Viakoo
IoT and cyber-physical systems security platform that discovers and automates remediation of firmware, password, and certificate vulnerabilities on unmanaged devices at scale.
Visit Website ↗ + Add to CompareOverview
Viakoo builds an attack surface management platform focused specifically on Internet of Things and cyber-physical systems (CPS) devices — IP cameras, badge readers, sensors, and other network-connected hardware that traditional IT vulnerability management tools typically miss because they don’t run agents and are often left off asset inventories entirely. The platform automates discovery of these devices and remediation of common exposure points: outdated firmware, default or weak passwords, and expired network certificates, at a scale that would otherwise require manual, device-by-device intervention.
Founded in 2013 by Bud Broomhead and Manqing Liu and headquartered in Mountain View, California, Viakoo raised a $10 million Series A in 2021 led by Shasta Ventures, with participation from existing investor Stanley Black & Decker, bringing total disclosed funding to roughly $11.5 million. That strategic investment turned into a real commercial relationship: Stanley Security has embedded Viakoo’s automation into its IntelAssure IoT managed services offering, giving the company a concrete, named customer deployment beyond its own marketing claims.
Viakoo occupies a genuinely underserved niche — physical security and IoT device fleets have repeatedly been the entry point for large-scale botnets and network compromises, yet most enterprise vulnerability management programs are built around agent-capable IT endpoints and don’t reach cameras, sensors, or access-control hardware. Viakoo’s bet is that this device class needs its own dedicated remediation workflow rather than being bolted onto general IT vulnerability tooling.
Innovation Matrix Assessment
Continues to expand platform scope and partner integrations (announced at Black Hat 2026), a steady incremental pace typical of a small, focused vendor rather than evidence of breakthrough new capability.
Provides agentless, automated discovery and remediation of firmware, passwords, and certificates across large unmanaged device fleets, a real operational capability, though no independent benchmark of remediation accuracy or scale was found.
Total disclosed funding is modest (~$11.5M, last raised in 2021), but the Stanley Black & Decker investment converting into an actual embedded product relationship (Stanley Security's IntelAssure) is a genuine, if singular, traction signal.
Treats cyber-physical/IoT devices (cameras, sensors, badge readers) as a first-class attack surface category requiring dedicated remediation workflows, a different approach than most attack surface management tools that focus on internet-facing IT assets.
Evidence is limited: beyond the Stanley Security relationship, no independent third-party evaluation, named enterprise case study with outcomes, or benchmark of remediation effectiveness was found.
IoT and camera-based botnets and breaches (e.g., Mirai-style compromises) are a well-documented and growing attack vector, making unmanaged-device attack surface a genuinely relevant, underserved problem for security teams.
Why CISOs Should Care
CISOs need visibility into IoT and cyber-physical devices like cameras, badge readers, and sensors that most vulnerability management tools never reach, and Viakoo automates discovery and remediation specifically for that blind spot.
What Makes It Different
Focuses specifically on cyber-physical systems and unmanaged IoT devices rather than general IT endpoints, automating firmware, password, and certificate remediation for a device class most attack surface tools ignore.
The Matrix Verdict
57/100 — INCREMENTAL INNOVATOR
A credible niche player addressing a genuinely underserved attack surface (IoT/CPS devices) with real strategic-investor validation through Stanley Security's IntelAssure integration, though independent third-party efficacy evidence remains thin.
Editorial Note: Claims vs. Verified Findings
Viakoo's automation scale and remediation-speed claims are vendor-sourced. The Series A funding amount, investor list, and Stanley Security/IntelAssure product relationship are independently reported in trade press (PR Newswire, MSSP Alert).
Sources
Alternatives to Viakoo
CyCognito
Agentless attack surface management platform that maps organizations' entire external footprint, including subsidiaries and shadow assets, using graph-based…
Armis (a ServiceNow company)
Agentless asset intelligence platform discovering and assessing every connected IT, OT, IoT and medical device, now part of…
CybelAngel
External attack surface management and digital risk protection platform that scans the open, deep, and dark web for…
watchTowr
Singapore-based platform combining external attack surface management with continuous automated red teaming to validate whether exposures are actually…
Axonius
New York-based CAASM pioneer that aggregates data from hundreds of existing tools to build a unified, agentless asset…
Doppel
San Francisco AI-native digital risk protection platform that detects and automatically takes down phishing sites, impersonation accounts, and…