Software Secured

Software Secured

Ottawa, Ontario, Canada

Offensive SecurityApplication SecurityCloud SecurityNetwork Security
Founded 2010Serves Enterprise, SMB
Profile last updated: May 7, 2026

About

Founded in 2010, Software Secured is a cybersecurity company based in Ottawa, Canada working in offensive security, application security, cloud security +1 more.

Software Secured is a Canadian penetration testing company founded in 2010 by Sherif Koussa. It provides manual, exploit-driven security testing for B2B SaaS companies, fintech, healthcare and other organisations that need to meet compliance requirements and protect data. Services include web application and API penetration testing, mobile application testing, secure code review, internal and external network testing, cloud security review, threat modeling, red teaming, social engineering testing, IoT and hardware security testing, and AI penetration testing for LLMs, RAG pipelines and agents. Testing is performed by full-time North America-based pentesters holding certifications such as OSCP, OSWE and GWAPT. The company offers penetration testing as a service (PTaaS) through its Portal, which provides recurring testing, reporting, retesting and integrations with developer and GRC tools. Findings are reported with reproduction steps, severity scoring and remediation guidance, with mappings to frameworks such as SOC 2, ISO 27001, HIPAA, PCI DSS and GDPR.

Location

Ottawa, Canada

Founded

2010

Focus areas

penetration testingPTaaSweb application securityAPI securitymobile securitysecure code reviewred teamingthreat modelingAI securityIoT securityhardware securitycloud security reviewsocial engineering

Languages

EN

Services & products

Security domains

Offensive SecurityApplication SecurityCloud SecurityNetwork Security

How they deliver

Professional ServicesConsultingTraining

Products

Software Secured Portal

Pentest management platform

Platform for managing penetration test projects, tracking remediation and retesting, sharing redacted reports, and integrating findings with Jira, Azure DevOps and Slack.

Secure Code Training

Security training

Interactive labs that teach real exploits, fixes and prevention techniques for developers.

Customers

EnterpriseSMB

Industries served

SaaSFinTechHealthcareCryptocurrencyFinancial services

Compliance & partners

Compliance frameworks

ISO 27001ISO 42001SOC 2HIPAAPCI DSSGDPREU AI ActIEC 62443

Technology partners

DrataVanta

People

Management & team (2)