O360 B.V.
Offensive360 provides application security testing and risk management tools for enterprises.
- Categories
- Application security testing, API security, Penetration testing, Attack surface management
- Based in
- Amsterdam, Netherlands
- Ownership
- Private
- Certifications
- ISO/IEC 27001
About O360 B.V.
O360 B.V. sells application security and risk management software. Its platform brings together static code analysis, dynamic testing of running web and API applications, mobile binary analysis, external attack surface discovery, AI-assisted penetration testing, autonomous red teaming and a governance, risk and compliance module. The company also provides expert-led security assessments. It serves financial services, healthcare, government and defence, and software supply chain organisations. The platform is available as a cloud service, on-premise or in air-gapped environments. It supports more than 60 programming languages and offers flat-rate licensing. The GRC module is in early access and supports Arabic and English workflows. O360 B.V. holds ISO/IEC 27001 certification. It states that in on-premise and air-gapped modes no source code, binary or finding leaves the customer network. The platform is tested with its own SAST and DAST engines on each release and reviewed by its red team.
Products
- SASTStatic analysis of source code using data-flow techniques to find vulnerabilities and suggest fixes.
- DASTDynamic testing of running web applications and APIs with authenticated scanning and exploit validation.
- MASTAnalysis of Android and iOS application packages for secrets, weak cryptography and platform weaknesses.
- ASMContinuous discovery and monitoring of external assets such as subdomains, ports, services and certificates.
- AI PentesterAuthorised AI-driven penetration testing with a signed approval gate, human approval before exploitation and a kill switch.
- Red TeamingAutonomous adversary emulation that plans attack paths and proves exploitability within an enforced scope.