What Snode Technologies does

Snode Technologies is a South African cybersecurity company headquartered in Centurion, Gauteng, that sells a Continuous Threat Exposure Management (CTEM) platform to enterprise and government clients. The company operates around a four-stage methodology—Sense, Simulate, Decide, Act—and targets organisations in mining and resources, financial services, and critical infrastructure that need to convert security telemetry into prioritised, business-aligned risk reduction. It claims 8M+ devices protected across six continents and 24/7/365 security operations, though its primary operating footprint remains Africa-centric with stated ambitions to expand into Southeast Asia and the Middle East.

The technology stack is anchored by the Guardian platform, which integrates SIEM, SOAR, NDR, deception (Mirage), active defense, case management, asset management, vulnerability management, and attack-path modeling into a single operating environment. Adjacent products include Darkwing (continuous attack surface management with exposure scoring and breach intelligence), Panthera (network detection and response combined with active defense), and two proprietary AI models—HeatSeeker for on-premise anomaly detection and FireStarter for offensive security automation. Snode has codified its assessment methodology in a Seven Realms of Exposure framework (Assets, Threats, Vulnerabilities, People, Architecture, Controls, Governance) and holds a pending US patent for analysing encrypted communications without decrypting them. The firm is ISO 27001, ISO 9001, and ISO 42001 certified and maintains compliance mappings to POPIA, GDPR, NIS2, CCPA, HIPAA, and NIST frameworks.

Revenue is generated through managed services and subscription contracts, including Guardian MDR (24/7 managed detection and response), Continuous Vulnerability Management, Dark Web Monitoring, Guardian SOCaaS, and Guardian CSIRT incident response, augmented by paid Extended Threat Exposure Management (XTEM) engagements. A free Threat Exposure Assessment serves as a freemium lead-generation funnel into paid work. Go-to-market is consultative and enterprise-focused, combining direct sales, freemium self-service assessment, industry event presence (notably the ITWeb Security Summit), and thought-leadership content across LinkedIn, X, YouTube, and white papers. The only disclosed external capital is a $50,000 MEST Africa grant in 2019 with Microsoft partnership support; the company remains privately held and founder-controlled.

Name

Snode Technologies

Legal name

Snode Technologies (Pty) Ltd

Website

https://snode.com

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

11–50 employees

Short description

Snode Technologies is a South African cybersecurity firm that delivers a Continuous Threat Exposure Management platform—Guardian, Darkwing, Mirage, Panthera, and AI models HeatSeeker and FireStarter—to enterprises in mining, financial services, and critical infrastructure across Africa and select international markets.

Ownership category

akta.pro rank

Product category

Cybersecurity Threat Exposure Management

NAICS

Security Systems Services (except Locksmiths) (561621), Other Computer Related Services (541519)

SIC

Measuring & Controlling Devices, Nec (3829)

akta.pro primary industry

OT Asset Discovery, Inventory & Vulnerability Management (HDADAJAE)

akta.pro secondary industries

OT Threat Detection & Monitoring (NDR/IDS for ICS) (HDADAJAF), Vulnerability Intelligence & Exploit Prediction (HDADAHAI), Vulnerability & Patch Management for OT Assets (EUADANAF), Third-Party & Supply Chain Exposure Monitoring (HDADAHAJ), Third-Party/Vendor Risk Management (TPRM/VRM) (HDADAIAE), Access Security & Identity Threat Detection (ITDR, UEBA for Identity) (HDADAAAI)

Keywords

• Threat exposure management
• Managed detection response
• Attack surface management
• Cybersecurity platform
• Offensive security services

