CyberfuturistsBy the CyberfuturistsAunoomade using AunooEuropean Exposure Management Market
Exposure Management News · 8 August–6 November 2026

European Exposure Management Market Market Maturity Map

How is the European market for continuous threat exposure management evolving, and which vendors headquartered in Europe show material change in capabilities, commercial traction, workforce, funding, partnerships, customer adoption, positioning or risk?

Products that map, score, prioritise and test an organisation's attack surface and vulnerabilities on a continuing basis, as Gartner's CTEM cycle describes: scoping, discovery, prioritisation, validation and mobilisation. It covers startups built for this, European vendors acquired by others whose product still ships, and the exposure management lines of large European security vendors. 40 vendors, 8 August–6 November 2026.

Generated 06 November 2026, 12:24 UTC
Market Maturity MapWhere 34 of the market's 36 vendors are mapped today, based on how active they are, how they are growing and how fast they are moving.

Vendors placed by size and by growth, from public data we collect: headcount, followers, funding, customers, open roles, launches and mentions. It does not rate product quality, customer satisfaction or strategy. Computed 2026-11-05 over the last 90 days.

Highlight
EmergingBuildingScalingExecuting→→→← smaller by scalelarger by scale →further from the base = more momentuminnovating — top third by product workhiring — top third by open roles per headraised in the last yeartrail — moved 10 or more points on an axis since the previous mapFiligranEthiackPentest-Tools.comOutpost24GreenboneHadrianEdgescanHackuityHolm SecuritySearchlight CyberIntruderThreatAwareBoard of CyberCyberwatchSaporoPhoenix SecurityDefense.comAutobahn SecurityImmuniWebOrpheus CyberPatrowlPikeredNanitorThingsReconLocateRiskMitigantONYPHEFleuret AIRiskXchangeVORNACXRATORValidatoCyratingRCE Securityholdinggrowingaccelerating
Who is where — Executing 6, Scaling 10, Building 13, Emerging 5; accelerating 1, growing 31, holding 2, innovating 12, hiring 2, raised in the last year 5, moved 4, acquired 7, large incumbents 4, adjacent 43

Marks after a name: ◌ innovating · ⚒ hiring · $ raised in the last year · "(was …)" moved stage since the previous map. Each mark belongs to the name before it.

Executing (6) — the largest vendors: scale of 75 and over

Pentest-Tools.com ◌ (was innovators), Ethiack ◌, Hadrian ⚒ (was innovators), Filigran ◌ ⚒ (was innovators), Outpost24 ◌ $ (was innovators), Greenbone (was innovators)

Scaling (10) — scale from 50 to 75

Searchlight Cyber ◌, Edgescan ◌, Intruder ◌, Holm Security ◌, Hackuity $, Cyberwatch, Board of Cyber, ThreatAware ◌ $ (was established), Saporo $, ImmuniWeb (was established)

Building (13) — scale from 25 to 50

Autobahn Security, Defense.com, Patrowl, Orpheus Cyber, LocateRisk, ThingsRecon, Nanitor, Mitigant, Fleuret AI $, Phoenix Security ◌, Pikered ◌, XRATOR, RiskXchange

Emerging (5) — the smallest vendors: scale under 25

VORNAC, Validato, ONYPHE ◌, Cyrating, RCE Security

Accelerating (1) — momentum of 67 and over

Filigran

Growing (31) — momentum from 33 to 67

ThreatAware, Hackuity, Ethiack, Outpost24, Greenbone, Holm Security, Phoenix Security, Edgescan, Pentest-Tools.com, Intruder, ONYPHE, Searchlight Cyber, Pikered, Hadrian, VORNAC, Nanitor, ThingsRecon, Board of Cyber, Fleuret AI, Defense.com, RiskXchange, Mitigant, Orpheus Cyber, LocateRisk, Validato, XRATOR, Patrowl, Cyberwatch, Saporo, Autobahn Security, ImmuniWeb

Holding (2) — momentum under 33

RCE Security, Cyrating

Innovating (12) — top third by launches, corroborated launches, research posts and engineering hiring; a marker across every tier

Filigran, Ethiack, Pentest-Tools.com, Outpost24, Edgescan, Holm Security, Searchlight Cyber, Intruder, ThreatAware, Phoenix Security, Pikered, ONYPHE

Hiring (2) — top third by open roles per 100 staff, with at least 3 roles open; a marker across every tier

Hadrian (7 open roles, 6 per 100 staff), Filigran (8 open roles, 3 per 100 staff)

Raised in the last year (5) — a round dated inside the last 365 days, from the vendor's own post, a matched news event or the Crunchbase news list

Fleuret AI (Pre Seed, 2026-10), Hackuity (Series B, 2026-09), ThreatAware (Series A, 2026-02), Outpost24 (Strategic, 2025-12), Saporo (Series A, 2025-12)

Moved (4) — 10 or more points on an axis since the map of 2026-11-04

Pentest-Tools.com (+24.5 scale, +17.3 momentum; Scaling → Executing), Hadrian (+13.2 scale, -2.6 momentum; Scaling → Executing), Pikered (+11.5 momentum), ThreatAware (+10 scale; Building → Scaling)

Acquired (7) — on the record, not on the map

Heimdal — by Marlin Equity Partners, 2020-01-01; Digital Shadows — by ReliaQuest (US), 2022-01-01; Yogosha — by Groupe Créative, 2023-01-01; Detectify — by Insight Partners (majority stake), 2024-01-01; Probely — by Snyk, 2024-01-01; Runecast — by Dynatrace (US), 2024-01-01; Pentest People — by WorkNest Group, 2026-01-01

Large incumbents (4) — in this market, but too large to compare on size; listed, not on the map

CybelAngel; Panaseer; Red Sift; WithSecure

Adjacent (43) — sell next to this market rather than in it; followed for news, not on the map or in the counts

Acronis, Aikido Security, Aleph Index, Arctic Security, Bitdefender, Citalid, CovertSwarm, CyberDart, CyberVadis, Cyjax, cysmo, Cyver, DynaRisk, EBRAND, Enginsight, ESET, G DATA CyberDefense, GObugfree, Hackrate, Hackrfi, Hacktify, Hexway, Identeco, Intigriti, Kaduu, KYND, Lansweeper, Lupasafe, Lupovis, Netcraft, Nordic Defender, OnSecurity, Raynet, Risk Ledger, Rootshell Security, SecPoint, SignalFisher, Silobreaker, SOS Intelligence, turingpoint, XMCO, YesWeHack, Zerocopter

Analyst notes and adjustments (7)
  • Heimdal: Acquired by Marlin Equity Partners (2020). Collected for the product's news.
  • Digital Shadows: Acquired by ReliaQuest (US) (2022). Collected for the product's news.
  • Yogosha: Acquired by Groupe Créative (2023). Collected for the product's news.
  • Detectify: Acquired by Insight Partners (majority stake) (2024). Collected for the product's news.
  • Probely: Acquired by Snyk (2024). Collected for the product's news.
  • Runecast: Acquired by Dynatrace (US) (2024). Collected for the product's news.
  • Pentest People: Acquired by WorkNest Group (2026). Collected for the product's news.
Not rated (2) — what each one lacks

A vendor is rated only when we have every input. 2 lack linkedin headcount (latest count); 2 lack linkedin followers; 2 lack open roles per 100 staff.

LEET Security: linkedin headcount (latest count), linkedin followers, open roles per 100 staff; Uncovery: linkedin headcount (latest count), linkedin followers, open roles per 100 staff

How the map is computed — weights and rules
InputAxisWeight
LinkedIn headcount (latest count)scale0.35
Disclosed funding total (optional)scale0.30
Customer evidence, weighted, last 12 months named customer in their own words 3, named in the vendor's words 2, unnamed 1scale0.25
LinkedIn followersscale0.10
Headcount change in the period (optional)momentum0.30
Launches and partnerships in the periodmomentum0.25
Earned mentions in the periodmomentum0.15
Open roles per 100 staffmomentum0.15
Crunchbase growth score (secondary) (optional)momentum0.10
Own LinkedIn posts in the periodmomentum0.05

Each input is a percentile rank among the rated vendors; an axis is the weighted mean of its inputs. On the map, the angle is the stage, by scale: Emerging under 25, Building from 25, Scaling from 50, Executing from 75, left to right. The distance from the base is momentum: holding under 33, growing from 33, accelerating from 67. A vendor moves right as it grows and outward as it speeds up.

Executive assessment

3 findings

  1. New funding for Enginsight.

    Enginsight raised a new round on 3 November.

