Borg

Borg

Borg Security AS

Trondheim, Norway

Offensive SecurityPenetration TestingApplication Security
Serves Enterprise
Profile last updated: August 20, 2026

About

Borg is a cybersecurity company based in Trondheim, Norway working in offensive security, penetration testing, application security.

Borg is a Norwegian cybersecurity company providing continuous offensive security for engineering teams. Its services combine the Odin platform, the Mjolnir autonomous whitebox pentesting engine, the Gungnir pull request security review tool and the Huginn attack surface discovery tool. Borg also offers an Embedded Research Service (ERS) that provides human offensive researchers for enterprise customers. The company focuses on exploitable issues in authentication, access control, tenant isolation, APIs and business logic, and reports findings with verified proof-of-concept exploits and suggested fixes. Clients include organisations in fintech, AI, infrastructure and high-traffic consumer applications.

Location

Trondheim, Norway

Legal name

Borg Security AS

Focus areas

offensive securitypenetration testingautonomous pentestingapplication securitycode-aware testingattack surface managementpull request security review

Languages

EN

Services & products

Security domains

Offensive SecurityPenetration TestingApplication Security

How they deliver

SoftwareProfessional ServicesManaged Services

Products

Odin

Continuous offensive security platform

Platform for continuous discovery, attack, reporting and remediation of security issues, with findings tracking, workflows and issue tracker integrations.

Mjolnir

Autonomous pentesting

Autonomous whitebox pentest engine that reads source code, maps the attack surface, generates test cases and executes them against live applications to confirm exploitable issues.

Gungnir

Code review security

Runs on pull requests to detect vulnerabilities, weakened controls, data exposure and risky security configuration changes, posting inline review comments.

Huginn

Attack surface discovery

Continuously discovers and monitors an organisation's external attack surface, including domains, subdomains, cloud assets and exposed services.

Customers

Enterprise

Industries served

FintechArtificial IntelligenceInfrastructureConsumer Applications

Other cybersecurity companies in Norway

View all