attack-surface-management
(17)
Blackpanda
Top-tier incident response, proactive readiness intelligence, and seamless access to cyber insurance - all in one platform. Delivered at less than 10% of the cost of traditional IR.
Zakir Durumeric
Zakir Durumeric is a computer security researcher, Stanford assistant professor, and co-founder and CEO of Censys. As a University of Michigan PhD student he built ZMap, a scanner that can survey the entire public IPv4 internet in minutes rather than weeks, then turned that research into Censys, an internet intelligence platform used for threat hunting and exposure management. His work mapping the internet at scale helped expose the reach of vulnerabilities like Heartbleed and earned him a spot on MIT Technology Review's 35 Innovators Under 35.
Cyble
Cyble is an AI-native threat intelligence company that continuously monitors the surface, deep, and dark web to help enterprises and governments detect, predict, and disrupt cyber threats before they cause damage. Founded in 2019 by Beenu Arora and Manish Chachada, the company packages dark web monitoring, digital risk protection, attack surface management, and agentic AI analysis into a unified platform used by organizations ranging from agile startups to Fortune 50 companies and national agencies.
CYRISMA
CYRISMA is a Rochester, New York-based cybersecurity company that builds a unified, cloud-hosted cyber risk management platform for Managed Service Providers (MSPs), MSSPs, and internal IT teams. It consolidates vulnerability and patch management, sensitive data discovery, secure configuration scanning, attack surface visibility, dark web monitoring, compliance tracking, and risk monetization into a single multi-tenant dashboard - replacing a stack of point tools with one affordable, per-endpoint-priced product. Founded in 2018, the company raised a $7M Series A in 2024 and serves thousands of organizations through partners.
Praetorian
Praetorian is an Austin, Texas-based cybersecurity company that helps organizations prevent breaches by combining an adversarial, offensive-security mindset with automation and AI. Founded in 2010 by CEO Nathan Sportsman, the firm pairs elite red-team engineers with its flagship Chariot platform for Continuous Threat Exposure Management (CTEM) and attack surface management, plus services spanning penetration testing, cloud and product security, and adversarial emulation. Its clients include large technology, finance, healthcare, and automotive organizations, and it maintains open-source tools such as the Nosey Parker secrets scanner.
Rescana
Rescana is a cybersecurity company that builds autonomous, AI-agent-driven third-party risk management (TPRM) and external attack surface management software. Its platform discovers, classifies, assesses, monitors, and helps remediate risk across a company's vendor ecosystem - including vendors with no web presence - using agentic AI and open-source intelligence (OSINT). Founded by Guy Halfon and based between New York and Tel Aviv, Rescana targets regulated, vendor-heavy industries such as banking, telecom, healthcare, real estate and government, promising vendor-risk oversight that scales without a proportional increase in security headcount.
watchTowr
watchTowr is a Singapore-based cybersecurity company that builds a real-time attacker's view of an organization's external attack surface, then continuously discovers and validates exploitable vulnerabilities before adversaries can use them. Founded in 2021 by offensive-security specialist Benjamin Harris, its platform blends external attack surface management, continuous automated red teaming, AI-driven rapid reaction to emerging threats, and autonomous edge mitigation. watchTowr is also known for watchTowr Labs, a research team whose public disclosures on Citrix, Fortinet, Ivanti, SonicWall and other enterprise software regularly make headlines. The company serves Fortune 500 firms and critical-infrastructure operators and has raised roughly $29-30 million, including a $19M Series A led by Peak XV.
Guy Halfon
Guy Halfon is the co-founder and CEO of Rescana, a Tel Aviv and New York based cybersecurity company building autonomous, agent-based third-party risk management. After years running security for global gaming operator Playtech and founding boutique security consultancies, he started Rescana in 2016 to connect cyber risk to business decisions. The company now uses teams of AI agents to discover, classify and assess vendors and continuously map external attack surfaces at enterprise scale, including its no-code Vega platform.
Censys
Censys is a cybersecurity company that runs one of the most comprehensive real-time maps of the public internet. Born from the ZMap internet-scanning project at the University of Michigan, its Internet Intelligence Platform scans billions of IP addresses and certificates to power attack surface management, threat hunting, and exposure management. Trusted by more than half of the Fortune 500 and by U.S. intelligence agencies, Censys helps defenders see what attackers can see - unknown assets, exposed services, and adversary infrastructure - so they can find and fix risk before it is exploited.