  2. Customer announcements from Ethiack, Aikido Security, Yogosha, SOS Intelligence and 1 more.

    9 customer or deployment announcements, 5 of them naming the customer.

  3. 17 of 40 vendors had a development.

    54 developments in 90 days, plus 11 hiring or headcount signals. The 3 most active vendors account for 28% of them (Aikido Security 6, Ethiack 5, Phoenix Security 4). 19 vendors were watched and had none. 4 are not fully collected yet.

    • Aikido Security: 6 developments
    • Ethiack: 5 developments
    • Phoenix Security: 4 developments
    • Enginsight: 3 developments
    • Aleph Index: 2 developments

Vendors with a development

65 developments · 17 vendors
VendorDevelopmentEvidenceWhy it matters
EnginsightEnginsight secures double-digit million-euro investment from Verdane
Funding · 3 Nov 2026
the company's website · 1 source
Vendor sources only
BitdefenderBitdefender launches GravityZone Exposure Management product
Product launch · 27 Oct 2026
techjuice.pk · 3 sources
Reported by multiple independent sources
EdgescanEdgescan Atomic validates attack paths with controlled AI testing
Product launch · 7 Oct 2026
helpnetsecurity.com · 1 source
Also reported independently		Edgescan has launched Atomic, an AI-driven penetration testing platform that validates attack paths while operating within defined scope and policy…
Red SiftG7 government customer used Red Sift for PHP2Shell response
Customer evidence · 5 Nov 2026
the company's LinkedIn post · 1 source
Vendor sources only		The vendor does not name the customer.
EthiackJumia adopts Ethiack for continuous security testing
Customer evidence · 5 Nov 2026
the company's website · 1 source
Vendor sources only
Aikido SecurityKEYES uses Aikido Security to unify findings across teams
Customer evidence · 3 Nov 2026
the company's LinkedIn post · 1 source
Vendor sources only		Someone from KEYES is quoted in the post.
EthiackBondalti engages Ethiack for industrial penetration testing
Customer evidence · 2 Nov 2026
the company's website · 1 source
Vendor sources only		The vendor has published a case study about Bondalti.
Pentest-Tools.comPentest-Tools.com: Vodafone acknowledges Specter found vulnerability via HackerOne
Customer evidence · 2 Nov 2026
the company's LinkedIn post · 1 source
Vendor sources only		The vendor does not name the customer.
Other developments (57)
YogoshaYogosha tests Augmented Pentest at French hosting infrastructure companyCustomer evidence · 27 Oct 20261 source · Vendor sources only
SOS IntelligenceSOS Intelligence fintech customer receives breach alert before supplier noticeCustomer evidence · 26 Oct 20261 source · Vendor sources only
OnSecurityUK education tech provider uses OnSecurity for 160+ pentestsCustomer evidence · 22 Oct 20261 source · Vendor sources only
cysmoCorporate Special Risks adopts cysmo for German SME cyber risk assessmentCustomer evidence · 8 Oct 20261 source · Vendor sources only
Nordic DefenderNordic Defender launches Specter AI Pentest for web apps and APIsProduct expansion · 26 Oct 20262 sources · Vendor sources only
Aikido SecurityAikido Security launches External Network Pentesting, Cloud Security Audit, and six other…Product expansion · 5 Nov 20261 source · Vendor sources only
GreenboneGreenbone adds Brotli, Cisco VPN and Sophos UTM detection to OPENVASProduct expansion · 5 Nov 20261 source · Vendor sources only
EnginsightEnginsight releases platform version 4.9.1Product expansion · 3 Nov 20261 source · Vendor sources only
LansweeperLansweeper reintroduces Dynamic Groups with expanded functionalityProduct expansion · 30 Oct 20261 source · Vendor sources only
Holm SecurityHolm Security releases vulnerability tests for PHP CVE-2026-109618 and CVE-2026-109619Product expansion · 22 Oct 20261 source · Vendor sources only
NanitorNanitor releases version 7.3.0 with Baseline Rule Rollout ProjectsProduct expansion · 9 Oct 20261 source · Vendor sources only
HackuityHackuity integrates with SysReptor Pentest ReportingPartnership · 3 Nov 20261 source · Vendor sources only
Aikido SecurityAikido Security partners with Drata on pentesting integrationPartnership · 19 Oct 20261 source · Vendor sources only
VORNACVORNAC partners with Protforce for remediation and hardeningPartnership · 13 Oct 20261 source · Vendor sources only
RunecastRunecast: Dynatrace releases Snowflake Observability for general availabilityProduct launch · 1 Sep 20269 sources · Vendor sources only
Rootshell SecurityRootshell Security releases October product updateProduct launch · 23 Oct 20263 sources · Vendor sources only
Phoenix SecurityPhoenix Security makes Green AI Remedy generally availableProduct launch · 4 Nov 20262 sources · Vendor sources only
Phoenix SecurityPhoenix Security launches Purple Hook for live AI coding securityProduct launch · 29 Oct 20262 sources · Vendor sources only
ONYPHEONYPHE launches 14 skills for AI agentsProduct launch · 28 Oct 20262 sources · Vendor sources only
IntruderIntruder releases AI pentest reports with Vanta integrationProduct launch · 27 Oct 20262 sources · Vendor sources only
CovertSwarmCovertSwarm releases open-source PHP2Shell local checkerProduct launch · 23 Oct 20262 sources · Vendor sources only
FiligranFiligran launches saved filters for OpenCTIProduct launch · 8 Oct 20262 sources · Vendor sources only
Digital ShadowsDigital Shadows: ReliaQuest launches GreyMatter Workspaces for unified investigationsProduct launch · 5 Nov 20261 source · Vendor sources only
MitigantMitigant launches MCP server for AI-driven cloud security testingProduct launch · 5 Nov 20261 source · Vendor sources only
EthiackEthiack launches Ethibench to test AI pentesting agentsProduct launch · 4 Nov 20261 source · Vendor sources only
Phoenix SecurityPhoenix Security makes Purple Hook generally availableProduct launch · 4 Nov 20261 source · Vendor sources only
Aleph IndexAleph launches Aleph Intelligence Platform for dark web investigationProduct launch · 3 Nov 20261 source · Vendor sources only
EthiackEthiack launches Zero to track and validate emerging vulnerabilitiesProduct launch · 3 Nov 20261 source · Vendor sources only
PikeredPikered's ZAIUXEvo integrates with Trend Vision OneProduct launch · 2 Nov 20261 source · Vendor sources only
WithSecureWithSecure unifies Elements Exposure Management and XDR workflowProduct launch · 31 Oct 20261 source · Vendor sources only
EdgescanEdgescan launches AI-powered WAF Rule Generation capabilityProduct launch · 29 Oct 20261 source · Vendor sources only
GObugfreeGObugfree launches new vulnerability management platformProduct launch · 29 Oct 20261 source · Vendor sources only
RunecastRunecast: Dynatrace releases dashboard for AI service vulnerabilitiesProduct launch · 29 Oct 20261 source · Vendor sources only
YogoshaYogosha launches open framework to govern AI agents in offensive securityProduct launch · 29 Oct 20261 source · Vendor sources only
Aikido SecurityAikido Security launches external network pentestingProduct launch · 28 Oct 20261 source · Vendor sources only
PikeredPikered launches Threat Detection Engineering serviceProduct launch · 28 Oct 20261 source · Vendor sources only
Pentest-Tools.comPentest-Tools.com releases free HTTP2Shell scannerProduct launch · 27 Oct 20261 source · Vendor sources only
Aikido SecurityAikido Security launches free patched container images for PHP2ShellProduct launch · 26 Oct 20261 source · Vendor sources only
EthiackEthiack launches Zero, live database tracking exploitable vulnerabilitiesProduct launch · 23 Oct 20261 source · Vendor sources only
Aleph IndexAleph launches Aleph Open Search for free dark web lookupsProduct launch · 22 Oct 20261 source · Vendor sources only
Aikido SecurityAikido Security launches Noon workforce security offeringProduct launch · 20 Oct 20261 source · Vendor sources only
Digital ShadowsDigital Shadows: ReliaQuest launches GreyMatter SIEM-Less security data indexingProduct launch · 20 Oct 20261 source · Vendor sources only
Phoenix SecurityPhoenix Security launches release with verification, exception, PR-first remediationProduct launch · 19 Oct 20261 source · Vendor sources only
Outpost24Outpost24 launches self-service PCI ASV scanning platformProduct launch · 16 Oct 20261 source · Vendor sources only
EnginsightEnginsight introduces client-side TLS interception technologyProduct launch · 6 Oct 20261 source · Vendor sources only
AcronisAcronis appoints HoJin Kim as Chief Revenue OfficerExecutive appointment · 3 Nov 20261 source · Vendor sources only
AcronisAcronis: 39 open rolesHiring · this period1 source · Vendor sources only
Aikido SecurityAikido Security: 89 open rolesHiring · this period1 source · Vendor sources only
BitdefenderBitdefender: 22 open rolesHiring · this period1 source · Vendor sources only
DetectifyDetectify: 5 open rolesHiring · this period1 source · Vendor sources only
Digital ShadowsDigital Shadows: 35 open rolesHiring · this period1 source · Vendor sources only
ESETESET: 17 open rolesHiring · this period1 source · Vendor sources only
FiligranFiligran: 9 open rolesHiring · this period1 source · Vendor sources only
HadrianHadrian: 10 open rolesHiring · this period1 source · Vendor sources only
LansweeperLansweeper: 13 open rolesHiring · this period1 source · Vendor sources only
Risk LedgerRisk Ledger: 7 open rolesHiring · this period1 source · Vendor sources only
XMCOXMCO: 8 open rolesHiring · this period1 source · Vendor sources only

What this says about the market

Market formation

Most of the market is established: only 2 of the 36 vendors with a known founding year were founded in 2023 or later.

