CyberfuturistsBy the CyberfuturistsAunoomade using AunooEuropean Exposure Management Market
Exposure Management News · 6 October–5 November 2026

European Exposure Management Market Market Maturity Map

How is the European market for continuous threat exposure management evolving, and which vendors headquartered in Europe show material change in capabilities, commercial traction, workforce, funding, partnerships, customer adoption, positioning or risk?

Products that map, score, prioritise and test an organisation's attack surface and vulnerabilities on a continuing basis, as Gartner's CTEM cycle describes: scoping, discovery, prioritisation, validation and mobilisation. It covers startups built for this, European vendors acquired by others whose product still ships, and the exposure management lines of large European security vendors. 40 vendors, 6 October–5 November 2026.

Generated 05 November 2026, 10:26 UTC
Market Maturity MapWhere 76 of the market's 86 vendors are mapped today, based on how active they are, how they are growing and how fast they are moving.

Vendors placed by size and by growth, from public data we collect: headcount, followers, funding, customers, open roles, launches and mentions. It does not rate product quality, customer satisfaction or strategy. Computed 2026-11-04 over the last 90 days.

Highlight Show
EmergingBuildingScalingExecuting→→→← smaller by scalelarger by scale →further from the base = more momentuminnovating — top third by product workhiring — top third by open roles per headraised in the last yeartrail — moved 10 or more points on an axis since the previous mapAcronisAcronisAikido SecurityAikido SecurityFiligranFiligranBitdefenderBitdefenderG DATA CyberDefenseG DATA CyberDefenseESETESETYesWeHackYesWeHackEthiackEthiackLansweeperLansweeperIntigritiIntigritiOutpost24Outpost24CovertSwarmCovertSwarmEdgescanEdgescanHadrianHadrianGreenboneGreenboneXMCOXMCONetcraftNetcraftRaynetRaynetHolm SecurityHolm SecurityCyberVadisCyberVadisEnginsightEnginsightRisk LedgerRisk LedgerIntruderIntruderThreatAwareThreatAwareSearchlight CyberSearchlight CyberOnSecurityOnSecurityHackuityHackuityKYNDKYNDArctic SecurityArctic SecurityEBRANDEBRANDPentest-Tools.comPentest-Tools.comSignalFisherSignalFisherGObugfreeGObugfreeBoard of CyberBoard of CyberCitalidCitalidCyberwatchCyberwatchSilobreakerSilobreakerRootshell SecurityRootshell SecurityCyjaxCyjaxSaporoSaporoOrpheus CyberDefense.comAutobahn SecurityPhoenix SecuritycysmoImmuniWebNanitorZerocopterLocateRiskSecPointPatrowlCyverThingsReconNordic DefenderLupovisDynaRiskKaduuAleph IndexMitigantONYPHEFleuret AIVORNACHackrateXRATORPikeredRiskXchangeLupasafeIdentecoSOS IntelligenceValidatoturingpointCyberDartHacktifyHackrfiCyratingRCE Securityholdinggrowingaccelerating
Who is where — Executing 9, Scaling 27, Building 31, Emerging 9; accelerating 3, growing 73, holding 0, innovating 22, hiring 3, raised in the last year 7, moved 9, acquired 7, large incumbents 4

Marks after a name: ◌ innovating · ⚒ hiring · $ raised in the last year · "(was …)" moved stage since the previous map. Each mark belongs to the name before it.

Executing (9) — the largest vendors: scale of 75 and over

Acronis ◌, G DATA CyberDefense, Lansweeper, Bitdefender ◌, ESET ◌, Aikido Security ◌ ⚒, Intigriti, YesWeHack, Ethiack ◌ (was innovators)

Scaling (27) — scale from 50 to 75

Filigran ◌ (was executors), Netcraft, Outpost24 ◌ $ (was executors), Hadrian ⚒ (was executors), Greenbone (was executors), XMCO ⚒, CyberVadis, Raynet, EBRAND, Pentest-Tools.com, CovertSwarm ◌, Searchlight Cyber, Edgescan ◌, Intruder ◌, SignalFisher, Risk Ledger $, Enginsight ◌ $, OnSecurity, Silobreaker, Holm Security ◌, KYND ◌, Citalid, Cyberwatch, Rootshell Security, Board of Cyber, Hackuity $, Saporo $

Building (31) — scale from 25 to 50

Autobahn Security (was innovators), ImmuniWeb (was innovators), Zerocopter, Cyjax, Orpheus Cyber, Defense.com, ThreatAware ◌ $ (was innovators), cysmo, Nordic Defender, SecPoint, Patrowl, LocateRisk, Lupovis, GObugfree ◌, DynaRisk, Arctic Security ◌, Aleph Index ◌, Hackrate, Nanitor ◌, ThingsRecon, Kaduu, Mitigant, Phoenix Security ◌, Fleuret AI $, Pikered, Lupasafe, Cyver ◌, Identeco, XRATOR, RiskXchange, turingpoint

Emerging (9) — the smallest vendors: scale under 25

CyberDart, SOS Intelligence, Hacktify, VORNAC ◌, Validato, ONYPHE ◌, Hackrfi, Cyrating, RCE Security

Accelerating (3) — momentum of 67 and over

Aikido Security, Filigran, Acronis

Growing (73) — momentum from 33 to 67

Bitdefender, ThreatAware, Arctic Security, CovertSwarm, Edgescan, Ethiack, Holm Security, YesWeHack, Outpost24, GObugfree, Phoenix Security, ESET, Enginsight, Hackuity, Cyver, ONYPHE, XMCO, Intigriti, Greenbone, Hadrian, Risk Ledger, VORNAC, Nanitor, G DATA CyberDefense, Intruder, OnSecurity, Raynet, Lansweeper, KYND, CyberVadis, ThingsRecon, Searchlight Cyber, Board of Cyber, Fleuret AI, Netcraft, Cyjax, Defense.com, Rootshell Security, Kaduu, Hackrfi, Orpheus Cyber, LocateRisk, cysmo, RiskXchange, Mitigant, Validato, XRATOR, Patrowl, Citalid, Cyberwatch, SOS Intelligence, Autobahn Security, Saporo, SecPoint, Pikered, Hacktify, SignalFisher, DynaRisk, ImmuniWeb, Lupovis, Aleph Index, Identeco, Lupasafe, turingpoint, Pentest-Tools.com, Nordic Defender, Silobreaker, CyberDart, Hackrate, Zerocopter, EBRAND, RCE Security, Cyrating

Holding (0) — momentum under 33

none

Innovating (22) — top third by launches, corroborated launches, research posts and engineering hiring; a marker across every tier

Acronis, Aikido Security, Filigran, Bitdefender, ESET, Ethiack, Outpost24, CovertSwarm, Edgescan, Holm Security, Enginsight, Intruder, ThreatAware, KYND, Arctic Security, GObugfree, Phoenix Security, Nanitor, Cyver, Aleph Index, ONYPHE, VORNAC

Hiring (3) — top third by open roles per 100 staff, with at least 3 roles open; a marker across every tier

Aikido Security (73 open roles, 21 per 100 staff), Hadrian (7 open roles, 6 per 100 staff), XMCO (7 open roles, 6 per 100 staff)

Raised in the last year (7) — a round dated inside the last 365 days, from the vendor's own post, a matched news event or the Crunchbase news list

Enginsight (round not stated, 2026-11), Fleuret AI (Pre Seed, 2026-10), Hackuity (Series B, 2026-09), Risk Ledger (Series B, 2026-07), ThreatAware (Series A, 2026-02), Outpost24 (Strategic, 2025-12), Saporo (Series A, 2025-12)

Moved (9) — 10 or more points on an axis since the map of 2026-11-03

ThreatAware (-10.7 scale, +20.4 momentum; Scaling → Building), Filigran (-7.7 scale, +13.1 momentum; Executing → Scaling), Ethiack (+10.1 scale, +9.7 momentum; Scaling → Executing), Hadrian (-13.9 scale, -5.5 momentum; Executing → Scaling), Holm Security (-7.2 scale, +12 momentum), Outpost24 (-7.6 scale, +10.3 momentum; Executing → Scaling), Phoenix Security (+16.8 momentum), ONYPHE (-2 scale, -11.9 momentum), Hackuity (-10.5 scale, -1 momentum)

Acquired (7) — on the record, not on the map

Heimdal — by Marlin Equity Partners, 2020-01-01; Digital Shadows — by ReliaQuest (US), 2022-01-01; Yogosha — by Groupe Créative, 2023-01-01; Detectify — by Insight Partners (majority stake), 2024-01-01; Probely — by Snyk, 2024-01-01; Runecast — by Dynatrace (US), 2024-01-01; Pentest People — by WorkNest Group, 2026-01-01

Large incumbents (4) — in this market, but too large to compare on size; listed, not on the map

