
Work Here?
Brinqa provides a unified cyber risk management platform for enterprises to manage the threat exposure lifecycle. Its Brinqa Attack Surface Intelligence Platform centralizes data from 150+ tools into a Cyber Risk Graph, normalizes and enriches it with threat intel and business context, and prioritizes vulnerabilities with automated remediation workflows and reporting. It differentiates itself by offering cross-domain risk visibility tied to business impact and configurable risk models without heavy coding. Its goal is to move organizations from reactive security to proactive risk management, reducing response times and compliance costs.
Industries
Data & Analytics
Enterprise Software
Cybersecurity
Financial Services
Company Size
51-200
Company Stage
Growth Equity (Venture Capital)
Total Funding
$110M
Headquarters
Austin, Texas
Founded
2009
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Total Funding
$110M
Above
Industry Average
Funded Over
1 Rounds
Health Insurance
Dental Insurance
Vision Insurance
Life Insurance
Disability Insurance
401(k) Company Match
Unlimited Paid Time Off
Sick Time
Stock Options
Brinqa acquires PlexTrac to bring validated remediation to exposure management. Brinqa has announced its acquisition of PlexTra, adding the ability to verify that remediation efforts have actually worked. The combined capabilities uniquely position Brinqa to identify and prioritize the exposures that matter most, drive remediation, and validate that fixes hold, closing the CTEM loop. "We've spent over a decade building the platform enterprise security teams trust to prioritize what to fix first," said Dan Pagel, CEO at Brinqa. "PlexTrac brings real offensive security depth, from practitioners who have spent years proving exactly how attackers get in. Pairing that expertise with our exposure assessment platform gives customers proof they can defend to a board, an auditor, or any AI system acting on that data." A decade of momentum in exposure management. Brinqa has spent more than a decade solving exposure management challenges for the world's largest and most complex organizations, including Nestlé, PhonePe, Cambia Health Solutions, Guidewire, and SAP. That focus paid off in 2025 with 164% year-over-year growth in new bookings, a 32% increase in new-logo average selling price, and inclusion in the inaugural Gartner Magic Quadrant for Exposure Assessment Platforms. Momentum accelerated further in 2026, with new logo bookings more than doubling year-over-year and existing customers expanding their deployments as Brinqa shipped new AI capabilities, including new MCP interfaces, the AI Attribution Agent, and the AI Deduplication Agent. The PlexTrac acquisition builds directly on that trajectory, adding the capability enterprise security teams kept asking for: proof that a fix actually worked. Combined with a robust data foundation, MCP, and Bring Your Own AI, customers can connect that same validated exposure data to the AI models and tools they already use, making high-value exposure intelligence available across teams. "Exposure management only matters if teams can prove the fix worked, and that's the gap Brinqa now closes. We've watched this team build category-defining technology, and this acquisition sharpens their lead at a moment when security organizations are demanding validated, AI-ready data," said Thomas Krane, Managing Director at Insight Partners and member of Brinqa's board of directors. Acquisition highlights. * Brinqa now serves 3,000+ customers across 57 countries, giving PlexTrac's offensive security community direct access to Brinqa's data foundation and AI agents. * Brinqa now fully closes the CTEM loop, from discovery and prioritization through validated proof that a fix worked. * The combined company is now the largest standalone vendor in Unified Exposure Management, bringing together two companies independently recognized in the Gartner Magic Quadrant for Exposure Assessment Platforms. * Every confirmed exploit and fix from PlexTrac flows into Brinqa's data layer, strengthening the Cyber Risk Graph and sharpening every AI agent, whether Brinqa's own or one a customer runs via Brinqa's Bring Your Own AI program. * Dan DeCloss, founder and Chief Customer Brand Officer of PlexTrac, joins Brinqa's executive leadership team and board of directors to lead the combined offensive security practice. What this means for customers. For Brinqa's customers, it means faster confirmation that a fix worked, and evidence to back up what security teams report to auditors, insurers, and the board. A vulnerability marked "closed" in a ticketing system is a status update. A vulnerability confirmed closed through validated retesting is proof. For