watchTowr
watchTowr provides an AI-driven Preemptive Exposure Management platform that continuously discovers external attack surface assets, validates their exploitability through automated red teaming, and autonomously deploys edge mitigations for Fortune 500 enterprises and critical infrastructure operators globally.
- Company typePrivate
- Founded2019
- HeadquartersSingapore, Singapore
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What watchTowr does
watchTowr is a Singapore-headquartered cybersecurity company that provides a Preemptive Exposure Management (PEM) platform for enterprises and critical infrastructure operators. The platform continuously discovers external attack surface assets (including shadow IT, forgotten cloud infrastructure, and subsidiaries), validates their exploitability through an automated red teaming engine that simulates real-world MITRE ATT&CK Initial Access tactics, and autonomously deploys network-edge mitigation rules without requiring agent installation or vendor patches. The platform is differentiated by the watchTowr Intel layer, which combines a global Attacker Eye honeypot sensor network capturing real-world exploitation telemetry with the Instinct AI prioritization engine, enabling Rapid Reaction identification of client exposure to emerging vulnerabilities within minutes of disclosure.
The company monetizes through enterprise SaaS subscriptions sold primarily via direct enterprise sales and a channel partner program covering MSSPs, MDR providers, systems integrators, and cyber insurance firms. Pricing is not publicly disclosed and follows a Request-a-Demo sales motion typical of Fortune 500 enterprise software. Target verticals span banking and financial services, technology, government, telecoms, healthcare, transport and logistics, e-commerce, cryptocurrency, mining, and gaming. The company has offices in Singapore, New York, and London, employs 51-100 people, and has raised approximately $29.3 million in venture funding across seed, pre-Series A, and Series A rounds. Founder and CEO Benjamin Harris leads the company alongside a commercial leadership team and the watchTowr Labs offensive research group.
Operationally, watchTowr has achieved $9.7M in annual recurring revenue as of 2025 and has secured recognition across four Gartner research notes in 2025-2026 covering preemptive cybersecurity, exposure management, and adversarial exposure validation, alongside a Forbes Asia 100 To Watch 2025 listing. The watchTowr Labs research team publishes original vulnerability research and zero-day discoveries, which both establishes credibility with enterprise buyers and feeds the platform's automated testing engine. The company's go-to-market combines direct Fortune 500 enterprise sales with strategic alliances such as the expanded PwC Hong Kong partnership announced in February 2026.
watchTowr firmographics
Firmographics- Name
- watchTowr
- Legal name
- WatchTowr Pte. Ltd.
- Website
- https://watchtowr.com
- Company type
- Private
- Founded year
- 2019
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- watchTowr provides an AI-driven Preemptive Exposure Management platform that continuously discovers external attack surface assets, validates their exploitability through automated red teaming, and autonomously deploys edge mitigations for Fortune 500 enterprises and critical infrastructure operators globally.
- Ownership category
- akta.pro rank
watchTowr industry classification
Industry- Product category
- Preemptive Exposure Management
- NAICS
- Security Systems Services (except Locksmiths) (561621), Security Systems Services (56162)
- SIC
- Services-Testing Laboratories (8734)
- akta.pro primary industry
- Attack Surface Management (EASM/CAASM) (HDADAHAC)
- akta.pro secondary industries
- Exposure Analytics & Risk-Based Prioritization (RBVM) (HDADAHAF), Vulnerability Intelligence & Exploit Prediction (HDADAHAI), Third-Party & Supply Chain Exposure Monitoring (HDADAHAJ)
Keywords
Where watchTowr is headquartered
LocationHeadquarters
- HQ city
- Singapore
- HQ country
- Singapore
- HQ region
- Asia
Offices3 records
Markets served
watchTowr business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Preemptive Exposure Management SaaS: Cloud-based subscription platform providing continuous attack surface discovery, automated red teaming, rapid reaction to emerging threats, and autonomous mitigation. Operates as a continuous service rather than point-in-time assessment, with pricing likely based on organization size, attack surface scope, and feature tier.
