Picus Security
Picus Security provides a platform that validates exposures and security controls by simulating cyber attacks.
- Categories
- Breach and attack simulation, Vulnerability management, Penetration testing, Attack surface management
- Based in
- Wilmington, United States
- Founded
- 2013
- Ownership
- Private
- Certifications
- ISO 27001, ISO 27701, ISO 22301, ISO 20000-1, SOC 2 Type 2
About Picus Security
Picus Security sells a security validation platform. It helps security teams work out which exposures an attacker could really exploit in their own environment. The platform combines breach and attack simulation, automated penetration testing and attack surface validation. It also uses AI agents and an orchestrator to run a continuous loop of validation, decision, fix and re-validation. The company says it serves security teams across many roles, including vulnerability and IT teams, SOC managers, red teams, security engineers, CISOs and compliance teams. It also names healthcare organisations that must protect patient data. Picus was founded in 2013 and has raised funding, including a Series C round in 2024. It reports 500 customers, 35 technology alliances and 80 channel partners.
Products
- Picus Autonomous Exposure Validation PlatformA platform that finds exposures, proves which are exploitable and turns them into decisions.
- Picus SwarmA set of specialised AI agents that run pentesting, exposure validation and attack simulation as one loop.
- Numi AI OrchestratorAn orchestrator that runs the validate, decide, fix and re-validate cycle.
- Picus Exposure ValidationA product that validates exploitability across attack surfaces, exposures and controls.
- Picus Exposure ScoreA score that rates real risk using exploitability, control performance, asset importance and vulnerability severity.
- Picus Autonomous Penetration TestingA tool that chains exposures like an attacker and validates exploitability by execution.
Ownership and deals
- Raised $45m in a Series C roundInvestor Riverwood CapitalReport on the Picus Security funding round of September 2024 (opens in a new tab)
- Raised a corporate roundInvestor MastercardReport on the Picus Security funding round of May 2022 (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.