CybelAngel; Panaseer; Red Sift; WithSecure

Analyst notes and adjustments (49)
  • Acronis: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Aikido Security: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Bitdefender: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • G DATA CyberDefense: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • ESET: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • YesWeHack: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Lansweeper: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Intigriti: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • CovertSwarm: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • XMCO: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Netcraft: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Raynet: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • CyberVadis: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Enginsight: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Risk Ledger: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • OnSecurity: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • KYND: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Arctic Security: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • EBRAND: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • SignalFisher: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • GObugfree: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Citalid: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Silobreaker: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Rootshell Security: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Cyjax: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • cysmo: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Zerocopter: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • SecPoint: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Cyver: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Nordic Defender: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Lupovis: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • DynaRisk: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Kaduu: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Aleph Index: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Hackrate: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Lupasafe: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Identeco: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • SOS Intelligence: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • turingpoint: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • CyberDart: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Hacktify: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Hackrfi: Sells next to exposure management rather than in it (3 Nov 2026 split)
  • Heimdal: Acquired by Marlin Equity Partners (2020). Collected for the product's news.
  • Digital Shadows: Acquired by ReliaQuest (US) (2022). Collected for the product's news.
  • Yogosha: Acquired by Groupe Créative (2023). Collected for the product's news.
  • Detectify: Acquired by Insight Partners (majority stake) (2024). Collected for the product's news.
  • Probely: Acquired by Snyk (2024). Collected for the product's news.
  • Runecast: Acquired by Dynatrace (US) (2024). Collected for the product's news.
  • Pentest People: Acquired by WorkNest Group (2026). Collected for the product's news.
Not rated (3) — what each one lacks

A vendor is rated only when we have every input. 3 lack linkedin headcount (latest count); 3 lack linkedin followers; 3 lack open roles per 100 staff.

Hexway: linkedin headcount (latest count), linkedin followers, open roles per 100 staff; LEET Security: linkedin headcount (latest count), linkedin followers, open roles per 100 staff; Uncovery: linkedin headcount (latest count), linkedin followers, open roles per 100 staff

How the map is computed — weights and rules
InputAxisWeight
LinkedIn headcount (latest count)scale0.35
Disclosed funding total (optional)scale0.30
Customer evidence, weighted, last 12 months named customer in their own words 3, named in the vendor's words 2, unnamed 1scale0.25
LinkedIn followersscale0.10
Headcount change in the period (optional)momentum0.30
Launches and partnerships in the periodmomentum0.25
Earned mentions in the periodmomentum0.15
Open roles per 100 staffmomentum0.15
Crunchbase growth score (secondary) (optional)momentum0.10
Own LinkedIn posts in the periodmomentum0.05

Each input is a percentile rank among the rated vendors; an axis is the weighted mean of its inputs. On the map, the angle is the stage, by scale: Emerging under 25, Building from 25, Scaling from 50, Executing from 75, left to right. The distance from the base is momentum: holding under 33, growing from 33, accelerating from 67. A vendor moves right as it grows and outward as it speeds up.

Executive assessment

3 findings

  1. New funding for Enginsight.

    Enginsight raised a new round on 3 November.

  2. Customer announcements from Aikido Security, Ethiack, Yogosha, SOS Intelligence and 1 more.

    7 customer or deployment announcements, 4 of them naming the customer.

  3. 14 of 40 vendors had a development.

    45 developments in 30 days, plus 11 hiring or headcount signals. The 3 most active vendors account for 29% of them (Aikido Security 5, Ethiack 4, Phoenix Security 4). 22 vendors were watched and had none. 4 are not fully collected yet.

    • Aikido Security: 5 developments
    • Ethiack: 4 developments
    • Phoenix Security: 4 developments
    • Aleph Index: 2 developments
    • Edgescan: 2 developments

Vendors with a development

56 developments · 14 vendors
VendorDevelopmentEvidenceWhy it matters
EnginsightEnginsight secures double-digit million-euro investment from Verdane
Funding · 3 Nov 2026
the company's website · 1 source
Vendor sources only
BitdefenderBitdefender launches GravityZone Exposure Management product
Product launch · 27 Oct 2026
techjuice.pk · 3 sources
Reported by multiple independent sources
EdgescanEdgescan Atomic validates attack paths with controlled AI testing
Product launch · 7 Oct 2026
helpnetsecurity.com · 1 source
Also reported independently		Edgescan has launched Atomic, an AI-driven penetration testing platform that validates attack paths while operating within defined scope and policy…
Aikido SecurityKEYES uses Aikido Security to unify findings across teams
Customer evidence · 3 Nov 2026
the company's LinkedIn post · 1 source
Vendor sources only		Someone from KEYES is quoted in the post.
EthiackBondalti engages Ethiack for industrial penetration testing
Customer evidence · 2 Nov 2026
the company's website · 1 source
Vendor sources only		The vendor has published a case study about Bondalti.
Pentest-Tools.comPentest-Tools.com: Vodafone acknowledges Specter found vulnerability via HackerOne
Customer evidence · 2 Nov 2026
the company's LinkedIn post · 1 source
Vendor sources only		The vendor does not name the customer.
YogoshaYogosha tests Augmented Pentest at French hosting infrastructure company
Customer evidence · 27 Oct 2026
the company's LinkedIn post · 1 source
Vendor sources only		The vendor has published a case study about a French hosting and digital infrastructure player.
SOS IntelligenceSOS Intelligence fintech customer receives breach alert before supplier notice
Customer evidence · 26 Oct 2026
the company's LinkedIn post · 1 source
Vendor sources only		The vendor has published a case study but does not name the customer.
Other developments (48)
OnSecurityUK education tech provider uses OnSecurity for 160+ pentestsCustomer evidence · 22 Oct 20261 source · Vendor sources only
cysmoCorporate Special Risks adopts cysmo for German SME cyber risk assessmentCustomer evidence · 8 Oct 20261 source · Vendor sources only
Nordic DefenderNordic Defender launches Specter AI Pentest for web apps and APIsProduct expansion · 26 Oct 20262 sources · Vendor sources only
EnginsightEnginsight releases platform version 4.9.1Product expansion · 3 Nov 20261 source · Vendor sources only
LansweeperLansweeper reintroduces Dynamic Groups with expanded functionalityProduct expansion · 30 Oct 20261 source · Vendor sources only
Holm SecurityHolm Security releases vulnerability tests for PHP CVE-2026-109618 and CVE-2026-109619Product expansion · 22 Oct 20261 source · Vendor sources only
NanitorNanitor releases version 7.3.0 with Baseline Rule Rollout ProjectsProduct expansion · 9 Oct 20261 source · Vendor sources only
HackuityHackuity integrates with SysReptor Pentest ReportingPartnership · 3 Nov 20261 source · Vendor sources only
Aikido SecurityAikido Security partners with Drata on pentesting integrationPartnership · 19 Oct 20261 source · Vendor sources only
VORNACVORNAC partners with Protforce for remediation and hardeningPartnership · 13 Oct 20261 source · Vendor sources only
RunecastRunecast: Dynatrace releases Snowflake Observability for general availabilityProduct launch · 12 Oct 20266 sources · Vendor sources only
Phoenix SecurityPhoenix Security launches Purple Hook for live AI coding securityProduct launch · 29 Oct 20262 sources · Vendor sources only
ONYPHEONYPHE launches 14 skills for AI agentsProduct launch · 28 Oct 20262 sources · Vendor sources only
IntruderIntruder releases AI pentest reports with Vanta integrationProduct launch · 27 Oct 20262 sources · Vendor sources only
CovertSwarmCovertSwarm releases open-source PHP2Shell local checkerProduct launch · 23 Oct 20262 sources · Vendor sources only
FiligranFiligran launches saved filters for OpenCTIProduct launch · 8 Oct 20262 sources · Vendor sources only
EthiackEthiack launches Ethibench to test AI pentesting agentsProduct launch · 4 Nov 20261 source · Vendor sources only
Phoenix SecurityPhoenix Security makes Green AI Remedy generally availableProduct launch · 4 Nov 20261 source · Vendor sources only
Phoenix SecurityPhoenix Security makes Purple Hook generally availableProduct launch · 4 Nov 20261 source · Vendor sources only
Aleph IndexAleph launches Aleph Intelligence Platform for dark web investigationProduct launch · 3 Nov 20261 source · Vendor sources only
EthiackEthiack launches Zero to track and validate emerging vulnerabilitiesProduct launch · 3 Nov 20261 source · Vendor sources only
PikeredPikered's ZAIUXEvo integrates with Trend Vision OneProduct launch · 2 Nov 20261 source · Vendor sources only
WithSecureWithSecure unifies Elements Exposure Management and XDR workflowProduct launch · 31 Oct 20261 source · Vendor sources only
EdgescanEdgescan launches AI-powered WAF Rule Generation capabilityProduct launch · 29 Oct 20261 source · Vendor sources only
GObugfreeGObugfree launches new vulnerability management platformProduct launch · 29 Oct 20261 source · Vendor sources only
RunecastRunecast: Dynatrace releases dashboard for AI service vulnerabilitiesProduct launch · 29 Oct 20261 source · Vendor sources only
Aikido SecurityAikido Security launches external network pentestingProduct launch · 28 Oct 20261 source · Vendor sources only
PikeredPikered launches Threat Detection Engineering serviceProduct launch · 28 Oct 20261 source · Vendor sources only
Pentest-Tools.comPentest-Tools.com releases free HTTP2Shell scannerProduct launch · 27 Oct 20261 source · Vendor sources only
Aikido SecurityAikido Security launches free patched container images for PHP2ShellProduct launch · 26 Oct 20261 source · Vendor sources only
EthiackEthiack launches Zero, live database tracking exploitable vulnerabilitiesProduct launch · 23 Oct 20261 source · Vendor sources only
Aleph IndexAleph launches Aleph Open Search for free dark web lookupsProduct launch · 22 Oct 20261 source · Vendor sources only
Aikido SecurityAikido Security launches Noon workforce security offeringProduct launch · 20 Oct 20261 source · Vendor sources only
Digital ShadowsDigital Shadows: ReliaQuest launches GreyMatter SIEM-Less security data indexingProduct launch · 20 Oct 20261 source · Vendor sources only
Phoenix SecurityPhoenix Security launches release with verification, exception, PR-first remediationProduct launch · 19 Oct 20261 source · Vendor sources only
Outpost24Outpost24 launches self-service PCI ASV scanning platformProduct launch · 16 Oct 20261 source · Vendor sources only
AcronisAcronis appoints HoJin Kim as Chief Revenue OfficerExecutive appointment · 3 Nov 20261 source · Vendor sources only
AcronisAcronis: 35 open rolesHiring · this period1 source · Vendor sources only
Aikido SecurityAikido Security: 74 open rolesHiring · this period1 source · Vendor sources only
BitdefenderBitdefender: 20 open rolesHiring · this period1 source · Vendor sources only
DetectifyDetectify: 5 open rolesHiring · this period1 source · Vendor sources only
Digital ShadowsDigital Shadows: 35 open rolesHiring · this period1 source · Vendor sources only
ESETESET: 16 open rolesHiring · this period1 source · Vendor sources only
FiligranFiligran: 8 open rolesHiring · this period1 source · Vendor sources only
HadrianHadrian: 7 open rolesHiring · this period1 source · Vendor sources only
LansweeperLansweeper: 12 open rolesHiring · this period1 source · Vendor sources only
Risk LedgerRisk Ledger: 7 open rolesHiring · this period1 source · Vendor sources only
XMCOXMCO: 8 open rolesHiring · this period1 source · Vendor sources only

