Sprocket Security

Sprocket Security

Offensive security with continuous risk monitoring

Overview

Sprocket Security delivers continuous penetration testing for enterprises, combining ongoing offensive security assessments with real-time risk monitoring and remediation. It uses a hybrid model that blends human security experts with automated systems to run adversary simulations and attack surface management on an ongoing basis, all billed via a subscription. The product works by continuously testing an organization’s defenses, monitoring for new risks in real time, and providing guided remediation to reduce exposure, rather than performing one-off tests. This approach sets the company apart from competitors by offering year-round, persistent testing and monitoring instead of periodic checks, ensuring vulnerabilities are addressed proactively. The goal is to help enterprises maintain a strong, resilient cybersecurity posture by continuously identifying and mitigating threats before they can be exploited.

About Sprocket Security

Simplify's Rating
Why Sprocket Security is rated
B-
Rated B on Competitive Edge
Rated B on Growth Potential
Rated C on Differentiation

Industries

Enterprise Software

Cybersecurity

Company Size

11-50

Company Stage

Series A

Total Funding

$8M

Headquarters

Madison, Wisconsin

Founded

2017

Get referred to Sprocket Security

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Link launched August 17, 2026, expanding sales into web apps and APIs.
  • Apex launched July 1, 2026, and SourceForge named Sprocket a Top Performer.
  • Eric Sheridan became CTO on January 20, 2026, strengthening product execution.

What critics are saying

  • Link requires customer credentials, limiting rollout to scoped applications and slowing adoption.
  • Pentera, Horizon3.ai, NetSPI, and Synack compress pricing across 2026 security validation.
  • If agents commoditize, Sprocket loses differentiation and becomes a marginal services shop.

What makes Sprocket Security unique

  • Sprocket's Apex and Link agents cover unauthenticated and authenticated attacks in 2026.
  • Human testers validate findings, preserving expert-led remediation inside one platform.
  • Attack-surface context from 2018 onward powers regression tracking and chained exploit paths.

Help us improve and share your feedback! Did you find this helpful?

Funding

Total Funding

$8M

Below

Industry Average

Funded Over

1 Rounds

Series A funding typically happens when a startup has a product and some customers, and now needs funding to scale. This money is usually used to grow the team, expand marketing, and improve the product. Venture capital firms are frequently the main investors here.
Series A Funding Comparison
Below Average

Industry standards

$15M
$8M
Sprocket Security
$8.2M
Discord
$15M
Canva
$30M
Kalshi

Benefits

Unlimited Paid Time Off

401(k) Company Match

401(k) Retirement Plan

Health Insurance

Dental Insurance

Vision Insurance

Flexible Work Hours

Professional Development Budget

Conference Attendance Budget

Growth & Insights and Company News

Headcount

6 month growth

4%

1 year growth

0%

2 year growth

4%
PR Newswire
Aug 17th, 2026
Sprocket Security launches Link, an AI agent for authenticated penetration testing of web apps and APIs

Sprocket Security has launched Link, an AI penetration testing agent designed for authenticated web applications and APIs. Link represents the company's second context-aware AI agent, following Apex, which tests unauthenticated external attack surfaces. The agent can simultaneously hold multiple credentialed roles to identify unauthorised data access. According to founder and CEO Casey Cammilleri, Link works alongside Apex to provide complete coverage of web applications and APIs under expert supervision. Link is now available to Sprocket Security customers who have added web application testing to their scope and provided credentials. The Madison, Wisconsin-based company provides a technology-powered continuous penetration testing platform that monitors environments and triggers hybrid testing based on attack surfaces and emerging threats.

PR Newswire
Jun 30th, 2026
Sprocket Security launches Apex, an AI penetration testing agent for continuous vulnerability discovery

Sprocket Security has launched Apex, an AI penetration testing agent for continuous web application security testing. The agent autonomously discovers exploitable vulnerabilities at machine speed whilst operating under human supervision. Apex leverages Sprocket's attack surface management platform, built since 2018, which contains customer assets, tech stacks, testing history and previous findings. The agent tests against OWASP Top 10 categories and chains vulnerabilities into attack paths demonstrating real exploitable impact. Human testers validate all findings before publication. The system operates under a zero-data-retention policy within Sprocket's SOC 2 environment and uses a model-agnostic harness. Each test builds on previous runs and automatically flags regressions. Additional AI agents are planned for release throughout 2026.

PR Newswire
Jun 2nd, 2026
Sprocket Security wins 2026 Fortress Cybersecurity award in Continuous Exposure Management.