Founding year known for 36 of 40 vendors.

Products versus customers

Product news outweighs customer announcements. Of 54 developments, 40 were product launches or expansions, 3 partnerships and 9 customer or deployment announcements.

Concentration

Activity is concentrated in the three vendors hiring most hold 59% of 277 open roles (Aikido Security alone 32%); the three best-funded vendors hold 56% of disclosed funding. Elsewhere it is spread: the three most active accounts published 8% of 453 vendor posts; three vendors account for 28% of 54 developments.

Job listings exist for 22 of 40 vendors; funding is disclosed for 11 of 40.

Developments

RSS8 August–6 November 2026

1,904 records collected → 65 developments

Funding

Enginsight secures double-digit million-euro investment from Verdane

Verdane invests to expand Enginsight's European cybersecurity platform emphasizing German-made solutions.

Enginsight · 3 Nov 2026 · 1 source · Vendor sources only
Product launch

Bitdefender launches GravityZone Exposure Management product

Bitdefender announced GravityZone Exposure Management, giving organizations full visibility into threat risk exposure across attack surfaces.

Bitdefender · 27 Oct 2026 · 3 sources · Reported by multiple independent sources
Product launch

Edgescan Atomic validates attack paths with controlled AI testing

Edgescan has launched Atomic, an AI-driven penetration testing platform that validates attack paths while operating within defined scope and policy controls.

Edgescan · 7 Oct 2026 · 1 source · Also reported independently
Customer evidence

G7 government customer used Red Sift for PHP2Shell response

The customer identified exposed hosts across its national estate before the fix was public, reducing vulnerable servers by 62% in five days.

Red Sift · 5 Nov 2026 · 1 source · Vendor sources only
Customer evidence

Jumia adopts Ethiack for continuous security testing

Jumia transitioned from annual penetration testing to 24/7 validated testing across 2,600+ assets with Ethiack.

Ethiack · 5 Nov 2026 · 1 source · Vendor sources only
Customer evidence

KEYES uses Aikido Security to unify findings across teams

Belgian ICT group KEYES brought findings from many teams and tech stacks into one view with Aikido.

Aikido Security · 3 Nov 2026 · 1 source · Vendor sources only
Customer evidence

Bondalti engages Ethiack for industrial penetration testing

Chemical manufacturer Bondalti used Ethiack's on-site penetration testing to validate industrial cybersecurity defenses.

Ethiack · 2 Nov 2026 · 1 source · Vendor sources only
Customer evidence

Pentest-Tools.com: Vodafone acknowledges Specter found vulnerability via HackerOne

Vodafone publicly acknowledged that Pentest-Tools.com's Specter engine found an important vulnerability through its HackerOne bug bounty program.

Pentest-Tools.com · 2 Nov 2026 · 1 source · Vendor sources only
Customer evidence

Yogosha tests Augmented Pentest at French hosting infrastructure company

Yogosha applied Augmented Pentest with AI agents at a French hosting provider, finding 9 security issues in 3 days.

Yogosha · 27 Oct 2026 · 1 source · Vendor sources only
Customer evidence

SOS Intelligence fintech customer receives breach alert before supplier notice

A fintech customer received dark web breach intelligence two days before being notified by its supplier.

SOS Intelligence · 26 Oct 2026 · 1 source · Vendor sources only
Customer evidence

UK education tech provider uses OnSecurity for 160+ pentests

An unnamed UK education technology provider uses OnSecurity to coordinate over 160 pentests across varied requirements.

OnSecurity · 22 Oct 2026 · 1 source · Vendor sources only
Customer evidence

Corporate Special Risks adopts cysmo for German SME cyber risk assessment

The pan-European MGA uses cysmo's real-time external cyber risk intelligence to assess SME exposure without lengthy questionnaires.

cysmo · 8 Oct 2026 · 1 source · Vendor sources only
Product expansion

Aikido Security launches External Network Pentesting, Cloud Security Audit, and six other features

New capabilities include Ask Aikido in Deep Review, Zen Firewall auto-blocking, Device Protection for CI/CD, CREST pentests, and Terraform Provider.

Aikido Security · 5 Nov 2026 · 1 source · Vendor sources only
Product expansion

Greenbone adds Brotli, Cisco VPN and Sophos UTM detection to OPENVAS

OPENVAS Enterprise Feed now detects Brotli decoder flaws, Cisco firewall VPN vulnerabilities, and expanded PHP2Shell coverage.

Greenbone · 5 Nov 2026 · 1 source · Vendor sources only
Product expansion

Enginsight releases platform version 4.9.1

Moves Alarm-Route to full release, adds notification templates, email server and SMS gateway configuration.

Enginsight · 3 Nov 2026 · 1 source · Vendor sources only
Product expansion

Lansweeper reintroduces Dynamic Groups with expanded functionality

Users can create more flexible asset groupings for dashboards, views, and reports.

Lansweeper · 30 Oct 2026 · 1 source · Vendor sources only
Product expansion

Holm Security releases vulnerability tests for PHP CVE-2026-109618 and CVE-2026-109619

Tests are live on cloud scanners and Scanner Appliances, added automatically to existing scan profiles.

Holm Security · 22 Oct 2026 · 1 source · Vendor sources only
Product expansion

Nanitor releases version 7.3.0 with Baseline Rule Rollout Projects

New features include gradual rule adoption, external attack surface scanning for IPv4/IPv6, custom platform packages, and MSP API automation.

Nanitor · 9 Oct 2026 · 1 source · Vendor sources only
Partnership

Hackuity integrates with SysReptor Pentest Reporting

The connector automatically imports and syncs pentest findings and assets into Hackuity's platform.

Hackuity · 3 Nov 2026 · 1 source · Vendor sources only
Partnership

Aikido Security partners with Drata on pentesting integration

Integration offers AI-powered pentesting in compliance workflows with up to $4,000 in free credits.

Aikido Security · 19 Oct 2026 · 1 source · Vendor sources only
Partnership

VORNAC partners with Protforce for remediation and hardening

Protforce will provide vulnerability remediation, system hardening and ISMS consulting to VORNAC customers.

VORNAC · 13 Oct 2026 · 1 source · Vendor sources only
Product launch

Runecast: Dynatrace releases Snowflake Observability for general availability

Provides unified visibility into cost, performance, security, operations and data quality through automated telemetry and ready-made dashboards.

Runecast · 1 Sep 2026 · 9 sources · Vendor sources only
Product launch

Phoenix Security makes Green AI Remedy generally available

Tool creates remediation plans, shows costs in USD, focuses review on fixes likely to ship.

Phoenix Security · 4 Nov 2026 · 2 sources · Vendor sources only
Product launch

Phoenix Security launches Purple Hook for live AI coding security

Purple Hook runs security checks within live AI coding sessions to prevent wasted tokens on vulnerabilities scanners already detect.

Phoenix Security · 29 Oct 2026 · 2 sources · Vendor sources only
Product launch

CovertSwarm releases open-source PHP2Shell local checker

CovertSwarm released an open-source host-local checker for CVE-2026-109618 and CVE-2026-109619.

CovertSwarm · 23 Oct 2026 · 2 sources · Vendor sources only
Product launch

Digital Shadows: ReliaQuest launches GreyMatter Workspaces for unified investigations

ReliaQuest released GreyMatter Workspaces to unify security investigation workflows and speed team response.

