PlexTrac
PlexTrac is a Boise-based cybersecurity SaaS company that provides a unified exposure management and pentest reporting platform to enterprise security teams and MSSPs, centralizing findings, automating AI-assisted report authoring, prioritizing risk contextually, and orchestrating remediation across 50+ security tool integrations.
- Company typePrivate
- Founded2016
- HeadquartersBoise, United States
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What PlexTrac does
PlexTrac is a private cybersecurity software company founded in 2016 and headquartered in Boise, Idaho. The company sells a unified exposure management and pentest reporting platform that centralizes findings from vulnerability scanners, manual penetration tests, bug bounty programs, and threat intelligence feeds into a single data model. It then automates report authoring, applies configurable contextual risk scoring (Priorities module), and orchestrates remediation workflows through integrations with ticketing systems such as Jira and ServiceNow. The platform targets two primary buyer segments: enterprise security teams that need to scale pentesting and demonstrate measurable risk reduction under the CTEM framework, and Managed Security Service Providers (MSSPs) that deliver pentesting services to downstream clients using PlexTrac as their underlying delivery platform.
The product surface is modular and includes a Content Library with 25,000+ pre-written findings writeups for CWEs, CVEs, and CISA KEVs, a Procedures and Runbooks module with 500+ MITRE ATT&CK-mapped procedures, a Scheduler for engagement capacity management, a white-labeled Client Portal, Analytics dashboards, Assessments, and Workflow Automation. Plex AI, launched in 2024, provides generative AI-powered report authoring and runs on Google Cloud's Vertex AI platform; the PlexTrac MCP Server allows customers to bring their own AI models to query live platform data. Deployment options include multitenant cloud SaaS, private hosted instances, and Docker-based on-premises deployment. The platform integrates with over 50 third-party security tools spanning vulnerability scanners (Tenable, Qualys, Rapid7, Burp Suite), endpoint and cloud security (CrowdStrike, Microsoft Defender, Wiz), adversary emulation (Pentera, SCYTHE, NodeZero), and identity/communication (Okta, Slack, Microsoft Teams).
PlexTrac monetizes via tiered annual subscriptions (Essential, Core, Premium) sold to both Service Provider and Enterprise customers, with Plex AI and MCP Server available as add-ons. Pricing is quote-based and not publicly disclosed, and multi-year contracts are supported. Go-to-market combines enterprise field sales (Book a Demo, Request Pricing CTAs) with product-led growth features such as self-serve onboarding, free trials, and an ROI calculator. The company has raised $70 million in a Series B led by Insight Partners in February 2022 and is recognized as a Niche Player in the Gartner Magic Quadrant for Exposure Assessment Platforms (2025), with SOC 2 and ISO 27001 certifications.
PlexTrac firmographics
Firmographics- Name
- PlexTrac
- Legal name
- PlexTrac, Inc.
- Website
- https://plextrac.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- PlexTrac is a Boise-based cybersecurity SaaS company that provides a unified exposure management and pentest reporting platform to enterprise security teams and MSSPs, centralizing findings, automating AI-assisted report authoring, prioritizing risk contextually, and orchestrating remediation across 50+ security tool integrations.
- Ownership category
- akta.pro rank
PlexTrac industry classification
Industry- Product category
- Cybersecurity Exposure Management Software
- NAICS
- Software Publishers (513210)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Data Access Governance & Entitlement Management (DSPM / CIEM-for-Data) (HDADAFAG)
- akta.pro secondary industry
- Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)
Keywords
Where PlexTrac is headquartered
LocationHeadquarters
- HQ city
- Boise
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
PlexTrac business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- Subscription-based SaaS: Tiered subscription model with Essential, Core, and Premium packages for both Service Provider and Enterprise customer types. Plex AI available as an add-on to all packages. Billing cadence includes monthly and annual options with multi-year contracts available.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Essential Package |
| Subscription | Annual | Core Package |
| Subscription | Annual | Premium Package |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels7 records
PlexTrac product offering
Product offeringCore offering
PlexTrac provides a unified exposure management and pentest reporting SaaS platform that consolidates findings from 50+ vulnerability scanners and manual penetration testing into a single environment. The platform automates report authoring using AI (Plex AI on Google Cloud Vertex AI), applies configurable contextual risk scoring to prioritize findings by business impact, and orchestrates remediation workflows through integrations with ticketing and collaboration tools. It is sold via tiered subscriptions (Essential, Core, Premium) to enterprise security teams and managed security service providers (MSSPs).
Product overview
PlexTrac is a unified exposure management platform offered as a modular software-as-a-service product. The core PlexTrac Platform serves as the central hub for pentest reporting and vulnerability management, combining AI-powered report authoring (Plex AI), centralized data management, contextual risk scoring (Priorities module), and automated remediation workflows. The platform is delivered through three pricing tiers—Essential, Core, and Premium—with optional add-ons including Plex AI and MCP Server. Key modules include Scheduler for engagement management, Procedures & Runbooks for repeatable testing, Content Library with 25,000+ pre-built findings writeups, Client Portal for white-labeled customer access, Reports for customizable deliverables, Analytics for dashboards, and Workflow Automation for orchestrating remediation through Jira, ServiceNow, and other ticketing systems. Deployment options include Secure Cloud (multitenant SaaS), Private Hosted (dedicated instance), and Client Hosted (Docker containers for on-premises deployment). The platform supports integration with over 50 third-party security tools and vulnerability scanners.
