ctem
(5)
The Company Betting That Scanning Was Never the Hard Part
Every enterprise already owns a dozen scanners that find problems. Nucleus Security built a business on the boring, unglamorous job nobody else wanted: figuring out which of the millions of findings actually matter.
Praetorian
Praetorian is an Austin, Texas-based cybersecurity company that helps organizations prevent breaches by combining an adversarial, offensive-security mindset with automation and AI. Founded in 2010 by CEO Nathan Sportsman, the firm pairs elite red-team engineers with its flagship Chariot platform for Continuous Threat Exposure Management (CTEM) and attack surface management, plus services spanning penetration testing, cloud and product security, and adversarial emulation. Its clients include large technology, finance, healthcare, and automotive organizations, and it maintains open-source tools such as the Nosey Parker secrets scanner.
Rescana
Rescana is a cybersecurity company that builds autonomous, AI-agent-driven third-party risk management (TPRM) and external attack surface management software. Its platform discovers, classifies, assesses, monitors, and helps remediate risk across a company's vendor ecosystem - including vendors with no web presence - using agentic AI and open-source intelligence (OSINT). Founded by Guy Halfon and based between New York and Tel Aviv, Rescana targets regulated, vendor-heavy industries such as banking, telecom, healthcare, real estate and government, promising vendor-risk oversight that scales without a proportional increase in security headcount.
Picus Security
Picus Security is the cybersecurity company behind the Picus Security Validation Platform - an Adversarial Exposure Validation system that continuously simulates real-world attacks against an organization's defenses to expose which ones actually work. Founded in 2013 by three Turkish mathematicians and now headquartered in San Francisco, Picus serves 500+ enterprise customers including Mastercard and is the official Exposure Validation Partner of Juventus.
Safe Security
Safe Security is a Palo Alto-based cybersecurity company building an Agentic AI-native platform for cyber risk quantification (CRQ), third-party risk management (TPRM) and continuous threat exposure management (CTEM). Founded in 2012 in India as Lucideus, it now translates security posture into dollars-and-cents risk for enterprises like Google, Chevron, T-Mobile, Fidelity and IHG, and is pursuing what its founders call 'CyberAGI'.