Digital Shadows · 5 Nov 2026 · 1 source · Vendor sources only
Product launch

Mitigant launches MCP server for AI-driven cloud security testing

The server enables red team, purple team and control validation exercises via Claude Code or Kiro with MITRE ATT&CK-mapped attacks, approval workflows and automatic cleanup.

Mitigant · 5 Nov 2026 · 1 source · Vendor sources only
Product launch

Ethiack launches Ethibench to test AI pentesting agents

The tool provides proper replication testing for probabilistic LLM-based pentesting agents.

Ethiack · 4 Nov 2026 · 1 source · Vendor sources only
Product launch

Phoenix Security makes Purple Hook generally available

Tool runs locally in AI coding assistants delivering findings with file, line, severity and fix info.

Phoenix Security · 4 Nov 2026 · 1 source · Vendor sources only
Product launch

Aleph launches Aleph Intelligence Platform for dark web investigation

The AI-augmented platform explores dark web archives since 2012, with data kept in France.

Aleph Index · 3 Nov 2026 · 1 source · Vendor sources only
Product launch

Ethiack launches Zero to track and validate emerging vulnerabilities

The product validates exploitability before a CVE is minted, tracking signals from news, advisories, KEV, GHSA and CVE records.

Ethiack · 3 Nov 2026 · 1 source · Vendor sources only
Product launch

Pikered's ZAIUXEvo integrates with Trend Vision One

Integration adds Trend Vision One, bringing total to eight integrations across EDR, ticketing and SIEM.

Pikered · 2 Nov 2026 · 1 source · Vendor sources only
Product launch

WithSecure unifies Elements Exposure Management and XDR workflow

WithSecure integrates Exposure Management and XDR into one workflow with shared console, priority scoring and response actions.

WithSecure · 31 Oct 2026 · 1 source · Vendor sources only
Product launch

Edgescan launches AI-powered WAF Rule Generation capability

The feature creates vendor-specific WAF rules from validated vulnerability findings for teams to review and deploy.

Edgescan · 29 Oct 2026 · 1 source · Vendor sources only
Product launch

GObugfree launches new vulnerability management platform

GObugfree · 29 Oct 2026 · 1 source · Vendor sources only
Product launch

Runecast: Dynatrace releases dashboard for AI service vulnerabilities

Surfaces vulnerabilities detected at runtime to enhance security visibility for AI deployments.

Runecast · 29 Oct 2026 · 1 source · Vendor sources only
Product launch

Yogosha launches open framework to govern AI agents in offensive security

The Yogosha Skill enables structured rules for autonomous AI systems in security testing.

Yogosha · 29 Oct 2026 · 1 source · Vendor sources only
Product launch

Aikido Security launches external network pentesting

AI agents attack internet-facing systems and report only actually exploited vulnerabilities.

Aikido Security · 28 Oct 2026 · 1 source · Vendor sources only
Product launch

Pikered launches Threat Detection Engineering service

Service tests existing rules against live threats and writes behavior-based detection rules.

Pikered · 28 Oct 2026 · 1 source · Vendor sources only
Product launch

Pentest-Tools.com releases free HTTP2Shell scanner

New free scanner covers CVE-2026-111497, includes diagrams, fixed versions and temporary controls.

Pentest-Tools.com · 27 Oct 2026 · 1 source · Vendor sources only
Product launch

Aikido Security launches free patched container images for PHP2Shell

Images backport fixes for CVE-2026-109618 and CVE-2026-109619, supporting PHP 5.5 through 8.5.

Aikido Security · 26 Oct 2026 · 1 source · Vendor sources only
Product launch

Ethiack launches Zero, live database tracking exploitable vulnerabilities

The database benchmarks validation speed against CVE publication timelines.

Ethiack · 23 Oct 2026 · 1 source · Vendor sources only
Product launch

Aleph launches Aleph Open Search for free dark web lookups

Users can run ten free daily searches without registration to find exposed subdomains and emails.

Aleph Index · 22 Oct 2026 · 1 source · Vendor sources only
Product launch

Aikido Security launches Noon workforce security offering

New business provides AI governance, device and email protection, and employee training against AI-powered threats.

Aikido Security · 20 Oct 2026 · 1 source · Vendor sources only
Product launch

Digital Shadows: ReliaQuest launches GreyMatter SIEM-Less security data indexing

The solution searches data directly in customer-owned object storage, eliminating SIEM costs while maintaining fast search performance.

Digital Shadows · 20 Oct 2026 · 1 source · Vendor sources only
Product launch

Phoenix Security launches release with verification, exception, PR-first remediation

Update addresses unverified findings, restrictive firewalls, incomplete remediation via new workflows.

Phoenix Security · 19 Oct 2026 · 1 source · Vendor sources only
Product launch

Outpost24 launches self-service PCI ASV scanning platform

Organizations can purchase and begin PCI ASV vulnerability scanning within minutes online.

Outpost24 · 16 Oct 2026 · 1 source · Vendor sources only
Product launch

Enginsight introduces client-side TLS interception technology

Makes encrypted attack traffic visible to address security blind spots from widespread encryption.

Enginsight · 6 Oct 2026 · 1 source · Vendor sources only
Executive appointment

Acronis appoints HoJin Kim as Chief Revenue Officer

Kim joins from WatchGuard Technologies with 25+ years of IT channel experience.

Acronis · 3 Nov 2026 · 1 source · Vendor sources only
Hiring

11 vendors with 5 or more open roles

Job listings · open now
Acronis
Aikido Security
Bitdefender
Detectify
Digital Shadows
ESET
Filigran
Hadrian
Lansweeper
Risk Ledger
XMCO
Everything we collected: the 60 most recent of 1904 records

Everything matched to this market in the period, including general discussion and anything that did not become a development.