What this says about the market

Market formation

Most of the market is established: only 2 of the 36 vendors with a known founding year were founded in 2023 or later.

Founding year known for 36 of 40 vendors.

Products versus customers

Product news outweighs customer announcements. Of 45 developments, 33 were product launches or expansions, 3 partnerships and 7 customer or deployment announcements.

Concentration

Activity is concentrated in the three vendors hiring most hold 59% of 245 open roles (Aikido Security alone 30%); the three best-funded vendors hold 56% of disclosed funding. Elsewhere it is spread: the three most active accounts published 8% of 372 vendor posts; three vendors account for 29% of 45 developments.

Job listings exist for 22 of 40 vendors; funding is disclosed for 11 of 40.

Developments

RSS6 October–5 November 2026

1,428 records collected → 56 developments

Funding

Enginsight secures double-digit million-euro investment from Verdane

Verdane invests to expand Enginsight's European cybersecurity platform emphasizing German-made solutions.

Enginsight · 3 Nov 2026 · 1 source · Vendor sources only
Product launch

Bitdefender launches GravityZone Exposure Management product

Bitdefender announced GravityZone Exposure Management, giving organizations full visibility into threat risk exposure across attack surfaces.

Bitdefender · 27 Oct 2026 · 3 sources · Reported by multiple independent sources
Product launch

Edgescan Atomic validates attack paths with controlled AI testing

Edgescan has launched Atomic, an AI-driven penetration testing platform that validates attack paths while operating within defined scope and policy controls.

Edgescan · 7 Oct 2026 · 1 source · Also reported independently
Customer evidence

KEYES uses Aikido Security to unify findings across teams

Belgian ICT group KEYES brought findings from many teams and tech stacks into one view with Aikido.

Aikido Security · 3 Nov 2026 · 1 source · Vendor sources only
Customer evidence

Bondalti engages Ethiack for industrial penetration testing

Chemical manufacturer Bondalti used Ethiack's on-site penetration testing to validate industrial cybersecurity defenses.

Ethiack · 2 Nov 2026 · 1 source · Vendor sources only
Customer evidence

Pentest-Tools.com: Vodafone acknowledges Specter found vulnerability via HackerOne

Vodafone publicly acknowledged that Pentest-Tools.com's Specter engine found an important vulnerability through its HackerOne bug bounty program.

Pentest-Tools.com · 2 Nov 2026 · 1 source · Vendor sources only
Customer evidence

Yogosha tests Augmented Pentest at French hosting infrastructure company

Yogosha applied Augmented Pentest with AI agents at a French hosting provider, finding 9 security issues in 3 days.

Yogosha · 27 Oct 2026 · 1 source · Vendor sources only
Customer evidence

SOS Intelligence fintech customer receives breach alert before supplier notice

A fintech customer received dark web breach intelligence two days before being notified by its supplier.

SOS Intelligence · 26 Oct 2026 · 1 source · Vendor sources only
Customer evidence

UK education tech provider uses OnSecurity for 160+ pentests

An unnamed UK education technology provider uses OnSecurity to coordinate over 160 pentests across varied requirements.

OnSecurity · 22 Oct 2026 · 1 source · Vendor sources only
Customer evidence

Corporate Special Risks adopts cysmo for German SME cyber risk assessment

The pan-European MGA uses cysmo's real-time external cyber risk intelligence to assess SME exposure without lengthy questionnaires.

cysmo · 8 Oct 2026 · 1 source · Vendor sources only
Product expansion

Enginsight releases platform version 4.9.1

Moves Alarm-Route to full release, adds notification templates, email server and SMS gateway configuration.

Enginsight · 3 Nov 2026 · 1 source · Vendor sources only
Product expansion

Lansweeper reintroduces Dynamic Groups with expanded functionality

Users can create more flexible asset groupings for dashboards, views, and reports.

Lansweeper · 30 Oct 2026 · 1 source · Vendor sources only
Product expansion

Holm Security releases vulnerability tests for PHP CVE-2026-109618 and CVE-2026-109619

Tests are live on cloud scanners and Scanner Appliances, added automatically to existing scan profiles.

Holm Security · 22 Oct 2026 · 1 source · Vendor sources only
Product expansion

Nanitor releases version 7.3.0 with Baseline Rule Rollout Projects

New features include gradual rule adoption, external attack surface scanning for IPv4/IPv6, custom platform packages, and MSP API automation.

Nanitor · 9 Oct 2026 · 1 source · Vendor sources only
Partnership

Hackuity integrates with SysReptor Pentest Reporting

The connector automatically imports and syncs pentest findings and assets into Hackuity's platform.

Hackuity · 3 Nov 2026 · 1 source · Vendor sources only
Partnership

Aikido Security partners with Drata on pentesting integration

Integration offers AI-powered pentesting in compliance workflows with up to $4,000 in free credits.

Aikido Security · 19 Oct 2026 · 1 source · Vendor sources only
Partnership

VORNAC partners with Protforce for remediation and hardening

Protforce will provide vulnerability remediation, system hardening and ISMS consulting to VORNAC customers.

VORNAC · 13 Oct 2026 · 1 source · Vendor sources only
Product launch

Runecast: Dynatrace releases Snowflake Observability for general availability

Provides unified visibility into cost, performance, security, operations and data quality through automated telemetry and ready-made dashboards.

Runecast · 12 Oct 2026 · 6 sources · Vendor sources only
Product launch

Phoenix Security launches Purple Hook for live AI coding security

Purple Hook runs security checks within live AI coding sessions to prevent wasted tokens on vulnerabilities scanners already detect.

Phoenix Security · 29 Oct 2026 · 2 sources · Vendor sources only
Product launch

CovertSwarm releases open-source PHP2Shell local checker

CovertSwarm released an open-source host-local checker for CVE-2026-109618 and CVE-2026-109619.

CovertSwarm · 23 Oct 2026 · 2 sources · Vendor sources only
Product launch

Ethiack launches Ethibench to test AI pentesting agents

The tool provides proper replication testing for probabilistic LLM-based pentesting agents.

