What Noetic Cyber does

Noetic Cyber was a private cybersecurity company founded in 2020 and headquartered in Waltham, Massachusetts, that built a cloud-based continuous cyber asset attack surface management (CAASM) platform. The company's core proposition was to give enterprise security teams a unified, continuously updated view of internal and external digital assets, combine that inventory with automated breach and attack simulation capabilities, and surface the exposures most likely to be exploited by threat actors. Its primary customer segment was horizontal — enterprise security teams needing continuous validation of their defensive posture — and it positioned itself around proactive exposure management rather than reactive detection.

Operationally, Noetic Cyber raised approximately $15 million in equity funding across disclosed rounds, including a $15M round in July 2021 led by Energy Impact Partners with participation from Glasswing Ventures, PricewaterhouseCoopers, and Ten Eleven Ventures, and an additional investment from SentinelOne in October 2022. The company scaled to between 51 and 100 employees under a founder-led executive team (CEO Paul Ayers, CPO Allen Rogers, Chief Architect Allen Hadden) supported by a CFO and regional/product VPs including a VP of EMEA. Pricing, marketing channels, distribution channels, certifications, patents, and named customer logos were not publicly disclosed.

In August 2024, Noetic Cyber was acquired by Rapid7 (NASDAQ: RPD) and its technology was integrated into Rapid7's Surface Command and Exposure Command platforms, ending its operation as an independent entity. No revenue figures, acquisition price, or post-acquisition standalone operating metrics were disclosed in the available source material.

Name

Noetic Cyber

Website

https://noeticcyber.com

Company type

Private

Founded year

2020

Operating status

Acquired

Headcount range

51–100 employees

Short description

Noetic Cyber was a cloud-based continuous cyber asset attack surface management (CAASM) and breach simulation platform serving enterprise security teams, founded in 2020 and acquired by Rapid7 in August 2024.

Ownership category

akta.pro rank

Product category

Attack Surface Management

NAICS

Security Systems Services (56162), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Attack Surface Management (EASM/CAASM) (HDADAHAC)

akta.pro secondary industry

Serverless & PaaS Security (Function/App Service Runtime) (HDADADAL)

Keywords

• Cyber asset management
• Attack surface management
• Exposure management
• Breach attack simulation
• Security posture validation

Headquarters

HQ city

Waltham

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Core offering

Noetic Cyber provided a cloud-based Continuous Cyber Asset Attack Surface Management (CAASM) platform delivering unified visibility into an organization's internal and external digital assets. The platform identified unknown internet-facing assets, shadow IT, and security coverage gaps, and was complemented by automated breach and attack simulation capabilities that allowed security teams to continuously validate defenses against real-world attack scenarios and prioritize exposure remediation.

Product overview

Noetic Cyber was a cybersecurity company specializing in continuous cyber asset attack surface management (CAASM), providing organizations with unified visibility into their internal and external digital assets. The company was acquired by Rapid7 in August 2024.

Differentiator

Problem solved

Functional benefit

Products and services

• Continuous Cyber Asset Attack Surface Management (CAASM) Platform Cloud-based platform that gives enterprise security teams a unified view of assets across the entire digital estate, discovers unknown internet-facing and internal assets, uncovers shadow IT, and identifies security coverage gaps to enable prioritized exposure remediation. Target users are enterprise security and exposure management teams.
• Automated Breach and Attack Simulation Capability that simulates real-world attack scenarios against an organization's environment to continuously validate defenses, identify exploitable gaps, and feed attacker-reachability context into exposure prioritization. Target users are enterprise security operations and vulnerability management teams.

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

One partnership is on record.

• Rapid7coreStrategic or Co-development Partner · 1 August 2024Noetic Cyber was acquired by Rapid7 in August 2024. The acquisition strengthened Rapid7's attack surface management capabilities and exposure management portfolio, integrating Noetic Cyber's continuous security validation technology into Rapid7's existing Surface Command and Exposure Command platforms.

Recent moves4 records

Expansion highlights4 records

Emerging players

• Wiz: Wiz delivers cloud security posture management (CSPM) with strong asset-graph capabilities across cloud estates; increasingly competes in adjacent asset visibility and exposure-management workflows that overlap with CAASM.
• Orca Security: Orca Security provides agentless cloud security with asset discovery, vulnerability prioritization, and attack path analysis — overlapping with Noetic's continuous asset inventory and exposure-management value proposition.

Broad incumbents

• CrowdStrike: CrowdStrike offers Falcon Surface (ASM/CAASM) as part of its broader endpoint and cloud security platform, serving overlapping enterprise security teams and competing for the same exposure-management budget.
• Rapid7: Rapid7 acquired Noetic Cyber and integrated its CAASM technology into its broader Surface Command and Exposure Command platforms, making it both the parent and a broad-incumbent security platform peer.
• Microsoft Defender External Attack Surface Management: Microsoft bundles EASM and asset visibility capabilities within Defender and Security Copilot, providing free or low-cost competition to standalone CAASM platforms for Microsoft-centric enterprises.
• Tenable: Tenable provides vulnerability management with growing ASM and external attack surface capabilities that overlap with Noetic Cyber's asset visibility and exposure-management use cases.

Direct peers

• Axonius: Axonius is the leading standalone CAASM platform, providing a unified asset inventory and security controls gap analysis across IT, cloud, IoT, and OT environments — the same core problem Noetic Cyber addressed.
• JupiterOne: JupiterOne is a CAASM platform that aggregates asset, vulnerability, and security control data into a single graph — a direct functional peer to Noetic Cyber's continuous cyber asset management approach.
• Armis: Armis offers an asset intelligence and attack surface management platform that provides real-time visibility and security for managed, unmanaged, and IoT/OT devices — directly comparable to Noetic Cyber's CAASM capabilities.

Others

• SentinelOne: SentinelOne was an investor in Noetic Cyber and operates a broad XDR/Singularity platform with exposure-management extensions — relevant as a strategic ecosystem partner and partial competitor in enterprise security.

Market position

Strengths3 records

Weaknesses3 records

Competitive moat4 records

Key risks4 records

Key highlights4 records

Customer concentration

• Xx.com/NoeticCyber

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds3 records

Investors5 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Noetic Cyber