What it sells
Offensive security for the teams that are 100x outnumbered
Business model breakdown
Buyer: who owns the budget?
UnverifiedCISO / head of AppSec (use case page for CISOs).
Trigger: what makes them buy now?
Small security teams outnumbered by developers; need pentest evidence for audits (e.g. SOC 2 pentest in hours) and continuous coverage of an expanding API/app attack surface.
Workflow: what inputs become what output?
Continuous attack-surface discovery, business-logic-aware DAST and AI agent pentesting inside engineering workflows, producing proof of exploitability, reports for auditors and retests.
Economics: what it saves and how it charges
Platform subscription; claims 393% ROI for security teams and 4 hours saved on daily builds.
Distribution: how it reaches customers
Demo-led plus AWS Marketplace and 20+ channel partners; deal registration page.
Funding history and coverage
| Round date | Stage | Amount | Investors | Source |
|---|---|---|---|---|
| — | Y Combinator Winter 2023 | — | Y Combinator | ycombinator.com |
Profiles summarize public reporting and company websites. Business-model notes are MaxBC's reading of that material, not confirmed facts; unknowns are left blank rather than guessed. Updated 2026-10-12.