iCOUNTER
iCOUNTER is a Dallas-based cyber risk intelligence company that delivers AI-enabled compromise intelligence and counter-threat operations, anchored by its CTOS platform and CTOS-TPR Third-Party Risk module, to large enterprises and Fortune 500 security and risk leaders across the U.S. and Canada.
- Company typePrivate
- Founded2020
- HeadquartersDallas, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What iCOUNTER does
iCOUNTER is a Dallas-based private cyber risk intelligence company that delivers AI-enabled "compromise intelligence" to large enterprises and Fortune 500 organizations. It operates as a public brand of Apollo Information Systems Corp., founded in 2020 and emerging from five years of stealth in July 2025 alongside a $30 million Series A led by SYN Ventures. The company's core platform is the Counter Threat Operating System (CTOS), which combines AI parsing of HUMINT and signals intelligence with a live model of the customer's extended enterprise to detect adversary targeting before exploitation and route intelligence directly into operational response.
The CTOS architecture integrates four proprietary components: a Threat Collection Edge that ingests adversary infrastructure, dark web, credential exposure, and ecosystem telemetry; a Risk Determination Engine that correlates those signals against an Enterprise Digital Twin; and a Counter-Threat Operations module that automates response and remediation workflows. The first commercial application is CTOS-TPR (Third-Party Risk Module), which went to general availability on March 24, 2026 and targets the ~48% of breaches now involving third parties per the 2026 Verizon DBIR. Additional solution offerings include Fraud Intelligence and Third-Party Risk Intelligence, and a managed Cyber Risk Intelligence Service is delivered alongside enterprise teams. In April 2026, iCOUNTER acquired ParseIntel to expand global collection footprint.
Revenue is generated through a mix of platform subscriptions to CTOS, managed intelligence engagements, and joint counter-threat operations with internal customer teams. Pricing is quote-based via "Request a Strategic Briefing" and "Request a Demo" CTAs, with both self-service and managed delivery models. Go-to-market is sales-led and enterprise-focused, anchored on heavy event presence (Black Hat, RSAC, Gartner Security & Risk Management Summit) and a developing channel/alliance ecosystem. The company is led by founder and CEO John Watters (former President and COO of Mandiant, founder of iSIGHT Partners, acquirer of iDEFENSE), supported by a recently assembled C-suite (CMO, CFO, COO, CISO) appointed between May and June 2026.
iCOUNTER firmographics
Firmographics- Name
- iCOUNTER
- Legal name
- Apollo Information Systems, Corp.
- Website
- https://icounter.com
- Company type
- Private
- Founded year
- 2020
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- iCOUNTER is a Dallas-based cyber risk intelligence company that delivers AI-enabled compromise intelligence and counter-threat operations, anchored by its CTOS platform and CTOS-TPR Third-Party Risk module, to large enterprises and Fortune 500 security and risk leaders across the U.S. and Canada.
- Ownership category
- akta.pro rank
iCOUNTER industry classification
Industry- Product category
- Cybersecurity Risk Intelligence
- NAICS
- Security Systems Services (except Locksmiths) (561621), Security Systems Services (56162)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Marketplace & Platform Trust & Safety (Buyer/Seller Abuse) (HDADALAI)
Keywords
Where iCOUNTER is headquartered
LocationHeadquarters
- HQ city
- Dallas
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
iCOUNTER business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Platform Subscription (CTOS): Likely recurring SaaS-style subscription to the Counter Threat Operating System platform, with the Third-Party Risk Module (CTOS-TPR) as the first commercial application. Specific pricing not publicly disclosed.
- Managed Intelligence Service: iCOUNTER works hand-in-hand with customer internal teams to create/deploy counter-threat strategies against specific targeted attacks. CTOS-TPR is available as self-service or managed intelligence depending on internal TPRM team capacity.
- Professional Services and Counter-Threat Operations: For large enterprise customers, iCOUNTER delivers risk intelligence and works jointly with their internal teams to execute counter-threat strategies including attack interception, interference, and vulnerability closure.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Self-service CTOS-TPR delivery |
| Other | Multi-year contract | Managed intelligence delivery |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels10 records
iCOUNTER product offering
Product offeringCore offering
iCOUNTER sells the Counter Threat Operating System (CTOS), a software platform that combines AI-enabled HUMINT with automated threat collection to detect adversary reconnaissance, campaign staging, and active targeting of customers and their third-party ecosystems. Risk is determined at the edge of intelligence collection and routed directly into operational counter-threat actions, with the initial commercial application focused on third-party risk and extending to fraud and product security use cases for large enterprises.
