Funding
Enginsight secures double-digit million-euro investment from Verdane
Verdane invests to expand Enginsight's European cybersecurity platform emphasizing German-made solutions.
Source: the company's website
Exposure Management News · 29 October–5 November 2026
European Exposure Management Market Market Maturity Map
How is the European market for continuous threat exposure management evolving, and which vendors headquartered in Europe show material change in capabilities, commercial traction, workforce, funding, partnerships, customer adoption, positioning or risk?
Products that map, score, prioritise and test an organisation's attack surface and vulnerabilities on a continuing basis, as Gartner's CTEM cycle describes: scoping, discovery, prioritisation, validation and mobilisation. It covers startups built for this, European vendors acquired by others whose product still ships, and the exposure management lines of large European security vendors. 40 vendors, 29 October–5 November 2026.
Generated 05 November 2026, 11:28 UTC
Market Maturity MapWhere 76 of the market's 86 vendors are mapped today, based on how active they are, how they are growing and how fast they are moving.
Vendors placed by size and by growth, from public data we collect: headcount, followers, funding, customers, open roles, launches and mentions. It does not rate product quality, customer satisfaction or strategy. Computed 2026-11-04 over the last 90 days.
Highlight Show
Who is where — Executing 9, Scaling 27, Building 31, Emerging 9; accelerating 3, growing 73, holding 0, innovating 22, hiring 3, raised in the last year 7, moved 9, acquired 7, large incumbents 4
Marks after a name: ◌ innovating · ⚒ hiring · $ raised in the last year · "(was …)" moved stage since the previous map. Each mark belongs to the name before it.
Executing (9) — the largest vendors: scale of 75 and over
Acronis ◌, G DATA CyberDefense, Lansweeper, Bitdefender ◌, ESET ◌, Aikido Security ◌ ⚒, Intigriti, YesWeHack, Ethiack ◌ (was innovators)
Scaling (27) — scale from 50 to 75
Filigran ◌ (was executors), Netcraft, Outpost24 ◌ $ (was executors), Hadrian ⚒ (was executors), Greenbone (was executors), XMCO ⚒, CyberVadis, Raynet, EBRAND, Pentest-Tools.com, CovertSwarm ◌, Searchlight Cyber, Edgescan ◌, Intruder ◌, SignalFisher, Risk Ledger $, Enginsight ◌ $, OnSecurity, Silobreaker, Holm Security ◌, KYND ◌, Citalid, Cyberwatch, Rootshell Security, Board of Cyber, Hackuity $, Saporo $
Building (31) — scale from 25 to 50
Autobahn Security (was innovators), ImmuniWeb (was innovators), Zerocopter, Cyjax, Orpheus Cyber, Defense.com, ThreatAware ◌ $ (was innovators), cysmo, Nordic Defender, SecPoint, Patrowl, LocateRisk, Lupovis, GObugfree ◌, DynaRisk, Arctic Security ◌, Aleph Index ◌, Hackrate, Nanitor ◌, ThingsRecon, Kaduu, Mitigant, Phoenix Security ◌, Fleuret AI $, Pikered, Lupasafe, Cyver ◌, Identeco, XRATOR, RiskXchange, turingpoint
Emerging (9) — the smallest vendors: scale under 25
CyberDart, SOS Intelligence, Hacktify, VORNAC ◌, Validato, ONYPHE ◌, Hackrfi, Cyrating, RCE Security
Accelerating (3) — momentum of 67 and over
Aikido Security, Filigran, Acronis
Growing (73) — momentum from 33 to 67
Bitdefender, ThreatAware, Arctic Security, CovertSwarm, Edgescan, Ethiack, Holm Security, YesWeHack, Outpost24, GObugfree, Phoenix Security, ESET, Enginsight, Hackuity, Cyver, ONYPHE, XMCO, Intigriti, Greenbone, Hadrian, Risk Ledger, VORNAC, Nanitor, G DATA CyberDefense, Intruder, OnSecurity, Raynet, Lansweeper, KYND, CyberVadis, ThingsRecon, Searchlight Cyber, Board of Cyber, Fleuret AI, Netcraft, Cyjax, Defense.com, Rootshell Security, Kaduu, Hackrfi, Orpheus Cyber, LocateRisk, cysmo, RiskXchange, Mitigant, Validato, XRATOR, Patrowl, Citalid, Cyberwatch, SOS Intelligence, Autobahn Security, Saporo, SecPoint, Pikered, Hacktify, SignalFisher, DynaRisk, ImmuniWeb, Lupovis, Aleph Index, Identeco, Lupasafe, turingpoint, Pentest-Tools.com, Nordic Defender, Silobreaker, CyberDart, Hackrate, Zerocopter, EBRAND, RCE Security, Cyrating
Holding (0) — momentum under 33
none
Innovating (22) — top third by launches, corroborated launches, research posts and engineering hiring; a marker across every tier
Acronis, Aikido Security, Filigran, Bitdefender, ESET, Ethiack, Outpost24, CovertSwarm, Edgescan, Holm Security, Enginsight, Intruder, ThreatAware, KYND, Arctic Security, GObugfree, Phoenix Security, Nanitor, Cyver, Aleph Index, ONYPHE, VORNAC
Hiring (3) — top third by open roles per 100 staff, with at least 3 roles open; a marker across every tier
Aikido Security (73 open roles, 21 per 100 staff), Hadrian (7 open roles, 6 per 100 staff), XMCO (7 open roles, 6 per 100 staff)