Ethiack · 4 Nov 2026 · 1 source · Vendor sources only
Product launch

Phoenix Security makes Green AI Remedy generally available

Tool creates remediation plans, shows costs in USD, focuses review on fixes likely to ship.

Phoenix Security · 4 Nov 2026 · 1 source · Vendor sources only
Product launch

Phoenix Security makes Purple Hook generally available

Tool runs locally in AI coding assistants delivering findings with file, line, severity and fix info.

Phoenix Security · 4 Nov 2026 · 1 source · Vendor sources only
Product launch

Aleph launches Aleph Intelligence Platform for dark web investigation

The AI-augmented platform explores dark web archives since 2012, with data kept in France.

Aleph Index · 3 Nov 2026 · 1 source · Vendor sources only
Product launch

Ethiack launches Zero to track and validate emerging vulnerabilities

The product validates exploitability before a CVE is minted, tracking signals from news, advisories, KEV, GHSA and CVE records.

Ethiack · 3 Nov 2026 · 1 source · Vendor sources only
Product launch

Pikered's ZAIUXEvo integrates with Trend Vision One

Integration adds Trend Vision One, bringing total to eight integrations across EDR, ticketing and SIEM.

Pikered · 2 Nov 2026 · 1 source · Vendor sources only
Product launch

WithSecure unifies Elements Exposure Management and XDR workflow

WithSecure integrates Exposure Management and XDR into one workflow with shared console, priority scoring and response actions.

WithSecure · 31 Oct 2026 · 1 source · Vendor sources only
Product launch

Edgescan launches AI-powered WAF Rule Generation capability

The feature creates vendor-specific WAF rules from validated vulnerability findings for teams to review and deploy.

Edgescan · 29 Oct 2026 · 1 source · Vendor sources only
Product launch

GObugfree launches new vulnerability management platform

GObugfree · 29 Oct 2026 · 1 source · Vendor sources only
Product launch

Runecast: Dynatrace releases dashboard for AI service vulnerabilities

Surfaces vulnerabilities detected at runtime to enhance security visibility for AI deployments.

Runecast · 29 Oct 2026 · 1 source · Vendor sources only
Product launch

Aikido Security launches external network pentesting

AI agents attack internet-facing systems and report only actually exploited vulnerabilities.

Aikido Security · 28 Oct 2026 · 1 source · Vendor sources only
Product launch

Pikered launches Threat Detection Engineering service

Service tests existing rules against live threats and writes behavior-based detection rules.

Pikered · 28 Oct 2026 · 1 source · Vendor sources only
Product launch

Pentest-Tools.com releases free HTTP2Shell scanner

New free scanner covers CVE-2026-111497, includes diagrams, fixed versions and temporary controls.

Pentest-Tools.com · 27 Oct 2026 · 1 source · Vendor sources only
Product launch

Aikido Security launches free patched container images for PHP2Shell

Images backport fixes for CVE-2026-109618 and CVE-2026-109619, supporting PHP 5.5 through 8.5.

Aikido Security · 26 Oct 2026 · 1 source · Vendor sources only
Product launch

Ethiack launches Zero, live database tracking exploitable vulnerabilities

The database benchmarks validation speed against CVE publication timelines.

Ethiack · 23 Oct 2026 · 1 source · Vendor sources only
Product launch

Aleph launches Aleph Open Search for free dark web lookups

Users can run ten free daily searches without registration to find exposed subdomains and emails.

Aleph Index · 22 Oct 2026 · 1 source · Vendor sources only
Product launch

Aikido Security launches Noon workforce security offering

New business provides AI governance, device and email protection, and employee training against AI-powered threats.

Aikido Security · 20 Oct 2026 · 1 source · Vendor sources only
Product launch

Digital Shadows: ReliaQuest launches GreyMatter SIEM-Less security data indexing

The solution searches data directly in customer-owned object storage, eliminating SIEM costs while maintaining fast search performance.

Digital Shadows · 20 Oct 2026 · 1 source · Vendor sources only
Product launch

Phoenix Security launches release with verification, exception, PR-first remediation

Update addresses unverified findings, restrictive firewalls, incomplete remediation via new workflows.

Phoenix Security · 19 Oct 2026 · 1 source · Vendor sources only
Product launch

Outpost24 launches self-service PCI ASV scanning platform

Organizations can purchase and begin PCI ASV vulnerability scanning within minutes online.

Outpost24 · 16 Oct 2026 · 1 source · Vendor sources only
Executive appointment

Acronis appoints HoJin Kim as Chief Revenue Officer

Kim joins from WatchGuard Technologies with 25+ years of IT channel experience.

Acronis · 3 Nov 2026 · 1 source · Vendor sources only
Hiring

11 vendors with 5 or more open roles

Job listings · open now
Acronis
Aikido Security
Bitdefender
Detectify
Digital Shadows
ESET
Filigran
Hadrian
Lansweeper
Risk Ledger
XMCO
Everything we collected: the 60 most recent of 1428 records

Everything matched to this market in the period, including general discussion and anything that did not become a development.

