pentesting
(4)
MindFort
MindFort is a San Francisco AI security lab building autonomous agents that continuously find, validate, and patch vulnerabilities in web applications and APIs. Founded out of Y Combinator's X25 batch by offensive-security veterans, it runs like a 24/7 AI red team - proving exploits in isolated runtime environments before it reports them, then opening pull requests with the fix. The company raised a $3M+ seed led by Soma Capital in April 2026.
Thoropass
Thoropass is a New York-based compliance and audit company that pairs compliance-automation software with an in-house, tech-enabled CPA and security audit firm. Founded in 2019 as Laika and rebranded in 2023, it lets companies get and stay certified across 30+ frameworks - SOC 2, ISO 27001, HIPAA, PCI DSS, HITRUST, GDPR, and ISO 42001 for AI - through a single platform where the auditor is assigned on day one. By reusing evidence across frameworks and layering AI features like First Pass AI and Smart Sort AI on top of continuous control monitoring, Thoropass helps growing businesses complete audits meaningfully faster than the traditional consultant-plus-auditor route.
Cobalt
Cobalt is the pioneer of Pentest as a Service (PtaaS), pairing a curated community of vetted offensive-security experts (the Cobalt Core) with a SaaS platform that turns penetration testing from a months-long procurement exercise into an on-demand, continuous program. Founded in 2013, the company now serves 1,500+ customers and is leaning hard into AI-augmented offensive security.
Sonali Shah
Sonali Shah is the CEO of Cobalt, the leading Pentest as a Service (PtaaS) platform, where she took the helm in August 2024 after serving on its board. A product visionary and operator with 20+ years in cybersecurity, she pioneered the first cybersecurity risk rating platform at Bitsight, helped shepherd Veracode through its $950 million sale to Thoma Bravo, and drove Invicti's $625 million acquisition before stepping up to run Cobalt. Educated at Wharton (MBA) and the London School of Economics (MS Economics), she brings a rare mix of Wall Street discipline and deep security product expertise to a company at the intersection of human-led and AI-powered offensive security.