@ninjaowl.ai: Is Your Exposure Management Platform Leaving You Exposed
Bluesky · 2026-11-06
OpenSSH Authentication Bypass: Alpine Linux Fix and Risks
DarknetSearch Articles · 2026-11-06
@lunamothryu.bsky.social: A new standard for vulnerability management in the AI era | Windows Experience Blog blogs.windows.com/windowsexper.. +1 more like this
Bluesky · 2026-11-06
6 Immediate Questions to ask After a Vendor Data Breach
CybelAngel · 2026-11-06
@cybermaster77.bsky.social: Is Your Exposure Management Platform Leaving You Exposed +2 more like this
Bluesky · 2026-11-06
@undercode.bsky.social: AI-Generated Bug Bounty Slop: HackerOne Data Reveals 32% Drop in Signal Efficiency Amid Surge in Automated Vulnerability Reports + Video…
Bluesky · 2026-11-05
@r-redteamsec.bsky.social: GitHub - kamehameha-ctrl/sniperscope: SniperScope is a high-performance External Attack Surface Management (EASM), passive/active OSINT intelligence,…
Bluesky · 2026-11-05
@zack0x01_ I’ve spent weeks building AI-agent skills for black-box testing and white-box CVE hunting, from XSS to auth flaws, focused on exploit chains and reproducible evidence. I’m also developing a bug bounty harness. Happy to share my work and contribute to the project.
X · 2026-11-05
@operandicat.bsky.social: How does an automated IT cybersecurity compliance assessment platform streamline vulnerability management for modern enterprises
Bluesky · 2026-11-05
Even gem list can run someone else's code
Aikido Security's Blog · 2026-11-05
@Huntio If attackers are running autonomous pentest frameworks, their exposed consoles are a gift to defenders. Fingerprinting that infrastructure is one of the few ways to get ahead of AI-driven intrusion campaigns.
X · 2026-11-05
@threadlinqs.bsky.social: ARTEX turns AI pentest agents into autonomous crime bots - 300+ iOS certs and 190K game logins stolen
Bluesky · 2026-11-05
Red Sift: When #PHP2Shell hit, one G7 government customer asked Red Sift for every exposed host across its national estate.
LinkedIn · 2026-11-05
@postac001.bsky.social: Vulnerability in Exposure Management Platform: The system's lack of known ownership, reachability, protection status, and business impact increases the risk of being exploited by attackers.
Bluesky · 2026-11-05
@shawnbrink.bsky.social: Microsoft new standard for #Windows11 vulnerability management in the #AI era www.elevenforum.com/t/microsoft-...
Bluesky · 2026-11-05
AI Slop Is Turning Bug Bounty Programs Into A Security Liability
forbes.com · 2026-11-05
Deleting a leaked key from your repo doesn't protect you
Aikido Security's Blog · 2026-11-05
@undercode.bsky.social: Automating AI-Generated Vulnerability Triage: Moving Beyond Bug Bounty Backlog Botnecks + Video Introduction: The rapid adoption of Artificial…
Bluesky · 2026-11-05
.@Atos selected Tenable to power its Continuous Threat Exposure Management (CTEM) service, enabling global organizations to shift from reactive remediation to proactive cyber risk reduction. Gabriela Gorzycka, VP, Head of Cybersecurity for Germany, Austria and Central Europe at Atos, discusses the p
X · 2026-11-05
Cobalt + Wiz: Bringing Real-World Offensive Security Into Your Cloud Risk Workflow
Blog · 2026-11-05
🛡️ Your company may have detected security flaws and still be exposed for months. TIC discovers a vulnerability in the server that supports your customer portal. An alert is generated and left pending. But no one has identified who manages that server, if it is exposed to the internet, or what
X · 2026-11-05
\"Remember, remember the 5th of November.\" 🧨 In 1605, a plot was thwarted right before the explosion. Today, enterprises sit on digital powder kegs: shadow IT, dangling DNS, & leaked credentials. Finds your hidden external exposures before the adversary ignites them. #EASM #CTEM https://t.co/GxlWZH
X · 2026-11-05
Acronis: Emerging AI solutions are increasing the value of data, making resilience and long-term protection more important than ever.
LinkedIn · 2026-11-05
NCSC 2026 Annual Review: familiar weaknesses, amplified attacks
CovertSwarm · 2026-11-05
Gartner Report: The Attack Path is Closing Faster than Most Teams Can Patch
itsecuritynews.info · 2026-11-05
Aikido Security: First National Bank of America had to pentest its first customer-facing app before launch, a requirement as a federally regulated institution.
LinkedIn · 2026-11-05
APT29-Linked Hackers Hijacked an Analytics Script to Hit Phones
CybelAngel · 2026-11-05
Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out
itsecuritynews.info · 2026-11-05
@polandinsight.bsky.social: Poland's NASK and CERT Polska have launched a government bug bounty programme with a PLN 1 million prize pool
Bluesky · 2026-11-05
What Is an Agent Harness? How AI Security Tools Work
bishopfox.com · 2026-11-05
Your data stays in the Kingdom. And when you need expert support, COGNNA Guardians are there to help. So you stay secure, compliant, and leverage vulnerability management on your own term with 100% expert support 24/7.
X · 2026-11-05
So we built self-service vulnerability management into Nexus. This gives you the freedom to connect endpoints, schedule or launch scans, and access reports on your own schedule, without waiting for someone else to initiate the process.
X · 2026-11-05
Cloud Penetration Testing Services for Enterprise AWS, Azure, and GCP Environments
Synack · 2026-11-05
@undercodenews.bsky.social: Five Critical Tests for Evaluating a Continuous Threat Exposure Management Platform + Video Introduction: Turning Security Findings Into Verified…
Bluesky · 2026-11-05
@thecyberfriend.bsky.social: Too many software updates and not enough time
Bluesky · 2026-11-05
Aikido Security: Our product keeps growing.
LinkedIn · 2026-11-05
Are alerts just noise? Use these 5 tests to see if your exposure management platform moves from just discovery to real risk reduction—covering asset visibility, risk context, exploitability validation, safe remediation workflows, and outcome verification. #Security #ExposureManagement #CyberRisk #CT
X · 2026-11-05
@thedailytechfeed.com: Test your exposure management platform: discovery, risk context, validation, safe remediation, proof of change
Bluesky · 2026-11-05
Dynatrace Release Radar 10.26
Dynatrace news · 2026-11-05
Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out
thehackernews.com · 2026-11-05
PHP2Shell: The lessons go well beyond patching
CovertSwarm · 2026-11-05
@investigator515.bsky.social: The Complete Bug Bounty Recon Methodology: From Subdomain Enumeration to Vulnerability Discovery
Bluesky · 2026-11-05
📢 Storm Ransomware: rapid rise of a RaaS with unverified AI branding Analysis published on November 2, 2026 by Check Point Exposure...
Bluesky · 2026-11-05
Our AI SOC coverage has met such amazing traction that we've expanded into Exposure Management as well. Check it out! Free to read, for humans, RSS readers and AI https://t.co/IvlUTPhuu0 +1 more like this
X · 2026-11-05
Brotli, Cisco und Sophos: Wenn die Konfiguration über die Angreifbarkeit entscheidet
Greenbone · 2026-11-05
@ai-release.bsky.social: Step-by-step guide: AI-first external attack surface assessment with CVEngine Terminology used below: attack surface — every host, subdomain, IP…
Bluesky · 2026-11-05
10 Ways ReliaQuest Is Using Anthropic’s Claude Mythos to Strengthen Defense—And What We’re Learning
ReliaQuest Blog - Threat Hunting, Security Operations, and More · 2026-11-05
GreyMatter Workspaces Is Here to Bring Investigation Work Together
ReliaQuest Blog - Threat Hunting, Security Operations, and More · 2026-11-05
Health Care Faces a 70% Ransomware Surge. Here’s How to Defend Against It.
ReliaQuest Blog - Threat Hunting, Security Operations, and More · 2026-11-05
Manufacturing Attackers Are Using More Paths In. Security Operations Need to Move First.
ReliaQuest Blog - Threat Hunting, Security Operations, and More · 2026-11-05
Finance and Insurance Faces a 122% Ransomware Spike. Here’s How to Defend Against It.
ReliaQuest Blog - Threat Hunting, Security Operations, and More · 2026-11-05
Phoenix Security | ASPM: 🟢 Green AI Remedy is out today.
LinkedIn · 2026-11-05
ARTEX AI Pentest Tool: What Security Teams Need to Know
SOCRadar · 2026-11-05
CVE-2026-100109: Privilegierte Konten über Security For WooCommerce
LocateRisk · 2026-11-05
Modern Security Tooling (Part 3/3): AI Agents in Pentesting, Reality vs. Hype
dev.to · 2026-11-05
Agentic AI risk European AI Sovereignty
WithSecure™ · 2026-11-05
CyberfuturistsBy the CyberfuturistsAunoomade using AunooEuropean Exposure Management Market · 8 August–6 November 2026
EvidenceThe figures the assessment rests on: formation, funding and investors, hiring, headcount, the vendors' own announcements, sentiment, and who is talking.
Staffcounted at 82 of 40 vendors
13,244
No market-wide change to report yet.
Open rolesLinkedIn and company job boards
281
Roles open today
Roles open today, not roles advertised this month.
Vendors with a known funding stageof 73 Crunchbase profiles read
46
Funding stage and investors, from Crunchbase.
Stages only. No round sizes, so no largest raise.
Written about by othersexcludes the vendors' own posts
74
No earlier period to compare with yet; collection began 3 November 2026
Completed weeks only. This week and last are still coming in.

Market scope

Products that map, score, prioritise and test an organisation's attack surface and vulnerabilities on a continuing basis, as Gartner's CTEM cycle describes: scoping, discovery, prioritisation, validation and mobilisation. It covers startups built for this, European vendors acquired by others whose product still ships, and the exposure management lines of large European security vendors.

Included: Vulnerability scanning and risk-based vulnerability management; exposure assessment platforms; external attack surface management; cyber asset attack surface management and controls monitoring; digital risk protection (leaked credentials, data leaks, dark web exposure); breach and attack simulation; automated and autonomous penetration testing; attack path analysis; penetration testing as a service and crowdsourced continuous testing platforms; security ratings and third-party exposure scoring. The legal headquarters must be in Europe.

Excluded: Vendors headquartered outside Europe, including Israel, Turkey and the US, whatever their European footprint; detection and response (SIEM, XDR, EDR, SOAR); identity and access management; application security testing without an exposure view (SAST, SCA); security awareness training and cyber ranges; managed services and consultancies without a product; brand protection without a security exposure product; a vendor's business outside exposure management. Darktrace and Qualys are on the blocked list and are not covered, including products they own.

Compared with the previous period

Collection began 3 November 2026, so figures for this period are a floor. A comparison with the 90 days before will be available from 2 May 2027.

Market snapshot

Vendors in this market
90
40 currently monitored
Money raised, where disclosed
$548M
11 of 90 vendors have published a figure
Founded since 2023
2
of the 36 whose founding year we know
Articles and posts collected
1904
over the 90 days covered here

Market formation

2 of the 36 vendors with a known founding year were founded in 2023 or later.

