Bastazo
Bastazo provides AI-driven OT cybersecurity software that prioritizes vulnerabilities and automates remediation for critical infrastructure operators in electric utilities, manufacturing, oil and gas, and maritime sectors via a subscription SaaS model.
- Company typePrivate
- Founded2020
- HeadquartersBentonville, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Bastazo does
Bastazo is a privately-held, venture-backed cybersecurity company headquartered in Bentonville, Arkansas, founded in 2020, that provides AI-driven vulnerability management and remediation software for operational technology (OT) environments in critical infrastructure sectors. Its core product, the Bastazo Platform, applies proprietary Stakeholder-Specific Vulnerability Categorization (SSVC) decision trees combined with machine learning to prioritize the small fraction of vulnerabilities that materially affect each customer's specific OT asset base, replacing generic CVSS scoring with operationally contextual risk rankings. The platform is delivered as a subscription SaaS product with annual terms and volume-based pricing, and includes integrated modules for contextual vulnerability prioritization, automated remediation playbook generation, adversary intelligence, attack path analysis, the joint Bastazo Rapid Recovery solution (with Salvador Technologies), the Agoge Digital Twin-based training platform, and the V-INT toolset developed under a U.S. Department of Energy CESER-funded collaboration with the University of Arkansas and Network Perception.
The company's go-to-market is enterprise field sales targeting critical infrastructure operators, with primary verticals of electric utilities, manufacturing, and oil and gas, and secondary exposure to maritime and other critical infrastructure operators. Bastazo monetizes through annual subscription licenses with defined volume limitations per order form, 30-day evaluation trials, and auto-renewal provisions. The company has raised approximately $3.83 million across disclosed funding events, including a Cortado Ventures-led seed round in 2025, an HF0 Residency/Iron Prairie Ventures round in early 2025, a Department of Energy grant for V-INT commercialization, and a BIRD Foundation grant supporting the Rapid Recovery joint solution with Salvador Technologies. The company operates with 1-10 employees and is led by CTO Kylie McClanahan, Chief Scientist and Co-Founder Philip Huff, and a small full-stack development team.
Bastazo firmographics
Firmographics- Name
- Bastazo
- Legal name
- Bastazo, Inc.
- Website
- https://bastazo.com
- Company type
- Private
- Founded year
- 2020
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Bastazo provides AI-driven OT cybersecurity software that prioritizes vulnerabilities and automates remediation for critical infrastructure operators in electric utilities, manufacturing, oil and gas, and maritime sectors via a subscription SaaS model.
- Ownership category
- akta.pro rank
Bastazo industry classification
Industry- Product category
- OT Cybersecurity Software
- NAICS
- Computer Systems Design and Related Services (54151)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- OT Asset Discovery, Inventory & Vulnerability Management (HDADAJAE)
- akta.pro secondary industries
- Vulnerability & Patch Management for OT Assets (EUADANAF), Vulnerability Intelligence & Exploit Prediction (HDADAHAI), OT Threat Detection & Monitoring (NDR/IDS for ICS) (HDADAJAF), Vulnerability Assessment & Scanning (HDADAHAA), OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)
Keywords
Where Bastazo is headquartered
LocationHeadquarters
- HQ city
- Bentonville
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
Bastazo business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations
Revenue model
- Subscription Software License: Bastazo operates on a subscription-based software-as-a-service model with annual subscription terms. Customers pay recurring fees for platform access, with volume limitations defined in order forms. Evaluation/trial licenses available for 30 days.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Standard subscription with volume-based pricing |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels3 records
Bastazo product offering
Product offeringCore offering
Bastazo provides an AI-driven cybersecurity platform for operational technology (OT) environments in critical infrastructure. The platform uses SSVC (Stakeholder-Specific Vulnerability Categorization) decision trees and machine learning to prioritize the roughly 5% of vulnerabilities that matter most to each customer's environment, and generates automated remediation playbooks and audit-ready compliance evidence. It also offers the Agoge Training Platform for OT cybersecurity skills development using Digital Twin simulations, and a joint Bastazo Rapid Recovery solution with Salvador Technologies for industrial control system recovery.
Product overview
Bastazo is a cybersecurity company offering an AI-driven platform for Operational Technology (OT) environments protecting critical infrastructure. The core product is the Bastazo Platform, a unified AI remediation management platform that includes multiple integrated modules: Contextual OT Vulnerability Prioritization (SSVC-based decision trees), Remediation Playbooks, Adversary Intelligence, Rapid Recover (for incident recovery), Attack Path Analysis, and a coming-soon Cyber Defense Advisor. Additionally, the Agoge Training Platform provides hands-on cybersecurity training using Digital Twin technology. The V-INT toolset, developed through a DoE CESER collaboration, is also integrated into the platform. The product portfolio targets critical infrastructure sectors including electric utilities, oil and gas, manufacturing, and maritime.
Differentiator
Problem solved
Functional benefit
Products and services
- Bastazo Platform AI-driven OT cybersecurity platform that helps critical infrastructure teams prioritize vulnerabilities and implement remediation using SSVC decision trees, machine learning, and automated playbook generation. Customers include electric utilities, oil and gas operators, and manufacturers with OT environments.
- Bastazo Rapid Recovery Incident recovery solution for industrial control systems, jointly developed with Salvador Technologies, providing rapid system recovery and vulnerability management capabilities for critical infrastructure sectors.
- Agoge Training Platform Cybersecurity training platform for OT teams that uses Digital Twin technology to create realistic simulations of cyberattack environments, enabling hands-on training with pre-built or custom modules, dedicated cloud servers, and external IP assignments for student exercises.
