Funding
Enginsight secures double-digit million-euro investment from Verdane
Funding will expand Enginsight's European cybersecurity platform emphasizing German-made solutions.
Source: the company's website
Exposure Management News · 30 October–6 November 2026
Exposure Management Market Market Maturity Map
How is the market for continuous threat exposure management evolving, and which vendors show material change in capabilities, commercial traction, workforce, funding, partnerships, customer adoption, positioning or risk?
Products that map, score, prioritise and test an organisation's attack surface and vulnerabilities on a continuing basis, as Gartner's CTEM cycle describes: scoping, discovery, prioritisation, validation and mobilisation. It covers startups built for this, vendors acquired by others whose product still ships, and the exposure management lines of large security vendors. 102 vendors, 30 October–6 November 2026.
Generated 06 November 2026, 10:22 UTC
Market Maturity MapWhere 73 of the market's 88 vendors are mapped today, based on how active they are, how they are growing and how fast they are moving.
Vendors placed by size and by growth, from public data we collect: headcount, followers, funding, customers, open roles, launches and mentions. It does not rate product quality, customer satisfaction or strategy. Computed 2026-11-05 over the last 90 days.
Highlight Show
Who is where — Executing 6, Scaling 29, Building 25, Emerging 13; accelerating 6, growing 67, holding 0, innovating 19, hiring 9, raised in the last year 8, moved 3, acquired 28, large incumbents 14, adjacent 64
Marks after a name: ◌ innovating · ⚒ hiring · $ raised in the last year · "(was …)" moved stage since the previous map. Each mark belongs to the name before it.
Executing (6) — the largest vendors: scale of 75 and over
Axonius ◌, Horizon3.ai ◌ ⚒, SecurityScorecard, Pentera ◌, Bitsight, XBOW
Scaling (29) — scale from 50 to 75
UpGuard, Cymulate, Censys ◌ ⚒, Securin, Picus Security, Zafran Security ⚒, Filigran ◌, SecPod, Outpost24 ◌ $, AttackIQ ◌, SafeBreach, BreachLock ⚒, RedSeal, Nucleus Security, CyCognito, Ethiack ◌, Brinqa, Novee ◌, Strobes Security ◌, Panorays, Hive Pro, JupiterOne, Greenbone, Hadrian ⚒, Seemplicity, Vicarius, Cogent Security ⚒, Black Kite, IONIX
Building (25) — scale from 25 to 50
Tenzai $, Searchlight Cyber, Terra Security ◌, Intruder, Empirical Security ⚒, Holm Security ◌, Astelia $, watchTowr, Ridge Security ◌, Attaxion ◌, Cyberwatch, Board of Cyber, ProjectDiscovery ◌, Saporo $, RiskProfiler, RunSybil ⚒ $, Hackuity, ThreatAware ◌ $, CyberMindr, Patrowl, Defense.com, Sprocket Security ⚒, Halo Security, NopSec, SCYTHE
Emerging (13) — the smallest vendors: scale under 25
FourCore, ThingsRecon (was established), Nanitor (was established), Mitigant, Fleuret AI, Phoenix Security ◌, Onit Security $, ThreatNG Security, Northstar Security $, FortifyData, VORNAC ◌, ONYPHE ◌, FullHunt
Accelerating (6) — momentum of 67 and over
Censys, Horizon3.ai, Axonius, Filigran, Ridge Security, Terra Security
Growing (67) — momentum from 33 to 67