36 of 40 vendors have a founding year.
71988: 119882001: 120012008: 120082012: 120122013: 120132014: 320142015: 320152016: 120162017: 420172018: 220182019: 320192020: 320202021: 720212022: 320222026: 22026

Announcements per month

All 40 vendors post on LinkedIn.
1102011-11: 02011-1…2011-12: 02012-02: 12012-03: 42012-04: 32012-05: 12012-06: 22012-08: 02012-09: 12012-0…2012-10: 02012-11: 02013-01: 02013-03: 02013-04: 02013-05: 02013-06: 02013-07: 02013-0…2013-08: 02013-09: 02013-10: 02013-11: 02014-01: 02014-02: 12014-03: 12014-04: 12014-0…2014-05: 02014-07: 02014-08: 02014-11: 02015-01: 12015-08: 02015-09: 32016-02: 02016-0…2016-04: 02016-05: 02016-06: 02016-07: 22016-08: 12016-09: 02017-01: 12017-03: 02017-0…2017-08: 02017-10: 42017-12: 12018-05: 02018-06: 02019-04: 12019-05: 22019-06: 02019-0…2019-09: 22020-06: 12020-07: 12020-09: 22020-10: 12020-11: 02020-12: 02021-01: 12021-0…2021-02: 02021-05: 02021-06: 02021-07: 12021-08: 02021-09: 02021-10: 02021-11: 02021-1…2021-12: 02022-02: 12022-03: 12022-04: 02022-05: 12022-06: 22022-07: 82022-08: 12022-0…2022-10: 02022-11: 32022-12: 22023-02: 22023-03: 12023-04: 22023-05: 12023-06: 32023-0…2023-07: 12023-08: 02023-09: 02023-10: 22023-11: 22023-12: 02024-01: 42024-02: 42024-0…2024-03: 22024-04: 12024-05: 32024-06: 22024-07: 52024-08: 12024-09: 32024-10: 32024-1…2024-11: 12024-12: 02025-01: 02025-02: 12025-03: 02025-04: 32025-05: 42025-06: 32025-0…2025-07: 12025-08: 12025-09: 62025-10: 32025-11: 62025-12: 22026-01: 52026-02: 42026-0…2026-03: 32026-04: 62026-05: 62026-06: 82026-07: 142026-08: 152026-09: 272026-10: 1102026-1…2026-11: 53

Funding and investor activity

Funding and acquisition events in the period

Enginsight secures double-digit million-euro investment from Verdane
Funding · 3 Nov 2026 · Vendor sources only

Disclosed funding

11 of 90 vendors have a published total, adding to $548M. The best-funded of them:

VendorDisclosed totalLast round
Lansweeper$158MPrivate Equity
Aikido Security$85MSeries B
Hadrian$65M—
CybelAngel$52MSeries B
Panaseer$43MUndisclosed round
Detectify$42MUndisclosed round
Risk Ledger$32MSeries B
Hackuity$32MSeries B
ThreatAware$25MSeries A
Patrowl$14MSeries A

Funding stage across the market

73 of 90 vendors with a Crunchbase page have been read.
27Pre Seed: 5Pre SeedSeed: 6SeedSeries A: 9Series ASeries B: 5Series BSeries C: 3Series CUndisclosed round: 5Undisclosed…Non Equity Assistance: 1Non Equity…Private Equity: 9Private…Secondary Market: 2Secondary…Post Ipo Debt: 1Post Ipo…not stated: 27not stated

Investors backing more than one vendor

BpifranceCybelAngel, Hackuity, Patrowl, YesWeHack
Insight PartnersAcronis, Detectify, Filigran, Lansweeper
CyLon VenturesDynaRisk, Intruder, Risk Ledger
Forgepoint CapitalCybelAngel, Hackuity, Panaseer
Auriga Cyber VenturesFleuret AI, Patrowl
Banque des TerritoiresHackuity, YesWeHack
Business Growth FundEdgescan, KYND
Notion CapitalAikido Security, Panaseer
Octopus VenturesDigital Shadows, Intigriti
Open CNPCybelAngel, YesWeHack
Paladin Capital GroupDigital Shadows, Panaseer
Pitch@PalaceIntruder, Panaseer
Seventure PartnersHackuity, YesWeHack
Startup Wise GuysCyberDart, Ethiack
Vincenzo IozzoFiligran, Risk Ledger
Vitruvian PartnersBitdefender, Outpost24

Crunchbase scores

Crunchbase's own Growth and Attention (Heat) scores, 0 to 100, for reference.

Read for 73 of 40 vendors. Changes appear once the scores have been collected for a full period.

Hiring

We found 277 open roles across 22 vendors.

Aikido Security accounts for 89 of the 277 open roles, with Acronis accounting for another 39.

22 of 40 vendors have public job listings.
101sales: 101salesengineering: 88engineeringother: 43othermarketing: 25marketingoperations: 17operationsnot stated: 3not stated

Headcount

Vendors whose LinkedIn headcount moved

Acronis+0.0%1881 → 1881
Aikido Security+0.0%351 → 351
Aleph Index+0.0%15 → 15
Arctic Security+0.0%24 → 24
Autobahn Security+0.0%29 → 29

We have 1 week of headcount data so far: the week of 2 Nov 2026 at -0.1% against where these vendors started. A chart needs three.

Vendor announcements

195 of 985 collected vendor posts contained a concrete company claim or announcement. The rest were commentary, event promotion or other non-company updates.

All 40 vendors have posts we have read.
Aikido SecurityConcrete claim: 25Commentary: 71No content: 15111RunecastConcrete claim: 18Commentary: 8No content: 228AcronisConcrete claim: 13Commentary: 1No content: 620BitdefenderConcrete claim: 11Commentary: 9No content: 2040HeimdalConcrete claim: 7Commentary: 12No content: 625Phoenix SecurityConcrete claim: 7Commentary: 12No content: 322WithSecureConcrete claim: 7Commentary: 13No content: 121IntruderConcrete claim: 7Commentary: 7No content: 115Rootshell SecurityConcrete claim: 6Commentary: 4No content: 414IntigritiConcrete claim: 5Commentary: 10No content: 1530EthiackConcrete claim: 5Commentary: 18No content: 427FiligranConcrete claim: 5Commentary: 13No content: 220Holm SecurityConcrete claim: 5Commentary: 11No content: 117ThreatAwareConcrete claim: 5Commentary: 1No content: 17GreenboneConcrete claim: 4Commentary: 19No content: 326CovertSwarmConcrete claim: 4Commentary: 13No content: 219Pentest-Tools.comConcrete claim: 4Commentary: 1No content: 16PikeredConcrete claim: 4Commentary: 1No content: 16Outpost24Concrete claim: 3Commentary: 10No content: 821Digital ShadowsConcrete claim: 3Commentary: 1316

launch 97 research 46 award 20 customer 14 partnership 13 hiring 8 other 2 acquisition 1 funding 1

Sentiment

Coverage in the week of 19 Oct 2026, the latest complete week, leaned positive (+13%).

Share of articles classed positive minus share classed negative, by week. Weeks with too few classified articles are left blank.

100-172026-08-102026-09-142026-10-19The market as a wholeCoverage of these vendors

Who is being heard

Most active vendors

Ranked on LinkedIn posts, open roles and outside articles in the last 90 days; the score averages the three ranks. Only vendors measured on all three are scored.

98Acronis: 98AcronisBitdefender: 97BitdefenderAikido Security: 95Aikido…YesWeHack: 92YesWeHackOutpost24: 84Outpost24Intigriti: 82IntigritiFiligran: 81FiligranDetectify: 77DetectifyESET: 76ESETEthiack: 73Ethiack
VendorScoreOwn postsOpen rolesWritten about
Acronis9813397
Bitdefender97102222
Aikido Security959898
YesWeHack921133
Outpost2484822
Intigriti82714
Filigran81693
Detectify77651
ESET7610170
Ethiack731120

Share of voice

How 74 mentions by people outside these companies were split between them. The vendors' own posts are counted separately.

30Bitdefender: 30Bitdef…Arctic Security: 12Arctic…Aikido Security: 11Aikido…Acronis: 9Acroni…Intigriti: 5Intigr…ThreatAware: 5Threat…Filigran: 4Filigr…YesWeHack: 4YesWeH…Edgescan: 4Edgesc…Heimdal: 3Heimda…Outpost24: 3Outpos…WithSecure: 1WithSe…CybelAngel: 1CybelA…Holm Security: 1Holm…OnSecurity: 1OnSecu…Raynet: 1RaynetSearchlight Cyber: 1Search…Detectify: 1Detect…

Posts and response

Vendors with fewer than five posts are left out.

VendorPostsReactions/postMentions by others
Acronis1385.57
YesWeHack1130.03
Ethiack1116.70
Bitdefender1030.422
G DATA CyberDefense1041.60
ESET1050.90
Cyjax105.50
Aikido Security974.18
WithSecure916.21
Kaduu95.60
ImmuniWeb915.80
RiskXchange91.80
Outpost24814.22
OnSecurity814.01
Raynet816.21
Searchlight Cyber81.91
Lansweeper825.20
Rootshell Security89.40
Intigriti730.04
Edgescan77.03

Accounts posting repeatedly about the market

Accounts with at least 3 posts in the period. Vendors' LinkedIn company posts are counted elsewhere; a vendor's own account here is marked as one.