Sprocket Security wins 2026 Fortress Cybersecurity award in Continuous Exposure Management. Jun 02, 2026, 14:52 ET MADISON, Wis., June 2, 2026 /PRNewswire/ - Sprocket Security today announced it has been named a winner in the 2026 Fortress Cybersecurity Awards, for Continuous Exposure Management. Presented by the Business Intelligence Group, the award recognizes the organizations, products, and people applying cybersecurity in ways that deliver real, measurable protection. "The threats are real, and so is the defense. 2026 is about getting ahead of the attacker - execution, accountability, and measurable resilience," said Russ Fordyce, Chief Recognition Officer, Business Intelligence Group. "Sprocket Security stood out because its work in continuous exposure management reflects where the market is headed: practical cybersecurity that solves real problems, earns trust, and protects the people and assets that depend on it. This recognition highlights a team that is not just keeping pace with the threat landscape but helping define what meaningful defense looks like." "We are honored to be recognized in the 2026 Fortress Cybersecurity Awards for our work in continuous exposure management," said Casey Cammilleri, CEO of Sprocket Security. "This award reflects the talent of our team, the trust of our customers, and our commitment to building security solutions that create real outcomes, not just headlines." The Fortress Cybersecurity Awards celebrate the people and organizations leading the next phase of digital defense, where progress is judged not by novelty, but by impact. Winners are selected based on how effectively they are using cybersecurity to reduce risk, protect data and assets, prevent harm, and strengthen the resilience of the organizations and communities they serve. About Sprocket Security Sprocket Security provides an expert-driven offensive security platform that proactively identifies, verifies, and simulates threats, ensuring its clients' digital environments remain secure. Unlike legacy penetration testing, Sprocket's continuous approach delivers real-time insights and adaptive security measures, giving businesses the confidence to move quickly while reliably preventing potential threats. About the Fortress Cybersecurity Awards The Fortress Cybersecurity Awards recognize the world's leading companies, products, and people working to keep data and digital assets safe. As cyber threats grow more sophisticated and more frequent, the program identifies and honors the organizations and individuals building the defenses that protect businesses, governments, and the people who depend on them. Judged by a panel of experienced security and business professionals who provide transparent feedback and detailed scoring, the awards celebrate measurable progress in digital defense. SOURCE Sprocket Security

TechStartups
Jan 20th, 2026
Sprocket Security Appoints Eric Sheridan as Chief Technology Officer

Sprocket Security appoints Eric Sheridan as Chief Technology Officer. Veteran cybersecurity leader brings decades of experience and patented innovation to advance the next generation of proactive security solutions. Sprocket Security today announced the appointment of Eric Sheridan as Chief Technology Officer (CTO). In this role, Sheridan will lead the company's technology vision and execution, accelerating innovation and advancing Sprocket Security's mission to deliver proactive cybersecurity solutions that help organizations stay ahead of evolving threats. Sheridan brings decades of experience in cybersecurity and software engineering, with a career dedicated to building forward-looking security platforms designed to anticipate and prevent attacks before they occur. He holds numerous patents, reflecting a long-standing record of technical innovation and a proven ability to translate advanced research into practical, high-impact security solutions. "Eric's leadership and technical depth are exactly what we need as we continue to scale and innovate," said Casey Cammilleri, CEO at Sprocket Security. "His experience building proactive security technologies and his ability to consistently deliver industry-defining solutions will be instrumental as we push beyond today's standards and outpace the cybersecurity industry." As CTO, Sheridan will oversee Sprocket Security's engineering and product strategy, guiding the development of next-generation proactive cybersecurity capabilities. His focus will include advancing the company's core platform, fostering innovation across teams, and ensuring Sprocket Security remains at the forefront of emerging security challenges. "I'm excited to join Sprocket Security at such a pivotal time," said Sheridan. "The opportunity to build the next wave of proactive cybersecurity solutions that fundamentally change how organizations defend themselves - is incredibly compelling. I look forward to helping the team continue to innovate and lead the industry forward." With Sheridan's appointment as CTO, Sprocket Security signals its continued focus on developing security technology aimed at addressing evolving cybersecurity threats. About Sprocket Security Sprocket Security provides an expert-driven offensive security platform that proactively identifies, verifies, and simulates threats, ensuring its clients' digital environments remain secure. Unlike legacy penetration testing, Sprocket's continuous approach delivers real-time insights and adaptive security measures, giving businesses the confidence to move quickly while reliably preventing potential threats.

ACCESSWIRE
Sep 5th, 2024
Sprocket Security Launches 'Ahead of the Breach' Podcast

Sprocket Security launches 'Ahead of the Breach' podcast.

Recently Posted Jobs

Sign up to get curated job recommendations

Sprocket Security is Hiring for 8 Jobs on Simplify!

Find jobs on Simplify and start your career today

Don't see your dream role? Check out thousands of other roles on Simplify. Browse all jobs →