firmlens.
🧩 · 62 companies

Application Security companies in Canada

Browse 62 application security firms covering secure code review, DevSecOps and web and mobile app testing in Canada. Compare compliance frameworks, products and technology partners.

Showing 12 of 62 companies

All companies
CompanyWhat they do

Application Security companies in Canada at a glance

Of the 62 Application Security companies in Canada, the most common security domains are Penetration Testing (71%), GRC & Compliance (68%) and Cloud Security (65%).

Security domains

  • Penetration Testing71%
  • GRC & Compliance68%
  • Cloud Security65%
  • Network Security63%
  • Offensive Security60%

Offering types

  • Professional Services84%
  • Consulting65%
  • Software58%
  • Managed Services52%
  • Training45%

Customer segments

  • Enterprise87%
  • SMB52%
  • Public Sector52%
  • Critical Infrastructure23%

Compliance frameworks

  • ISO 2700147%
  • SOC 235%
  • PCI DSS35%
  • GDPR29%
  • HIPAA21%

Top cities

  • Toronto13%
  • Vancouver6%
  • Ottawa6%
  • Waterloo3%
  • Montréal3%
  • Victoria3%

Size

  • 11-50 employees5%
  • 51-200 employees6%
  • 201-500 employees3%
  • 501-1000 employees3%
  • 1001-5000 employees3%
  • 5000+ employees3%

Most held certifications

  • ISO 2700110%
  • SOC 2 Type 25%
  • SOC 23%
  • CREST accreditation3%
  • ISO/IEC 270013%

Key facts

  • 2015 is the median founding year
  • 24% run a 24/7 SOC
  • 3% publish an incident response hotline
  • 66% name their products
  • 53% name technology partners

Figures from all 62 companies, as published on their own websites. Shares count only what a profile states, so they are a floor rather than a census.

Other security domains

📋GRC & Compliance🎯Penetration Testing🎓Security Awareness🚨Incident Response🔐Data Protection📡Detection & Response🌐Network Security🛡️Managed Security⚔️Offensive Security🔎Threat Intelligence☁️Cloud Security🪪Identity & Access💻Endpoint Security🧪Digital Forensics✉️Email Security🏭OT/ICS Security