Choosing an Independent Penetration Testing Firm

Hi all,

I'm currently in the process of sizing up/comparing various
Penetration Testing firms, and am having a bit of trouble finding
distinguishing characteristics between them.  I've looked at a fair
few, but they all seem to offer very similar services with little to
recommend one over another.  What I'm looking for is an independent
firm capable of doing external penetration tests against a small
datacenter cluster of hosts and then providing a report of their
results (I realize that I just described the general process of
penetration testing).

Does anyone on here have any specific recommendations on what to look
for when choosing an independent penetration testing firm?

Thanks,

Remi

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------