# Cobalt


> Cobalt, the pioneer in pentesting as a service and a leader in human-led, AI powered offensive security, is focused on combining talent and technology with speed, scalability, and expertise. Thousands of customers rely on the Cobalt Offensive Security Platform, along with 500+ trusted security experts, to find and fix vulnerabilities across their environments.


## Core Services
- [External Attack Surface Management (EASM)](https://www.cobalt.io/services/attack-surface-management): Domains is an external attack surface discovery & monitoring (ASM) solution in the Cobalt platform that leverages OWASP Amass to help you understand which assets in your environment are externally reachable; this helps ensure that all assets in your environment are properly tested and secured.
- [Digital Risk Assessment (DRA)](https://www.cobalt.io/services/digital-risk-assessment): By identifying exposed assets, leaked credentials, and other sensitive information on the internet including by assessing social media and the dark web, a Digital Risk Assessment (DRA) enables security teams to remediate potential attack vectors before attackers find them.
- [Secure Code Review](https://www.cobalt.io/services/application-security/secure-code-review): Uncover the full extent of security-related components with a complete breakdown of application, frameworks, and languages.
- [API Pentest](https://www.cobalt.io/services/application-security/api-pentest): Specialized security testing for REST, GraphQL, and SOAP APIs.
- [Internal Network Pentest](https://www.cobalt.io/services/network-security/internal-network-pentest): Testing the security of internal infrastructure to identify lateral movement risks.
- [External Network Pentest](https://www.cobalt.io/services/network-security/external-network-pentest): Assessing perimeter defenses and internet-facing assets against unauthorized access.
- [AI & LLM Pentesting](https://www.cobalt.io/services/application-security/llm-pentest): Security testing designed for Large Language Model-based systems and AI applications.


## Platform Features
- [The Cobalt Platform](https://www.cobalt.io/platform): As the pioneer of Pentesting as a Service (PTaaS), The Cobalt Offensive Security Platform combines a premier community of security experts with a human-led, AI-powered SaaS platform. We deliver the speed, scalability, and real-time insights organizations need to remediate risk quickly and innovate securely.[a]
- [Integrations](https://www.cobalt.io/platform/integrations): Native connectors for Jira, GitHub, Slack, and Microsoft Teams to streamline remediation workflows.
- [Cobalt Core](https://www.cobalt.io/cobalt-core): Access to a community of highly-vetted, elite security testers.
- [DAST Scanning](https://www.cobalt.io/platform/dast): "Always on" technology continuously monitors web applications and APIs for vulnerabilities and security issues. This continuous monitoring ensures that any newly introduced vulnerabilities are promptly identified, reducing the window of opportunity for potential attackers.


## Resources & Documentation
- [Resource Library](https://www.cobalt.io/resources): Whitepapers, toolkits, and guides for security professionals.
- [Learning Center](https://www.cobalt.io/learning-center): Fundamentals of offensive security, penetration testing, and cyber defense.
- [Trust Center](https://www.cobalt.io/trust): Security certifications (SOC2, CREST), compliance documentation, and privacy policies.


## Optional Reference
- [Case Studies](https://www.cobalt.io/case-studies): Real-world examples of Offensive Security implementation across various industries.
- [Blog](https://www.cobalt.io/blog): Expert commentary on the latest cybersecurity threats and trends.


[a]Ready for review