Product overview
iCOUNTER delivers a platform-plus-modules architecture centered on CTOS (Counter Threat Operating System), the core platform that went to general availability on March 24, 2026. CTOS operationalizes what iCOUNTER calls the "Third Wave" of cybersecurity, determining risk at the edge of intelligence collection and routing intelligence directly into counter-threat operations across the enterprise ecosystem. The platform's first application is the CTOS-TPR (Third-Party Risk) module, which addresses the ~48% of breaches involving third parties by detecting adversary targeting of vendors before exploitation. Built on top of CTOS are two named solution offerings: Third Party Risk Intelligence (TPRI), which provides vendor discovery, compromise detection, and ransomware exposure monitoring; and Fraud Intelligence, which surfaces active fraud operations targeting the customer. iCOUNTER also offers a managed Cyber Risk Intelligence Service, in which iCOUNTER analysts work alongside enterprise teams to deploy counter-threat strategies, with a productized variant for midsize companies. The platform is reinforced by the April 2026 acquisition of ParseIntel, which expanded global collection capabilities and operational intelligence at the edge.
Differentiator
Problem solved
Functional benefit
Brands
- CTOS (Counter Threat Operating System): Cyber defense platform delivering compromise intelligence across the extended enterprise ecosystem; its first module, CTOS-TPR, focuses on Third-Party Risk.
Products and services
- CTOS (Counter Threat Operating System) A cyber defense software platform that operationalizes iCOUNTER's "Third Wave" cybersecurity model, connecting intelligence collection, risk determination, enterprise context, and counter-threat operations in a single architecture built on four integrated components: Threat Collection Edge, Risk Determination Engine, Enterprise Digital Twin, and Counter-Threat Operations. Reached general availability on March 24, 2026.
- CTOS-TPR (Third-Party Risk Module) The first commercial application of CTOS, focused on detecting adversary reconnaissance, campaign staging, and targeting activity directed at vendors, suppliers, and technology partners. Delivers validated connectivity inventory, pre-breach intelligence, prescriptive remediation, closed-loop workflow tracking, and flexible delivery (self-service or managed). Addresses the ~48% of breaches involving third parties per the 2026 Verizon DBIR.
- Third Party Risk Intelligence (TPRI) A solution offering built on CTOS that moves beyond posture management (questionnaires and security ratings) to true compromise awareness and prevention across vendor ecosystems. Capabilities include vendor discovery via observable connection data and data flow mapping, identifying compromised vendors, ransomware exposure and data leakage detection, and identification of defunct/termed entities at risk of takeover for fraud or attack.
- Fraud Intelligence A counter-fraud solution offering focused on discovering active fraud operations targeting the customer before they succeed. Capabilities include detecting adversary reconnaissance against fraud systems, identifying vulnerabilities that defeat existing fraud controls, monitoring financial transaction fraud (money in motion), and closing gaps before adversaries succeed.
- iCOUNTER Cyber Risk Intelligence Service Precision risk intelligence delivered as a managed service for large enterprises, covering threat categories from fraud to third-party risk to product security. iCOUNTER analysts work hand-in-hand with internal customer teams to create and deploy counter-threat strategies against specific targeted attacks, with a productized variant planned for midsize companies.
Quantifiable outcome
- 48% of confirmed breaches now involve a third party (Verizon 2026 DBIR, up 60% year-over-year)
- +8 more outcomes
Companies that use iCOUNTER
Customer profileSegments5 records
Ideal customer profiles4 records
iCOUNTER technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability9 records
Feature6 records
iCOUNTER partnerships and signals
Strategic signalPartnerships
Three partnerships are on record, tiered flagship and minor.
- ParseIntelflagshipiCOUNTER acquired ParseIntel's team and technologies to expand its global collection footprint and accelerate CTOS evolution. ParseIntel CEO Alex Afanasyev stated the company joined because iCOUNTER's CTOS determines risk at the edge of collection and enables counter-threat operations before impact. The acquisition strengthens iCOUNTER's ability to detect adversary intent mapped against its customers' ecosystem.
- AlacrinetminorAlacrinet hosts the Stallion Estate Security Leadership Experience at a private estate in Palm Desert, California, an invite-only executive gathering for CISOs and senior security leaders. iCOUNTER participates as a co-host/sponsor and provides a booking path for attendees via Alacrinet's registration page.
- Apollo Information Systems Corp.flagshipApollo Information Systems Corp. is the parent company of iCOUNTER and publicly launched it in July 2025. Apollo delivers intelligence-led cybersecurity solutions for government entities, educational institutions, and enterprises, combining iCOUNTER's threat intelligence with deep contextual understanding. iCOUNTER is described as 'an Apollo company' throughout.
Scale indicators7 records
Recent moves6 records
Expansion highlights8 records
iCOUNTER competitors and assessment
Company assessmentBroad incumbents
- Recorded Future (Insikt Group): Mastercard-owned threat intelligence platform offering intelligence, risk analytics, and brand protection across the enterprise. Direct category incumbent to iCOUNTER's threat intelligence and TPR vision, but with a much broader, generalized portfolio rather than a customer-profile-first HUMINT focus.
