Menaya

Menaya is the current name for GamaSec, an Israeli company founded in 2006 in Herzliya Pituach that originally built a website vulnerability scanner (GamaScan) using what it called “virtual hacker” simulated-attack technology to find SQL injection, cross-site scripting, and malware on customer web properties. Under the Menaya name, the company has repositioned around external attack surface management (EASM): continuously discovering an organization’s internet-facing assets from an attacker’s vantage point, scoring the risk each one presents, and prioritizing remediation with AI-assisted guidance, primarily for small and mid-sized enterprises that lack a dedicated attack-surface-management program.

The rebrand and repositioning track a broader industry shift from point-in-time vulnerability scanning toward continuous, attacker’s-eye-view asset discovery, which has become table stakes as organizations’ external footprints sprawl across cloud services, forgotten subdomains, and shadow IT. Menaya’s roots in nearly two decades of web vulnerability detection give it a longer operating history than many EASM entrants, even though the current product framing is comparatively recent.

Menaya is best suited to SMEs that need external exposure visibility but don’t have the budget or headcount for enterprise-grade EASM platforms like CyCognito or Randori; its long-running heritage in website-specific vulnerability detection is a genuine differentiator versus EASM vendors built from scratch on generic asset-discovery techniques.