Security Experts:

Connect with us

Hi, what are you looking for?


Application Security

Pentest-as-a-Service Company Cobalt Raises $29 Million

Pentest-as-a-Service (PtaaS) company Cobalt announced on Thursday that it has raised $29 million in a Series B funding round.

Pentest-as-a-Service (PtaaS) company Cobalt announced on Thursday that it has raised $29 million in a Series B funding round.

The funding round, which brings the total raised by the firm to $37 million, was led by venture capital firm Highland Europe, with participation from several angel investors. Cobalt says it will use the money to improve its platform and expand its global usage.

Founded in 2013, Cobalt has designed a platform that connects vetted ethical hackers with organizations looking to test the security of their products.

Cobalt assigns pentesters whose skills match the targeted application stack. These testers will look for a wide range of vulnerabilities, with findings being reported in real time on the Cobalt platform. Once the customer patches the identified flaws — a process in which they can receive assistance from the pentesters — everything is re-tested and verified. Customers pay a fixed price based on the size of their application and the frequency of testing.

Cobalt says it has roughly 300 pentesters and more than 500 customers, including Axel Springer, GoDaddy, MuleSoft and Vonage.

“As someone who oversees security for a large and diverse portfolio of web applications, traditional pentesting simply cannot keep pace,” said Henning Christiansen, CISO at Axel Springer. “We need real-time insight. Cobalt’s unique delivery model meets this need. All our business units have embraced the platform, which is testament to its ease of use, quality of the test findings, and ability to deliver real results.”

Related: Bugcrowd Raises $30 Million in Series D Funding Round

Related: Crowdsourced Security Testing Firm Synack Raises $52 Million

Related: Vulnerability Management Firm Kenna Security Raises $48 Million

Related: HackerOne Raises $36.4 Million in Series D Funding Round

Written By

Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Mobile & Wireless

Technical details published for an Arm Mali GPU flaw leading to arbitrary kernel code execution and root on Pixel 6.

Mobile & Wireless

Apple rolled out iOS 16.3 and macOS Ventura 13.2 to cover serious security vulnerabilities.

Cloud Security

VMware vRealize Log Insight vulnerability allows an unauthenticated attacker to take full control of a target system.

Mobile & Wireless

Apple’s iOS 12.5.7 update patches CVE-2022-42856, an actively exploited vulnerability, in old iPhones and iPads.


Security researchers have observed an uptick in attacks targeting CVE-2021-35394, an RCE vulnerability in Realtek Jungle SDK.

Mobile & Wireless

Two vulnerabilities in Samsung’s Galaxy Store that could be exploited to install applications or execute JavaScript code by launching a web page.


Several vulnerabilities have been patched in OpenText’s enterprise content management (ECM) product.