Cracken

Frenos , a three-year-old startup based in Charlotte, NC, that simulates penetration tests on digital twins of industrial control networks to identify exploitable attack paths without disrupting production, raised a $1.5 million seed round co-led by Momenta and Exposition Ventures , with Riptide Ventures also anteing up. The company has raised a total of $6.4 million. SecurityWeek has more here .

Seed · $6M · 2026-07

Horizon3.ai, founded in 2019 in San Francisco, USA, develops NodeZero, an AI-powered automated red team platform that simulates real-world penetration testing.

Series D+ · $429M · 2026-08 · Valuation $2.0B

Bishop Fox is a US offensive security firm founded in 2005 in Tempe, Arizona as Stach & Liu and renamed around 2013-2014. It provides continuous penetration testing, red teaming, attack surface management (CASM) and application/cloud/network/product security assessments; clients include more than a quarter of the Fortune 100 and eight of the top ten global tech companies. Its in-house Cosmos AI engine accelerates vulnerability discovery and exploit-chain identification, and it offers AI/LLM security assessments and AI red teaming (prompt injection, jailbreaks, insecure tool calling).

Xinliu Intelligence, founded in 2025 in Pudong, Shanghai, China, provides AI security and privacy compliance technology infrastructure, serving as a foundational layer for AI safety and regulatory compliance.

Seed · 2025-12

Equixly, founded in 2022 in Florence, Italy, provides AI-powered "offensive" API penetration testing and security validation.

Series A · $13M · 2025-12

Hadrian, founded in 2021 in Amsterdam (with an office in London) by ethical hackers, builds an offensive security platform: Atlas continuously maps the external attack surface and Nova runs on-demand agentic penetration tests, using AI agents to discover and validate exploitable vulnerabilities. Customers include McKesson, NBCUniversal, TotalEnergies and Damen Shipyards.

Undisclosed · $65M · 2026-10

London-based CodeWall builds autonomous AI attack agents that continuously pentest enterprises from the outside, chaining weaknesses into real attack paths and validating exploitable findings, turning offensive security into a continuous capability.

Pre-Seed · 2026-10

Security & compliance

Series C · $270M · 2026-05 · Valuation $1.0B

Novee, founded in 2025 in Israel, conducts continuous penetration testing using AI agents that simulate offensive tactics.

Seed · $300M · 2026-01

Knostic, founded in 2023 in Tel Aviv, Israel, provides security tools that help enterprises control what information their AI systems can access and share. Traditional binary access controls cannot address the nuanced security risks posed by AI tools like Microsoft 365 Copilot and Glean, which may inadvertently expose confidential data such as financial results, M&A plans, or employee salaries.

Undisclosed · $14M · 2025-03