Skip to content

Mallory

Threat & Vulnerability Management

AI-native threat intelligence platform that contextualizes threat data against an organization's own attack surface.

Visit Website ↗ + Add to Compare Claim This Company
50/100Incremental Innovator

Overview

Mallory launched in April 2026 as a SaaS platform that monitors thousands of threat sources and maps them to a customer’s attack surface for hunting, detection and exposure management. It supports MCP, an API and Claude Code integration.

It is led by CEO Jonathan Cran, a former Google and Mandiant executive, and has announced an undisclosed seed round led by Decibel with Live Oak Venture Partners. A Black Hat USA 2026 Startup Spotlight finalist listing was found on Black Hat’s page.

Innovation Matrix Assessment

Innovation Velocity 6/10

New platform with agent-oriented interfaces launched in April 2026.

Operational Value 6/10

Prioritizes intel by relevance to the customer's exposure, which can reduce analyst triage.

Market Momentum 3/10

Seed round amount undisclosed; one customer CISO quoted in launch coverage.

Category Disruption 5/10

Contextual, agent-consumable intel is a shift, but threat intel is a crowded space.

Real-World Efficacy 3/10

Too new for independent evidence; only a quote in launch coverage.

Enduring Relevance 7/10

Relevance-filtered intel for AI-driven SOCs should keep its value.

Why CISOs Should Care

Cuts intel noise by tying external threats to the organization's own assets.

What Makes It Different

Built for machine and agent consumption through MCP and API from the start.

The Matrix Verdict

50/100 — INCREMENTAL INNOVATOR

Mallory is an Incremental Innovator at an early stage. Concept is sound; traction and efficacy remain unproven.

Editorial Note: Claims vs. Verified Findings

Launch claims are from the vendor press release. HQ is taken from the release dateline. Black Hat finalist status appears on Black Hat's page.

Sources

Alternatives to Mallory

80 /100

Synack Inc

A penetration-testing-as-a-service platform pairing a vetted researcher community with AI-driven attack surface discovery for continuous security validation.

Meaningful Innovator Threat & Vulnerability Management
80 /100

Horizon3.ai

Autonomous penetration testing company whose NodeZero platform self-attacks networks without persistent agents, aiming to replace annual manual pentests…

Meaningful Innovator Threat & Vulnerability Management
78 /100

Unknown Cyber Inc.

CISO Reviewed

Malware genomics platform using automated deep static analysis and code-lineage comparison to identify unseen malware, variants, and supply-chain…

Meaningful Innovator Threat & Vulnerability Management
77 /100

Cogent Security

Agentic AI platform that autonomously triages, investigates, and remediates vulnerabilities as a force multiplier for security teams.

Meaningful Innovator Threat & Vulnerability Management
77 /100

Airlock Digital

Application allowlisting (deny-by-default) platform that blocks unapproved executables, scripts, and processes to prevent ransomware and malware execution.

Meaningful Innovator Threat & Vulnerability Management
75 /100

Pentera

Automated security validation platform that safely runs real attack techniques against production environments to prove which exposures are…

Meaningful Innovator Threat & Vulnerability Management