Brinqa buys PlexTrac to add penetration testing validation to exposure management

Exposure management firm Brinqa Inc. acquired offensive security validation and reporting platform company PlexTrac Inc., adding a missing step to its platform. While Brinqa collects findings from various sources and ranks exposures, verifying remediation was handled separately. PlexTrac provides tools for penetration testers to run checks and report results, and now Brinqa can manage continuous threat exposure management from discovery to confirmed remediation.

The combined companies now serve over 3,000 customers across 57 countries, including more than 25% of the Fortune 500, making Brinqa the largest standalone vendor in unified exposure management. Gartner recognized both companies in its inaugural Magic Quadrant for Exposure Assessment Platforms. Brinqa's Cyber Risk Graph now incorporates validated exploits and remediations from PlexTrac, with AI agents drawing insights from the data.

Brinqa CEO Dan Pagel highlighted PlexTrac's contribution of real offensive security depth, enhancing the evidence customers can present to stakeholders. PlexTrac's founder and chief customer brand officer, Dan DeCloss, joins Brinqa's leadership team and board of directors, overseeing the offensive security practice. The combined offerings will continue as standalone products, with potential future integration into Brinqa's platform.

Both companies share Insight Partners as an investor, with Brinqa raised $110 million in June 2021 and PlexTrac's $70 million Series B in February 2022, also led by Insight. Brinqa, founded in 2009, is headquartered in Austin, Texas, while PlexTrac operates from Boise, Idaho. Notable customers include Nestlé SA, SAP SE, Expedia Group Inc., and Deloitte.