Companies that use Bastazo
Customer profileNamed customers4 records
Segments5 records
Ideal customer profiles3 records
Bastazo technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability6 records
Feature7 records
Bastazo partnerships and signals
Strategic signalPartnerships
Three partnerships are on record, tiered core and supporting.
- Salvador TechnologiescoreJoint development and launch of Bastazo Rapid Recovery, a combined solution for securing industrial control systems. The solution integrates Bastazo's vulnerability management with Salvador Technologies' rapid recovery capabilities, supported by a $1.1 million grant from the Israel-United States Binational Industrial Research and Development Foundation.
- University of ArkansascoreBastazo leads commercialization efforts for V-INT, a cybersecurity software tool developed through a University of Arkansas-led project. Bastazo received $487,250 in funding and leads the commercialization path for the technology targeting energy utilities.
- Network PerceptionsupportingCollaboration partner in V-INT development alongside Bastazo and University of Arkansas. Network Perception contributed to the cybersecurity toolset for energy utilities as part of the DoE CESER-funded project.
Scale indicators4 records
Recent moves6 records
Expansion highlights6 records
Bastazo competitors and assessment
Company assessmentDirect peers
- Dragos: Dragos is a leading OT cybersecurity platform focused on ICS/OT threat detection, vulnerability management, and incident response for critical infrastructure. It competes head-to-head with Bastazo in serving electric utilities, oil & gas, and manufacturing customers with deep OT asset visibility and prioritization.
- Claroty: Claroty provides cybersecurity for industrial, healthcare, and commercial OT environments, combining asset discovery, vulnerability management, and threat detection. Its xDome and CTD products target the same critical infrastructure buyers as Bastazo, including NERC CIP-regulated utilities.
- Nozomi Networks: Nozomi Networks delivers OT and IoT security and visibility, with vulnerability assessment and risk prioritization for critical infrastructure operators. It overlaps directly with Bastazo's prioritization and remediation playbook capabilities in utilities and manufacturing.
- Armis: Armis offers an asset intelligence and cybersecurity platform that extends into OT/ICS environments, providing asset discovery, vulnerability management, and threat detection. It competes for the same critical infrastructure security budgets as Bastazo with a broader IT/OT unified approach.
Broad incumbents
- Tenable: Tenable is an established exposure management platform (Nessus, Tenable One) that has expanded into OT vulnerability assessment. Its broader IT-centric portfolio competes with Bastazo's prioritization approach but with significantly more scale and an installed enterprise base.
- Rapid7: Rapid7 provides vulnerability management, detection, and response across IT and cloud environments. While not OT-native, it competes for the broader enterprise security budget and increasingly for OT-adjacent use cases that overlap with Bastazo's prioritization messaging.
- SCADAfence (Honeywell): SCADAfence, acquired by Honeywell, delivers OT cybersecurity for industrial and critical infrastructure environments. As part of Honeywell's broader industrial portfolio, it competes with Bastazo in manufacturing and process-industry verticals.
Emerging players
- Opscura: Opscura is an emerging OT network security vendor focused on operational technology segmentation and threat detection for industrial environments. It targets similar critical infrastructure customers as Bastazo with a narrower network-focused scope.
- Network Perception: Network Perception provides OT network visibility and compliance verification, including for NERC CIP environments. It is both a DoE CESER collaborator with Bastazo (V-INT project) and a partial competitor in OT asset visualization for energy utilities.
- Salvador Technologies: Salvador Technologies provides rapid ICS/OT cyber incident recovery, which it delivers as a joint solution with Bastazo (Bastazo Rapid Recovery). The partnership blurs the competitive line, but Salvador could become a partial competitor in the OT resilience layer Bastazo is building.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
Bastazo social profiles
Digital presenceBastazo compliance and trust
Trust signalCompliance3 records
Bastazo financial estimates
Financial estimateRevenue estimate
Valuation estimate
Bastazo leadership team
Management profileNumber of profiles
Profiles3 records
Bastazo funding detail
Funding detailFunding overview
Funding rounds5 records
Investors7 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Bastazo M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Bastazo
What does Bastazo do?
Bastazo provides an AI-driven cybersecurity platform for operational technology (OT) environments in critical infrastructure. The platform uses SSVC (Stakeholder-Specific Vulnerability Categorization) decision trees and machine learning to prioritize the roughly 5% of vulnerabilities that matter most to each customer's environment, and generates automated remediation playbooks and audit-ready compliance evidence. It also offers the Agoge Training Platform for OT cybersecurity skills development using Digital Twin simulations, and a joint Bastazo Rapid Recovery solution with Salvador Technologies for industrial control system recovery.
Is Bastazo a public or private company?
Bastazo is a private company. It is classified as venture growth investor backed and is currently operating.
When was Bastazo founded?
Bastazo was founded in 2020. It employs 1 to 10 people.
Where is Bastazo based?
Bastazo is headquartered in Bentonville, United States, in the North America region.
How does Bastazo make money?
One revenue line is on record: subscription Software License.
Who are Bastazo's main competitors?
Direct peers on record are Dragos, Claroty, Nozomi Networks and Armis. Broad incumbents are Tenable, Rapid7 and SCADAfence (Honeywell). Emerging players are Opscura, Network Perception and Salvador Technologies.
Does Bastazo have an API?
No public API is recorded for Bastazo.
What industry is Bastazo in?
Bastazo's product category is OT Cybersecurity Software. Its primary akta.pro industry code is HDADAJAE, OT Asset Discovery, Inventory & Vulnerability Management, with a secondary code of EUADANAF, Vulnerability & Patch Management for OT Assets. Its NAICS code is 54151 and its SIC code is 7372.