AccountWhoPlatformPostsReactionsLatest post
@undercode.bsky.socialUndercode Testing · 673 followers
Undercode Testing is a cybersecurity content platform focused on monitoring hacking techniques, bug bounties, vulnerability management, and emerging threats in…
bluesky27122026-11-05
@opsmatters.comOpsMatters · 454 followers
OpsMatters is a technology news and updates aggregation platform that curates and publishes the latest developments, product updates, and security news from…
bluesky422026-11-05
@pullrepo.bsky.socialPull Repo · 65 followers
Pull Repo is an automated feed account that publishes weekly radar updates highlighting the fastest-growing AI tools and repositories. The account aggregates…
bluesky302026-10-29

Outside voices, quoted

@Shelter_Appropriate · reddit · 24 reactions, comments and reposts

“Building an agentic CVE watcher, tell me what's wrong with this idea”

@CycuraMX · twitter · 13 reactions, comments and reposts

“🛡️ Your company may have detected security flaws and still be exposed for months. TIC discovers a vulnerability in the server that supports your customer portal. An alert is generated and…”

What people are saying

Practitioner and analyst discussion of the market, not vendor news.

@ninjaowl.ai: Is Your Exposure Management Platform Leaving You Exposed
Bluesky · 2026-11-06
@cybermaster77.bsky.social: Is Your Exposure Management Platform Leaving You Exposed
Bluesky · 2026-11-06
@cybermaster77.bsky.social: Is Your Exposure Management Platform Leaving You Exposed
Bluesky · 2026-11-06
@undercode.bsky.social: AI-Generated Bug Bounty Slop: HackerOne Data Reveals 32% Drop in Signal Efficiency Amid Surge in Automated Vulnerability Reports + Video…
Bluesky · 2026-11-05
@r-redteamsec.bsky.social: GitHub - kamehameha-ctrl/sniperscope: SniperScope is a high-performance External Attack Surface Management (EASM), passive/active OSINT intelligence,…
Bluesky · 2026-11-05
@zack0x01_ I’ve spent weeks building AI-agent skills for black-box testing and white-box CVE hunting, from XSS to auth flaws, focused on exploit chains and reproducible evidence. I’m also developing a bug bounty harness. Happy to share my work and contribute to the project.
X · 2026-11-05
@operandicat.bsky.social: How does an automated IT cybersecurity compliance assessment platform streamline vulnerability management for modern enterprises
Bluesky · 2026-11-05
@Huntio If attackers are running autonomous pentest frameworks, their exposed consoles are a gift to defenders. Fingerprinting that infrastructure is one of the few ways to get ahead of AI-driven intrusion campaigns.
X · 2026-11-05
@threadlinqs.bsky.social: ARTEX turns AI pentest agents into autonomous crime bots - 300+ iOS certs and 190K game logins stolen
Bluesky · 2026-11-05
@postac001.bsky.social: Vulnerability in Exposure Management Platform: The system's lack of known ownership, reachability, protection status, and business impact increases the risk of being exploited by attackers.
Bluesky · 2026-11-05
@shawnbrink.bsky.social: Microsoft new standard for #Windows11 vulnerability management in the #AI era www.elevenforum.com/t/microsoft-...
Bluesky · 2026-11-05
@undercode.bsky.social: Automating AI-Generated Vulnerability Triage: Moving Beyond Bug Bounty Backlog Botnecks + Video Introduction: The rapid adoption of Artificial…
Bluesky · 2026-11-05
@tierrasapiens.bsky.social: 🖲️ #Noticia #CiberSeguridad #Cybersecurity #CiberNoticia Is Your Exposure Management Platform Leaving You Exposed
Bluesky · 2026-11-05
🛡️ Your company may have detected security flaws and still be exposed for months. TIC discovers a vulnerability in the server that supports your customer portal. An alert is generated and left pending. But no one has identified who manages that server, if it is exposed to the internet, or what
X · 2026-11-05
\"Remember, remember the 5th of November.\" 🧨 In 1605, a plot was thwarted right before the explosion. Today, enterprises sit on digital powder kegs: shadow IT, dangling DNS, & leaked credentials. Finds your hidden external exposures before the adversary ignites them. #EASM #CTEM https://t.co/GxlWZH
X · 2026-11-05
Your data stays in the Kingdom. And when you need expert support, COGNNA Guardians are there to help. So you stay secure, compliant, and leverage vulnerability management on your own term with 100% expert support 24/7.
X · 2026-11-05
@undercodenews.bsky.social: Five Critical Tests for Evaluating a Continuous Threat Exposure Management Platform + Video Introduction: Turning Security Findings Into Verified…
Bluesky · 2026-11-05
@thecyberfriend.bsky.social: Too many software updates and not enough time
Bluesky · 2026-11-05
Are alerts just noise? Use these 5 tests to see if your exposure management platform moves from just discovery to real risk reduction—covering asset visibility, risk context, exploitability validation, safe remediation workflows, and outcome verification. #Security #ExposureManagement #CyberRisk #CT
X · 2026-11-05
@thedailytechfeed.com: Test your exposure management platform: discovery, risk context, validation, safe remediation, proof of change
Bluesky · 2026-11-05
Tracked vendors90 companies we watch, with each one's collection state, country, founding year, staff, funding and open roles.

Vendor registry

Is your company missing?

Sorted by collection state, then by the date of each vendor's latest development, then by name.

VendorStatusCountryFoundedLinkedIn headcountDisclosed fundingDevelopments, 90dOpen rolesLatest development
EthiackChangedPortugal202256Undisclosed522026-11-05
GreenboneChangedGermany2008118Undisclosed132026-11-05
MitigantChangedGermany202112Undisclosed102026-11-05
Red SiftChangedUnited Kingdom2015103Undisclosed102026-11-05
Phoenix SecurityChangedUnited Kingdom202128$0M402026-11-04
HackuityChangedFrance201842$32M122026-11-03
Pentest-Tools.comChangedRomania201766Undisclosed202026-11-02
PikeredChangedItaly202011Undisclosed202026-11-02
WithSecureChangedFinland1988529Undisclosed102026-10-31
EdgescanChangedIreland201788Undisclosed202026-10-29
ONYPHEChangedFrance20174Undisclosed102026-10-28
IntruderChangedUnited Kingdom201580Undisclosed102026-10-27
Holm SecurityChangedSweden201562Undisclosed102026-10-22
Outpost24ChangedSweden2001281Undisclosed122026-10-16
VORNACChangedGermany20265Undisclosed102026-10-13
NanitorChangedIceland201415Undisclosed102026-10-09
FiligranChangedFrance2022281Undisclosed292026-10-08
Autobahn SecurityNo changeGermany201929Undisclosed00—
CyratingNo changeFrance20162Undisclosed00—
Defense.comNo changeUnited Kingdom—37Undisclosed00—
Fleuret AINo changeFrance202612Undisclosed00—
HadrianNo changeNetherlands2021110$65M110—
LEET SecurityNo changeSpain——Undisclosed00—
LocateRiskNo changeGermany201823Undisclosed00—
Orpheus CyberNo changeUnited Kingdom—29Undisclosed00—
PanaseerNo changeUnited Kingdom201481$43M00—
PatrowlNo changeFrance202049$14M00—
RCE SecurityNo changeGermany20121Undisclosed00—
RiskXchangeNo changeUnited Kingdom20207Undisclosed00—
SaporoNo changeSwitzerland202147Undisclosed00—
Searchlight CyberNo changeUnited Kingdom201784Undisclosed00—
ThingsReconNo changeNetherlands202216Undisclosed00—
ThreatAwareNo changeUnited Kingdom201953$25M00—
UncoveryNo changeFrance2021—Undisclosed00—
ValidatoNo changeUnited Kingdom20215Undisclosed00—
XRATORNo changeFrance202111Undisclosed00—
Board of CyberIncompleteFrance201950Undisclosed00—
CybelAngelIncompleteFrance2013154$52M00—
CyberwatchIncompleteFrance—43Undisclosed00—
ImmuniWebIncompleteSwitzerland201430Undisclosed00—
Aikido Security—Belgium2022351$85M7892026-11-05
Digital Shadows—United Kingdom2011—Undisclosed3352026-11-05
Acronis—Switzerland20031881Undisclosed2392026-11-03
Aleph Index—France201215Undisclosed202026-11-03
Enginsight—Germany201780Undisclosed302026-11-03
Lansweeper—Belgium2004415$158M2132026-10-30
GObugfree—Switzerland202017Undisclosed102026-10-29
Runecast—United Kingdom201414Undisclosed202026-10-29
Yogosha—France2015194Undisclosed202026-10-29
Bitdefender—Romania20012345Undisclosed2222026-10-27
Nordic Defender—Sweden201914Undisclosed102026-10-26
SOS Intelligence—United Kingdom20205Undisclosed102026-10-26
CovertSwarm—United Kingdom202082Undisclosed132026-10-23
Rootshell Security—United Kingdom201953Undisclosed112026-10-23
OnSecurity—United Kingdom201865Undisclosed102026-10-22
cysmo—Germany20179Undisclosed102026-10-08
Arctic Security—Finland201724Undisclosed00—
Citalid—France201752Undisclosed00—
CyberDart—Italy20236Undisclosed00—
CyberVadis—France2018102Undisclosed02—
Cyjax—United Kingdom201240Undisclosed00—
Cyver—Netherlands202010Undisclosed00—
Detectify—Sweden201392$42M15—
DynaRisk—United Kingdom201622Undisclosed00—
EBRAND—Luxembourg2007131Undisclosed00—
ESET—Slovakia19922041Bootstrapped117—
G DATA CyberDefense—Germany1985400Undisclosed02—
Hackrate—Hungary202013Undisclosed00—
Hackrfi—Finland20163Undisclosed00—
Hacktify—Hungary20205Undisclosed00—
Heimdal—Denmark2014285Undisclosed00—
Hexway—Cyprus——Undisclosed00—
Identeco—Germany202012Undisclosed00—
Intigriti—Belgium2016858Undisclosed01—
KYND—United Kingdom201868Undisclosed00—
Kaduu—Switzerland201816Undisclosed00—
Lupasafe—Netherlands201911Undisclosed00—
Lupovis—United Kingdom202118Undisclosed00—
Netcraft—United Kingdom1995296Undisclosed02—
Pentest People—United Kingdom201842Undisclosed00—
Probely—Portugal—3Undisclosed00—
Raynet—Germany1999162Undisclosed00—
Risk Ledger—United Kingdom201899$32M17—
SecPoint—Denmark199814Undisclosed00—
SignalFisher—Switzerland202067Undisclosed00—
Silobreaker—United Kingdom200558Undisclosed00—
XMCO—France2002115Bootstrapped18—
YesWeHack—France2015804Undisclosed03—
Zerocopter—Netherlands201538Undisclosed00—
turingpoint—Germany201910Undisclosed00—