Raised in the last year (7) — a round dated inside the last 365 days, from the vendor's own post, a matched news event or the Crunchbase news list
Enginsight (round not stated, 2026-11), Fleuret AI (Pre Seed, 2026-10), Hackuity (Series B, 2026-09), Risk Ledger (Series B, 2026-07), ThreatAware (Series A, 2026-02), Outpost24 (Strategic, 2025-12), Saporo (Series A, 2025-12)
Moved (9) — 10 or more points on an axis since the map of 2026-11-03
ThreatAware (-10.7 scale, +20.4 momentum; Scaling → Building), Filigran (-7.7 scale, +13.1 momentum; Executing → Scaling), Ethiack (+10.1 scale, +9.7 momentum; Scaling → Executing), Hadrian (-13.9 scale, -5.5 momentum; Executing → Scaling), Holm Security (-7.2 scale, +12 momentum), Outpost24 (-7.6 scale, +10.3 momentum; Executing → Scaling), Phoenix Security (+16.8 momentum), ONYPHE (-2 scale, -11.9 momentum), Hackuity (-10.5 scale, -1 momentum)
Acquired (7) — on the record, not on the map
Heimdal — by Marlin Equity Partners, 2020-01-01; Digital Shadows — by ReliaQuest (US), 2022-01-01; Yogosha — by Groupe Créative, 2023-01-01; Detectify — by Insight Partners (majority stake), 2024-01-01; Probely — by Snyk, 2024-01-01; Runecast — by Dynatrace (US), 2024-01-01; Pentest People — by WorkNest Group, 2026-01-01
Large incumbents (4) — in this market, but too large to compare on size; listed, not on the map
CybelAngel; Panaseer; Red Sift; WithSecure
Analyst notes and adjustments (49)
- Acronis: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Aikido Security: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Bitdefender: Sells next to exposure management rather than in it (3 Nov 2026 split)
- G DATA CyberDefense: Sells next to exposure management rather than in it (3 Nov 2026 split)
- ESET: Sells next to exposure management rather than in it (3 Nov 2026 split)
- YesWeHack: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Lansweeper: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Intigriti: Sells next to exposure management rather than in it (3 Nov 2026 split)
- CovertSwarm: Sells next to exposure management rather than in it (3 Nov 2026 split)
- XMCO: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Netcraft: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Raynet: Sells next to exposure management rather than in it (3 Nov 2026 split)
- CyberVadis: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Enginsight: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Risk Ledger: Sells next to exposure management rather than in it (3 Nov 2026 split)
- OnSecurity: Sells next to exposure management rather than in it (3 Nov 2026 split)
- KYND: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Arctic Security: Sells next to exposure management rather than in it (3 Nov 2026 split)
- EBRAND: Sells next to exposure management rather than in it (3 Nov 2026 split)
- SignalFisher: Sells next to exposure management rather than in it (3 Nov 2026 split)
- GObugfree: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Citalid: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Silobreaker: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Rootshell Security: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Cyjax: Sells next to exposure management rather than in it (3 Nov 2026 split)
- cysmo: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Zerocopter: Sells next to exposure management rather than in it (3 Nov 2026 split)
- SecPoint: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Cyver: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Nordic Defender: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Lupovis: Sells next to exposure management rather than in it (3 Nov 2026 split)
- DynaRisk: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Kaduu: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Aleph Index: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Hackrate: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Lupasafe: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Identeco: Sells next to exposure management rather than in it (3 Nov 2026 split)
- SOS Intelligence: Sells next to exposure management rather than in it (3 Nov 2026 split)
- turingpoint: Sells next to exposure management rather than in it (3 Nov 2026 split)
- CyberDart: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Hacktify: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Hackrfi: Sells next to exposure management rather than in it (3 Nov 2026 split)
- Heimdal: Acquired by Marlin Equity Partners (2020). Collected for the product's news.