PlexTrac's customers, it means pentest teams and workflows now plug directly into a CTEM program instead of sitting next to one. Brinqa's prioritization engine focuses pentest resources on the exposures that matter most to the business, and validation now covers both ends of remediation: pre-remediation testing to confirm an exposure is exploitable, and post-remediation retesting to confirm the fix held. Security, IT, and offensive security teams work from one prioritized list. The PlexTrac solutions will continue operating as standalone offerings, giving existing customers the same experience they have today, with the option to extend into Brinqa's broader platform as their programs evolve. "PlexTrac was built by offensive security practitioners, for offensive security practitioners, and that's not changing. Joining Brinqa gives our team a bigger platform to prove that hands-on offensive security expertise still matters, even as more of this work gets automated," said DeCloss. With PlexTrac, Brinqa becomes the operating system for enterprise exposure management: the layer where every decision, every fix, and every proof point comes together. Brinqa was represented by Covington & Burling in the transaction. More about
Brinqa has acquired PlexTrac for an undisclosed sum, adding penetration testing validation to its exposure management platform. The deal creates what the company claims is the largest standalone vendor in unified exposure management, serving more than 3,000 customers across 57 countries, including over 25% of the Fortune 500. PlexTrac's software enables penetration testers to verify exploits and confirm remediation effectiveness. The acquisition closes a gap in Brinqa's offering, which previously collected findings from security tools but lacked verification capabilities. PlexTrac will continue selling its products standalone whilst integrating with Brinqa's broader platform. Both companies share investor Insight Partners, which led Brinqa's $110 million growth round in June 2021 and PlexTrac's $70 million Series B in February 2022. PlexTrac founder Dan DeCloss joins Brinqa's executive team and board.
Executive change: Brinqa appoints David Allen as Chief Technology Officer. Austin, TX - Brinqa has announced the appointment of David Allen as Chief Technology Officer. About Brinqa: Brinqa is an AI-driven exposure management company that helps organizations understand and reduce technology risk by providing a unified, prioritized view of cyber risk across their entire environment. Its platform consolidates and normalizes data from all security tools and data sources, enriches that information with business and threat intelligence, and separates false alarms from real threats so security and IT teams can focus on the work that matters most. Brinqa positions itself as a strategic partner to security teams on the front lines, transforming traditional vulnerability and exposure management into a proactive, enterprise-wide risk management capability that supports decisions organizations can confidently defend. The company emphasizes structure, clarity, and momentum in managing complex attack surfaces, delivering faster remediation, improved security posture, and measurable reductions in business risk through its unified exposure management platform. Founded with the mission of redefining vulnerability and exposure management for modern enterprises, Brinqas AI-powered foundation is built to be trusted by leading organizations and to serve as the single source of truth for human teams and AI agents acting on cyber risk. Brinqa 3700 N Capital of Texas Hwy Suite 350 Austin, TX 78746 Phone: 512-372-1004 LinkedIn: https://www.linkedin.com/company/brinqa/
Brinqa, an enterprise security exposure management platform, reported strong first-half 2026 performance with new customer bookings more than doubling year-over-year. Existing customer deployments expanded fourfold during the period. The Austin-based company launched new AI capabilities including AI Attribution Agent and AI Deduplication Agent, designed to automate ownership identification and eliminate duplicate findings. Brinqa also introduced a Bring Your Own AI model, allowing customers to connect preferred AI models to its platform. The firm rebranded its expert team to Forward Deployed Engineering Team and made four executive appointments across AI, engineering, finance, and product innovation. Ron Dovich was named Chief AI and Automation Officer, David Allen as Chief Technology Officer, and Steve Biagioni as Chief Financial Officer. Brinqa was recognised as a Notable Vendor in Forrester's Proactive Security Platforms Landscape and integrated with Horizon3.ai whilst joining Google Cloud Marketplace.