Go-to-market motion2 records
Distribution channels5 records
Marketing channels7 records
watchTowr product offering
Product offeringCore offering
watchTowr provides an AI-driven Preemptive Exposure Management (PEM) platform that continuously discovers an organization's external attack surface, validates real exploitability through automated red teaming against MITRE ATT&CK Initial Access techniques, identifies exposure to emerging vulnerabilities within minutes of disclosure, and pushes autonomous mitigation rules to the network edge. The platform is sold as a cloud-based SaaS subscription to enterprise security teams.
Product overview
watchTowr is a cybersecurity company offering a unified Preemptive Exposure Management (PEM) platform designed to help organizations identify, validate, and mitigate external attack surface exposures at AI-driven speed. The watchTowr Platform serves as the central product, integrating multiple specialized modules: Adversary Sight provides continuous attack surface visibility and discovery; the Automated Red Teaming Engine delivers continuous security testing across MITRE ATT&CK Initial Access vectors; Rapid Reaction enables AI-driven identification of exposure to emerging threats within minutes; Active Defense autonomously pushes mitigation rules to the network edge; and watchTowr Intel provides proactive threat intelligence through Attacker Eye (global honeypot network), Instinct (vulnerability prioritization engine), Adversary Intel, and Vulnerability Intel. watchTowr Labs serves as the internal offensive security research team powering the platform's capabilities. The company targets Fortune 500 companies and critical infrastructure providers across banking, technology, insurance, telecoms, government, transport, crypto, fintech, healthcare, ecommerce, mining, and gaming sectors. watchTowr positions itself as operating at AI-driven attack timelines, distinguishing itself from traditional vulnerability management and static EASM tools by focusing on validated exploitability and autonomous response rather than theoretical risk scoring.
Differentiator
Problem solved
Functional benefit
Products and services
- watchTowr Platform The central AI-driven Preemptive Exposure Management platform that unifies continuous attack surface discovery, vulnerability validation, rapid reaction to emerging threats, and autonomous mitigation into a single SaaS offering trusted by Fortune 500 companies and critical infrastructure providers.
- M&A Cyber Risk Assessment
Quantifiable outcome
- Identify client exposure to emerging vulnerabilities within 2 hours on average, well inside the 4-hour window in which disclosed vulnerabilities are typically weaponized.
- +4 more outcomes
Companies that use watchTowr
Customer profileSegments10 records
Ideal customer profiles1 record
watchTowr technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability8 records
Feature9 records
watchTowr partnerships and signals
Strategic signalPartnerships
Seven partnerships are on record, tiered major, core and minor.
- PwC Hong KongmajorPwC Hong Kong and watchTowr expanded their partnership in February 2026 to help organizations move from reactive monitoring to preemptive resilience. PwC integrates watchTowr's platform into their cybersecurity consulting services for enterprise clients.
- Systems IntegratorscoreGlobal systems integrators partner with watchTowr to widen their existing security portfolio with preemptive exposure management capabilities. Partners receive deal registration, sales enablement, and pre-sales support.
- Managed Security Services Providers (MSSPs)coreMSSP program provides a flexible service-led offering that partners can leverage based on their expertise to continuously and proactively secure their end-user base. Partners access the watchTowr Platform to deliver managed security services.
- Managed Detection and Response (MDR) ProvidersmajorMDR providers integrate watchTowr's preemptive exposure management capabilities into their detection and response offerings to enhance client protection against emerging threats.
- Cyber Insurance ProvidersmajorInsurance providers and cyber insurance brokers partner with watchTowr to enable rapid response to cyber attacks. watchTowr's rapid reaction capabilities demonstrably prevent breaches, providing measurable reductions in insurance claims.
- Technology DistributorsminorTechnology distributors help expand watchTowr's market reach by making the platform available through distribution channels.
- Value-Added Resellers (VARs)majorValue-added resellers leverage watchTowr's preemptive exposure management to enhance their existing security portfolio and gain a competitive edge in serving enterprise clients.
Scale indicators7 records
Recent moves6 records
Expansion highlights7 records
watchTowr competitors and assessment
Company assessmentBroad incumbents
- CrowdStrike: Falcon platform incumbent with CrowdStrike Falcon Surface (EASM) and Falcon Adversary Emulation (BAS). Directly comparable on attack surface management and continuous validation, but as part of a much broader endpoint and cloud security portfolio serving large enterprise customers.