Pentera, ThreatAware, BreachLock, Cogent Security, ProjectDiscovery, Outpost24, Ethiack, RunSybil, Novee, Northstar Security, Picus Security, AttackIQ, Holm Security, Phoenix Security, watchTowr, Sprocket Security, Empirical Security, Zafran Security, Hadrian, Greenbone, Cymulate, Strobes Security, ONYPHE, Nucleus Security, VORNAC, Brinqa, Hackuity, UpGuard, Vicarius, SCYTHE, Black Kite, Searchlight Cyber, Tenzai, RiskProfiler, Attaxion, SecurityScorecard, Panorays, Bitsight, CyberMindr, FourCore, SafeBreach, Seemplicity, IONIX, Patrowl, Saporo, XBOW, Board of Cyber, ThingsRecon, Mitigant, FortifyData, CyCognito, Astelia, Cyberwatch, Nanitor, SecPod, ThreatNG Security, FullHunt, Onit Security, Intruder, Defense.com, Securin, RedSeal, Halo Security, Fleuret AI, JupiterOne, NopSec, Hive Pro
Holding (0) — momentum under 33
none
Innovating (19) — top third by launches, corroborated launches, research posts and engineering hiring; a marker across every tier
Horizon3.ai, Axonius, Censys, Pentera, Filigran, Outpost24, AttackIQ, Ethiack, Novee, Terra Security, Ridge Security, Strobes Security, Holm Security, ProjectDiscovery, ThreatAware, Attaxion, Phoenix Security, ONYPHE, VORNAC
Hiring (9) — top third by open roles per 100 staff, with at least 3 roles open; a marker across every tier
Cogent Security (52 open roles, 46 per 100 staff), Horizon3.ai (179 open roles, 28 per 100 staff), Zafran Security (33 open roles, 15 per 100 staff), Empirical Security (4 open roles, 11 per 100 staff), RunSybil (4 open roles, 10 per 100 staff), Sprocket Security (5 open roles, 9 per 100 staff), BreachLock (10 open roles, 7 per 100 staff), Hadrian (7 open roles, 6 per 100 staff), Censys (12 open roles, 6 per 100 staff)
Raised in the last year (8) — a round dated inside the last 365 days, from the vendor's own post, a matched news event or the Crunchbase news list
Northstar Security (round not stated, 2026-11), Onit Security (Seed, 2026-03), RunSybil (Seed, 2026-03), ThreatAware (Series A, 2026-02), Astelia (round not stated, 2026-02), Outpost24 (Strategic, 2025-12), Saporo (Series A, 2025-12), Tenzai (Seed, 2025-11)
Moved (3) — 10 or more points on an axis since the map of 2026-11-04
Axonius (+19.9 scale, +16.5 momentum), AttackIQ (+3.3 scale, +16.2 momentum), Terra Security (+11.6 momentum)
Acquired (28) — on the record, not on the map
Expanse — by Palo Alto Networks, 2020-01-01; Heimdal — by Marlin Equity Partners, 2020-01-01; RiskRecon — by Mastercard, 2020-01-01; Intrigue — by Mandiant, 2021-01-01; RiskIQ — by Microsoft, 2021-01-01; Bit Discovery — by Tenable, 2022-01-01; Digital Shadows — by ReliaQuest (US), 2022-01-01; Randori — by IBM, 2022-01-01; Reposify — by CrowdStrike, 2022-01-01; Vonahi Security — by Kaseya, 2023-01-01; Yogosha — by Groupe Créative, 2023-01-01; Avalor — by Zscaler, 2024-01-01; Cyberint — by Check Point Software Technologies, 2024-01-01; Dazz — by Wiz, 2024-01-01; Detectify — by Insight Partners (majority stake), 2024-01-01; Noetic Cyber — by Rapid7, 2024-01-01; Probely — by Snyk, 2024-01-01; Recorded Future — by Mastercard, 2024-01-01; Runecast — by Dynatrace (US), 2024-01-01; ZeroFox — by Haveli Investments, 2024-01-01; Balbix — by SAFE Security, 2025-01-01; Vulcan Cyber — by Tenable, 2025-01-01; Armis — by ServiceNow, 2026-01-01; Axur — by Infoblox, 2026-01-01; Pentest People — by WorkNest Group, 2026-01-01; Sevco Security — by Arctic Wolf, 2026-01-01; Synack — by Merged with NetSPI (KKR-backed), 2026-01-01; runZero — by Accenture (operated under Dragos), 2026-01-01
Large incumbents (14) — in this market, but too large to compare on size; listed, not on the map
Check Point Software; CrowdStrike; CybelAngel; Ivanti; Microsoft; Palo Alto Networks; Panaseer; Rapid7; Red Sift; ServiceNow; Tenable; Trend Micro; WithSecure; Zscaler