- Mandiant (Google Cloud): Frontline incident response and threat intelligence arm of Google Cloud, founded by the same lineage that iCOUNTER's CEO helped build (iDEFENSE → iSIGHT Partners → Mandiant). Competes on adversary intelligence, managed defense, and TPR, with vastly more scale and a Google-backed balance sheet.
- CrowdStrike: Endpoint and cloud workload protection leader that has expanded into threat intelligence, third-party risk, exposure management, and identity protection. Competes with iCOUNTER for the CISO's threat intel and TPR budget, but as part of a much larger platform portfolio.
Direct peers
- SecurityScorecard: Leader in security ratings and third-party risk management, providing vendor risk scoring, questionnaire automation, and attack surface intelligence. Most direct competitor to iCOUNTER's CTOS-TPR among pure-play TPRM platforms, though iCOUNTER differentiates on compromise intelligence versus posture-based ratings.
- BitSight: Security ratings and TPRM platform competing for the same enterprise vendor risk budget as iCOUNTER's CTOS-TPR. Both sell into CISOs and TPRM leaders at large enterprises, with overlapping buyer personas but different technical approaches (posture ratings vs. compromise intelligence).
- RiskRecon (Mastercard): Cyber risk rating vendor acquired by Mastercard, providing third-party risk ratings and asset intelligence. Competes head-to-head with iCOUNTER in the TPRM space, particularly for financial services and global enterprise buyers, with the backing of a major payments network.
- Black Kite: Third-party cyber risk intelligence platform that combines external attack surface scoring, ransomware susceptibility, and financial impact quantification. Most comparable to iCOUNTER's CTOS-TPR among emerging TPRM specialists, though it leans on technical telemetry rather than HUMINT-driven compromise intelligence.
- BlueVoyant: Managed detection and response plus third-party cyber risk management provider; iCOUNTER's new COO Joel Molinoff was previously BlueVoyant's Global Head of Third-Party Risk Products and Services. Strong overlap in TPRM buyer persona and managed delivery model, with a broader services-led portfolio.
- ProcessUnity: Third-party risk and vendor lifecycle management platform competing for TPRM budget with workflow automation, assessments, and risk intelligence. Highly overlapping buyer persona and use cases, with a focus on process and governance rather than compromise-driven intelligence.
Emerging players
- Panorays: Third-party security risk management platform offering automated vendor assessments, attack surface intelligence, and remediation. Sells into similar TPRM leaders and CISOs as iCOUNTER's CTOS-TPR, with a more questionnaire- and rating-centric approach.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks7 records
Key highlights8 records
Customer concentration
iCOUNTER social profiles
Digital presenceiCOUNTER financial estimates
Financial estimateRevenue estimate
Valuation estimate
iCOUNTER leadership team
Management profileNumber of profiles
Profiles9 records
iCOUNTER subsidiaries and ownership
Company hierarchySubsidiaries1 record
iCOUNTER funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
iCOUNTER M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about iCOUNTER
What does iCOUNTER do?
iCOUNTER sells the Counter Threat Operating System (CTOS), a software platform that combines AI-enabled HUMINT with automated threat collection to detect adversary reconnaissance, campaign staging, and active targeting of customers and their third-party ecosystems. Risk is determined at the edge of intelligence collection and routed directly into operational counter-threat actions, with the initial commercial application focused on third-party risk and extending to fraud and product security use cases for large enterprises.
Is iCOUNTER a public or private company?
iCOUNTER is a private company. It is classified as venture growth investor backed and is currently operating.
When was iCOUNTER founded?
iCOUNTER was founded in 2020. It employs 11 to 50 people.
Where is iCOUNTER based?
iCOUNTER is headquartered in Dallas, United States, in the North America region.
How does iCOUNTER make money?
Three revenue lines are on record. Platform Subscription (CTOS) is the primary driver. The others are managed Intelligence Service and professional Services and Counter-Threat Operations.
Who are iCOUNTER's main competitors?
Broad incumbents on record are Recorded Future (Insikt Group), Mandiant (Google Cloud) and CrowdStrike. Direct peers are SecurityScorecard, BitSight, RiskRecon (Mastercard), Black Kite, BlueVoyant and ProcessUnity. Panorays is listed as an emerging player.
Does iCOUNTER have an API?
Yes. The iCOUNTER/Apollo Privacy Policy references an API (usage is logged), indicating an internal-facing or partner-facing API exists. No public developer documentation, REST/GraphQL type, authentication method, rate limits, or sandbox details are provided in the source material.
What industry is iCOUNTER in?
iCOUNTER's product category is Cybersecurity Risk Intelligence. Its primary akta.pro industry code is HDADALAI, Marketplace & Platform Trust & Safety (Buyer/Seller Abuse). Its NAICS code is 561621 and its SIC code is 7372.