Mitigant

Mitigant (legally Mitigant GmbH, previously operating as Resility GmbH) is a Potsdam, Germany-based cloud security vendor founded by Kennedy Torkura, Nils Karn, and Dr. Muhammad Sukmana, who met as researchers at the Hasso Plattner Institute. The company pioneered applying Security Chaos Engineering to cloud security — running automated, safe adversarial attack emulations (e.g., simulated ransomware scenarios) against AWS, Azure, GCP, and Kubernetes environments to surface exploitable misconfigurations and control gaps before real attackers do, and to produce compliance evidence against standards such as ISO 27001, BSI C5, PCI-DSS, and CIS Benchmarks.

The company has continued operating and shipping product through 2025 and into 2026: it exhibited at GISEC 2025, published a Google for Startups case study describing customers validating cloud security gaps “up to 5x faster” using Gemini-assisted tooling, and has published technical research on emerging risks such as cross-agent privilege escalation in Amazon Bedrock AgentCore (mid-2026). Its positioning has broadened from the original “Security Chaos Engineering” framing toward the industry term “Adversarial Exposure Validation,” reflecting market terminology shifts rather than a pivot away from security. Funding has come from German venture investors including High-Tech Gründerfonds (HTGF), Brandenburg Kapital, and adesso Ventures, plus support from Business Angels Berlin-Brandenburg and Telefónica’s Wayra program; exact amounts are not publicly disclosed in detail.

For CISOs, Mitigant’s core value is proactive validation — testing whether detection and response controls actually catch realistic cloud attack techniques, rather than relying on static posture scans alone. Publicly referenced use cases (e.g., Nooxit, KM.ON) and the Google for Startups partnership are modest but genuine independent signals; broader market traction (named enterprise customers at scale, analyst placements) is not well documented publicly, so this should be read as a durable, active, but still relatively early-stage niche player.