Adjacent (64) — sell next to this market rather than in it; followed for news, not on the map or in the counts
Acronis, Aikido Security, Aleph Index, Arctic Security, ArmorCode, Bishop Fox, Bitdefender, Citalid, CloudSEK, Cobalt, CovertSwarm, Criminal IP, CyberDart, CyberVadis, Cyble, CYFIRMA, Cyjax, cysmo, Cyver, DynaRisk, EBRAND, Enginsight, ESET, Flare, Flashpoint, FortiRecon, G DATA CyberDefense, GObugfree, Group-IB, Hackrate, Hackrfi, Hacktify, Hexway, Hudson Rock, Identeco, Intigriti, Kaduu, KYND, Lansweeper, Lupasafe, Lupovis, Nagomi Security, Netcraft, NetSPI, Nordic Defender, OnSecurity, Ordr, Praetorian, Prelude Security, Raynet, Risk Ledger, Rootshell Security, SAFE Security, SecPoint, Siemba, SignalFisher, Silobreaker, SOCRadar, SOS Intelligence, SpyCloud, turingpoint, XMCO, YesWeHack, Zerocopter
Analyst notes and adjustments (28)
- Expanse: Acquired by Palo Alto Networks (2020). Collected for the product's news.
- Heimdal: Acquired by Marlin Equity Partners (2020). Collected for the product's news.
- RiskRecon: Acquired by Mastercard (2020). Collected for the product's news.
- Intrigue: Acquired by Mandiant (2021). Collected for the product's news.
- RiskIQ: Acquired by Microsoft (2021). Collected for the product's news.
- Bit Discovery: Acquired by Tenable (2022). Collected for the product's news.
- Digital Shadows: Acquired by ReliaQuest (US) (2022). Collected for the product's news.
- Randori: Acquired by IBM (2022). Collected for the product's news.
- Reposify: Acquired by CrowdStrike (2022). Collected for the product's news.
- Vonahi Security: Acquired by Kaseya (2023). Collected for the product's news.
- Yogosha: Acquired by Groupe Créative (2023). Collected for the product's news.
- Avalor: Acquired by Zscaler (2024). Collected for the product's news.
- Cyberint: Acquired by Check Point Software Technologies (2024). Collected for the product's news.
- Dazz: Acquired by Wiz (2024). Collected for the product's news.
- Detectify: Acquired by Insight Partners (majority stake) (2024). Collected for the product's news.
- Noetic Cyber: Acquired by Rapid7 (2024). Collected for the product's news.
- Probely: Acquired by Snyk (2024). Collected for the product's news.
- Recorded Future: Acquired by Mastercard (2024). Collected for the product's news.
- Runecast: Acquired by Dynatrace (US) (2024). Collected for the product's news.
- ZeroFox: Acquired by Haveli Investments (2024). Collected for the product's news.
- Balbix: Acquired by SAFE Security (2025). Collected for the product's news.
- Vulcan Cyber: Acquired by Tenable (2025). Collected for the product's news.
- Armis: Acquired by ServiceNow (2026). Collected for the product's news.
- Axur: Acquired by Infoblox (2026). Collected for the product's news.
- Pentest People: Acquired by WorkNest Group (2026). Collected for the product's news.
- Sevco Security: Acquired by Arctic Wolf (2026). Collected for the product's news.
- Synack: Acquired by Merged with NetSPI (KKR-backed) (2026). Collected for the product's news.
- runZero: Acquired by Accenture (operated under Dragos) (2026). Collected for the product's news.
Not rated (15) — what each one lacks
A vendor is rated only when we have every input. 15 lack linkedin followers; 3 lack linkedin headcount (latest count); 3 lack open roles per 100 staff.
