The first company to automate continuous adversarial exposure validation at scale — and the first in its category to cross $100 million ARR.
pentera.io ↗Pentera was founded in 2015 in Tel Aviv, Israel as Pcysys by Arik Liberzon, Arik Faingold, and a group of former Israel Defense Forces cyber researchers, rebranding as Pentera in 2021. The company built the Automated Security Validation (ASV) category — a platform that, with a single click, launches a comprehensive simulated cyberattack against an organization's live production environment and then safely rolls back all artifacts, giving security teams real evidence of exploitable vulnerabilities without disrupting operations. Pentera operates without endpoint agents, emulating the full attacker kill chain: reconnaissance, lateral movement, privilege escalation, credential harvesting, and data exfiltration. As of early 2026, over 1,200 enterprises in more than 60 countries rely on Pentera, and the company has approximately 488 employees.
Pentera has raised $249.5 million across four funding rounds. The landmark event was a $150 million Series C in January 2022, led by K1 Investment Management with participation from Insight Partners and Evolution Equity Partners — valuing the company at $1 billion and making it a cybersecurity unicorn just three years after product launch. In March 2025, Pentera raised a $60 million Series D led by Evolution Equity Partners and Farallon Capital Management at a valuation exceeding $1 billion, fueling M&A and platform expansion into cloud and IoT environments. By January 2026, Pentera surpassed $100 million in ARR — becoming the first company in the adversarial exposure validation (AEV) market to reach Centaur status — and completed two strategic acquisitions in 2025.
Pentera's technical differentiation lies in its algorithmic, safe-by-design architecture: all attack emulations are non-destructive, auto-clean artifacts post-testing, and operate in live production environments without agents or pre-installation. In September 2025, Pentera introduced AI-driven capabilities including AI-powered payload generation, adaptive testing logic, and system-aware attack chaining that mirrors modern AI-assisted threats. The company also launched Pentera Resolve in 2025, an AI-powered remediation workflow engine that consolidates validated findings, assigns ownership, tracks SLAs, and revalidates fixes through 100+ native integrations. Pentera was the first AEV vendor to achieve ISO/IEC 42001, the international standard for AI management systems.
Pentera has done something rare in enterprise cybersecurity: it defined a new category, grew to $100M ARR before most competitors understood the category existed, and built a 1,200-enterprise customer base without a single major stumbling block. Its 'click-to-attack' simplicity — attacking your own production infrastructure safely, without agents, without professional services engagement — solved a genuine operational pain point that traditional annual pentesting and static vulnerability scanners never addressed. The timing is important: Gartner identified automated security validation as one of the most critical cybersecurity sectors for 2025 specifically because AI has made phishing, ransomware, and exploit development faster and cheaper for attackers. Pentera's CTEM alignment, combined with the $60 million Series D and the post-$100M ARR milestone, positions it as a clear IPO candidate. The company's pivot into AI systems testing — validating AI model interfaces and authentication flows — extends its TAM beyond traditional infrastructure into the fastest-growing attack surface in enterprise security.
Pentera is the category leader in Automated Security Validation and the dominant player in what it now calls Adversarial Exposure Validation (AEV). Its closest competitors are Cymulate (which offers breach-and-attack simulation) and XM Cyber (acquired by Schwarz Group) in the exposure management space, as well as traditional manual pentesting firms like Bishop Fox and Coalfire. Pentera's structural advantage is speed and scale: it runs continuous automated tests across internal, external, and cloud environments that manual teams cannot match in frequency or coverage. The company's $100M ARR milestone, combined with its 1,200-enterprise customer base, creates a durable moat — remediation workflows, integrations, and historical attack data all increase switching costs over time. With $249 million raised at a $1B+ valuation, an IPO is a credible path in 2026-2027, particularly as the AEV category gains Gartner recognition and regulatory frameworks like NIS2 and DORA drive mandatory continuous security validation requirements in Europe.
206 companies across 10 categories — the most comprehensive AI security company tracker.
Browse All Companies →