What Cobalt is
Cobalt has quickly become the leader in penetration testing due to their combination of HackerOne like bug bounty programs with more standard pen testing. They are a great and consistent middle choice for penetration testing, that will go deeper than many, but not as deep as boutique firms. The vendor site is cobalt.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Cobalt covers
Cobalt is in the catalog for these capabilities. Categories: Pentest. Catalog tags: Hands-on and Best for Startups.
How to evaluate Cobalt in a security program
Use Cobalt as a stack candidate, not as diligence evidence. The oneNorma score for Cobalt is 5/10 (percentile 46). If the real gap is in Pentest, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what cobalt.io publishes. Contrast it with pentesting and Security Cloud & Compliance.
