing, Compliance advisory

Frameworks: SOC 2, ISO 27001, PCI DSS

Clavea Security Unclaimed

Montreal area cybersecurity firm serving small and mid-sized businesses with offensive security testing managed monitoring ISO 27001 work and Quebec Law 25 compliance.

Laval, Quebec · ISO 27001, Penetration testing, Compliance advisory

Frameworks: ISO 27001

Commissionnaires du Québec Unclaimed

Quebec security organisation whose cybersecurity unit performs penetration tests using OWASP NIST and PTES methods for provincial businesses and public bodies.

Montreal, Quebec · Penetration testing

Frameworks: ISO 27001, NIST CSF

CyberSpective Unclaimed

Montreal cybersecurity consultancy providing penetration testing and compliance advisory work for organisations in Ontario Quebec Alberta and British Columbia.

Montreal, Quebec · Penetration testing, Compliance advisory

Frameworks: SOC 2, HIPAA

MS Solutions Unclaimed

Quebec IT services firm whose security practice runs external internal cloud SaaS industrial web and Microsoft 365 penetration tests.

Quebec · over 75 people · Penetration testing

OKIOK Unclaimed

Quebec security consultancy offering penetration testing and vulnerability assessment along with identity management products and advisory services.

Laval, Quebec · Penetration testing

StreamScan Unclaimed

Montreal cybersecurity company selling penetration testing and managed detection with compliance work aligned to NIST 800-171 and Canadian certification programs.

Montreal, Quebec · Penetration testing, Compliance advisory

Frameworks: NIST CSF

Systemes Securitech Systems inc. Unclaimed

Montreal firm naming vCISO in its consulting services, delivered alongside SOC monitoring, penetration testing and incident response.

Montreal, Quebec · ISO 27001, Penetration testing, vCISO, Compliance advisory

Frameworks: SOC 2, ISO 27001

Victrix Unclaimed

Quebec IT and security services firm offering traditional penetration testing and pentest as a service with reporting for common compliance regimes.

Montreal, Quebec · Penetration testing

Frameworks: SOC 2, ISO 27001, HIPAA, PCI DSS

Get quotes instead of browsing

Describe what you need once and it reaches the firms on this page that match it.

Get quotes

Back to the full directory

Other ways to narrow the list

Same directory, cut a different way.

How do I know I can trust one of these firms?

Judge the website the way you would judge a report they wrote for you, because it is the only sample of their work you get free. Look for past work in specifics, an address in every country they claim, writing that could only be about them, and named people doing the work. None is proof alone; two together is a reason to ask direct questions. The four checks in full.

How were these firms chosen?

They were listed from public information or added by the firm itself. Being listed is not a recommendation, and GetPentest does not rank firms by quality. Verified listings sit above free ones and the order inside each band is fixed.

Does it cost anything to get quotes?

No. Buyers are never charged. Firms can pay for a Verified listing, and higher-intent enquiries are offered to free listings for a fee, which is how the site is funded.

How many firms should I approach?

Three is the number that makes a quote comparable. One quote tells you a price, and two tell you which is cheaper. Three tells you what the work actually costs and which firm understood your scope.