S

Sprocket Security

Offensive security with continuous risk monitoring

Overview

Sprocket Security delivers continuous penetration testing for enterprises, combining ongoing offensive security assessments with real-time risk monitoring and remediation. It uses a hybrid model that blends human security experts with automated systems to run adversary simulations and attack surface management on an ongoing basis, all billed via a subscription. The product works by continuously testing an organization’s defenses, monitoring for new risks in real time, and providing guided remediation to reduce exposure, rather than performing one-off tests. This approach sets the company apart from competitors by offering year-round, persistent testing and monitoring instead of periodic checks, ensuring vulnerabilities are addressed proactively. The goal is to help enterprises maintain a strong, resilient cybersecurity posture by continuously identifying and mitigating threats before they can be exploited.

Work here?Claim your company

About Sprocket Security

Simplify's Rating
Why Sprocket Security is rated
C+
Rated C on Competitive Edge
Rated B on Growth Potential
Rated C on Differentiation

Industries

Enterprise SoftwareCybersecurity

Company Size

51-200

Company Stage

Series A

Total Funding

$8M

Headquarters

Madison, Wisconsin

Founded

2017

Get referred to Sprocket Security

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Apex launched June 30, 2026; Link followed August 17, 2026, signaling rapid product velocity.
  • January 20, 2026 CTO hire Eric Sheridan strengthens engineering execution and product roadmap.
  • 2026 company messaging cites Gartner and GigaOm recognition, aiding enterprise credibility and pipeline.

What critics are saying

  • Crowded market pits Sprocket against NetSPI, Synack, Pentera, Horizon3.ai, and Cobalt.
  • Only $8 million Series A, raised March 2024, limits hiring, R&D, and sales scale.
  • If Apex and Link disappoint, Sprocket loses its AI narrative and differentiation.

What makes Sprocket Security unique

  • Continuous pentesting since 2018 anchors Sprocket’s change-triggered testing model.
  • Apex and Link, launched June and August 2026, extend AI coverage externally and behind logins.
  • Free attack surface management integrates discovery, scoping, and remediation in one workflow.

Help us improve and share your feedback! Did you find this helpful?

Funding

Total Funding

$8M

Below

Industry Average

Funded Over

1 Rounds

Series A funding typically happens when a startup has a product and some customers, and now needs funding to scale. This money is usually used to grow the team, expand marketing, and improve the product. Venture capital firms are frequently the main investors here.
Series A Funding Comparison
Below Average

Industry standards

$15M
$8M
$8.2M
$15M
$30M

Benefits

  • Unlimited Paid Time Off
  • 401(k) Company Match
  • 401(k) Retirement Plan
  • Health Insurance
  • Dental Insurance
  • Vision Insurance
  • Flexible Work Hours
  • Professional Development Budget
  • Conference Attendance Budget

Growth & Insights and Company News

6 month growth

0%

1 year growth

-7%

2 year growth

0%
PR Newswire
Aug 17th, 2026
Sprocket Security launches Link, an AI agent for authenticated penetration testing of web apps and APIs

Sprocket Security has launched Link, an AI penetration testing agent designed for authenticated web applications and APIs. Link represents the company's second context-aware AI agent, following Apex, which tests unauthenticated external attack surfaces. The agent can simultaneously hold multiple credentialed roles to identify unauthorised data access. According to founder and CEO Casey Cammilleri, Link works alongside Apex to provide complete coverage of web applications and APIs under expert supervision. Link is now available to Sprocket Security customers who have added web application testing to their scope and provided credentials. The Madison, Wisconsin-based company provides a technology-powered continuous penetration testing platform that monitors environments and triggers hybrid testing based on attack surfaces and emerging threats.

Sprocket Security
Aug 17th, 2026
Sprocket Security launches Link, an authenticated pentesting agent.

Sprocket Security launches Link, an authenticated pentesting agent. Madison, WI - August 17, 2026 - Sprocket Security, a technology-powered continuous penetration testing platform, announces the availability of Link, an AI penetration testing agent built for authenticated web applications and APIs. Link is Sprocket's second context-aware AI agent, following Apex, which was introduced earlier this summer to test the unauthenticated, external attack surface. Link's authenticated testing answers the question: once someone has valid login credentials, what can they do that they shouldn't? "Link is our authenticated, context-aware testing agent for web applications and APIs - it logs in and holds every credentialed role simultaneously, so where a single session can only suspect that one role reaches another's data, Link proves it," shares Sprocket Security Founder and CEO Casey Cammilleri. "With Apex, we showed an agent could reason through an application from the outside. Link takes that same reasoning behind the login, where most of what's actually exploitable lives. Together they give our customers full agentic coverage of their web applications and APIs, supervised by the same expert testers they've always trusted - proven, not guessed." Link is available now to Sprocket Security customers who have added web application testing to their scope and provided credentials for the roles they want tested. Organizations interested in adding authenticated testing, or in seeing Link and Apex in action, can request a demo at https://www.sprocketsecurity.com/company/contact. About Sprocket Security. Sprocket Security provides a technology-powered continuous penetration testing platform. Named in GigaOm and Gartner reports this year, Sprocket continuously monitors customer environments and triggers hybrid testing based on each customer's dynamic attack surface and emerging threats. Unlike legacy penetration testing, Sprocket's continuous approach delivers real-time insights and adaptive security, giving organizations a security posture that reflects today, not their last test. Media Contact

PR Newswire
Jun 30th, 2026
Sprocket Security launches Apex, an AI penetration testing agent for continuous vulnerability discovery

Sprocket Security has launched Apex, an AI penetration testing agent for continuous web application security testing. The agent autonomously discovers exploitable vulnerabilities at machine speed whilst operating under human supervision. Apex leverages Sprocket's attack surface management platform, built since 2018, which contains customer assets, tech stacks, testing history and previous findings. The agent tests against OWASP Top 10 categories and chains vulnerabilities into attack paths demonstrating real exploitable impact. Human testers validate all findings before publication. The system operates under a zero-data-retention policy within Sprocket's SOC 2 environment and uses a model-agnostic harness. Each test builds on previous runs and automatically flags regressions. Additional AI agents are planned for release throughout 2026.