Differentiator
Problem solved
Functional benefit
Products and services
- PlexTrac Platform Unified exposure management and pentest reporting platform that centralizes security assessment data from scanners and manual testing, automates report generation, prioritizes risk with configurable scoring equations, and orchestrates remediation workflows across the full vulnerability lifecycle from discovery to closure. Sold to enterprise security teams and MSSPs via tiered subscriptions.
- Plex AI AI-powered report authoring assistant that auto-generates finding descriptions, remediation recommendations, and security narratives. Leverages Google Cloud's Vertex AI platform to help red teams produce proactive security reports faster with deeper insights. Sold as an add-on to cloud-based PlexTrac packages.
- PlexTrac MCP Server Model Context Protocol server integration that allows customers to bring their own AI to query live PlexTrac data. Available for cloud-based PlexTrac platform users as an add-on capability.
Quantifiable outcome
- Reduces pentest reporting time by up to 75%
- +2 more outcomes
Companies that use PlexTrac
Customer profileNamed customers19 records
Segments3 records
Ideal customer profiles3 records
PlexTrac technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration52 records
AI capability10 records
Feature7 records
PlexTrac partnerships and signals
Strategic signalPartnerships
Seven partnerships are on record, tiered core.
- ServiceNowcorePlexTrac is a ServiceNow Build Partner offering multiple integrations: Application Vulnerability Response, Integrated Risk Management (GRC), IT Service Management, and Vulnerability Response. Bi-directional sync enables remediation ticket creation and tracking.
- Jira (Atlassian)coreRobust two-way sync with Jira Cloud and Jira Data Center. Custom mapping available at project level with bidirectional, one-way, or one-time syncing. Jira licenses configurable at tenancy or client level.
- TenablecoreIntegration with Tenable Vulnerability Management (Nessus-powered cloud products) and Tenable Security Center (on-premises). Data sync via API with hourly configuration and multiple license mappings.
- QualyscoreIntegration with Qualys Vulnerability Management (VMDR), Web Application Scanning (WAS), Policy Compliance (PC), and Secure Configuration Assessment (SCA).
- CrowdStrikecoreCrowdStrike Falcon Spotlight integration pulls asset and vulnerability data and transforms it for ingestion into PlexTrac.
- MicrosoftcoreIntegrations with Microsoft Defender for Cloud (Virtual Machines), Microsoft Defender for Endpoint, Microsoft Entra ID (SSO/Azure AD), Azure DevOps, and Microsoft Teams notifications.
- Google CloudcoreLeverages Google Cloud's Vertex AI platform for Plex AI capabilities, enabling red teams to produce proactive security reports faster with deeper insights.
Scale indicators4 records
Recent moves6 records
Expansion highlights6 records
PlexTrac competitors and assessment
Company assessmentMarket position
Competitive moat4 records
Key risks5 records
Key highlights7 records
Customer concentration
PlexTrac social profiles
Digital presencePlexTrac compliance and trust
Trust signalCompliance2 records
PlexTrac financial estimates
Financial estimateRevenue estimate
Valuation estimate
PlexTrac leadership team
Management profileNumber of profiles
Profiles3 records
PlexTrac funding detail
Funding detailFunding overview
Funding rounds3 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
PlexTrac M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about PlexTrac
What does PlexTrac do?
PlexTrac provides a unified exposure management and pentest reporting SaaS platform that consolidates findings from 50+ vulnerability scanners and manual penetration testing into a single environment. The platform automates report authoring using AI (Plex AI on Google Cloud Vertex AI), applies configurable contextual risk scoring to prioritize findings by business impact, and orchestrates remediation workflows through integrations with ticketing and collaboration tools. It is sold via tiered subscriptions (Essential, Core, Premium) to enterprise security teams and managed security service providers (MSSPs).
Is PlexTrac a public or private company?
PlexTrac is a private company. It is classified as venture growth investor backed and is currently operating.
When was PlexTrac founded?
PlexTrac was founded in 2016. It employs 51 to 100 people.
Where is PlexTrac based?
PlexTrac is headquartered in Boise, United States, in the North America region.
How does PlexTrac make money?
One revenue line is on record: subscription-based SaaS.
Does PlexTrac have an API?
Yes. PlexTrac offers an open API that allows users to build custom imports from preferred security tools. The API documentation is available at api-docs.plextrac.com. PlexTrac also offers an MCP (Model Context Protocol) Server integration that enables users to bring their own AI to query live PlexTrac data. Webhooks are available for event-based automations configured at the tenancy or client level for various in-platform event triggers. Developer documentation is at api-docs.plextrac.com.
What industry is PlexTrac in?
PlexTrac's product category is Cybersecurity Exposure Management Software. Its primary akta.pro industry code is HDADAFAG, Data Access Governance & Entitlement Management (DSPM / CIEM-for-Data), with a secondary code of BPAEADAL, Data Security & Privacy Managed Services (DLP/Encryption). Its NAICS code is 513210 and its SIC code is 7372.