- Digital Shadows: Acquired by ReliaQuest (US) (2022). Collected for the product's news.
- Yogosha: Acquired by Groupe Créative (2023). Collected for the product's news.
- Detectify: Acquired by Insight Partners (majority stake) (2024). Collected for the product's news.
- Probely: Acquired by Snyk (2024). Collected for the product's news.
- Runecast: Acquired by Dynatrace (US) (2024). Collected for the product's news.
- Pentest People: Acquired by WorkNest Group (2026). Collected for the product's news.
Not rated (3) — what each one lacks
A vendor is rated only when we have every input. 3 lack linkedin headcount (latest count); 3 lack linkedin followers; 3 lack open roles per 100 staff.
Hexway: linkedin headcount (latest count), linkedin followers, open roles per 100 staff; LEET Security: linkedin headcount (latest count), linkedin followers, open roles per 100 staff; Uncovery: linkedin headcount (latest count), linkedin followers, open roles per 100 staff
How the map is computed — weights and rules
| Input | Axis | Weight |
|---|---|---|
| LinkedIn headcount (latest count) | scale | 0.35 |
| Disclosed funding total (optional) | scale | 0.30 |
| Customer evidence, weighted, last 12 months named customer in their own words 3, named in the vendor's words 2, unnamed 1 | scale | 0.25 |
| LinkedIn followers | scale | 0.10 |
| Headcount change in the period (optional) | momentum | 0.30 |
| Launches and partnerships in the period | momentum | 0.25 |
| Earned mentions in the period | momentum | 0.15 |
| Open roles per 100 staff | momentum | 0.15 |
| Crunchbase growth score (secondary) (optional) | momentum | 0.10 |
| Own LinkedIn posts in the period | momentum | 0.05 |
Each input is a percentile rank among the rated vendors; an axis is the weighted mean of its inputs. On the map, the angle is the stage, by scale: Emerging under 25, Building from 25, Scaling from 50, Executing from 75, left to right. The distance from the base is momentum: holding under 33, growing from 33, accelerating from 67. A vendor moves right as it grows and outward as it speeds up.
Executive assessment
3 findingsNew funding for Enginsight.
Enginsight raised a new round on 3 November.
- Enginsight secures double-digit million-euro investment from Verdane (Vendor sources only, 3 Nov 2026)
Customer announcements from Aikido Security, Ethiack.
3 customer or deployment announcements, 2 of them naming the customer.
- KEYES uses Aikido Security to unify findings across teams (Vendor sources only, 3 Nov 2026)
- Bondalti engages Ethiack for industrial penetration testing (Vendor sources only, 2 Nov 2026)
7 of 40 vendors had a development.
20 developments in 7 days, plus 11 hiring or headcount signals. The 4 most active vendors account for 45% of them (Ethiack 3, Enginsight 2, Phoenix Security 2, Runecast 2). 27 vendors were watched and had none. 6 are not fully collected yet.