Autobahn Security: linkedin followers; Cyrating: linkedin followers; Edgescan: linkedin followers; ImmuniWeb: linkedin followers; LocateRisk: linkedin followers; Orpheus Cyber: linkedin followers; Pentest-Tools.com: linkedin followers; Pikered: linkedin followers; RCE Security: linkedin followers; RiskXchange: linkedin followers; Validato: linkedin followers; XRATOR: linkedin followers; LEET Security: linkedin headcount (latest count), linkedin followers, open roles per 100 staff; Tonic Security: linkedin headcount (latest count), linkedin followers, open roles per 100 staff; Uncovery: linkedin headcount (latest count), linkedin followers, open roles per 100 staff
How the map is computed — weights and rules
| Input | Axis | Weight |
|---|---|---|
| LinkedIn headcount (latest count) | scale | 0.35 |
| Disclosed funding total (optional) | scale | 0.30 |
| Customer evidence, weighted, last 12 months named customer in their own words 3, named in the vendor's words 2, unnamed 1 | scale | 0.25 |
| LinkedIn followers | scale | 0.10 |
| Headcount change in the period (optional) | momentum | 0.30 |
| Launches and partnerships in the period | momentum | 0.25 |
| Earned mentions in the period | momentum | 0.15 |
| Open roles per 100 staff | momentum | 0.15 |
| Crunchbase growth score (secondary) (optional) | momentum | 0.10 |
| Own LinkedIn posts in the period | momentum | 0.05 |
Each input is a percentile rank among the rated vendors; an axis is the weighted mean of its inputs. On the map, the angle is the stage, by scale: Emerging under 25, Building from 25, Scaling from 50, Executing from 75, left to right. The distance from the base is momentum: holding under 33, growing from 33, accelerating from 67. A vendor moves right as it grows and outward as it speeds up.
Executive assessment
3 findingsNew funding for Enginsight.
Enginsight raised a new round on 3 November.
- Enginsight secures double-digit million-euro investment from Verdane (Vendor sources only, 3 Nov 2026)
Customer announcements from Ethiack.
1 customer or deployment announcement, 1 of them naming the customer.
- Bondalti engages Ethiack for industrial penetration testing (Vendor sources only, 2 Nov 2026)
6 of 102 vendors had a development.
10 developments in 7 days, plus 36 hiring or headcount signals. The 8 vendors with 1 or more developments account for 100% of them (Enginsight 2, Phoenix Security 2, Aleph Index 1, Censys 1, CrowdStrike 1, and 3 more). 34 vendors were watched and had none. 62 are not fully collected yet.
- Enginsight: 2 developments
- Phoenix Security: 2 developments
- Aleph Index: 1 development
- Censys: 1 development
- CrowdStrike: 1 development
Vendors with a development
46 developments · 6 vendors| Vendor | Development | Evidence | Why it matters |
|---|---|---|---|
| Enginsight | Enginsight secures double-digit million-euro investment from Verdane Funding · 3 Nov 2026 | the company's website · 1 source Vendor sources only | |
| Novee | Novee launches External Surface Testing cybersecurity service Product launch · 2 Nov 2026 | helpnetsecurity.com · 2 sources Also reported independently | |
| Ethiack | Bondalti engages Ethiack for industrial penetration testing Customer evidence · 2 Nov 2026 | the company's website · 1 source Vendor sources only | |
| Enginsight | Enginsight releases platform version 4.9.1 with full Alarm-Route release Product expansion · 3 Nov 2026 | the company's website · 1 source Vendor sources only | The update adds notification templates, expands import/export functionality, continues UI unification for Observations, and enables direct… |
| Filigran | Filigran integrates OpenCTI with Google Threat Intelligence Partnership · 2 Nov 2026 | the company's website · 1 source Vendor sources only | Filigran's OpenCTI platform integrates with Google Threat Intelligence to convert raw threat data into prioritized, contextualized security actions… |
| CrowdStrike | CrowdStrike Unveils Agentic Adversary Emulation on the Falcon Platform to Identify and Close Exploitable… Product launch · 4 Nov 2026 | the company's website · 2 sources Vendor sources only | CrowdStrike launched Agentic Adversary Emulation, a new security tool using SafeMind AI models to simulate adversary attacks, identify exploitable… |
| Phoenix Security | Phoenix Security releases Green AI Remedy for security remediation Product launch · 4 Nov 2026 | the company's LinkedIn post · 2 sources Vendor sources only | Phoenix Security released Green AI Remedy, a tool enabling security teams to create remediation plans from prioritized findings, view costs in USD… |
