AttackIQ Acquires DeepSurface to Bolster its Cybersecurity Offerings and Complete its Adversarial Exposure Validation (AEV) Solutions

AttackIQ Acquires DeepSurface to Bolster its Cybersecurity Offerings and Complete its Adversarial Exposure Validation (AEV) Solutions

Media Contact
Kim Diesel
10Fold for AttackIQ
AttackIQ@10Fold.com

AttackIQ^®, the leading vendor of Adversarial Exposure Validation (AEV) solutions and founding research partner of the MITRE Center for Threat-Informed Defense (CTID), today announced the acquisition of DeepSurface, a security posture management and vulnerability prioritization company.

“This acquisition enables us to rapidly extend our traditional breach and attack simulation (BAS) use case to now include AEV and help organizations programmatically pivot to Cyber Threat Exposure Management (CTEM),” said Brett Galloway, CEO of AttackIQ.

AEV is a cybersecurity framework that continuously emulates real-world cyberattacks to test and validate an organization’s security posture. AEV leverages automated tools to emulate the tactics, techniques, and procedures (TTPs) used by adversaries, allowing organizations to identify and remediate exposures — security controls that aren’t working and critical assets that are exposed to attack by those failed controls.

AttackIQ’s AEV capabilities enhance a customer’s exposure management program by fully integrating and introducing:

Active Threat Monitoring – Enriches exposure findings with real-world threat intelligence, helping teams prioritize risks effectively.
Attack Path Management – Maps adversaries’ attack paths to expose vulnerabilities and high-risk areas before they can be exploited.
Vulnerability Prioritization – Contextualizes vulnerabilities and attack flows within an organization’s unique digital infrastructure, predicting where an attacker could cause the most damage to the business.
Attack Surface Scanning – Continuously discovers and assesses externally exposed assets, giving security teams real-time visibility into potential entry points.
Exposure and Security Control Validation – Automates exposure validation, enabling organizations to measure defensive effectiveness and optimize security investments.
Risk Scoring – Enables an exposure management strategy with advanced risk scoring that proactively identifies, prioritizes, and mitigates vulnerabilities and security control gaps to stay ahead of potential threats.

The AEV platform focuses on three key areas:

Optimize Defensive Posture – Validates security controls against evolving threats, pinpoint gaps, and refine defenses. Seamless integration with dozens of security tools enhances defensive measures, automates purple teaming, and streamlines operations.
Reduce Exposures – Delivers clear, actionable insights into attack surfaces and vulnerabilities, ensuring teams focus on validating and remediating only the most critical risks.
Scale Offensive Testing – Enhances red team operations with automated testing and custom adversary emulations. Integrated attack path analysis reveals and validates adversarial attack flows before they can be exploited, strengthening proactive defense strategies by maximizing testing efficiency.

The AEV platform aligns with the CTEM framework, providing a structured, risk-based approach to continuous security assessment and improvement.

“Security teams are inundated with exposure noise all while the frequency and severity of bad actors is increasing exponentially. The need to generate true risk insights from security data has never been more apparent,” said Carl Wright, Chief Commercial Officer at AttackIQ. “With AEV, we provide organizations with a proactive, intelligence-driven approach to identify and mitigate exposures before they can be exploited. This enables security teams to shift from reactive security to a continuously validated, threat-informed defense strategy.”

DeepSurface’s security posture management platform that contextualizes vulnerabilities and attack paths within customer environments will be integrated with AttackIQ’s market-leading Breach and Attack Simulation Platform, enabling organizations to predict where an attacker could cause the most damage. The combination of these two capabilities will allow customers to easily validate if critical assets are effectively protected by the customer’s cyber defensive infrastructure.

AEV marks a significant step forward in how organizations defend themselves against cyber threats. The future of AEV will focus on increased automation and continuous real-world testing of security controls, aligning closely with the CTEM framework. As organizations adopt CTEM, AEV will play a crucial role in providing ongoing, scalable validation across all attack surfaces, particularly in complex cloud environments. This integration will enable security teams to maintain a proactive stance, continuously validating their defenses as threats evolve in both on-premises and cloud infrastructures.

AttackIQ AEV solution is now a broad and comprehensive portfolio of capabilities that include AttackIQ Enterprise for large-scale organizations, AttackIQ Ready! for medium and large organizations, and AttackIQ Flex for individuals that want to do rapid ad-hoc adversarial testing.

About AttackIQ

AttackIQ^®, the leading provider of Adversarial Exposure Validation (AEV) solutions, is trusted by top organizations worldwide to validate security controls in real time. By emulating real-world adversary behavior, AttackIQ closes the gap between knowing about a vulnerability and understanding its true risk. AttackIQ’s AEV platform aligns with the Continuous Threat Exposure Management (CTEM) framework, enabling a structured, risk-based approach to ongoing security assessment and improvement.

The company is committed to supporting its MSSP partners with a Flexible Preactive Partner Program that provides turn-key solutions, empowering them to elevate client security. AttackIQ is passionate about giving back to the cybersecurity community through its free award-winning AttackIQ Academy and founding research partnership with MITRE Center for Threat-Informed Defense.

For more information visit www.attackiq.com. Follow AttackIQ on Twitter, LinkedIn, and YouTube.