Security Startups

Company directory

14 companies. Sorted by name. No paid boost.

A

AttackIQ

Los Altos, USA

  • Series C
  • Founded 2013

Security control validation platform built around MITRE ATT&CK and purple-team testing.

Named among 2026 CTEM and BAS alternatives in independent vendor comparisons

C

Censys

Ann Arbor, USA

  • Series D
  • $198M raised
  • Founded 2017

Internet-wide map of exposed infrastructure used for ASM, threat hunting, and exposure management.

Raised $40M Series D plus $30M debt led by Morgan Stanley Expansion Capital, March 2026

Cymulate

Tel Aviv, Israel

  • Series D
  • $141M raised
  • Founded 2016

BAS-born exposure validation that now pushes findings into automated control updates.

Shipped Vero AI for agentic cyber defense engineering on the live platform, 2026

D

Detectify

Stockholm, Sweden

  • Series B
  • Founded 2013

Hacker-powered surface monitoring for domains, apps, and APIs, now with an MCP server for AI workflows.

Launched a Detectify MCP server for AI security workflows, 2026

E

Empirical Security

Chicago, United States

  • Series A
  • $37M raised

Exposure management that predicts which vulnerabilities will be exploited, using a global model plus one trained on each customer's environment.

Raised a $25M Series A led by Brightmind Partners, July 2026

H

Hadrian

Amsterdam, Netherlands

  • Seed
  • $14M raised
  • Founded 2021

Outside-in autonomous hacker that discovers, exploits, and validates external exposure continuously.

Shipped Sense, Plan, Attack AI agents to operationalize CTEM, November 2025

Horizon3.ai

San Francisco, USA

  • Series E
  • $429M raised
  • Founded 2019

NodeZero autonomous pentest that exploits live networks the way an attacker would, continuously.

Raised $250M Series E at a $2B-plus valuation, August 2026

P

Pentera

Burlington, USA

  • Series D
  • $250M raised
  • Founded 2015

Automated security validation that actually exploits attack paths inside the customer's network.

Raised $60M Series D led by Evolution Equity Partners, March 2025

Picus Security

San Francisco, USA

  • Series C
  • Founded 2013

Breach-and-attack simulation plus autonomous pentest that scores whether controls actually stop the attack.

Raised $45M Series C to lead adversarial exposure validation, September 2024

S

SAFE

Palo Alto, USA

  • Series C
  • $170M raised
  • Founded 2012

Cyber risk quantification platform that added an agentic CTEM loop on top of CRQ and TPRM.

Raised $70M Series C and launched a fully autonomous CTEM offering, July 2025

SixMap

Columbia, USA

  • Series A
  • $24M raised
  • Founded 2020

Internet-scale IPv4/IPv6 discovery that maps what an attacker can actually see of you.

Launched new product capabilities for AI-driven attack-surface change, December 2025

T

Terra Security

Tel Aviv, Israel

  • Seed
  • $8M raised
  • Founded 2024

Agentic pentest platform with a human in the loop across web, API, network, and AI surfaces.

Raised $8M (Q2 2025) to scale agentic continuous pentesting

X

XM Cyber

Tel Aviv, Israel

  • Series B
  • $49M raised
  • Founded 2016

Hybrid attack-path graph that shows how an identity, cloud, or on-prem foothold becomes a breach.

Named a Challenger in the first Gartner Magic Quadrant for Exposure Assessment Platforms, 2025

Z

Zafran

New York, USA

  • Series C
  • $130M raised
  • Founded 2022

CTEM that proves which CVEs are exploitable, then mitigates with the controls you already own.

Raised $60M Series C led by Menlo Ventures, December 2025

Directory · Security Startups