ARTEX AI Pentest Tool: What Security Teams Need to Know
SOCRadar · 2026-11-05
CVE-2026-100109: Privilegierte Konten über Security For WooCommerce
LocateRisk · 2026-11-05
Agentic AI risk European AI Sovereignty
WithSecure™ · 2026-11-05
AI cyber defense false sense of security
WithSecure™ · 2026-11-05
SonicWall GMS Vulnerabilities: No Patches for EOL Flaws
DarknetSearch Articles · 2026-11-05
@businesstechweekly.bsky.social: Mastering the Vulnerability Management Lifecycle https://www.businesstechweekly.com/cybersecurity/data-security/vulnerability-management-lifecycle/
Bluesky · 2026-11-05
@opsmatters.com: The latest update for #Seemplicity includes "A Prioritized Backlog Is Still a Backlog" and "SANS 2026 Exposure Management Survey"
Bluesky · 2026-11-05
@undercode.bsky.social: AI-Driven Cyber Operations and Model Micro-Tuning: Luke (hakluke) Stephens Reshape the Security Ecosystem + Video Introduction: The cyber threat…
Bluesky · 2026-11-05
From Freezer Hacks to Developer Compromise: Ordinary Weaknesses, Extraordinary Consequences
Phoenix Security · 2026-11-05
@formdelta.bsky.social: 📄 $TENB 10-Q — what changed MD&A now says: "Exposure management i s an increasingly critical category that extends foundational vulnerability…
Bluesky · 2026-11-05
@newsramp.com: Kudelski Security joins CrowdStrike Project QuiltWorks, bringing AI-powered exposure management and remediation expertise to European organizations…
Bluesky · 2026-11-04
Surviving cybersecurity until the end of 2026
Aikido Security's Blog · 2026-11-04
@pingoru.bsky.social: ⚠️ Tenable is reporting an Incident since 20:00 UTC "Tenable Vulnerability Management: Scan Processing Delays" Affects: AP-SYD-1, BR01, CA01, +15…
Bluesky · 2026-11-04
@outagewatch.flarewarden.com: 🟡 Tenable: Tenable Vulnerability Management: Scan Processing Delays Minor issue · Security · since 20:00 UTC Affected: US-1A, US-2A, US-2B, US-3A +14…
Bluesky · 2026-11-04
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
kitploit.com · 2026-11-04
Intruder: Last week, nginx stopped our PHP2Shell exploit from working remotely on PAN-OS.
LinkedIn · 2026-11-04
Dynatrace recognized as a Leader in The Forrester Wave™: AIOps Platforms, Q4 2026
Dynatrace news · 2026-11-04
@undercode.bsky.social: Navigating the AI Noise Wave: Securing Bug Bounty Programs and Triage Pipelines in Modern Enterprise Security + Video Introduction: Artificial…
Bluesky · 2026-11-04
External Threat Detection for Lean Security Teams: 5 Questions to Ask Before you Buy
CybelAngel · 2026-11-04
How Exposure Management Improves Cloud Detection and Response
cloudnativenow.com · 2026-11-04
A stolen session cookie just bypassed your MFA. Watch the video to see how ThreatNG fixes your blind spots with zero agents: https://t.co/eFRNxqYTkv #CTEM #EASM #PreemptiveCybersecurity #PreemptiveCyberdefense #ExternalAttackSurface #ExternalRisk #ExternalExposure #DigitalRisk https://t.co/rlcR6EWc4
X · 2026-11-04
Join our webinar on Continuous Threat Exposure Management (CTEM) on November 26 and earn CPE credits. ASM, CSPM, phishing takedown, dark web monitoring, ransomware, GenAI-driven attacks. Two sessions: 10am & 5pm Geneva 👉 https://t.co/CYtfzJob5F #CTEM #CyberSecurity https://t.co/Xft69A9wdl
X · 2026-11-04
Bitdefender: Trust is not delivered in a demo.
LinkedIn · 2026-11-04
AI Safety without loss of control: Deterministic tests at AI speed
Greenbone · 2026-11-04
Ethiack: Testing an AI pentesting agent only once means you're only seeing half the picture of how it actually performs.
LinkedIn · 2026-11-04
Robbery at Binance: fake interview and million-dollar cyberattack
DarknetSearch Articles · 2026-11-04
Organizations struggle to prove VM effectiveness without metrics. Industry data shows median remediation at 43 days while FSTEC Order 117 demands 24 hours for critical issues. Verizon DBIR, Edgescan, Bitsight, and Qualys reports reveal persistent gaps, with many KEV entries open for months. A five-l
X · 2026-11-04
How AI strengthens whole brand offensive security
CovertSwarm · 2026-11-04
CrowdStrike Unveils Agentic Adversary Emulation on the Falcon Platform to Identify and Close Exploitable Attack Paths
businesswire.com · 2026-11-04
You're exposed the moment the advisory publishes. The scanner mentions it a cycle later. RedVigil tells you minutes after each intel sync, mapped to the affected asset. #ThreatIntelligence #CTEM https://t.co/O3G2yzvfP5 https://t.co/bT0rr7bWGC +1 more like this
X · 2026-11-04
@kazwan.bsky.social: Turning Cyber Risk Into Action: The Value of Threat Exposure Management November 4, 2026 -- There’s no shortage of security data these days
Bluesky · 2026-11-04
Fake Nuclear Alerts in Russia and Ukraine: Cyberattack Risks
DarknetSearch Articles · 2026-11-04
@pingoru.bsky.social: 🟠 Tenable is reporting a Partial Outage since 07:30 UTC "Tenable Vulnerability Management: Delay in Findings" Affects: FRA Live timeline →…
Bluesky · 2026-11-04
@outagewatch.flarewarden.com: 🟠 Tenable: Tenable Vulnerability Management: Delay in Findings Service disruption · Security · since 07:30 UTC Affected: FRA Our probes: tenable.com…
Bluesky · 2026-11-04
Top 10 Best Breach & Attack Simulation (BAS) Tools in 2026 [Ranked & Scored]
cybersecuritynews.com · 2026-11-04
@hasamba72.bsky.social: Open source ARTEX runs LLM-driven autonomous pentests: asset coverage graphs, findings tracking, browser-extension traffic capture from authenticated…
Bluesky · 2026-11-04
Why AI Fix Pull Requests Don’t Get Merged, and What Makes Them Mergeable
Phoenix Security · 2026-11-04
Phoenix Security Makes Purple Hook Generally Available to Deliver the Fix Inside the Session
Phoenix Security · 2026-11-04
Phoenix Security Makes Green AI Remediation Generally Available as Security Teams Pay for Automated Fixes Developers Never Merge
Phoenix Security · 2026-11-04
🚨 OpenAI recruits Cathedral, the startup of ex-DOGE who introduced himself at Anthropic. Valued at $1.4 billion, it has reached the Slack and job offers of Anthropic, which considers the attack "out of scope" of its bug bounty. OpenAI now entrusts it with testing its defenses and quadruples its
X · 2026-11-04
Acronis: We're pleased to welcome Tony Stratton to Acronis as General Manager for Australia and New Zealand.
LinkedIn · 2026-11-04
How to learn cloud security
Reddit · 2026-11-04
The main trends for 2026: offensive AI (autonomous attacks, deepfake, hyper-personalized phishing) and defensive AI (agentic SOC), boom of non-human identities to govern, Zero Trust as the operating standard, proactive exposure management (CTEM) and preparation for post-quantum cryptography.
X · 2026-11-04
VulnClaw — AI Agent + MCP Toolchain + Penetration Skill Orchestration, Combined with Large Language Models, Natural Language Input → Automatically Completes the Full Process from 'Information Collection → Vulnerability Discovery → Vulnerability Exploitation → Report Generation'.
kitploit.com · 2026-11-04
@cybersecurity.page: A solo security pro managing 2500 endpoints across a global footprint is shopping for vulnerability management tools, with automation the top…
Bluesky · 2026-11-04
The AI Pentesting wave. Pay for effort vs pay for impact.
Intigriti · 2026-11-04
@undercode.bsky.social: The Shift to AI-Assisted Bug Hunting in 2026: Navigating Noise, False Positives, and Heuristic Reconnaissance + Video Introduction: As artificial…
Bluesky · 2026-11-03
Enterprises test only 32% of their attack surface on average (Omdia). Tomorrow at 1:00 PM ET, in a live @SecurityWeek webinar, see how agentic pentesting, BAS, and exposure validation narrow that gap. Register: https://t.co/VItxReLMZJ https://t.co/pDcDoWEVSB
X · 2026-11-03
@undercode.bsky.social: Automating Bug Bounty Triage in the AI-Generated Security Reports + Video Introduction: The widespread adoption of generative AI has led to a flood…
Bluesky · 2026-11-03
@undercode.bsky.social: Defending the Frontier: Triage Tactics, Automation Frameworks, and Machine Learning Guardrails Against AI-Generated Bug Bounty Slop + Video…
Bluesky · 2026-11-03
@wijbusinessnieuws.bsky.social: Cyber attacks on cooling systems: does your company know what is vulnerable? Infoblox explains what organizations can
Bluesky · 2026-11-03
@securityelites1.bsky.social: 📢 Hacker Recon Checklist: 10-Step Ethical Hacking Recon Guide Learn the hacker recon checklist used in penetration testing and bug bounty hunting.…
Bluesky · 2026-11-03
[Hiring] Director, Customer Success at Armorcode Inc · Remote · $100,000/yr
Reddit · 2026-11-03
How to Complete a Self-Service PCI ASV Scan in 4 Steps
Outpost24 · 2026-11-03
Acronis: Acronis appoints HoJin Kim as Chief Revenue Officer.
LinkedIn · 2026-11-03
At TrollEye Security, we're helping CISOs reduce remediation workloads and better understand financial risk heading into 2027. Centralize exposure management, focus teams on what matters most, and give the board clearer visibility into business risk. #CTEM #Cybersecurity https://t.co/rvaAy3zjZ2
X · 2026-11-03
Cybersecurity Is Moving Beyond Exposure Detection To Preemptive Remediation
nl.mashable.com · 2026-11-03
Novee puts forgotten internet-facing assets through penetration testing
helpnetsecurity.com · 2026-11-03
Chainalysis Data Breach: AI Attack and Customer Risks
DarknetSearch Articles · 2026-11-03
CyberfuturistsBy the CyberfuturistsAunoomade using AunooEuropean Exposure Management Market · 6 October–5 November 2026
EvidenceThe figures the assessment rests on: formation, funding and investors, hiring, headcount, the vendors' own announcements, sentiment, and who is talking.
Staffcounted at 82 of 40 vendors
13,244
No market-wide change to report yet.
Open rolesLinkedIn and company job boards
246
Roles open today
Roles open today, not roles advertised this month.
Vendors with a known funding stageof 73 Crunchbase profiles read
46
Funding stage and investors, from Crunchbase.
Stages only. No round sizes, so no largest raise.
Written about by othersexcludes the vendors' own posts
69
No earlier period to compare with yet; collection began 3 November 2026
Completed weeks only. This week and last are still coming in.

Market scope

Products that map, score, prioritise and test an organisation's attack surface and vulnerabilities on a continuing basis, as Gartner's CTEM cycle describes: scoping, discovery, prioritisation, validation and mobilisation. It covers startups built for this, European vendors acquired by others whose product still ships, and the exposure management lines of large European security vendors.

Included: Vulnerability scanning and risk-based vulnerability management; exposure assessment platforms; external attack surface management; cyber asset attack surface management and controls monitoring; digital risk protection (leaked credentials, data leaks, dark web exposure); breach and attack simulation; automated and autonomous penetration testing; attack path analysis; penetration testing as a service and crowdsourced continuous testing platforms; security ratings and third-party exposure scoring. The legal headquarters must be in Europe.

Excluded: Vendors headquartered outside Europe, including Israel, Turkey and the US, whatever their European footprint; detection and response (SIEM, XDR, EDR, SOAR); identity and access management; application security testing without an exposure view (SAST, SCA); security awareness training and cyber ranges; managed services and consultancies without a product; brand protection without a security exposure product; a vendor's business outside exposure management. Darktrace and Qualys are on the blocked list and are not covered, including products they own.

Compared with the previous period

Collection began 3 November 2026, so figures for this period are a floor. A comparison with the 30 days before will be available from 2 Jan 2027.