| Phoenix Security | Phoenix Security releases Purple Hook for AI coding assistants Product launch · 4 Nov 2026 | the company's website · 1 source Vendor sources only | Phoenix Security announced general availability of Purple Hook, a security tool that runs locally inside AI coding assistants to deliver security… |
Other developments (38)
| Aleph Index | Aleph launches Aleph Intelligence Platform for dark web investigation | Product launch · 3 Nov 2026 | 1 source · Vendor sources only |
| Censys | Censys introduces new credit pricing for Free and Starter Plans | Product launch · 30 Oct 2026 | 1 source · Vendor sources only |
| Acronis | Acronis: 38 open roles | Hiring · this period | 1 source · Vendor sources only |
| Aikido Security | Aikido Security: 75 open roles | Hiring · this period | 1 source · Vendor sources only |
| Armis | Armis: 5 open roles | Hiring · this period | 1 source · Vendor sources only |
| ArmorCode | ArmorCode: 8 open roles | Hiring · this period | 1 source · Vendor sources only |
| Axonius | Axonius: 8 open roles | Hiring · this period | 1 source · Vendor sources only |
| Balbix | Balbix: 20 open roles | Hiring · this period | 1 source · Vendor sources only |
| Bishop Fox | Bishop Fox: 11 open roles | Hiring · this period | 1 source · Vendor sources only |
| Bitdefender | Bitdefender: 22 open roles | Hiring · this period | 1 source · Vendor sources only |
| Bitsight | Bitsight: 19 open roles | Hiring · this period | 1 source · Vendor sources only |
| Black Kite | Black Kite: 8 open roles | Hiring · this period | 1 source · Vendor sources only |
| BreachLock | BreachLock: 10 open roles | Hiring · this period | 1 source · Vendor sources only |
| Censys | Censys: 12 open roles | Hiring · this period | 1 source · Vendor sources only |
| CloudSEK | CloudSEK: 22 open roles | Hiring · this period | 1 source · Vendor sources only |
| Cobalt | Cobalt: 7 open roles | Hiring · this period | 1 source · Vendor sources only |
| Cogent Security | Cogent Security: 52 open roles | Hiring · this period | 1 source · Vendor sources only |
| Detectify | Detectify: 5 open roles | Hiring · this period | 1 source · Vendor sources only |
| Digital Shadows | Digital Shadows: 35 open roles | Hiring · this period | 1 source · Vendor sources only |
| ESET | ESET: 17 open roles | Hiring · this period | 1 source · Vendor sources only |
| Filigran | Filigran: 9 open roles | Hiring · this period | 1 source · Vendor sources only |
| Flare | Flare: 7 open roles | Hiring · this period | 1 source · Vendor sources only |
| Flashpoint | Flashpoint: 8 open roles | Hiring · this period | 1 source · Vendor sources only |
| Hadrian | Hadrian: 10 open roles | Hiring · this period | 1 source · Vendor sources only |
| Horizon3.ai | Horizon3.ai: 187 open roles | Hiring · this period | 1 source · Vendor sources only |
| Lansweeper | Lansweeper: 13 open roles | Hiring · this period | 1 source · Vendor sources only |
| Nucleus Security | Nucleus Security: 6 open roles | Hiring · this period | 1 source · Vendor sources only |
| Pentera | Pentera: 7 open roles | Hiring · this period | 1 source · Vendor sources only |
| Picus Security | Picus Security: 10 open roles | Hiring · this period | 1 source · Vendor sources only |
| Recorded Future | Recorded Future: 18 open roles | Hiring · this period | 1 source · Vendor sources only |
| Risk Ledger | Risk Ledger: 7 open roles | Hiring · this period | 1 source · Vendor sources only |
| SecurityScorecard | SecurityScorecard: 11 open roles | Hiring · this period | 1 source · Vendor sources only |
| Sprocket Security | Sprocket Security: 5 open roles | Hiring · this period | 1 source · Vendor sources only |
| SpyCloud | SpyCloud: 9 open roles | Hiring · this period | 1 source · Vendor sources only |
| Synack | Synack: 6 open roles | Hiring · this period | 1 source · Vendor sources only |
| UpGuard | UpGuard: 19 open roles | Hiring · this period | 1 source · Vendor sources only |
| XMCO | XMCO: 8 open roles | Hiring · this period | 1 source · Vendor sources only |
| Zafran Security | Zafran Security: 33 open roles | Hiring · this period | 1 source · Vendor sources only |
What this says about the market
Market formation
Most of the market is established: only 13 of the 96 vendors with a known founding year were founded in 2023 or later.
