Randori
Randori was a managed risk awareness cybersecurity provider offering attack surface monitoring and adversary-emulation services to enterprises, founded in 2018 and acquired by IBM Security in February 2023.
- Company typePrivate
- Founded2018
- HeadquartersWaltham, United States
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What Randori does
Randori was a managed risk awareness provider in the cybersecurity sector, founded in 2018 and headquartered in Waltham, Massachusetts. The company positioned itself as a "trusted adversary," signaling an offensive-security orientation focused on continuous external attack surface monitoring, exposure management, and adversary-emulation for enterprise customers seeking to identify and prioritize their real-world attack surface. Its core offering helped organizations address cybersecurity threats and exposure management needs, complementing traditional defensive security tooling with an attacker's-eye view of the environment.
The company was venture-backed, raising approximately $29.75 million across two funding rounds between 2018 and 2020: a $9.75 million Series 1 in October 2018 led by Accomplice (with .406 Ventures and Legion Capital), and a $20 million Series 2 in April 2020 led by Harmony Partners (with .406 Ventures, Accomplice, and Legion Capital). Randori maintained a team of 51-100 employees and was led by founders Brian Hazzard (CEO) and David Wolpoff (CTO), alongside a leadership bench covering finance, product, customer success, and product design. Pricing models and revenue mechanics were not publicly disclosed.
In February 2023, IBM Security acquired Randori, folding its managed risk awareness capabilities into IBM's broader security portfolio and ending Randori's operation as an independent entity. No further operating, revenue, or product-launch signals are available for the post-acquisition period as a standalone company.
Randori firmographics
Firmographics- Name
- Randori
- Website
- https://randori.com
- Company type
- Private
- Founded year
- 2018
- Operating status
- Acquired
- Headcount range
- 51–100 employees
- Short description
- Randori was a managed risk awareness cybersecurity provider offering attack surface monitoring and adversary-emulation services to enterprises, founded in 2018 and acquired by IBM Security in February 2023.
- Ownership category
- akta.pro rank
Randori industry classification
Industry- Product category
- Attack Surface Management
- NAICS
- Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Vulnerability Intelligence & Exploit Prediction (HDADAHAI)
- akta.pro secondary industry
- Vulnerability Assessment & Scanning (HDADAHAA)
Keywords
Where Randori is headquartered
LocationHeadquarters
- HQ city
- Waltham
- HQ country
- United States
- HQ region
- North America
Markets served
Randori business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Randori product offering
Product offeringCore offering
Randori provides a managed attack surface management and continuous security monitoring service that emulates real-world adversaries to discover, prioritize, and track an organization's external exposures. The offering is delivered as a managed, subscription-based service to enterprise security teams seeking an outside-in view of cyber risk.
Differentiator
Problem solved
Functional benefit
Products and services
- Randori Managed Risk Awareness Platform
Companies that use Randori
Customer profileIdeal customer profiles1 record
Randori technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Randori partnerships and signals
Strategic signalRecent moves3 records
Expansion highlights3 records
Randori competitors and assessment
Company assessmentDirect peers
- CyCognito: CyCognito provides external attack surface management and exposure management, mapping internet-facing assets and prioritizing risks. It is the closest direct competitor to Randori in the ASM/external risk category and serves a similar enterprise security buyer.
- AttackIQ: AttackIQ offers a breach and attack simulation (BAS) platform that continuously validates security controls, directly aligned with Randori's continuous offensive testing and 'trusted adversary' positioning.
- SafeBreach: SafeBreach delivers a BAS platform that simulates adversary techniques to validate defenses and prioritize remediation. It competes for the same security validation budget as Randori.
- Cymulate: Cymulate provides exposure management, BAS, and continuous automated red teaming across cloud, email, endpoint, and other vectors. It is a direct peer in the offensive security validation category.
- Mandiant: Mandiant (now part of Google Cloud) provides managed detection, incident response, and offensive security services, overlapping with Randori's managed risk awareness and adversary-emulation offerings at the high end of the enterprise market.
- Bishop Fox: Bishop Fox is a cybersecurity consulting firm specializing in offensive security, attack surface management, and continuous security testing. It competes with Randori's 'trusted adversary' positioning, especially for enterprises seeking outsourced offensive expertise.
Broad incumbents
- CrowdStrike Falcon Surface: CrowdStrike offers Falcon Surface as part of its broader Falcon platform, providing external ASM bundled with EDR/XDR. It is a larger incumbent competing for the same CISO budget as Randori, albeit as part of a wider product portfolio.
- Palo Alto Networks Cortex Xpanse: Palo Alto Networks offers Cortex Xpanse for external attack surface management as part of its Cortex platform. It is a broad incumbent in adjacent security categories and recently acquired IBM's QRadar SaaS assets, intensifying overlap with IBM Security's portfolio that now includes Randori.
- Tenable: Tenable is a leading exposure management platform spanning vulnerability management, ASM (Tenable.asm), and cloud security. It is a broader incumbent competing with Randori's external risk-awareness positioning for enterprise CISOs.
- Rapid7: Rapid7 offers exposure management capabilities alongside its SIEM and XDR portfolio, addressing similar buyer needs around continuous vulnerability and attack-surface visibility.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat3 records
Key risks5 records
Key highlights5 records
Customer concentration
Randori social profiles
Digital presenceRandori financial estimates
Financial estimateRevenue estimate
Valuation estimate
Randori leadership team
Management profileNumber of profiles
Profiles6 records
Randori funding detail
Funding detailFunding overview
Funding rounds2 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Randori M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Randori
What does Randori do?
Randori provides a managed attack surface management and continuous security monitoring service that emulates real-world adversaries to discover, prioritize, and track an organization's external exposures. The offering is delivered as a managed, subscription-based service to enterprise security teams seeking an outside-in view of cyber risk.
Is Randori a public or private company?
Randori is a private company. It is classified as corporate owned and is currently acquired.
When was Randori founded?
Randori was founded in 2018. It employs 51 to 100 people.
Where is Randori based?
Randori is headquartered in Waltham, United States, in the North America region.
Who are Randori's main competitors?
Direct peers on record are CyCognito, AttackIQ, SafeBreach, Cymulate, Mandiant and Bishop Fox. Broad incumbents are CrowdStrike Falcon Surface, Palo Alto Networks Cortex Xpanse, Tenable and Rapid7.
Does Randori have an API?
No public API is recorded for Randori.
What industry is Randori in?
Randori's product category is Attack Surface Management. Its primary akta.pro industry code is HDADAHAI, Vulnerability Intelligence & Exploit Prediction, with a secondary code of HDADAHAA, Vulnerability Assessment & Scanning. Its NAICS code is 561621 and its SIC code is 7370.