ULTRA RED
Tel Aviv-founded continuous threat exposure management vendor that discovers and validates exploitable weaknesses across an organisation's external attack surface.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
ULTRA RED is an Israeli cybersecurity company, led by founder and CEO Eran Shtauber, that sells a continuous threat exposure management (CTEM) platform focused on the external attack surface. The platform maps internet-facing assets, scans them for vulnerabilities and misconfigurations, and then attempts to validate whether each finding is actually exploitable before reporting it, attaching evidence to every result so security teams can prioritise remediation.
Around the core validation platform the company has added modules for deception-driven attacker intelligence (H1VE), remediation workflow (Crimson) and an AI-assisted investigative scanner (ULTRA VIOLET). Go-to-market has leaned heavily on channel partners, particularly in Japan, where Macnica, Toyo Corporation and Dentsu Kokusai Information Services resell the product, and in the US, where consultancy HALOCK integrated it into its managed EASM service in 2026.
Its differentiator relative to discovery-only EASM tools is the emphasis on validated, evidence-backed findings rather than raw vulnerability lists, which positions it between external attack surface management and automated penetration testing. The company remains small, with publicly listed headcounts in the 20 to 50 range and an undisclosed 2024 funding round involving the Yozma Group.
Innovation Matrix Assessment
The product has expanded from EASM scanning into a validation-first CTEM suite with deception (H1VE), remediation (Crimson) and AI scanning modules over roughly three years, a steady but not exceptional cadence.
Validated, evidence-backed external findings reduce triage load for teams and service providers, as HALOCK's adoption for a continuous EASM offering illustrates, though scope is limited to the external perimeter.
Real channel traction in Japan (Macnica, Toyo Corporation, Dentsu Kokusai) and a US MSSP partner, but funding is undisclosed, headcount is small and growth figures are self-reported.
Exploitability validation for external exposures is a meaningful refinement of EASM, but it competes in a crowded field of EASM, CTEM and automated pentest vendors pursuing the same idea.
Named customer testimony (Sysmex CSIRT) and partner adoption exist, but the low false-positive and zero-day discovery figures are vendor claims with no independent testing found.
Continuous exposure management and validation are an established Gartner-framed priority likely to persist, though the category may consolidate into larger platforms.
Why CISOs Should Care
Useful for CISOs who want a continuously updated, evidence-backed list of externally exploitable exposures rather than raw scanner output, particularly where a reseller or MSSP delivers it.
What Makes It Different
It validates exploitability of external findings before reporting them and pairs this with deception-based attacker intelligence, rather than offering discovery alone.
The Matrix Verdict
57/100 — INCREMENTAL INNOVATOR
Scores 34/60 (57/100), placing ULTRA RED in the Incremental tier. It is a credible, partner-driven CTEM/EASM vendor with real adoption in Japan, but small scale, undisclosed funding and reliance on self-reported metrics keep it from a higher tier.
Editorial Note: Claims vs. Verified Findings
Triple growth, 100% retention, 20 zero-days and sub-1% false positives are company press-release or website claims; independently verifiable evidence is limited to named distributors (Macnica, Toyo, Dentsu Kokusai), the HALOCK partnership and industry awards.
Sources
- ULTRA RED website
- PR Newswire: ULTRA RED reports triple growth in 2024
- PC Watch / Newscast (Macnica distribution, company profile)
- Business Network: Toyo Corporation begins ULTRA RED sales
- PR Newswire: ULTRA RED and Dentsu Kokusai partnership
- Startupim company profile (Yozma Group round, headcount)
- HALOCK adopts continuous threat validation
Alternatives to ULTRA RED
CyCognito
Agentless attack surface management platform that maps organizations' entire external footprint, including subsidiaries and shadow assets, using graph-based…
Armis (a ServiceNow company)
Agentless asset intelligence platform discovering and assessing every connected IT, OT, IoT and medical device, now part of…
CybelAngel
External attack surface management and digital risk protection platform that scans the open, deep, and dark web for…
watchTowr
Singapore-based platform combining external attack surface management with continuous automated red teaming to validate whether exposures are actually…
Zafran Security
New York and Tel Aviv-founded exposure management company that maps attack paths across existing security tools to focus…
Axonius
New York-based CAASM pioneer that aggregates data from hundreds of existing tools to build a unified, agentless asset…