Bleach Cyber

Bleach Cyber builds a continuous scanning and remediation platform aimed squarely at startups and small businesses that have no dedicated security staff. The product connects into a company’s existing stack — cloud accounts, SaaS tools, email, endpoints — and surfaces vulnerabilities and misconfigurations through automated scans, then walks the user through fixing them via guided, interactive remediation steps rather than handing back a raw findings report that assumes security expertise the customer doesn’t have. A companion Chrome extension extends that guidance directly into the browser for Bleach platform users.

Founded in 2022 by CEO Craig Goodwin — a former CISO at Fujitsu, Monster Worldwide, and CDK Global, and previously a co-founder of cybersecurity-as-a-service company Cyvatar — and Steve Daniels, Bleach Cyber is based in San Francisco. The company went through the Techstars accelerator in 2023 and closed a $2 million pre-seed round in May 2024 from investors including Everywhere VC, BlueWing Ventures, and Concept Ventures. By the time of that raise, the company reported more than 500 businesses using its platform.

Goodwin’s operating-CISO background and prior founding experience at Cyvatar are real credibility signals for a company this young, and the attack-surface-plus-remediation model addresses a genuine gap for resource-constrained SMBs. That said, Bleach Cyber is a pre-seed-stage company with a small team, no independent security testing or named enterprise case studies publicly available, and a still-unproven ability to detect and remediate at the depth a dedicated vulnerability management platform can; its "1000+ Protected Clients" and "99.9% Uptime" claims are self-reported marketing figures rather than audited statistics.