Headquarters

HQ city

Gauteng

HQ country

South Africa

HQ region

Africa

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales

Revenue model

1. Continuous Threat Exposure Management (CTEM): Managed service providing continuous threat exposure reduction through monitoring, automation, intelligence-led operations, and managed response. Includes Darkwing, Guardian MDR, and realm management.
2. Managed Detection and Response (MDR): 24/7 Security Operations Center providing real-time threat detection and response to neutralize attacks before operational impact. Includes MTTD, MTTR, MTTC metrics and incident severity matrix alignment.
3. Threat Exposure Assessments: Complimentary external threat exposure assessments offered as entry point. Includes external, internal, governance, and offensive security assessments. Full paid engagements follow initial free assessment.
4. Continuous Vulnerability Management: Proactive vulnerability identification and remediation through ongoing assessments. Includes exposure visibility, tailor-made cyber defense solutions, and threat management.
5. Dark Web Monitoring: Real-time alerts and actionable intelligence from dark web monitoring to proactively safeguard business.
6. CSIRT Response Services: Emergency cyber incident response team for containment, downtime minimization, and asset protection during attacks. Includes automated detection, containment, and 24/7 incident response.
7. Extended Threat Exposure Assessment (XTEM): Six-week full assessment including local node for threat hunting, compliance audit, full Darkwing scan, and black-box penetration test. Output includes 12-month exposure management programme.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels8 records

Core offering

Snode Technologies develops and operates an integrated cybersecurity platform built around the Guardian SIEM/SOAR/NDR system, paired with the Darkwing attack-surface-management product, Mirage deception technology, and Panthera network detection. The company sells continuous threat exposure management (CTEM) services, managed detection and response (MDR), incident response (CSIRT), vulnerability management, dark web monitoring, and security assessments to enterprise and government customers.

Product overview

Snode Technologies offers a unified cybersecurity platform architecture anchored by the Guardian platform, which integrates SIEM, SOAR, NDR, deception (Mirage), and asset management capabilities. The product suite includes Darkwing for continuous attack surface management, two proprietary AI models (HeatSeeker for anomaly detection and FireStarter for offensive security), Panthera for network detection and response, and managed services including Guardian MDR (24/7 SOC), CSIRT response, Continuous Vulnerability Management, and Dark Web Monitoring. The company delivers assessments across external, internal, and governance domains, plus offensive security testing. The operating model follows a four-stage maturity framework: Sense (OTEM/TEM), Simulate (XTEM), Decide (EMP), and Act (CTEM), supported by the Seven Realms exposure management programme.

Differentiator

Problem solved

Functional benefit

Brands

• Dark Wing: Continuous attack surface management platform that maps every internet-facing asset and identifies where to act before attackers do. Features include subdomain enumeration, perimeter mapping, vulnerability correlation, breach intelligence, and attack-path analysis.
• Guardian
• Mirage
• Panthera
• HeatSeeker
• FireStarter

Products and services

• Guardian Platform Comprehensive cybersecurity platform combining SIEM, SOAR, NDR, deception, active defense, case management, asset management, vulnerability management, and attack-path modeling capabilities, used by enterprise and government customers to simplify and streamline security operations.
• Darkwing Continuous attack surface management platform that maps every internet-facing asset, performs subdomain discovery, perimeter mapping, vulnerability correlation, breach intelligence, look-alike domain monitoring, and attack-path analysis with sector-relative exposure scoring.
• HeatSeeker Lightweight, private anomaly detection AI model engineered for high-stakes environments, operating on-premise with zero data egress to identify statistical deviations across network traffic, user behaviour, and system telemetry for cybersecurity and financial fraud use cases.
• FireStarter Advanced offensive security AI model trained to think like an attacker, accelerating penetration testing, red team operations, reverse engineering, and vulnerability research by automating exploit chain generation, IOC extraction, malware analysis, and YARA rule creation.
• Mirage Digital-twin deception technology that delivers invisible, adaptive cybersecurity through decoy assets, luring attackers to detect and deter threats early while revealing attacker tactics, techniques, and procedures for enhanced threat intelligence.
• Panthera Network Detection and Response (NDR) platform combined with Active Defense capabilities for proactive threat elimination across enterprise network environments.
• Guardian MDR 24/7 Managed Detection and Response service providing continuous threat hunting, real-time detection, and incident response with MTTD, MTTR, and MTTC metrics and incident severity matrix alignment for enterprise customers.
• Guardian SOCaaS Security Operations Center as a Service providing 24/7 monitoring, firewall operations, security policy management, and incident response across on-premises and cloud environments.
• Guardian CSIRT Cyber emergency taskforce providing fast containment of cyberattacks, minimising downtime, and protecting assets through automated detection, 24/7 incident response, and threat blocking.
• Continuous Vulnerability Management Proactive vulnerability management through ongoing assessments to identify and address risks across digital ecosystems, ensuring continuous exposure visibility and tailor-made cyber defence solutions.
• Dark Web Monitoring Real-time alerts and actionable intelligence from dark-web sources to proactively safeguard businesses against compromised credentials, leaked data, and brand impersonation.
• Threat Exposure Assessment Comprehensive threat exposure assessments covering external, internal, and governance dimensions, with a complimentary OSINT-based free assessment providing visibility into cyber exposure risks including exposed public-facing assets, shadow IT, cloud exposure, and credential exposure.
• Offensive Security Assessment Proactive security testing including penetration testing, red teaming, web application testing, mobile application testing, LLM penetration testing, and vulnerability assessment & management.
• Extended Threat Exposure Management (XTEM) Six-week full assessment including a local node for threat hunting, compliance audit, full Darkwing scan, and black-box penetration test, delivering a 12-month exposure management programme across the Seven Realms framework.