Market snapshot

Vendors in this market
90
40 currently monitored
Money raised, where disclosed
$548M
11 of 90 vendors have published a figure
Founded since 2023
2
of the 36 whose founding year we know
Articles and posts collected
1428
over the 30 days covered here

Market formation

2 of the 36 vendors with a known founding year were founded in 2023 or later.

36 of 40 vendors have a founding year.
71988: 119882001: 120012008: 120082012: 120122013: 120132014: 320142015: 320152016: 120162017: 420172018: 220182019: 320192020: 320202021: 720212022: 320222026: 22026

Announcements per month

All 40 vendors post on LinkedIn.
1052011-11: 02011-1…2011-12: 02012-03: 22012-04: 22012-05: 12012-06: 22012-0…2012-09: 12012-10: 02012-11: 02013-01: 02013-03: 02013-0…2013-04: 02013-05: 02013-06: 02013-07: 02013-09: 02013-0…2013-10: 02013-11: 02014-01: 02020-12: 02021-01: 12021-0…2021-02: 02021-05: 02021-06: 02021-07: 12021-08: 02021-0…2021-09: 02021-10: 02021-11: 02021-12: 02022-02: 12022-0…2022-04: 02022-05: 02022-10: 02022-12: 02023-02: 02023-0…2023-03: 12023-04: 02023-05: 12023-06: 22023-07: 12023-0…2023-08: 02023-09: 02023-10: 22023-11: 22023-12: 02023-1…2024-01: 42024-02: 42024-03: 22024-04: 12024-05: 32024-0…2024-06: 22024-07: 52024-08: 12024-09: 32024-10: 32024-1…2024-11: 12024-12: 02025-01: 02025-02: 12025-03: 02025-0…2025-04: 02025-05: 42025-06: 02025-07: 12025-08: 12025-0…2025-09: 12025-10: 12025-11: 22025-12: 12026-01: 42026-0…2026-02: 12026-03: 22026-04: 62026-05: 52026-06: 72026-0…2026-07: 112026-08: 142026-09: 222026-10: 1052026-11: 402026-1…

Funding and investor activity

Funding and acquisition events in the period

Enginsight secures double-digit million-euro investment from Verdane
Funding · 3 Nov 2026 · Vendor sources only

Disclosed funding

11 of 90 vendors have a published total, adding to $548M. The best-funded of them:

VendorDisclosed totalLast round
Lansweeper$158MPrivate Equity
Aikido Security$85MSeries B
Hadrian$65M—
CybelAngel$52MSeries B
Panaseer$43MUndisclosed round
Detectify$42MUndisclosed round
Risk Ledger$32MSeries B
Hackuity$32MSeries B
ThreatAware$25MSeries A
Patrowl$14MSeries A

Funding stage across the market

73 of 90 vendors with a Crunchbase page have been read.
27Pre Seed: 5Pre SeedSeed: 6SeedSeries A: 9Series ASeries B: 5Series BSeries C: 3Series CUndisclosed round: 5Undisclosed…Non Equity Assistance: 1Non Equity…Private Equity: 9Private…Secondary Market: 2Secondary…Post Ipo Debt: 1Post Ipo…not stated: 27not stated

Investors backing more than one vendor

BpifranceCybelAngel, Hackuity, Patrowl, YesWeHack
Insight PartnersAcronis, Detectify, Filigran, Lansweeper
CyLon VenturesDynaRisk, Intruder, Risk Ledger
Forgepoint CapitalCybelAngel, Hackuity, Panaseer
Auriga Cyber VenturesFleuret AI, Patrowl
Banque des TerritoiresHackuity, YesWeHack
Business Growth FundEdgescan, KYND
Notion CapitalAikido Security, Panaseer
Octopus VenturesDigital Shadows, Intigriti
Open CNPCybelAngel, YesWeHack
Paladin Capital GroupDigital Shadows, Panaseer
Pitch@PalaceIntruder, Panaseer
Seventure PartnersHackuity, YesWeHack
Startup Wise GuysCyberDart, Ethiack
Vincenzo IozzoFiligran, Risk Ledger
Vitruvian PartnersBitdefender, Outpost24

Crunchbase scores

Crunchbase's own Growth and Attention (Heat) scores, 0 to 100, for reference.

Read for 73 of 40 vendors. Changes appear once the scores have been collected for a full period.

Hiring

We found 245 open roles across 22 vendors.

Aikido Security accounts for 74 of the 245 open roles, with Acronis accounting for another 35.

22 of 40 vendors have public job listings.
85sales: 85salesengineering: 84engineeringother: 35othermarketing: 25marketingoperations: 15operationsnot stated: 1not stated

Headcount

Vendors whose LinkedIn headcount moved

Acronis+0.0%1881 → 1881
Aikido Security+0.0%351 → 351
Aleph Index+0.0%15 → 15
Arctic Security+0.0%24 → 24
Autobahn Security+0.0%29 → 29

We have 1 week of headcount data so far: the week of 2 Nov 2026 at -0.1% against where these vendors started. A chart needs three.

Vendor announcements

132 of 652 collected vendor posts contained a concrete company claim or announcement. The rest were commentary, event promotion or other non-company updates.

All 40 vendors have posts we have read.
RunecastConcrete claim: 12Commentary: 5No content: 118BitdefenderConcrete claim: 11Commentary: 7No content: 1937AcronisConcrete claim: 11Commentary: 1No content: 618Aikido SecurityConcrete claim: 10Commentary: 24No content: 1448Phoenix SecurityConcrete claim: 5Commentary: 10No content: 318HeimdalConcrete claim: 5Commentary: 4No content: 514ThreatAwareConcrete claim: 5Commentary: 1No content: 17IntigritiConcrete claim: 4Commentary: 6No content: 616FiligranConcrete claim: 4Commentary: 8No content: 214EthiackConcrete claim: 4Commentary: 5No content: 413IntruderConcrete claim: 4Commentary: 4No content: 19Pentest-Tools.comConcrete claim: 4Commentary: 15Holm SecurityConcrete claim: 3Commentary: 7No content: 111CovertSwarmConcrete claim: 3Commentary: 710ESETConcrete claim: 3Commentary: 2No content: 27WithSecureConcrete claim: 3Commentary: 3No content: 17Risk LedgerConcrete claim: 3Commentary: 1No content: 26Outpost24Concrete claim: 2Commentary: 7No content: 817EnginsightConcrete claim: 2Commentary: 5No content: 411YesWeHackConcrete claim: 2Commentary: 2No content: 59

launch 70 research 29 award 13 customer 10 hiring 8 partnership 7 funding 1 other 1

Sentiment

Coverage in the week of 19 Oct 2026, the latest complete week, leaned positive (+13%).

Share of articles classed positive minus share classed negative, by week. Weeks with too few classified articles are left blank.

100-172026-08-102026-09-142026-10-19The market as a wholeCoverage of these vendors

Who is being heard

Most active vendors

Ranked on LinkedIn posts, open roles and outside articles in the last 30 days; the score averages the three ranks. Only vendors measured on all three are scored.

98Bitdefender: 98BitdefenderAcronis: 98AcronisAikido Security: 91Aikido…YesWeHack: 91YesWeHackOutpost24: 88Outpost24Filigran: 87FiligranIntigriti: 82IntigritiDetectify: 78DetectifyESET: 74ESETEthiack: 71Ethiack
VendorScoreOwn postsOpen rolesWritten about
Bitdefender9892021
Acronis9811357
Aikido Security916748
YesWeHack91823
Outpost2488821
Filigran87683
Intigriti82612
Detectify78551
ESET747160
Ethiack71810

Share of voice

How 69 mentions by people outside these companies were split between them. The vendors' own posts are counted separately.

30Bitdefender: 30Bitdefe…Arctic Security: 13Arctic…Aikido Security: 12Aikido…Acronis: 10AcronisThreatAware: 6ThreatA…Filigran: 4Filigra…YesWeHack: 4YesWeHa…Edgescan: 4Edgesca…Intigriti: 3Intigri…Heimdal: 3HeimdalOutpost24: 1Outpost…CybelAngel: 1CybelAn…Holm Security: 1Holm…OnSecurity: 1OnSecur…Raynet: 1RaynetSearchlight Cyber: 1Searchl…Detectify: 1Detecti…

Posts and response

Vendors with fewer than five posts are left out.

VendorPostsReactions/postMentions by others
Acronis1190.07
Bitdefender919.021
YesWeHack830.13
Outpost24812.01
Kaduu84.80
Ethiack818.10
RiskXchange81.50
OnSecurity714.01
Raynet717.31
WithSecure716.40
G DATA CyberDefense754.30
Rootshell Security710.30
ESET765.90
Cyjax76.40
ImmuniWeb717.30
Aikido Security670.58
Filigran644.23
Edgescan65.73
Intigriti630.22
CybelAngel64.81

Accounts posting repeatedly about the market

Accounts with at least 3 posts in the period. Vendors' LinkedIn company posts are counted elsewhere; a vendor's own account here is marked as one.