- Palo Alto Networks (Cortex Xpanse): Cortex Xpanse is a leading EASM platform acquired by Palo Alto Networks. Direct overlap on external attack surface discovery and continuous exposure validation, delivered as part of Palo Alto's broader security operations platform.
- Tenable: Tenable Nessus and Tenable One platform cover vulnerability management and attack surface management. Comparable on continuous vulnerability validation and exposure prioritization, with a much larger installed base in enterprise vulnerability management.
- Rapid7: InsightVM and Metasploit Pro competitor offering continuous vulnerability management and offensive security tooling. Comparable on vulnerability validation and attack-surface-aware testing, with broader SIEM/SOAR portfolio.
- Qualys: Qualys VMDR and TruRisk platform cover vulnerability management, EASM, and patch prioritization. Comparable on continuous exposure validation and enterprise-scale vulnerability management, with a long-standing enterprise customer base.
- Mandiant (Google Cloud): Mandiant Advantage provides threat intelligence and validation capabilities integrated with Google Cloud's broader security portfolio. Comparable on threat intelligence, red teaming, and exposure validation, with much broader incident response and consulting scale.
Direct peers
- SafeBreach: Breach and attack simulation platform that continuously validates security controls against real-world attack techniques. Closely comparable to watchTowr's automated red teaming and continuous security testing capabilities, with similar enterprise go-to-market.
- Pentera: Automated security validation platform that emulates attacker techniques to validate exposure across enterprise environments. Direct peer on automated red teaming and continuous security validation, with comparable enterprise sales motion.
- Cymulate: Continuous security validation platform covering BAS, exposure management, and threat intelligence. Closely comparable to watchTowr's automated red teaming and rapid reaction capabilities, with similar mid-market and enterprise positioning.
Emerging players
- Bishop Fox: Offensive security firm offering continuous attack surface monitoring and red team services, including Cosmos EASM. Adjacent on attack surface discovery and offensive research capabilities, with a more services-led model.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks7 records
Key highlights7 records
Customer concentration
watchTowr social profiles
Digital presencewatchTowr compliance and trust
Trust signalCompliance1 record
watchTowr financial estimates
Financial estimateRevenue estimate
Valuation estimate
watchTowr leadership team
Management profileNumber of profiles
Profiles4 records
watchTowr funding detail
Funding detailFunding overview
Funding rounds3 records
Investors5 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
watchTowr M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about watchTowr
What does watchTowr do?
watchTowr provides an AI-driven Preemptive Exposure Management (PEM) platform that continuously discovers an organization's external attack surface, validates real exploitability through automated red teaming against MITRE ATT&CK Initial Access techniques, identifies exposure to emerging vulnerabilities within minutes of disclosure, and pushes autonomous mitigation rules to the network edge. The platform is sold as a cloud-based SaaS subscription to enterprise security teams.
Is watchTowr a public or private company?
watchTowr is a private company. It is classified as venture growth investor backed and is currently operating.
When was watchTowr founded?
watchTowr was founded in 2019. It employs 51 to 100 people.
Where is watchTowr based?
watchTowr is headquartered in Singapore, Singapore, in the Asia region.
How does watchTowr make money?
One revenue line is on record: preemptive Exposure Management SaaS.
Who are watchTowr's main competitors?
Broad incumbents on record are CrowdStrike, Palo Alto Networks (Cortex Xpanse), Tenable, Rapid7, Qualys and Mandiant (Google Cloud). Direct peers are SafeBreach, Pentera and Cymulate. Bishop Fox is listed as an emerging player.
Does watchTowr have an API?
Yes. The watchTowr Platform offers a Client API that allows customers to interrogate attack surface data and integrate with existing security processes and technology. The API supports custom use-cases and enables seamless integration with existing cyber security workflows. Developer documentation is at client.watchtowr.io.
What industry is watchTowr in?
watchTowr's product category is Preemptive Exposure Management. Its primary akta.pro industry code is HDADAHAC, Attack Surface Management (EASM/CAASM), with a secondary code of HDADAHAF, Exposure Analytics & Risk-Based Prioritization (RBVM). Its NAICS code is 561621 and its SIC code is 8734.