Founding year known for 96 of 102 vendors.
Products versus customers
Product news outweighs customer announcements. Of 10 developments, 7 were product launches or expansions, 1 partnerships and 1 customer or deployment announcements.
Concentration
Activity is concentrated in three vendors account for 100% of 10 developments. Elsewhere it is spread: the three vendors hiring most hold 38% of 826 open roles (Horizon3.ai alone 23%); the three most active accounts published 6% of 652 vendor posts; the three best-funded vendors hold 23% of disclosed funding.
Job listings exist for 67 of 102 vendors; funding is disclosed for 67 of 102.
Developments
RSS30 October–6 November 2026
594 records collected → 46 developments
Product launch
Novee launches External Surface Testing cybersecurity service
Discovers unknown internet-facing assets, validates CVEs and EASM findings, and demonstrates actual exploitability by attackers.
Customer evidence
Bondalti engages Ethiack for industrial penetration testing
The chemical manufacturer tested detection and response capabilities across multiple attack vectors without disrupting operations.
Source: the company's website
Product expansion
Enginsight releases platform version 4.9.1 with full Alarm-Route release
Update adds notification templates, expands import/export, continues UI unification, and enables direct email server and SMS gateway configuration.
Source: the company's website
Partnership
Filigran integrates OpenCTI with Google Threat Intelligence
Converts raw threat data into prioritized, contextualized security actions.
Source: the company's website
Product launch
CrowdStrike Unveils Agentic Adversary Emulation on the Falcon Platform to Identify and Close Exploitable Attack Paths
Product launch
Phoenix Security releases Green AI Remedy for security remediation
Tool creates remediation plans from prioritized findings and shows costs in USD before processing.
Product launch
Phoenix Security releases Purple Hook for AI coding assistants
Tool runs locally inside AI coding assistants to deliver security findings with file, line, severity and fix information.
Source: the company's website
Product launch
Aleph launches Aleph Intelligence Platform for dark web investigation
Sovereign AI-augmented platform draws on dark web archives collected since 2012, keeping data in France.
Source: the company's LinkedIn post
Product launch
Censys introduces new credit pricing for Free and Starter Plans
Basic lookups, standard searches, and advanced regex queries now cost fewer credits, up to four times more efficient.
Source: the company's website
Hiring
36 vendors with 5 or more open roles
Acronis
Aikido Security
Armis
ArmorCode
Axonius
Balbix
Bishop Fox
Bitdefender
Bitsight
Black Kite
BreachLock
Censys
CloudSEK
Cobalt
Cogent Security
Detectify
Digital Shadows
ESET
Filigran
Flare
Flashpoint
Hadrian
Horizon3.ai
Lansweeper
Nucleus Security
Pentera
Picus Security
Recorded Future
Risk Ledger
SecurityScorecard
Sprocket Security
SpyCloud
Synack
UpGuard
XMCO
Zafran Security
Everything we collected: the 60 most recent of 594 records
Everything matched to this market in the period, including general discussion and anything that did not become a development.