AccountWhoPlatformPostsReactionsLatest post
@undercode.bsky.socialUndercode Testing · 673 followers
Undercode Testing is a cybersecurity content platform focused on monitoring hacking techniques, bug bounties, vulnerability management, and emerging threats in…
bluesky2592026-11-05
@opsmatters.comOpsMatters · 454 followers
OpsMatters is a technology news and updates aggregation platform that curates and publishes the latest developments, product updates, and security news from…
bluesky422026-11-05
@pullrepo.bsky.socialPull Repo · 65 followers
Pull Repo is an automated feed account that publishes weekly radar updates highlighting the fastest-growing AI tools and repositories. The account aggregates…
bluesky302026-10-29

Outside voices, quoted

@Shelter_Appropriate · reddit · 24 reactions, comments and reposts

“Building an agentic CVE watcher, tell me what's wrong with this idea”

What people are saying

Practitioner and analyst discussion of the market, not vendor news.

@businesstechweekly.bsky.social: Mastering the Vulnerability Management Lifecycle https://www.businesstechweekly.com/cybersecurity/data-security/vulnerability-management-lifecycle/
Bluesky · 2026-11-05
@undercode.bsky.social: AI-Driven Cyber Operations and Model Micro-Tuning: Luke (hakluke) Stephens Reshape the Security Ecosystem + Video Introduction: The cyber threat…
Bluesky · 2026-11-05
@pingoru.bsky.social: ⚠️ Tenable is reporting an Incident since 20:00 UTC "Tenable Vulnerability Management: Scan Processing Delays" Affects: AP-SYD-1, BR01, CA01, +15…
Bluesky · 2026-11-04
@outagewatch.flarewarden.com: 🟡 Tenable: Tenable Vulnerability Management: Scan Processing Delays Minor issue · Security · since 20:00 UTC Affected: US-1A, US-2A, US-2B, US-3A +14…
Bluesky · 2026-11-04
@undercode.bsky.social: Navigating the AI Noise Wave: Securing Bug Bounty Programs and Triage Pipelines in Modern Enterprise Security + Video Introduction: Artificial…
Bluesky · 2026-11-04
A stolen session cookie just bypassed your MFA. Watch the video to see how ThreatNG fixes your blind spots with zero agents: https://t.co/eFRNxqYTkv #CTEM #EASM #PreemptiveCybersecurity #PreemptiveCyberdefense #ExternalAttackSurface #ExternalRisk #ExternalExposure #DigitalRisk https://t.co/rlcR6EWc4
X · 2026-11-04
Organizations struggle to prove VM effectiveness without metrics. Industry data shows median remediation at 43 days while FSTEC Order 117 demands 24 hours for critical issues. Verizon DBIR, Edgescan, Bitsight, and Qualys reports reveal persistent gaps, with many KEV entries open for months. A five-l
X · 2026-11-04
You're exposed the moment the advisory publishes. The scanner mentions it a cycle later. RedVigil tells you minutes after each intel sync, mapped to the affected asset. #ThreatIntelligence #CTEM https://t.co/O3G2yzvfP5 https://t.co/bT0rr7bWGC
X · 2026-11-04
@kazwan.bsky.social: Turning Cyber Risk Into Action: The Value of Threat Exposure Management November 4, 2026 -- There’s no shortage of security data these days
Bluesky · 2026-11-04
@pingoru.bsky.social: 🟠 Tenable is reporting a Partial Outage since 07:30 UTC "Tenable Vulnerability Management: Delay in Findings" Affects: FRA Live timeline →…
Bluesky · 2026-11-04
@outagewatch.flarewarden.com: 🟠 Tenable: Tenable Vulnerability Management: Delay in Findings Service disruption · Security · since 07:30 UTC Affected: FRA Our probes: tenable.com…
Bluesky · 2026-11-04
@hasamba72.bsky.social: Open source ARTEX runs LLM-driven autonomous pentests: asset coverage graphs, findings tracking, browser-extension traffic capture from authenticated…
Bluesky · 2026-11-04
The main trends for 2026: offensive AI (autonomous attacks, deepfake, hyper-personalized phishing) and defensive AI (agentic SOC), boom of non-human identities to govern, Zero Trust as the operating standard, proactive exposure management (CTEM) and preparation for post-quantum cryptography.
X · 2026-11-04
@cybersecurity.page: A solo security pro managing 2500 endpoints across a global footprint is shopping for vulnerability management tools, with automation the top…
Bluesky · 2026-11-04
@undercode.bsky.social: The Shift to AI-Assisted Bug Hunting in 2026: Navigating Noise, False Positives, and Heuristic Reconnaissance + Video Introduction: As artificial…
Bluesky · 2026-11-03
@undercode.bsky.social: Automating Bug Bounty Triage in the AI-Generated Security Reports + Video Introduction: The widespread adoption of generative AI has led to a flood…
Bluesky · 2026-11-03
@wijbusinessnieuws.bsky.social: Cyber attacks on cooling systems: does your company know what is vulnerable? Infoblox explains what organizations can
Bluesky · 2026-11-03
@securityelites1.bsky.social: 📢 Hacker Recon Checklist: 10-Step Ethical Hacking Recon Guide Learn the hacker recon checklist used in penetration testing and bug bounty hunting.…
Bluesky · 2026-11-03
[Hiring] Director, Customer Success at Armorcode Inc · Remote · $100,000/yr
Reddit · 2026-11-03
You're exposed the moment the advisory publishes. The scanner mentions it a cycle later. RedVigil tells you minutes after each intel sync, mapped to the affected asset. #ThreatIntelligence #CTEM https://t.co/O3G2yzvfP5 https://t.co/dUAGeUZ6JJ
X · 2026-11-03
Tracked vendors90 companies we watch, with each one's collection state, country, founding year, staff, funding and open roles.

Vendor registry

Is your company missing?

Sorted by collection state, then by the date of each vendor's latest development, then by name.

VendorStatusCountryFoundedLinkedIn headcountDisclosed fundingDevelopments, 30dOpen rolesLatest development
EthiackChangedPortugal202256Undisclosed412026-11-04
Phoenix SecurityChangedUnited Kingdom202128$0M402026-11-04
HackuityChangedFrance201842$32M122026-11-03
Pentest-Tools.comChangedRomania201766Undisclosed202026-11-02
PikeredChangedItaly202011Undisclosed202026-11-02
WithSecureChangedFinland1988529Undisclosed102026-10-31
EdgescanChangedIreland201788Undisclosed202026-10-29
ONYPHEChangedFrance20174Undisclosed102026-10-28
IntruderChangedUnited Kingdom201580Undisclosed102026-10-27
Holm SecurityChangedSweden201562Undisclosed102026-10-22
Outpost24ChangedSweden2001281Undisclosed122026-10-16
VORNACChangedGermany20265Undisclosed102026-10-13
NanitorChangedIceland201415Undisclosed102026-10-09
FiligranChangedFrance2022281Undisclosed282026-10-08
Autobahn SecurityNo changeGermany201929Undisclosed00—
CyratingNo changeFrance20162Undisclosed00—
Defense.comNo changeUnited Kingdom—37Undisclosed00—
Fleuret AINo changeFrance202612Undisclosed00—
GreenboneNo changeGermany2008118Undisclosed03—
HadrianNo changeNetherlands2021110$65M17—
LEET SecurityNo changeSpain——Undisclosed00—
LocateRiskNo changeGermany201823Undisclosed00—
MitigantNo changeGermany202112Undisclosed00—
Orpheus CyberNo changeUnited Kingdom—29Undisclosed00—
PanaseerNo changeUnited Kingdom201481$43M00—
PatrowlNo changeFrance202049$14M00—
RCE SecurityNo changeGermany20121Undisclosed00—
Red SiftNo changeUnited Kingdom2015103Undisclosed00—
RiskXchangeNo changeUnited Kingdom20207Undisclosed00—
SaporoNo changeSwitzerland202147Undisclosed00—
Searchlight CyberNo changeUnited Kingdom201784Undisclosed00—
ThingsReconNo changeNetherlands202216Undisclosed00—
ThreatAwareNo changeUnited Kingdom201953$25M00—
UncoveryNo changeFrance2021—Undisclosed00—
ValidatoNo changeUnited Kingdom20215Undisclosed00—
XRATORNo changeFrance202111Undisclosed00—
Board of CyberIncompleteFrance201950Undisclosed00—
CybelAngelIncompleteFrance2013154$52M00—
CyberwatchIncompleteFrance—43Undisclosed00—
ImmuniWebIncompleteSwitzerland201430Undisclosed00—
Acronis—Switzerland20031881Undisclosed2352026-11-03
Aikido Security—Belgium2022351$85M6742026-11-03
Aleph Index—France201215Undisclosed202026-11-03
Enginsight—Germany201780Undisclosed202026-11-03
Lansweeper—Belgium2004415$158M2122026-10-30
GObugfree—Switzerland202017Undisclosed102026-10-29
Runecast—United Kingdom201414Undisclosed202026-10-29
Bitdefender—Romania20012345Undisclosed2202026-10-27
Yogosha—France2015194Undisclosed102026-10-27
Nordic Defender—Sweden201914Undisclosed102026-10-26
SOS Intelligence—United Kingdom20205Undisclosed102026-10-26
CovertSwarm—United Kingdom202082Undisclosed112026-10-23
OnSecurity—United Kingdom201865Undisclosed102026-10-22
Digital Shadows—United Kingdom2011—Undisclosed2352026-10-20
cysmo—Germany20179Undisclosed102026-10-08
Arctic Security—Finland201724Undisclosed00—
Citalid—France201752Undisclosed00—
CyberDart—Italy20236Undisclosed00—
CyberVadis—France2018102Undisclosed01—
Cyjax—United Kingdom201240Undisclosed00—
Cyver—Netherlands202010Undisclosed00—
Detectify—Sweden201392$42M15—
DynaRisk—United Kingdom201622Undisclosed00—
EBRAND—Luxembourg2007131Undisclosed00—
ESET—Slovakia19922041Bootstrapped116—
G DATA CyberDefense—Germany1985400Undisclosed02—
Hackrate—Hungary202013Undisclosed00—
Hackrfi—Finland20163Undisclosed00—
Hacktify—Hungary20205Undisclosed00—
Heimdal—Denmark2014285Undisclosed00—
Hexway—Cyprus——Undisclosed00—
Identeco—Germany202012Undisclosed00—
Intigriti—Belgium2016858Undisclosed01—
KYND—United Kingdom201868Undisclosed00—
Kaduu—Switzerland201816Undisclosed00—
Lupasafe—Netherlands201911Undisclosed00—
Lupovis—United Kingdom202118Undisclosed00—
Netcraft—United Kingdom1995296Undisclosed02—
Pentest People—United Kingdom201842Undisclosed00—
Probely—Portugal—3Undisclosed00—
Raynet—Germany1999162Undisclosed00—
Risk Ledger—United Kingdom201899$32M17—
Rootshell Security—United Kingdom201953Undisclosed01—
SecPoint—Denmark199814Undisclosed00—
SignalFisher—Switzerland202067Undisclosed00—
Silobreaker—United Kingdom200558Undisclosed00—
XMCO—France2002115Bootstrapped18—
YesWeHack—France2015804Undisclosed02—
Zerocopter—Netherlands201538Undisclosed00—
turingpoint—Germany201910Undisclosed00—

