# Expel

> Expel is a managed detection and response company that connects to an enterprise's existing security tools, filters and investigates alerts around the clock, and gives customers a live view of the work through its Workbench platform. Its central bet is that security teams need fewer notifications and more completed investigations, combining Ruxie AI and automation with human analysts rather than asking customers to replace their technology stack.

- **Founded:** 2016
- **Headquarters:** Herndon, United States
- **Founders:** Dave Merkel (Co-founder and CEO), Yanek Korff (Co-founder and COO), Justin Bajko (Co-founder and Chief Strategy Officer)
- **Team size:** Approximately 480 employees based on supplied company data.
- **Products:** Expel Workbench, Managed Detection and Response, Managed Phishing, Threat Hunting, Ruxie AI
- **Notable:** Reached a valuation above $1 billion in 2021., Raised $288.8 million in total funding by October 2022., Named a Leader in The Forrester Wave: Managed Detection and Response Services, Q1 2025.

## Products & services

- **Expel Workbench** — The shared security operations platform that integrates customer tools, correlates signals, supports investigations, and exposes the audit trail to customers.
- **Managed Detection and Response** — 24/7 monitoring, detection, investigation, response guidance, and optional automated remediation across endpoint, identity, cloud, network, SaaS, email, OT, and SIEM environments.
- **Managed Phishing** — A managed service for triaging and investigating reported phishing messages and reducing the burden on internal security teams.
- **Threat Hunting** — Hypothesis-based, MITRE ATT&CK-aligned hunts across cloud, on-premises, identity, endpoint, and SaaS environments, delivered as an MDR extension.
- **Ruxie AI** — Expel's AI and automation layer for collecting evidence, enriching and triaging alerts, assisting investigations, response, reporting, and detection improvement.

## Achievements

- Reached a valuation above $1 billion in 2021.
- Raised $288.8 million in total funding by October 2022.
- Named a Leader in The Forrester Wave: Managed Detection and Response Services, Q1 2025.
- Appeared on Deloitte's Technology Fast 500 for five consecutive years, according to the company.
- Expanded to more than 160 technology integrations across ten attack surfaces.
- Reported more than 500 customers in its 2026 company overview.
- Added Mandiant founder Kevin Mandia as an independent director in 2024.

## Latest updates

- **2026-06** — Expanded Ruxie AI with agents and capabilities spanning collection, detection, enrichment, triage, investigation, response, reporting, and continuous improvement.
- **2026-05** — Added three threat hunts, a cross-environment alert grid, and a human-in-the-loop blocked-malware triage agent to Workbench.
- **2026-03** — Introduced an AI detection agent that identifies coverage gaps in third-party telemetry and proposes new detection rules subject to SOC review.
- **2026-03** — Launched bi-directional threaded incident collaboration between Workbench and customer Slack or Microsoft Teams environments.
- **2026-01** — Added AI-generated plain-English explanations for detection strategies and exposed the individual rules behind bundled detections.
- **2025-11** — Deepened CrowdStrike support with an integration for Falcon Next-Gen SIEM.

## Links

- Website: https://expel.com
- LinkedIn: https://www.linkedin.com/company/expel
- Twitter/X: https://twitter.com/expel_io
- GitHub: https://github.com/expel-io
- YouTube: https://www.youtube.com/@expelsecurity
- Instagram: https://www.instagram.com/expel_io/
- Facebook: https://www.facebook.com/expel.io/

---

Profile page: https://yespress.io/expel
Published by YesPress — https://yespress.io
Last updated: 2026-08-13