Sprocket Security raises $8M to power cybersecurity penetration testing platform

Sprocket Security Inc., an expert-led offensive security platform startup, today announced $8 million in new funding to accelerate platform development and expand sales and marketing efforts.

Founded in 2017, Sprocket Security provides continuous penetration testing services to detect changes within an organization's network, as well as human testing to identify security risks. The company's services include attack surface management and red and purple team exercises.

At the heart of Sprocket is enabling security teams to continuously examine their security posture, understand their most complex risks, and reduce their threat exposure with the support of a team of experts. Security teams use this service to monitor attack surfaces with advanced change detection. When changes are detected, testers and systems run security tests, and security teams are alerted and can assist with remediation efforts through the Sprocket Platform.

Sprocket's Continuous Penetration Testing also includes the ability to collaborate with testers using chat and status management. Users can generate report requests with the click of a button and monitor continuous testing activity across the attack surface.

Tracking includes the ability to monitor exposed hosts and services across your perimeter, revealing gaps in your defenses that could be targeted by attackers. Users can audit domains, subdomains, and DNS infrastructure to uncover misconfigured or outdated records that can leave organizations vulnerable to common attacks such as subdomain takeovers. can.

The company also offers attack narratives, allowing users to view attack paths followed by expert testers and the resulting results to identify patterns of weakness in the perimeter. Users can validate their organization's posture against real-world threat actors using expert testers who target organizations using the latest tactics, techniques, and procedures.

Sprocket says its platform differs from existing automated solutions due to its hybrid approach. “We believe in a hybrid approach of human-led testing supported by automation…it’s the only way to ensure comprehensive and up-to-date testing,” said Founder and CEO Casey.・Mr. Camilleri said. “This continuous approach is increasingly understood and appreciated by our customers who have seen that fully automated solutions cannot meet all their penetration testing needs.”

The Series A was led by Blueprint Equity LLC, with participation from Capital Midwest Fund. John Bonhardt, vice president of Blueprint Equity, will join Sprocket's board of directors. “The one constant in the ever-changing cybersecurity landscape is the presence of threat actors,” said Bonhardt. “Continuous vigilance, or penetration testing, is critical to understanding how and to what extent vulnerabilities can be exploited by advanced hacker techniques.”

Photo: Sprocket Security