Quantifiable outcome

• Discovers hidden exposure across shadow IT, cloud assets, third parties, exposed credentials, and digital footprint
• +3 more outcomes

Named customers11 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

AI capability7 records

Feature7 records

Scale indicators5 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Cybereason: AI-driven XDR and EDR platform with MDR services, comparable to Snode's Panthera NDR and Guardian MDR offering. Targets similar mid-market and enterprise segments with operationally-focused positioning.
• Tenable: Specialist in vulnerability management and attack surface management (Nessus, Tenable One). Strongest direct comparison for Snode's Darkwing ASM and Continuous Vulnerability Management modules.
• CrowdStrike: Global XDR/MDR/ASM platform leader offering Falcon SIEM, LogScale, Charlotte AI, and ASM. Closest direct competitor to Snode's integrated Guardian/Darkwing/Panthera stack, with comparable end-to-end CTEM positioning but vastly larger scale.
• WithSecure (formerly F-Secure): European-headquartered cybersecurity vendor providing managed detection, exposure management, and consulting services. Closely comparable to Snode's CTEM-as-managed-service positioning with similar emphasis on advisory-led engagements.
• Rapid7: Provides InsightVM (vulnerability management), InsightIDR (SIEM/EDR), Attack Surface Management, and MDR services. Closely matches Snode's Guardian CVA/Darkwing/MDR portfolio across exposure management and managed services.
• Arctic Wolf: Managed Detection and Response (MDR) and Managed Security Awareness provider delivering 24/7 SOC outcomes through a security operations platform. Directly comparable to Snode's Guardian MDR service model and outcome-based pricing.

Broad incumbents

• Trend Micro: Broad cybersecurity platform spanning XDR (Vision One), attack surface management, and managed services. Competes with Snode across multiple layers including NDR, ASM, and managed SOC offerings.
• Palo Alto Networks (Cortex): Cortex XSIAM/XDR and Prisma Cloud compete across SIEM, SOAR, EDR, and ASM. Snode's Guardian/Darkwing/Panthera stack overlaps materially, though Palo Alto offers a much broader portfolio with significantly greater R&D scale.
• Microsoft (Sentinel / Defender): Microsoft Sentinel (cloud SIEM/SOAR) and Defender XDR are the default enterprise cybersecurity stack, and Microsoft is also a Snode investor/partner via the 2019 MEST Africa Challenge. Competes directly with Guardian/Darkwing while bundling into existing Microsoft enterprise agreements.

Regional players

• Performanta: South Africa-based cybersecurity services firm offering managed security, identity, and compliance services across Africa. Most comparable regional peer to Snode given overlapping geographic focus and enterprise service model.

Market position

Strengths5 records

Weaknesses4 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/snode_tech

Compliance9 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds2 records

Investors2 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Snode Technologies