- Ethiack: 3 developments
- Enginsight: 2 developments
- Phoenix Security: 2 developments
- Runecast: 2 developments
- Acronis: 1 development
Vendors with a development
31 developments · 7 vendors| Vendor | Development | Evidence | Why it matters |
|---|---|---|---|
| Enginsight | Enginsight secures double-digit million-euro investment from Verdane Funding · 3 Nov 2026 | the company's website · 1 source Vendor sources only | |
| Aikido Security | KEYES uses Aikido Security to unify findings across teams Customer evidence · 3 Nov 2026 | the company's LinkedIn post · 1 source Vendor sources only | Someone from KEYES is quoted in the post. |
| Ethiack | Bondalti engages Ethiack for industrial penetration testing Customer evidence · 2 Nov 2026 | the company's website · 1 source Vendor sources only | The vendor has published a case study about Bondalti. |
| Pentest-Tools.com | Pentest-Tools.com: Vodafone acknowledges Specter found vulnerability via HackerOne Customer evidence · 2 Nov 2026 | the company's LinkedIn post · 1 source Vendor sources only | The vendor does not name the customer. |
| Enginsight | Enginsight releases platform version 4.9.1 Product expansion · 3 Nov 2026 | the company's website · 1 source Vendor sources only | The update adds notification templates, expands import/export functionality, continues UI unification for Observations, and enables direct… |
| Nordic Defender | Nordic Defender launches Specter AI Pentest for web apps and APIs Product expansion · 2 Nov 2026 | the company's LinkedIn post · 1 source Vendor sources only | |
| Lansweeper | Lansweeper reintroduces Dynamic Groups with expanded functionality Product expansion · 30 Oct 2026 | the company's website · 1 source Vendor sources only | |
| Hackuity | Hackuity integrates with SysReptor Pentest Reporting Partnership · 3 Nov 2026 | the company's LinkedIn post · 1 source Vendor sources only | Our latest connector is now live, joining 130+ integrations already available on the Hackuity platform. |
Other developments (23)
| Runecast | Runecast: Dynatrace launches AI-powered community platform | Product launch · 29 Oct 2026 | 2 sources · Vendor sources only |
| Ethiack | Ethiack launches Ethibench to test AI pentesting agents | Product launch · 4 Nov 2026 | 1 source · Vendor sources only |
| Phoenix Security | Phoenix Security makes Green AI Remedy generally available | Product launch · 4 Nov 2026 | 1 source · Vendor sources only |
| Phoenix Security | Phoenix Security makes Purple Hook generally available | Product launch · 4 Nov 2026 | 1 source · Vendor sources only |
| Aleph Index | Aleph launches Aleph Intelligence Platform for dark web investigation | Product launch · 3 Nov 2026 | 1 source · Vendor sources only |
| Ethiack | Ethiack launches Zero to track and validate emerging vulnerabilities | Product launch · 3 Nov 2026 | 1 source · Vendor sources only |
| Pikered | Pikered's ZAIUXEvo integrates with Trend Vision One | Product launch · 2 Nov 2026 | 1 source · Vendor sources only |
| WithSecure | WithSecure unifies Elements Exposure Management and XDR workflow | Product launch · 31 Oct 2026 | 1 source · Vendor sources only |
| Edgescan | Edgescan launches AI-powered WAF Rule Generation capability | Product launch · 29 Oct 2026 | 1 source · Vendor sources only |
| GObugfree | GObugfree launches new vulnerability management platform | Product launch · 29 Oct 2026 | 1 source · Vendor sources only |
| Runecast | Runecast: Dynatrace releases dashboard for AI service vulnerabilities | Product launch · 29 Oct 2026 | 1 source · Vendor sources only |
| Acronis | Acronis appoints HoJin Kim as Chief Revenue Officer | Executive appointment · 3 Nov 2026 | 1 source · Vendor sources only |
| Acronis | Acronis: 35 open roles | Hiring · this period | 1 source · Vendor sources only |
| Aikido Security | Aikido Security: 74 open roles | Hiring · this period | 1 source · Vendor sources only |
| Bitdefender | Bitdefender: 20 open roles | Hiring · this period | 1 source · Vendor sources only |
| Detectify | Detectify: 5 open roles | Hiring · this period | 1 source · Vendor sources only |
| Digital Shadows | Digital Shadows: 35 open roles | Hiring · this period | 1 source · Vendor sources only |
| ESET | ESET: 16 open roles | Hiring · this period | 1 source · Vendor sources only |
| Filigran | Filigran: 8 open roles | Hiring · this period | 1 source · Vendor sources only |
| Hadrian | Hadrian: 7 open roles | Hiring · this period | 1 source · Vendor sources only |
| Lansweeper | Lansweeper: 12 open roles | Hiring · this period | 1 source · Vendor sources only |
| Risk Ledger | Risk Ledger: 7 open roles | Hiring · this period | 1 source · Vendor sources only |
| XMCO | XMCO: 8 open roles | Hiring · this period | 1 source · Vendor sources only |
What this says about the market
Market formation
Most of the market is established: only 2 of the 36 vendors with a known founding year were founded in 2023 or later.
Founding year known for 36 of 40 vendors.
Products versus customers
Product news outweighs customer announcements. Of 20 developments, 14 were product launches or expansions, 1 partnerships and 3 customer or deployment announcements.
