SecStrike

Thai offensive-security startup offering subscription Pentest-as-a-Service, powered by a patent-pending engine that continuously adapts its test scenarios.

Visit Website ↗ + Add to Compare Claim This Company

45/100Emerging / Unranked

Overview

SecStrike (legally Sec Strike Co., Ltd.) is a Bangkok-based offensive security startup, founded in 2024 by CEO Chris Puranasamriddhi and CTO Dr. Varin Khera, that sells Pentest-as-a-Service (PtaaS) on a subscription basis rather than through traditional one-off consulting engagements. The company closed a 45 million baht (roughly $1.25 million) seed round backed by CV Ventures, a cybersecurity- and AI-focused investment firm.

At the center of its pitch is a patent-pending Adaptive Threat Validation Engine (ATVE), which the company describes as learning from emerging attacker behavior and continuously adjusting its test scenarios rather than running a static, predefined playbook. This positions SecStrike’s offering as a standing, evolving assurance service between formal, compliance-driven penetration tests.

Part of the seed funding is earmarked for a new research center at Oxford Science Park in the UK, giving the company a foothold in a major cybersecurity research hub alongside its Thai home base. SecStrike remains a small, regionally-rooted company without disclosed marquee enterprise customers, and independent verification of ATVE’s adaptive claims has not yet surfaced.

Innovation Matrix Assessment

Innovation Velocity 6/10

Developed a patent-pending adaptive testing engine and is setting up an Oxford research outpost within roughly one to two years of founding.

Operational Value 6/10

Converting penetration testing into a continuous subscription service gives security teams more frequent assurance between compliance-driven, point-in-time test cycles.

Market Momentum 3/10

A $1.25 million seed round and a regional Thailand/UK footprint, with no named marquee customers found in available coverage.

Category Disruption 4/10

Subscription-based, continuously-adapting offensive security is a real shift away from one-off consulting engagements, though similar continuous-testing models exist elsewhere in the market.

Real-World Efficacy 3/10

No independent test of the Adaptive Threat Validation Engine's claimed self-evolving behavior was found; claims rest on the company's own materials.

Enduring Relevance 5/10

Continuous validation of defenses against evolving attacker tradecraft is a durable need, though SecStrike's specific scale advantage is unproven.

Why CISOs Should Care

Converts penetration testing from an annual consulting engagement into a standing subscription service, giving CISOs more continuous assurance between compliance-driven test cycles.

What Makes It Different

Centers its offering on the Adaptive Threat Validation Engine, which the company says learns from emerging attacker behavior and adjusts its own test scenarios rather than running a static playbook.

The Matrix Verdict

45/100 — EMERGING / UNRANKED

A small, regionally-focused offensive-security firm with a real patent-pending engine and an Oxford research outpost in the works, but a modest seed round and no named enterprise customers keep it at Emerging/Unranked for now.

Editorial Note: Claims vs. Verified Findings

The adaptive, self-evolving nature of the Adaptive Threat Validation Engine is a company description that has not been independently tested; sources also differ on whether "EchoStrike" is an actual product name.

Sources

Alternatives to SecStrike

80 /100

Synack Inc

A penetration-testing-as-a-service platform pairing a vetted researcher community with AI-driven attack surface discovery for continuous security validation.

Meaningful Innovator Threat & Vulnerability Management

80 /100

Horizon3.ai

Autonomous penetration testing company whose NodeZero platform self-attacks networks without persistent agents, aiming to replace annual manual pentests…

Meaningful Innovator Threat & Vulnerability Management

78 /100

Unknown Cyber Inc.

CISO Reviewed

Malware genomics platform using automated deep static analysis and code-lineage comparison to identify unseen malware, variants, and supply-chain…

Meaningful Innovator Threat & Vulnerability Management

77 /100

Airlock Digital

Application allowlisting (deny-by-default) platform that blocks unapproved executables, scripts, and processes to prevent ransomware and malware execution.

Meaningful Innovator Threat & Vulnerability Management

77 /100

Cogent Security

Agentic AI platform that autonomously triages, investigates, and remediates vulnerabilities as a force multiplier for security teams.

Meaningful Innovator Threat & Vulnerability Management

75 /100

Pentera

Automated security validation platform that safely runs real attack techniques against production environments to prove which exposures are…

Meaningful Innovator Threat & Vulnerability Management