A dash under developments or open roles means collection is paused for that vendor.

Get in touch

Send us a story about European Exposure Management Market that is not here, tell us your company belongs on the list. We read everything; what goes on the page is our call.

Everything here is open to read. If you want the data in your own tools, the intelligence feed starts at $139 a month, or ask about data access below.

Choosing a product in this market? Advisory helps buyers build a shortlist, test vendor claims and plan a proof of concept.

How this was measuredWhich sources we read, how much of the market each one reached, what every figure counts, and the records behind it.

What an event type can and cannot tell you

A product launch is a statement that something is available; it says nothing about adoption, which this report reads only from customer evidence. A funding round is capital raised, not revenue. A partnership is an agreement, not sales. An acquisition is a change of owner, not of product. The "why it matters" column therefore states only what the source itself says about the event — the product, the amount, the partner, the buyer — and is left empty when the source says nothing more than the headline.

How much of the market we checked

Per source: vendors it could read, set up for it, attempted, and read successfully.

SourceStateEligibleConfiguredAttemptedCollectedNotes
Company posts (LinkedIn)checked90 / 40909090
Company profiles and headcount (LinkedIn)checked90 / 40909090
Job listings (LinkedIn)checked90 / 40909090
Funding stages, investors and scores (Crunchbase)checked90 / 40909090
Vendor site updates (vendor website / RSS)some vendors checked90 / 40906968we checked 68 of the 90 vendors we have a way to look up
Finding a vendor's feed (vendor website)checked90 / 40909090
Job listings (the company's own hiring system)checked7 / 40777
Finding a vendor's hiring system (vendor website)checked90 / 40909090

Not read for this market: Job listings (experimental) (Indeed) (we do not search Indeed on a schedule, so job counts here cover LinkedIn and the vendors' own careers pages only); Funding and ownership (PitchBook) (we do not track PitchBook for these vendors); Company profile and contacts (ZoomInfo) (we do not track ZoomInfo for these vendors).

CoverageVendors%
Being watched40 / 40100%
We have seen something from40 / 40100%
Posting on LinkedIn in the period85 / 40212%
Crunchbase profile read73 / 9081%
Have public job listings22 / 4055%

Of the 40 vendors, 14 had a development, 22 were watched and had none, 4 were only partly collected.

About this report

Aunoo matches everything it collects against the phrases that define this market and the names of its vendors. Company and funding details come from LinkedIn and Crunchbase.

Collection began 3 November 2026; anything dated earlier was collected afterwards as backlog.

A development is one event, however many records discuss it: records about the same vendor and the same kind of event, within two weeks of each other, sharing a name or subject, are merged and all stay linked under it. “Reported independently” means another source carried the same event, not that anyone verified it.

Where the numbers come from

Which sources we use

Each source, where it is published, and the provider we get it through.

WhatPublished onWe get it fromWhose words
Company postsLinkedInBright Datavendor-owned
Company profiles and headcountLinkedInBright Datavendor profile
Job listingsLinkedInBright Datavendor-associated
Job listings (experimental)IndeedBright Datavendor-associated; we have not yet checked that every listing is the vendor's own
Practitioner discussionX (Twitter), Reddit, TikTok and InstagramXpozthird-party (earned)
Practitioner discussionBlueskyBluesky (direct)third-party (earned)
Employee reviewsGlassdoorOpenWebNinjathird-party (current and former staff)
Newsthe publication itselfconfigured news/RSS feedsthird-party (earned)
Vendor site updatesvendor website / RSSsite and RSS collectorvendor-owned
Job listingsthe company's own hiring systemthe hiring system's public job board APIvendor-associated
Finding a vendor's hiring systemvendor websitesite collectorvendor-owned
Finding a vendor's feedvendor websitesite and RSS collectorvendor-owned
Funding and ownershipPitchBookBright Datathird-party company data
Company profile and contactsZoomInfoBright Datathird-party company data
Funding stages, investors and scoresCrunchbaseBright Datathird-party company data
Disclosed funding totalsimported workbookoperator importthird-party company data

How the job figures were assembled

  • We dropped 39 LinkedIn listings because the same role was already on the company's own careers page. We count the company's page, which gives us a posting date.
  • Where these came from: 159 from the vendors' own careers pages, 87 from LinkedIn

What each figure counts

Total staff across the market

We add up the most recent employee count each vendor shows on LinkedIn. Some companies publish a range instead of a number, like 51-200. We leave those out rather than guess, and we leave out vendors we have no headcount for rather than count them as zero.

Counts the latest exact employee count for each vendor, out of vendors whose LinkedIn profile we have read recently.

  • This is a floor, not the real total. Vendors publishing a range instead of a number are missing from it.
  • LinkedIn headcount is self-reported by each company.
  • Movement needs the headcount on two dates. 9 of 86 vendors have it on one so far.

Posts the vendors published themselves

Posts a vendor put out on its own LinkedIn account during the period. If a vendor reshared somebody else's post, we count that separately, because resharing is not the same as having something to say.

Counts posts from the vendors' own LinkedIn accounts, out of vendors whose posts we managed to collect, over the last 30 days.

  • LinkedIn only. A vendor that is busy on another network will look quieter here than it is.
  • We only started recording whether a post was a reshare part-way through. Older posts all count as the vendor's own.
  • When we say somebody wrote about a vendor, we mean somebody other than the vendor. A post on the vendor's own site counts as the vendor talking, not as coverage of it.

Post classification

Vendor posts are classed as announcement (a company event or verifiable update), commentary (interpretation or educational material), promotion (marketing with no event in it) or unreviewed.

How developments are chosen

A development is an acquisition, funding, product launch or expansion, partnership, customer or deployment, executive appointment, hiring above a floor, headcount change, or a market entry or exit. A vendor's own post counts when the review pass judged it a concrete announcement; a third-party page counts when its headline says so and it names a tracked vendor. Practitioner posts attach as evidence to a development or are listed as discussion. Job-seeking posts, course completions, adverts and market-size reports are filtered out.

🤖 Contains AI-generated content produced by AunooAI. Verify against cited sources before external use.