Rhino Security Labs logo

Rhino Security Labs

Cloud security penetration testing specialists known for the Pacu AWS exploitation framework and deep expertise across AWS, Azure, and GCP environments.

Founded
2013
Team Size
11-50
Geography
National
Last verified: Feb 2026

About

Rhino Security Labs is a penetration testing firm headquartered in Seattle, Washington, that has built a distinctive reputation as a leading specialist in cloud security testing, particularly for Amazon Web Services environments. Founded in 2013 by Benjamin Caudill, the company has become a go-to provider for organizations that need expert assessment of their cloud infrastructure, applications, and configurations. Rhino Security Labs developed and maintains Pacu, an open-source AWS exploitation framework that has become a standard tool for cloud penetration testers worldwide.

Their team's deep expertise in AWS, Azure, and GCP security is demonstrated through regular conference presentations, published research, and tool releases that advance the state of the art in cloud security testing. Beyond cloud, the company provides web application penetration testing, network testing, social engineering, and red team services.

Their approach emphasizes finding real attack paths that could lead to compromise rather than merely identifying individual vulnerabilities. Rhino Security Labs serves mid-market and enterprise clients across technology, financial services, healthcare, and other sectors. Their consultants hold certifications including OSCP, AWS Security Specialty, and GPEN, and the team maintains an active research program focused on cloud security.

Best For

Mid-MarketStartupEnterprise

Methodologies

OWASPPTESNIST

Team Activity

Active in CTF competitions
Speaker: Black Hat
Speaker: DEF CON
Speaker: fwd:cloudsec
Open source: Pacu
Open source: CloudGoat
Open source: ccat

Compare With

Reviews

Be the first to share your experience with Rhino Security Labs.

Be the first to review Rhino Security Labs
Is this your company? Claim this profile

Related Providers

Best for Mid-MarketBest for Financial Services
NetSPI logo

NetSPI

Leading penetration testing firm with the Resolve platform for continuous attack surface management, trusted by nine of the top ten US banks.

Minneapolis, Minnesota, United StatesContact for pricing
Web ApplicationNetworkCloudAPI+7
SOC 2ISO 27001CREST
Verified Feb 2026
Trustwave logo

Trustwave

Global managed security provider with the elite SpiderLabs penetration testing team and deep PCI DSS compliance expertise.

Chicago, Illinois, United StatesContact for pricing
Web ApplicationNetworkMobile AppCloud+6
PCI QSAISO 27001SOC 2CREST
Verified Feb 2026
Rapid7 logo

Rapid7

Creators of Metasploit offering enterprise penetration testing integrated with their comprehensive vulnerability management and security operations platform.

Boston, Massachusetts, United StatesContact for pricing
Web ApplicationNetworkMobile AppCloud+6
SOC 2ISO 27001
Verified Feb 2026
Best OverallElite TestersResearch Pioneers
Bishop Fox logo

Bishop Fox

Premier US-based offensive security firm known for elite penetration testers, cutting-edge research, and the Cosmos continuous attack surface management platform.

Tempe, Arizona, United StatesContact for pricing
Web ApplicationNetworkMobile AppCloud+7
SOC 2OSCP Employer
Verified Feb 2026