Oneleet – Penetration Testing for SOC 2 and beyond

In plain words

Oneleet is a penetration testing platform that helps companies schedule and manage security assessments for compliance requirements and security improvements. The service works exclusively with vetted penetration testers located in NATO countries to ensure consistent quality results. It is designed for organizations seeking reliable penetration testing services with a focus on compliance-driven security testing and actionable findings.

written from the facts on this page · September 2026

From the sources

Looking to obtain a SOC 2 report or an ISO 27001 certification? Oneleet is the only all-in-one platform for both real world security AND compliance. Talk to us about SOC 2, HIPAA, ISO 27001, PCI, GDPR & more.

In the maker’s words, at launch

Hello HN, Over the past months at Oneleet (YC S22), our team has been building https://app.oneleet.com, a compliance-focused pentesting-as-a-service platform. It allows companies to easily schedule and manage penetration tests, designed for both compliance and security enhancement. We collaborate…

• 
  Astra Autonomous PentestJun 2026 · getastra.com · ▲406

  AI agents that find, validate, and fix every vulnerability

• 
  Pentest Copilot by BugBase2023 · copilot.bugbase.ai · ▲316

  Your ultimate AI-powered ethical hacking assistant

• 
  Signadot2022 · signadot.com · ▲187

  Hi again HN, we’re Arjun and Anirudh, founders of Signadot (YC W20). Signadot helps teams developing microservices test their changes using lightweight environments called “Sandboxes”. We use a relatively new approach, using traffic labeling (using OpenTelemetry) and request routing (using a Service Mesh) to isolate environments in a shared Kubernetes cluster. Today, we’re launching a new feature to help developers with local testing of microservices during the iterative development process. When we initially launched in September last year…

• 
  My weekend project to learn Javascript - 'Pinterest for Hacker News'2012 · hackerest.com · ▲95

  We launched Hackerest last week. We’re a group of security engineers based in Italy (ex-Amazon, Accenture) who spent years doing pentests the traditional way and kept wondering why the workflow still looks like it did in 2010. Most pentests today (still) work like this: 1. the engagement runs for days or weeks 2. nothing is shared until everything is finished 3. the client gets a PDF long after the issues were actually discovered 4. half of the attack surface has changed by then What Hackerest does: * findings appear in real time during the active testing window, as testers discover them *…

• 
  Demonstrate by NotteJan 2026 · console.notte.cc · ▲285

  Browser workflows to deployed automation in minutes

• BO
  Bearer – Open-source code security scanning solution (SAST)2023 · ▲106

  Hi HN, we’re the co-founders of Bearer, and today we launch an open-source alternative to code security solutions such as Snyk Code, SonarQube, or Checkmarx. Essentially, we help security & engineering teams to discover, filter and prioritize security risks and vulnerabilities in their codebase, with a unique approach through sensitive data (PII, PD, PHI). Our website is at https://www.bearer.com and our GitHub is here: https://github.com/bearer/bearer We are not originally Security experts but have been software developers and engineering leaders for over 15…

• 
  /dev/null▲490

  a social network for devs

  Dev tools · 4d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 28d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 26d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 23d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 21d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 29d ago · corespeed.io

• 
  Sidekick▲1,341

  An AI-powered accessibility assistant in Stark

  AI · 2023 · getstark.co

• 
  Boring Report, a news app that uses AI to desensationalize the news▲1,166

  In today's world, catchy headlines and articles often distract readers from the facts and relevant information. By utilizing OpenAI's language models, Boring Report processes sensationalist news articles, transforms them into the content you see, and helps readers focus on the essential details. We recently updated our iOS app experience, so any and all feedback would be appreciated. App Link: https://apps.apple.com/us/app/boring-report-news-by-ai/id644...

  AI · 2023 · boringreport.org

• 
  Dora AI (Alpha)▲1,136

  Generating powerful websites, one prompt at a time

  AI · 2023

• 
  AudioPen▲888

  The easiest way to convert messy thoughts into clear text

  AI · 2023 · audiopen.ai

• 
  Momentum Page▲834

  Launch your website in seconds, get users in minutes

  Dev tools · 2023 · page.mmntm.build

• 
  Moda▲791

  An e-commerce growth marketing platform

  Growth · 2023