Penetration testing firm trusted by nine of the top ten US banks, with the Resolve platform for continuous attack surface management.
- Categories
- Penetration testing, Attack surface management, Breach and attack simulation, Digital risk and brand protection
- Based in
- Minneapolis, United States
- Founded
- 2001
- Size
- 201-500 staff
- Ownership
- Owned by KKR since 2022
- Certifications
- SOC 2 Type II, Cyber Essentials Plus, CREST
About NetSPI
NetSPI is a cybersecurity company that provides penetration testing and attack surface management. It sells Penetration Testing as a Service (PTaaS), which combines human testers with AI to test applications, networks, cloud, mainframe, hardware, and AI systems. The company also offers security assessments, red team operations, social engineering, and detective controls testing. It serves large enterprises, including major cloud providers, top US banks, and healthcare companies. NetSPI was founded in 2001 and has over 350 experts and more than 50 pentesting services. Its platform provides continuous testing and visibility into external and internal attack surfaces, with integrations for asset managers, IAM, and vulnerability tools. The company also provides dark web monitoring, domain monitoring, and vulnerability prioritization.
Products
- NetSPI PlatformA platform for managing penetration testing, attack surface visibility, and vulnerability data.
- Penetration Testing as a Service (PTaaS)Human-delivered penetration testing services that shift projects to continuous programs.
- Attack Surface ManagementProvides always-on visibility of internal and external attack surfaces.
- Dark Web MonitoringDetects potential threats from dark web data sources before they escalate.
- Domain MonitoringIdentifies fraudulent look-alike domains and generates takedown reports.
- Model Context Protocol (MCP) IntegrationConnects AI assistants to NetSPI's validated vulnerability data for automated workflows.
Ownership and deals
Companies owned by KKR lists all 3 in the directory, with the deals on record.
- NetSPI acquired SynackReport on NetSPI buying Synack (opens in a new tab)
- NetSPI acquired Hubble TechnologyReport on NetSPI buying Hubble Technology (opens in a new tab)
- NetSPI acquired NvisiumReport on NetSPI buying Nvisium (opens in a new tab)
- Raised $410mInvestor KKRReport on the NetSPI funding round of October 2022 (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.
Companies NetSPI owns
See companies owned by NetSPI for the category and head office of each, and the deals behind them.