Where does one go for a trustworthy pentest or security review? Especially, where do smaller companies perhaps go that aren't at the multi-million level.
I can recommend https://includesecurity.com/ , they're very reasonably priced and will probably catch any glaring issues you have, but they probably won't catch any subtle issues on their entry-level pricing.