CyCognito
CyCognito is a cybersecurity company that builds an external exposure management platform. It maps an organization's internet-facing attack surface the way an attacker would - discovering unknown, unmanaged, and forgotten assets across cloud, web, and APIs, then testing and prioritizing the risks that actually matter. Founded in 2017 by former Israeli intelligence (Unit 8200) operators, CyCognito counts large enterprises like Tesco, Colgate-Palmolive, Panasonic and Hitachi among its customers, and raised a $100M Series C in 2021 at an $800M valuation.
Strike
Strike is a cybersecurity company that runs always-on, continuous penetration testing by combining AI-driven offensive emulations with validation from an elite network of human ethical hackers it calls Strikers. Its platform and proprietary engine, Strike360, continuously test web apps, APIs, mobile apps, cloud infrastructure and internal networks, then guide teams through remediation and compliance. Founded in 2021 by Santiago Rosenblatt - a hacker since age six - Strike protects 120+ enterprises across 20+ countries, including Santander, Mercado Libre and Okta.
BlueVoyant
BlueVoyant is a New York-based cyber defense company that combines a cloud-native technology platform with a 24x7 global security operations team to protect organizations from threats inside and outside their network. Its full-spectrum platform spans managed detection and response (MDR/MXDR), digital risk protection, and supply chain (third-party) cyber risk defense, drawing on global telemetry, dark web intelligence, and a deep partnership with Microsoft and Splunk. Founded in 2017 by James Rosenthal and Thomas Glocer, the company serves enterprises and governments worldwide and has raised roughly $695M to date.
Cobalt
Cobalt is the pioneer of Pentest as a Service (PtaaS), pairing a curated community of vetted offensive-security experts (the Cobalt Core) with a SaaS platform that turns penetration testing from a months-long procurement exercise into an on-demand, continuous program. Founded in 2013, the company now serves 1,500+ customers and is leaning hard into AI-augmented offensive security.
Mehran Farimani
Mehran Farimani is the co-founder and CEO of RapidFort, a Sunnyvale-based software supply chain security company that raised a $42M Series A in February 2026. A 25-year technology veteran, Mehran previously led the Fiery division at Electronics for Imaging (EFI) as SVP & GM, then founded Percipo—a computer vision AI company whose technology reached 40,000+ retail locations. At RapidFort, he is pioneering the category of Software Attack Surface Management (SASM), helping organizations automatically harden container images and eliminate up to 80% of CVEs through runtime-aware profiling, without touching a single line of application code.
Forward Networks, Inc.
Forward Networks builds a vendor-agnostic network digital twin - a mathematically accurate model of cloud and on-prem networks that lets enterprises query, verify, and harden infrastructure that has long since outgrown human capacity to reason about.
Vinnie Liu
Vinnie Liu is the co-founder and CEO of Bishop Fox, the largest private professional services firm focused on offensive security testing. Starting his career as an NSA analyst at age 17, Liu co-founded Bishop Fox in 2005 with Francis Brown, bootstrapping it for 13 years out of an Arizona living room before raising $175M in venture funding. Today, Bishop Fox serves 26% of Fortune 100 companies and 8 of the 10 largest global tech firms, combining elite human testers with its proprietary Cosmos platform for continuous attack surface management and AI-augmented penetration testing.
Chad Kinzelberg
Chad Kinzelberg is a seasoned Silicon Valley executive-turned-advisor who built cybersecurity empires before most people knew what the attack surface was. From taking Palo Alto Networks from pre-IPO scrappiness to an $18 billion market cap titan, to scaling Equinix from $2.7B to $9.2B in revenue as a key sales leader, Chad has lived the arc of the modern security industry - startup CEO, CMO, SVP, Chief Sales Officer, and now Advisory Partner at Andreessen Horowitz. He is an Executive Advisor at Glilot Capital Partners, a board director at IONIX, and a trusted counsel to firms like Warburg Pincus, ForgePoint Capital, and HackerOne.