PR Newswire
Jun 2nd, 2026
Sprocket Security wins 2026 Fortress Cybersecurity award in Continuous Exposure Management.

Sprocket Security wins 2026 Fortress Cybersecurity award in Continuous Exposure Management. Jun 02, 2026, 14:52 ET MADISON, Wis., June 2, 2026 /PRNewswire/ - Sprocket Security today announced it has been named a winner in the 2026 Fortress Cybersecurity Awards, for Continuous Exposure Management. Presented by the Business Intelligence Group, the award recognizes the organizations, products, and people applying cybersecurity in ways that deliver real, measurable protection. "The threats are real, and so is the defense. 2026 is about getting ahead of the attacker - execution, accountability, and measurable resilience," said Russ Fordyce, Chief Recognition Officer, Business Intelligence Group. "Sprocket Security stood out because its work in continuous exposure management reflects where the market is headed: practical cybersecurity that solves real problems, earns trust, and protects the people and assets that depend on it. This recognition highlights a team that is not just keeping pace with the threat landscape but helping define what meaningful defense looks like." "We are honored to be recognized in the 2026 Fortress Cybersecurity Awards for our work in continuous exposure management," said Casey Cammilleri, CEO of Sprocket Security. "This award reflects the talent of our team, the trust of our customers, and our commitment to building security solutions that create real outcomes, not just headlines." The Fortress Cybersecurity Awards celebrate the people and organizations leading the next phase of digital defense, where progress is judged not by novelty, but by impact. Winners are selected based on how effectively they are using cybersecurity to reduce risk, protect data and assets, prevent harm, and strengthen the resilience of the organizations and communities they serve. About Sprocket Security Sprocket Security provides an expert-driven offensive security platform that proactively identifies, verifies, and simulates threats, ensuring its clients' digital environments remain secure. Unlike legacy penetration testing, Sprocket's continuous approach delivers real-time insights and adaptive security measures, giving businesses the confidence to move quickly while reliably preventing potential threats. About the Fortress Cybersecurity Awards The Fortress Cybersecurity Awards recognize the world's leading companies, products, and people working to keep data and digital assets safe. As cyber threats grow more sophisticated and more frequent, the program identifies and honors the organizations and individuals building the defenses that protect businesses, governments, and the people who depend on them. Judged by a panel of experienced security and business professionals who provide transparent feedback and detailed scoring, the awards celebrate measurable progress in digital defense. SOURCE Sprocket Security

TechStartups
Jan 20th, 2026
Sprocket Security Appoints Eric Sheridan as Chief Technology Officer

Sprocket Security appoints Eric Sheridan as Chief Technology Officer. Veteran cybersecurity leader brings decades of experience and patented innovation to advance the next generation of proactive security solutions. Sprocket Security today announced the appointment of Eric Sheridan as Chief Technology Officer (CTO). In this role, Sheridan will lead the company's technology vision and execution, accelerating innovation and advancing Sprocket Security's mission to deliver proactive cybersecurity solutions that help organizations stay ahead of evolving threats. Sheridan brings decades of experience in cybersecurity and software engineering, with a career dedicated to building forward-looking security platforms designed to anticipate and prevent attacks before they occur. He holds numerous patents, reflecting a long-standing record of technical innovation and a proven ability to translate advanced research into practical, high-impact security solutions. "Eric's leadership and technical depth are exactly what we need as we continue to scale and innovate," said Casey Cammilleri, CEO at Sprocket Security. "His experience building proactive security technologies and his ability to consistently deliver industry-defining solutions will be instrumental as we push beyond today's standards and outpace the cybersecurity industry." As CTO, Sheridan will oversee Sprocket Security's engineering and product strategy, guiding the development of next-generation proactive cybersecurity capabilities. His focus will include advancing the company's core platform, fostering innovation across teams, and ensuring Sprocket Security remains at the forefront of emerging security challenges. "I'm excited to join Sprocket Security at such a pivotal time," said Sheridan. "The opportunity to build the next wave of proactive cybersecurity solutions that fundamentally change how organizations defend themselves - is incredibly compelling. I look forward to helping the team continue to innovate and lead the industry forward." With Sheridan's appointment as CTO, Sprocket Security signals its continued focus on developing security technology aimed at addressing evolving cybersecurity threats. About Sprocket Security Sprocket Security provides an expert-driven offensive security platform that proactively identifies, verifies, and simulates threats, ensuring its clients' digital environments remain secure. Unlike legacy penetration testing, Sprocket's continuous approach delivers real-time insights and adaptive security measures, giving businesses the confidence to move quickly while reliably preventing potential threats.

Recently Posted Jobs

Sign up to get curated job recommendations

Sprocket Security is Hiring for 5 Jobs on Simplify!

Find jobs on Simplify and start your career today

Don't see your dream role? Check out thousands of other roles on Simplify. Browse all jobs