Strike
Latin America-founded continuous penetration testing platform combining AI-driven attack simulation with a network of ethical hackers.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Strike (formerly Strike Security) was founded in 2021 by Santiago Rosenblatt, a security researcher who began hacking as a child and later led security at the Latin American delivery platform PedidosYa. The company runs a continuous, ‘augmented pentesting’ platform — branded Strike360 — that tests web apps, APIs, mobile apps, cloud infrastructure, and internal networks on an ongoing basis rather than through the traditional one-time annual pentest engagement, combining automated AI-driven attack simulation with human ethical hackers for validation and remediation guidance.
Strike raised a $5.4 million seed round led by Greyhound Capital aimed at bringing perpetual pentesting to small and mid-sized businesses, followed by a $13.5 million Series A in March 2025 to expand its AI-powered continuous testing and automated retesting capabilities into the U.S. and Brazilian markets.
The continuous-pentesting-as-a-service model Strike operates in has become increasingly common as point-in-time annual pentests are seen as insufficient against continuously shipping software; Strike’s differentiation rests on execution and AI-assisted attack simulation speed rather than a wholly new testing category.
Innovation Matrix Assessment
Two funding rounds and expansion from a small-business pentesting tool into an AI-powered continuous-testing platform spanning web, API, mobile, and cloud surfaces in under four years shows solid execution pace.
Continuous testing with automated retesting gives security teams ongoing visibility into newly introduced vulnerabilities as code ships, rather than a stale annual snapshot.
A $13.5 million Series A with U.S. and Brazil market expansion is real, independently reported growth, though still modest next to established pentesting-as-a-service incumbents.
Continuous, AI-assisted pentesting is a genuine improvement over point-in-time annual testing, but the model itself (crowdsourced or platform-based continuous testing) is now a well-established category with multiple competitors.
The company's AI-driven attack simulation and automated retesting claims are plausible given its funding and growth, though independent, named-incident evidence of vulnerabilities caught that caused real breaches elsewhere is not publicly documented.
As software release cycles keep shortening, continuous rather than point-in-time testing will likely remain the more relevant model, keeping this space durable.
Why CISOs Should Care
Replaces the stale, once-a-year pentest snapshot with continuous, AI-assisted testing and automated retesting, giving security teams ongoing assurance as applications and infrastructure change.
What Makes It Different
Pairs AI-driven attack simulation with a human ethical-hacker network under one platform (Strike360), rather than offering either a pure automated scanner or a pure bug-bounty marketplace.
The Matrix Verdict
60/100 — INCREMENTAL INNOVATOR
An Incremental Innovator: Strike executes well on a now-established continuous-pentesting model with real funding and market expansion behind it, but the underlying category is increasingly competitive rather than novel.
Editorial Note: Claims vs. Verified Findings
Funding rounds and market-expansion plans are independently reported by SiliconANGLE and SecurityWeek; specific claims about AI attack-simulation effectiveness are the company's own.
Sources
Alternatives to Strike
Unknown Cyber Inc.
CISO ReviewedMalware genomics platform using automated deep static analysis and code-lineage comparison to identify unseen malware, variants, and supply-chain…
Synack Inc
A penetration-testing-as-a-service platform pairing a vetted researcher community with AI-driven attack surface discovery for continuous security validation.
Horizon3.ai
Autonomous penetration testing company whose NodeZero platform self-attacks networks without persistent agents, aiming to replace annual manual pentests…
Airlock Digital
Application allowlisting (deny-by-default) platform that blocks unapproved executables, scripts, and processes to prevent ransomware and malware execution.
Cogent Security
Agentic AI platform that autonomously triages, investigates, and remediates vulnerabilities as a force multiplier for security teams.
Strider
A DataTribe-backed DC firm tracking nation-state talent-recruitment programs, IP theft, and supply-chain infiltration — a strategic-risk category conventional…