Concentration
Activity is concentrated in the three vendors hiring most hold 59% of 245 open roles (Aikido Security alone 30%); the three best-funded vendors hold 56% of disclosed funding. Elsewhere it is spread: the three most active accounts published 12% of 235 vendor posts; three vendors account for 45% of 20 developments.
Job listings exist for 22 of 40 vendors; funding is disclosed for 11 of 40.
Developments
RSS29 October–5 November 2026
663 records collected → 31 developments
Customer evidence
KEYES uses Aikido Security to unify findings across teams
Belgian ICT group KEYES brought findings from many teams and tech stacks into one view with Aikido.
Source: the company's LinkedIn post
Customer evidence
Bondalti engages Ethiack for industrial penetration testing
Chemical manufacturer Bondalti used Ethiack's on-site penetration testing to validate industrial cybersecurity defenses.
Source: the company's website
Customer evidence
Pentest-Tools.com: Vodafone acknowledges Specter found vulnerability via HackerOne
Vodafone publicly acknowledged that Pentest-Tools.com's Specter engine found an important vulnerability through its HackerOne bug bounty program.
Source: the company's LinkedIn post
Product expansion
Enginsight releases platform version 4.9.1
Moves Alarm-Route to full release, adds notification templates, email server and SMS gateway configuration.
Source: the company's website
Product expansion
Nordic Defender launches Specter AI Pentest for web apps and APIs
Specter offers AI-driven penetration testing with human-reviewed reports in 8-48 hours and free retesting.
Source: the company's LinkedIn post
Product expansion
Lansweeper reintroduces Dynamic Groups with expanded functionality
Users can create more flexible asset groupings for dashboards, views, and reports.
Source: the company's website
Partnership
Hackuity integrates with SysReptor Pentest Reporting
The connector automatically imports and syncs pentest findings and assets into Hackuity's platform.
Source: the company's LinkedIn post
Product launch
Runecast: Dynatrace launches AI-powered community platform
Now supports coding agents, Python-based LLM applications through OneAgent, and OpenInference-instrumented frameworks.
Product launch
Ethiack launches Ethibench to test AI pentesting agents
The tool provides proper replication testing for probabilistic LLM-based pentesting agents.
Source: the company's LinkedIn post
Product launch
Phoenix Security makes Green AI Remedy generally available
Tool creates remediation plans, shows costs in USD, focuses review on fixes likely to ship.
Source: the company's website
Product launch
Phoenix Security makes Purple Hook generally available
Tool runs locally in AI coding assistants delivering findings with file, line, severity and fix info.
Source: the company's website
Product launch
Aleph launches Aleph Intelligence Platform for dark web investigation
The AI-augmented platform explores dark web archives since 2012, with data kept in France.
Source: the company's LinkedIn post
Product launch
Ethiack launches Zero to track and validate emerging vulnerabilities
The product validates exploitability before a CVE is minted, tracking signals from news, advisories, KEV, GHSA and CVE records.
Source: the company's LinkedIn post
Product launch
Pikered's ZAIUXEvo integrates with Trend Vision One
Integration adds Trend Vision One, bringing total to eight integrations across EDR, ticketing and SIEM.
Source: the company's LinkedIn post
Product launch
WithSecure unifies Elements Exposure Management and XDR workflow
WithSecure integrates Exposure Management and XDR into one workflow with shared console, priority scoring and response actions.
Source: the company's LinkedIn post
Product launch
Edgescan launches AI-powered WAF Rule Generation capability
The feature creates vendor-specific WAF rules from validated vulnerability findings for teams to review and deploy.
Source: the company's LinkedIn post
Product launch
GObugfree launches new vulnerability management platform
Source: the company's LinkedIn post
Product launch
Runecast: Dynatrace releases dashboard for AI service vulnerabilities
Surfaces vulnerabilities detected at runtime to enhance security visibility for AI deployments.
Source: the company's website
Executive appointment
Acronis appoints HoJin Kim as Chief Revenue Officer
Kim joins from WatchGuard Technologies with 25+ years of IT channel experience.
Source: the company's LinkedIn post
Hiring
11 vendors with 5 or more open roles
Acronis
Aikido Security
Bitdefender
Detectify
Digital Shadows
ESET
Filigran
Hadrian
Lansweeper
Risk Ledger
XMCO
Everything we collected: the 60 most recent of 663 records
Everything matched to this market in the period, including general discussion and anything that did not become a development.