2 November 2026 · 6 min read
HackersHub Announces Full-Scale US Market Entry in Q1 2027
Amsterdam, 2 November 2026. HackersHub, the offensive security firm founded in the Netherlands in 2015, today announced its planned full-scale entry into the United States market in the first quarter of 2027. Ahead of the expansion, the company is offering 20 complimentary penetration tests to qualifying US companies.
The announcement
HackersHub plans to enter the US market at full scale in Q1 2027. The company already serves US clients from its Netherlands-based operations, working together with US delivery partners. The expansion builds on that existing client base and puts US delivery on a broader footing.
Since its founding in 2015, HackersHub has completed more than 2,500 security engagements. Its work is carried out by an internal team of offensive security specialists, supported by a network of vetted professionals. Every tester holds at least the Offensive Security Certified Professional (OSCP) certification, and the team includes OSWE and CREST-certified testers.
Ahead of the expansion, HackersHub is offering 20 complimentary penetration tests to qualifying US companies, subject to eligibility, agreed scope and availability. Companies that already work with a penetration testing provider can choose a head-to-head benchmark option, in which HackersHub tests a comparable scope and the company compares both reports.
'We already test for US companies today, from the Netherlands and with our US delivery partners,' a HackersHub spokesperson said. 'The Q1 2027 expansion extends that work. The pilot engagements give US security teams the opportunity to assess our methodology and reporting on one of their own systems.'
Who HackersHub is
HackersHub is a penetration testing and offensive security firm based in Amsterdam, Netherlands. It works for organisations in financial services, technology, healthcare and energy, with engagements scoped individually for each client rather than sold from a fixed catalogue.
Testing follows recognised methodologies, including PTES, the OWASP Web Security Testing Guide and Mobile Application Security Testing Guide, and NIST SP 800-115. Every report contains an executive summary, CVSS-scored findings with evidence, an attack narrative and prioritised remediation guidance. A verification retest of medium and higher findings within 90 days is included in each engagement. Clients rate HackersHub 4.9 out of 5 across 127 reviews.
Services available to US clients
US clients have access to the same service portfolio that HackersHub delivers in Europe. Each engagement is scoped to the client's systems and compliance context.
Penetration testing
Manual, scoped penetration tests aligned with PTES and NIST SP 800-115, with reporting that supports evidence requests under SOC 2, HIPAA and PCI DSS v4.0.1 Requirement 11.4.
Web application penetration testing
Testing of authentication, session handling, access control and business logic, following the OWASP Web Security Testing Guide.
Network penetration testing
External perimeter and internal network testing, including Active Directory attack paths and segmentation checks.
API penetration testing
REST and GraphQL testing against the OWASP API Security Top 10, with particular attention to object-level authorisation and data exposure.
Cloud penetration testing
Configuration review and attack-path testing across AWS, Azure and Google Cloud, covering identity, storage and workload exposure.
AI penetration testing
Testing of LLM applications and AI agents for prompt injection, data leakage and unsafe tool use, mapped to the OWASP Top 10 for LLM Applications 2025.
Red teaming
Objective-based adversary simulation that tests detection and response across people, process and technology.
Security consulting
Advisory support on testing programmes, remediation planning and the security questions raised by audits and enterprise customers.
The complimentary US pilot
The 20 complimentary penetration tests are open to companies headquartered in the United States or with US operations. Each pilot covers one defined in-scope asset, such as a web application, an API or the external network perimeter. Applicants provide a named technical contact and agree to HackersHub's rules of engagement and an authorisation letter before testing begins. All places are subject to eligibility, agreed scope and availability.
Pilot engagements are delivered with the same report and the same retest terms as paid engagements. The head-to-head benchmark option is available to companies that already use a penetration testing provider. Full eligibility details and the application route are set out in the guide to the complimentary penetration test pilot.
How US engagements are delivered
US engagements are delivered remotely from HackersHub's Netherlands-based operations, coordinated with its US delivery partners. Testing windows are agreed in advance to suit the client's US time zone and change calendar, and critical findings are reported to a named client contact as soon as they are confirmed. Where an engagement requires on-site work, such as internal network or physical testing, testers travel to the client's location.
US clients receive the same methodology, the same named and certified testers and the same report structure as clients in Europe. Scope, rules of engagement and the authorisation letter are agreed in writing before any testing starts. HackersHub does not currently operate a US office; the Q1 2027 expansion is planned to broaden its US presence and delivery capacity.
Initial US focus sectors
HackersHub's initial US focus covers four groups of organisations whose systems and regulatory obligations call for in-depth manual testing.
- SaaS companies whose enterprise customers require penetration test evidence during procurement and SOC 2 audits
- Fintech companies operating payment, lending and banking-as-a-service platforms
- Healthcare technology companies that handle protected health information under the HIPAA Security Rule
- Enterprises with complex digital infrastructure: multi-cloud estates, large API surfaces and hybrid networks
About HackersHub
HackersHub is an offensive security firm founded in the Netherlands in 2015 and based in Amsterdam. With more than 2,500 completed security engagements, an internal team of offensive security specialists and a network of vetted professionals, HackersHub delivers penetration testing, red teaming and security consulting for organisations in financial services, technology, healthcare and energy. The company serves US clients from its Netherlands-based operations together with US delivery partners and plans a full-scale US market entry in Q1 2027.
Media contact
For press enquiries, interview requests and further information about the US expansion, contact [email protected]. Companies interested in the complimentary pilot should apply through the HackersHub contact page rather than the media address.
Frequently asked questions
HackersHub services and US resources
- Penetration testing services by HackersHub
- Web application penetration testing
- Network penetration testing
- API penetration testing
- Cloud penetration testing
- AI penetration testing
- Red teaming
- Security consulting
- The complimentary penetration test pilot for US companies
- Penetration testing in the United States
Talk to HackersHub about US penetration testing
Whether you want to apply for the complimentary pilot or scope a full engagement, a lead tester will discuss your systems, your compliance context and the testing window that suits your team.