Forward Security

Forward Security

Vancouver, British Columbia, Canada

Application SecurityCloud SecurityPenetration TestingOffensive Security
Serves Enterprise, SMB
Profile last updated: April 26, 2026

About

Forward Security is a cybersecurity company based in Vancouver, Canada working in application security, cloud security, penetration testing +4 more.

Forward Security is an application, cloud and information security firm headquartered in Vancouver, Canada, with offices in Toronto, Austin and New York. Its services include application security risk assessments, security design reviews, threat modelling, penetration testing, code security and dependency analysis, DevSecOps managed services, cloud security assessments and design, IoT security assessments, blockchain and smart contract security, AI and LLM application security testing, information security management and compliance advisory, and security awareness and developer security training. The firm's proprietary Eureka DevSecOps platform and managed service orchestrate security scanners and manage application security risk, and it also offers AutoGQL, a GraphQL security testing tool. Forward Security states that it works with fintech, financial services, healthtech, eCommerce and technology organisations, including fast-growing start-ups and medium-sized enterprises, and that it bases its methodology on OWASP ASVS and CIS Benchmarks. Its team members are described as ex-software developers and security specialists, and the company is active in the OWASP community.

Location

Vancouver, Canada

Focus areas

application securitycloud securitypenetration testingthreat modellingDevSecOpscode security analysisIoT securityblockchain securityAI securitysecurity trainingOWASPGraphQL security

Languages

EN

Services & products

Security domains

Application SecurityCloud SecurityPenetration TestingOffensive SecurityManaged SecurityGRC & ComplianceSecurity Awareness

How they deliver

Professional ServicesConsultingManaged ServicesSoftwareTraining

Products

Eureka DevSecOps Platform

DevSecOps platform

Centralized platform to orchestrate application security scanners, correlate results, and manage application security threats and risks. Offered as a managed service as well.

AutoGQL

GraphQL security testing tool

Automated tool for identifying vulnerabilities in GraphQL endpoints, delivered as a Burp Suite Active Scanner plugin.

Customers

EnterpriseSMB

Industries served

FinanceHealthcareTechnologyRetaileCommerceFintechHealthtech

Compliance & partners

Compliance frameworks

ISO 27001OWASP ASVSOWASP Top 10OWASP Top 10 for LLM ApplicationsCIS BenchmarksHIPAAHITECHPCI DSSPSD2FINRA

Credentials & affiliations

Industry memberships

OWASP

People

Management & team (16)

+ 12 more

Other cybersecurity companies in Canada

View all