Black Hills Information Security

Penetration testing, training, and security assessments with a focus on practical security

Strong Performer 72/100 CSCF Analyst Rating™
Founded 2008
Team Size 10-50
Typical Pricing $25k-$50k
Service Area US-National
Visit website →

About Black Hills Information Security

Black Hills Information Security (BHIS) is a boutique security firm known for penetration testing, security training, and practical security assessments. Founded by former military and law enforcement cybersecurity professionals, BHIS emphasizes hands-on testing over automated scanning. The firm's penetration testers hold OSCP, GPEN, and other advanced certifications and regularly speak at security conferences. BHIS provides network penetration testing, web application assessments, wireless security testing, and social engineering engagements. Their testing uncovers realistic attack paths and provides actionable remediation guidance. BHIS is also known for security training, offering courses in penetration testing, incident response, and threat hunting.

Mid-market organizations and security teams wanting practitioner-led penetration testing with educational emphasis

Services

Penetration Testing
Security Assessment
Incident Response

Team Certifications

OSCPGPENGCIHCISSP

CSCF Analyst Rating

72
Strong Performer
Technical Capability 19/20
Specialization Depth 15/20
Client Scale Fit 13/20
Value & Transparency 14/20
Market Presence 11/20

v1.0 · Feb 2026 · Public data only. Methodology →

Industry Focus

— Healthcare
— Financial Services
— Small Business

Similar firms

All firms →

Coalfire

Compliance & Risk Management

88
/ 100
Leader

Cybersecurity advisory and assessment services for compliance and risk management

$100k+ 250+ employees
View profile →

NetSPI

Penetration Testing

86
/ 100
Leader

Penetration testing and attack surface management at enterprise scale

$50k-$100k 250+ employees
View profile →

GuidePoint Security

vCISO / MDR

85
/ 100
Leader

Cybersecurity solutions focusing on detection, response, and security transformation

$100k+ 250+ employees
View profile →