# Application security & pentesting tools used by Finance companies usedby lists 16 Finance companies using 3 Application security & pentesting tools. The most used is Endor Labs: 8 of the 16 Finance companies on usedby, every proof level counted. These are counts of the companies usedby tracks, not a market share. Data as of 2026-10-25. ## Largest and best-proven users Two labelled views of the same companies. Neither is a score. ### Largest companies By employee range. Size known for 11 of 16. | Company | Proof | Employees | Tools | Last check | |---|---|---|---|---| | [Helvetia](https://www.usedby.ai/companies/helvetia.md) | Confirmed | 10,001+ | Snyk | 2026-10-25 | | [Manulife](https://www.usedby.ai/companies/manulife.md) | Observed | 10,001+ | Snyk | 2026-10-25 | | [Citi](https://www.usedby.ai/companies/citi.md) | Observed | 10,001+ | Endor Labs | 2026-10-25 | ### Strongest proof Confirmed or declared: 2 of 16. This view filters what you read, never what is counted. | Company | Proof | Employees | Tools | Last check | |---|---|---|---|---| | [Helvetia](https://www.usedby.ai/companies/helvetia.md) | Confirmed | 10,001+ | Snyk | 2026-10-25 | | [Pomelo](https://www.usedby.ai/companies/pomelo.md) | Confirmed | 201–1,000 | Snyk | 2026-10-25 | ## Ranking Tools ranked by the companies of the 16 Finance companies on usedby that use them. Each company counts once per tool, at its strongest proof. Ties go to more confirmed, then declared, then observed companies. | # | Tool | Companies | Confirmed | Declared | Observed | Job posts only | Last check | |---|---|---|---|---|---|---|---| | 1 | [Endor Labs](https://www.usedby.ai/tools/endor-labs.md) | 8 | 0 | 0 | 8 | 0 | 2026-10-25 | | 2 | [Snyk](https://www.usedby.ai/tools/snyk.md) | 7 | 2 | 0 | 5 | 0 | 2026-10-25 | | 3 | [XBOW](https://www.usedby.ai/tools/xbow.md) | 1 | 0 | 0 | 1 | 0 | 2026-10-22 | ## Customers per tool Every line is a customer, at one of three proof levels: confirmed (a case study, a named quote, a press release, or the company's own public account of using the tool (its own site, or a post by one of its executives, VP or above)), observed (the vendor shows the company on its own pages) or signal (a job post shows the company's employees use the tool, the weakest proof). A line the company declared to usedby itself, or that it lists as a sub-processor on its own legal page, is marked declared. A signal is never a case study or a vendor listing. Strongest proof first. "Last check" is the later of the line's re-verification and its latest capture. | Tool | Company | Proof | Source | Last check | |---|---|---|---|---| | Endor Labs | [Robinhood](https://www.usedby.ai/companies/robinhood.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 | | Endor Labs | [Affirm](https://www.usedby.ai/companies/affirm.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-16 | 2026-10-16 | | Endor Labs | [Citi](https://www.usedby.ai/companies/citi.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 | | Endor Labs | [Edelman Financial Engines](https://www.usedby.ai/companies/edelman-financial-engines.md) | Observed | [endorlabs.com](https://www.endorlabs.com/), captured 2026-10-25 | 2026-10-25 | | Endor Labs | [MileIQ](https://www.usedby.ai/companies/mileiq.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 | | Endor Labs | [Mysten Labs](https://www.usedby.ai/companies/mysten-labs.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 | | Endor Labs | [Principal](https://www.usedby.ai/companies/principal.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-16 | 2026-10-16 | | Endor Labs | [The Hartford](https://www.usedby.ai/companies/the-hartford.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-16 | 2026-10-16 | | Snyk | [Helvetia](https://www.usedby.ai/companies/helvetia.md) | Confirmed | [snyk.io](https://snyk.io/case-studies/helvetia/), captured 2026-10-07 | 2026-10-25 | | Snyk | [Pomelo](https://www.usedby.ai/companies/pomelo.md) | Confirmed | [snyk.io](https://snyk.io/case-studies/pomelo/), captured 2026-10-07 | 2026-10-25 | | Snyk | [Manulife](https://www.usedby.ai/companies/manulife.md) | Observed | [snyk.io](https://snyk.io/), captured 2026-10-25 | 2026-10-25 | | Snyk | [Lunar](https://www.usedby.ai/companies/lunar.md) | Observed | [snyk.io](https://snyk.io/case-studies/), captured 2026-10-18 | 2026-10-25 | | Snyk | [Mollie](https://www.usedby.ai/companies/mollie.md) | Observed | [snyk.io](https://snyk.io/case-studies/), captured 2026-10-18 | 2026-10-25 | | Snyk | [Varo Bank](https://www.usedby.ai/companies/varo-bank.md) | Observed | [snyk.io](https://snyk.io/case-studies/), captured 2026-10-07 | 2026-10-25 | | Snyk | [WEX](https://www.usedby.ai/companies/wex.md) | Observed | [snyk.io](https://snyk.io/), captured 2026-10-25 | 2026-10-25 | | XBOW | [Sequoia](https://www.usedby.ai/companies/sequoia.md) | Observed | [xbow.com](https://xbow.com/), captured 2026-10-22 | 2026-10-22 | ## Method Public customer lines of active Application security & pentesting tools at companies classified in Finance. No software vendor had to be left out. Company mix by strongest proof: 2 confirmed, 0 declared, 14 observed and 0 signals. ## Questions ### Which Application security & pentesting tools do Finance companies use most? Endor Labs leads: 8 of the 16 Finance companies on usedby that use Application security & pentesting tools use it. Next: Snyk (7) and XBOW (1). ### How many Finance companies use Application security & pentesting tools? 16 Finance companies on usedby use at least one of 3 Application security & pentesting tools. It counts the companies usedby tracks. ### What proof backs these lines? Of the 16 companies, each counted at its strongest proof: 2 confirmed, 0 declared, 14 observed and 0 known from a job post. ### How does usedby build this ranking? usedby counts each Finance company once per tool, from public proof: case studies, press releases, the company's own site or its declaration to usedby, vendor customer pages and job posts. Every line shows its proof and the date usedby last checked it. Industry page: https://www.usedby.ai/companies/industry/finance.md · Category page: https://www.usedby.ai/tools/category/application-security.md --- Source: https://www.usedby.ai/companies/industry/finance/application-security · How we check: https://www.usedby.ai/methodology