ThreatSpike Labs

ThreatSpike Labs delivers fully managed cybersecurity as a combined service: ThreatSpike Blue is a managed detection and response offering providing continuous, cross-domain threat hunting across endpoints, network, cloud, and applications, while ThreatSpike Red provides unlimited penetration testing and red-team exercises for a fixed annual cost rather than per-engagement billing. Both run on a software-defined security platform the company built in-house, which it says processes tens of billions of events daily and pushes platform updates on a roughly 24-hour cycle.

Founded in London in 2011, ThreatSpike grew for over a decade without taking outside capital — a notable detail in a market where most MDR vendors are venture-funded from an early stage. That changed in 2025, when the company raised a $14 million Series A led by Expedition Growth Capital, reportedly serving around 400 customers across roughly 90 countries by that point.

The unlimited, fixed-cost pentesting model paired with always-on MDR is a genuine departure from the hourly-billed, point-in-time engagement model most testing firms use, and the long bootstrapped run before any funding suggests real, revenue-driven traction rather than growth purchased with venture capital. That said, ThreatSpike’s scale and efficacy claims are still primarily self-reported, without independent third-party detection testing to corroborate them.