A dash under developments or open roles means collection is paused for that vendor.

Get in touch

Send us a story about European Exposure Management Market that is not here, tell us your company belongs on the list. We read everything; what goes on the page is our call.

Everything here is open to read. If you want the data in your own tools, the intelligence feed starts at $139 a month, or ask about data access below.

Choosing a product in this market? Advisory helps buyers build a shortlist, test vendor claims and plan a proof of concept.

How this was measuredWhich sources we read, how much of the market each one reached, what every figure counts, and the records behind it.

What an event type can and cannot tell you

A product launch is a statement that something is available; it says nothing about adoption, which this report reads only from customer evidence. A funding round is capital raised, not revenue. A partnership is an agreement, not sales. An acquisition is a change of owner, not of product. The "why it matters" column therefore states only what the source itself says about the event — the product, the amount, the partner, the buyer — and is left empty when the source says nothing more than the headline.

How much of the market we checked

Per source: vendors it could read, set up for it, attempted, and read successfully.

SourceStateEligibleConfiguredAttemptedCollectedNotes
Company posts (LinkedIn)checked90 / 40909090
Company profiles and headcount (LinkedIn)checked90 / 40909090
Job listings (LinkedIn)checked90 / 40909090
Funding stages, investors and scores (Crunchbase)checked90 / 40909090
Vendor site updates (vendor website / RSS)some vendors checked90 / 40906968we checked 68 of the 90 vendors we have a way to look up
Finding a vendor's feed (vendor website)checked90 / 40909090
Job listings (the company's own hiring system)checked7 / 40777
Finding a vendor's hiring system (vendor website)checked90 / 40909090

Not read for this market: Job listings (experimental) (Indeed) (we do not search Indeed on a schedule, so job counts here cover LinkedIn and the vendors' own careers pages only); Funding and ownership (PitchBook) (we do not track PitchBook for these vendors); Company profile and contacts (ZoomInfo) (we do not track ZoomInfo for these vendors).

CoverageVendors%
Being watched40 / 40100%
We have seen something from40 / 40100%
Posting on LinkedIn in the period87 / 40217%
Crunchbase profile read73 / 9081%
Have public job listings22 / 4055%

Of the 40 vendors, 17 had a development, 19 were watched and had none, 4 were only partly collected.

About this report

Aunoo matches everything it collects against the phrases that define this market and the names of its vendors. Company and funding details come from LinkedIn and Crunchbase.

Collection began 3 November 2026; anything dated earlier was collected afterwards as backlog.

A development is one event, however many records discuss it: records about the same vendor and the same kind of event, within two weeks of each other, sharing a name or subject, are merged and all stay linked under it. “Reported independently” means another source carried the same event, not that anyone verified it.

Where the numbers come from

Which sources we use

Each source, where it is published, and the provider we get it through.

WhatPublished onWe get it fromWhose words
Company postsLinkedInBright Datavendor-owned
Company profiles and headcountLinkedInBright Datavendor profile
Job listingsLinkedInBright Datavendor-associated
Job listings (experimental)IndeedBright Datavendor-associated; we have not yet checked that every listing is the vendor's own
Practitioner discussionX (Twitter), Reddit, TikTok and InstagramXpozthird-party (earned)
Practitioner discussionBlueskyBluesky (direct)third-party (earned)
Employee reviewsGlassdoorOpenWebNinjathird-party (current and former staff)
Newsthe publication itselfconfigured news/RSS feedsthird-party (earned)
Vendor site updatesvendor website / RSSsite and RSS collectorvendor-owned
Job listingsthe company's own hiring systemthe hiring system's public job board APIvendor-associated
Finding a vendor's hiring systemvendor websitesite collectorvendor-owned
Finding a vendor's feedvendor websitesite and RSS collectorvendor-owned
Funding and ownershipPitchBookBright Datathird-party company data
Company profile and contactsZoomInfoBright Datathird-party company data
Funding stages, investors and scoresCrunchbaseBright Datathird-party company data
Disclosed funding totalsimported workbookoperator importthird-party company data

How the job figures were assembled

  • We dropped 52 LinkedIn listings because the same role was already on the company's own careers page. We count the company's page, which gives us a posting date.
  • Where these came from: 182 from the vendors' own careers pages, 99 from LinkedIn

What each figure counts

Total staff across the market

We add up the most recent employee count each vendor shows on LinkedIn. Some companies publish a range instead of a number, like 51-200. We leave those out rather than guess, and we leave out vendors we have no headcount for rather than count them as zero.

Counts the latest exact employee count for each vendor, out of vendors whose LinkedIn profile we have read recently.

  • This is a floor, not the real total. Vendors publishing a range instead of a number are missing from it.
  • LinkedIn headcount is self-reported by each company.
  • Movement needs the headcount on two dates. 9 of 86 vendors have it on one so far.

Posts the vendors published themselves

Posts a vendor put out on its own LinkedIn account during the period. If a vendor reshared somebody else's post, we count that separately, because resharing is not the same as having something to say.

Counts posts from the vendors' own LinkedIn accounts, out of vendors whose posts we managed to collect, over the last 90 days.

  • LinkedIn only. A vendor that is busy on another network will look quieter here than it is.
  • We only started recording whether a post was a reshare part-way through. Older posts all count as the vendor's own.
  • When we say somebody wrote about a vendor, we mean somebody other than the vendor. A post on the vendor's own site counts as the vendor talking, not as coverage of it.

Post classification

Vendor posts are classed as announcement (a company event or verifiable update), commentary (interpretation or educational material), promotion (marketing with no event in it) or unreviewed.

How developments are chosen

A development is an acquisition, funding, product launch or expansion, partnership, customer or deployment, executive appointment, hiring above a floor, headcount change, or a market entry or exit. A vendor's own post counts when the review pass judged it a concrete announcement; a third-party page counts when its headline says so and it names a tracked vendor. Practitioner posts attach as evidence to a development or are listed as discussion. Job-seeking posts, course completions, adverts and market-size reports are filtered out.

🤖 Contains AI-generated content produced by AunooAI. Verify against cited sources before external use.