Brinqa launches BYOAI to let security teams use any AI on their own exposure data. Brinqa announced BYOAI (Bring Your Own AI), a capability that enables organizations to connect any AI agent, large language model (LLM), or automation platform to Brinqa's trusted exposure intelligence layer. As enterprises accelerate AI adoption, they face a new challenge. The real challenge is ensuring every AI system operates from trusted, high-fidelity intelligence that reflects the organization's actual risk environment. BYOAI enables organizations to leverage the AI investments they have already made while ensuring those systems reason over a common source of enriched, correlated exposure intelligence. For enterprises, the difference between AI that delivers meaningful business outcomes and AI that creates noise comes down to the quality, context, and trustworthiness of the intelligence behind every decision, not the model you're using. Organizations are increasingly deploying AI across security operations, vulnerability management, cloud security, governance, risk management, engineering, and executive reporting. While each team may have different goals, they all depend on accurate and trusted information. Without a common intelligence layer, AI systems often operate on fragmented data, creating inconsistent priorities, slower coordination, and reduced confidence in outcomes. BYOAI changes that dynamic by democratizing access to Brinqa's curated exposure intelligence. Teams can use the AI tools, agents, and platforms that best fit their needs while operating from the same trusted source of truth. This creates consistency across teams, improves decision quality, accelerates collaboration, and helps organizations respond to risk with greater speed and confidence. "AI is rapidly becoming the interface through which teams make decisions and take action," said Dan Pagel, CEO at Brinqa. "Organizations today have no shortage of AI options. What determines whether those systems create real value is the quality of the intelligence they run on. BYOAI allows organizations to use the models and platforms that work best for them while grounding every decision in a curated, correlated view of their exposure landscape. That's how AI creates real business value." BYOAI works because of Brinqa's CyberRisk Graph, which normalizes, enriches, and correlates exposure intelligence across infrastructure, cloud, identity, application security, and business systems. Through the Brinqa Query Language (BQL) API and Model Context Protocol (MCP), organizations can securely provide trusted exposure intelligence to AI agents, copilots, automation platforms, and reasoning models while maintaining governance, access controls, and auditability. Brinqa believes the future of enterprise AI is an ecosystem of specialized AI systems, each built to solve a different problem, working from a common intelligence layer. Brinqa will continue to deliver AI powered capabilities for key exposure management functions, while BYOAI ensures customers can leverage the AI platforms of their choice on top of the same trusted exposure intelligence foundation. This includes Brinqa's own AI agents, built to power confident, continuous exposure management, though customers are equally free to bring their own. "Most vendors want customers to adopt their AI," said Brad Hibbert, Chief Strategy Officer at Brinqa. "We believe customers should have the freedom to use the AI that works best for their business. Our role is to provide the trusted exposure intelligence that powers better decisions across every team, every workflow, and every AI platform. Organizations that pair flexibility in AI with discipline in the intelligence those systems run on will always have an advantage." As organizations scale AI adoption, consistent, high-fidelity exposure intelligence becomes the critical foundation for better decision making, stronger coordination, and greater business resilience. BYOAI gives enterprises the flexibility to choose any AI while ensuring every system operates from the same source of truth. Topics: AI David Marshall has been involved in the technology industry for over 30 years, and he's been working with virtualization software since 1999. He became a pioneer in the virtualization and cloud computing field - one of the few people in the industry allowed to work with Alpha stage server virtualization software from industry leaders: VMware (ESX Server), Connectix and Microsoft (Virtual Server).Through the years, he has invented, marketed and helped launch a number of successful software companies and products. David holds a BS degree in Finance, an Information Technology Certification, and a number of vendor certifications. He's also co-authored two published books: "VMware ESX Essentials in the Virtual Data Center" and "Advanced Server Virtualization: VMware and Microsoft Platforms in the Virtual Data Center" and was the technical editor for two popular Virtualization "For Dummies" books. With his remaining spare time, David founded and operates one of the oldest independent modern data center publications, VMblog.com. And co-founded CloudCow.com, a publication dedicated to Cloud Computing. Since 2009, and each year thereafter, David has been honored with the vExpert distinction by VMware by Broadcom for his evangelism.Connect on LinkedIn: https://www.linkedin.com/in/davidmarshall/
Find jobs on Simplify and start your career today
Industries
Data & Analytics
Enterprise Software
Cybersecurity
Financial Services
Company Size
51-200
Company Stage
Growth Equity (Venture Capital)
Total Funding
$110M
Headquarters
Austin, Texas
Founded
2009
Find jobs on Simplify and start your career today