IONIX
EASM vendor, formerly Cyberpion, that maps not just an organization's own internet-facing assets but the chain of third-party dependencies connected to them.
Visit Website ↗Overview
Founded as Cyberpion in 2016, the company rebranded to IONIX in March 2023 to reflect a broader positioning beyond pure asset discovery. It raised a $27 million Series A led by U.S. Venture Partners, with participation from Team8 Capital and Hyperwise Ventures, following what the company reported as 250% ARR growth in 2022.
IONIX’s core technical claim is “Connective Intelligence” — mapping not just an organization’s directly owned internet-facing assets but the mesh of third-party and supply-chain dependencies those assets rely on (APIs, CDNs, SaaS integrations, forgotten vendor connections), on the premise that a large share of real-world exposure originates in that connected chain rather than in directly owned infrastructure. Customers cited publicly include Warner Music Group, E.ON, BlackRock, and Infosys.
Innovation Matrix Assessment
Rapid iteration from Cyberpion's original EASM product to the rebranded Connective Intelligence platform and subsequent moves into agentic exposure response.
Mapping transitive third-party dependencies, not just directly owned assets, targets a specific and often-missed category of real-world exposure.
$27M Series A and reported 250% ARR growth in 2022 are meaningful but vendor-sourced signals; no larger, independently reported funding round was found since.
Modeling the connected supply chain of dependencies behind an asset — rather than treating each asset as an isolated scan target — is a structurally different approach from conventional asset-list scanning.
Named enterprise customers (Warner Music Group, BlackRock, Infosys) suggest real adoption, but efficacy claims and growth figures are primarily vendor-sourced.
Supply-chain and third-party exposure is a growing share of real-world breaches, making the dependency-mapping approach increasingly relevant.
Why CISOs Should Care
A CISO gets visibility into exposure introduced by third-party and supply-chain dependencies connected to their assets, which is where a growing share of real breaches originate and where traditional scanners have the least visibility.
What Makes It Different
Instead of treating each internet-facing asset as an isolated scan target, IONIX models the connected chain of dependencies behind it, aiming to catch exposure that originates upstream in a vendor or integration rather than in owned infrastructure.
The Matrix Verdict
73/100 — MEANINGFUL INNOVATOR
A genuinely differentiated approach to a real and growing exposure category — third-party and supply-chain risk — though its momentum evidence remains largely vendor-reported and would benefit from more independent, third-party validation.
Editorial Note: Claims vs. Verified Findings
Rebrand date, founding year, and Series A details are corroborated by Dark Reading, PRNewswire, and IONIX's own press materials; the 250% ARR growth figure and customer efficacy claims are vendor-sourced and not independently verified.
Sources
Alternatives to IONIX
Axonius
New York-based CAASM pioneer that aggregates data from hundreds of existing tools to build a unified, agentless asset…
watchTowr
Singapore-based platform combining external attack surface management with continuous automated red teaming to validate whether exposures are actually…
CyCognito
Agentless attack surface management platform that maps organizations' entire external footprint, including subsidiaries and shadow assets, using graph-based…
Assetnote (Searchlight Cyber)
Offensive-security-researcher-built EASM platform from Brisbane, profitable and self-funded until its 2025 acquisition by dark-web intelligence firm Searchlight Cyber.
Detectify
Stockholm-based EASM and DAST platform that feeds its scanner with vulnerability research crowdsourced from a network of ethical…
Palo Alto Networks Cortex Xpanse
DARPA-derived internet scanning platform, now Palo Alto Networks' EASM module, that continuously maps and attributes internet-facing assets.