ThreatGEN

What ThreatGEN does

ThreatGEN, operating as Derezzed Inc. D/B/A ThreatGEN, is a Houston-based industrial cybersecurity and cyber risk management technology and services firm founded in 2017 by Clint Bodungen and Aaron Shbeeb, both recognized ICS/OT cybersecurity specialists and co-authors of the reference book 'Hacking Exposed: Industrial Control Systems.' The company sells two flagship products: AutoTableTop™, an AI-powered, self-hosted platform that generates, runs, and grades incident response tabletop exercises tailored to a customer's environment, stack, and team composition in minutes; and ThreatGEN® Red vs. Blue, the world's first multiplayer cybersecurity strategy game featuring an adaptive adversary AI, available on Steam and through mobile platforms. The platform architecture is deliberately self-hosted so that customer data never leaves the customer's infrastructure, addressing data sovereignty concerns prevalent among critical-infrastructure buyers.

ThreatGEN monetizes through a layered revenue model combining SaaS subscriptions for AutoTableTop (annual recurring, scaling with team size), multi-edition software licensing for Red vs. Blue (Game, Professional, Enterprise, Education, CTF, and Competition editions), paid courseware including an ICS/OT Cybersecurity Masterclass, channel revenue through certified resellers and systems integrators (UTSI International, K logix, Defend-OT, Edge Realm, FRENOS, Arcova, Morgan Franklin), and professional services. GTM is a hybrid of product-led growth (free Steam edition, open-enrollment courses, free walkthrough bookings) and partner-led enterprise delivery, with named customers concentrated in energy and utilities (BP, CPS Energy, Georgia Power Authority, Marathon, Enven), professional services (EY, ISA, NIT), healthcare (HSC), media (SecurityWeek), and education (University of Houston, Seminole State College). Recognized certifications include SOC 2 Type 2 (referenced in their Data Security & Processing Addendum) and WCAG 2.1 / VPAT 2.3 accessibility alignment, and the company was selected for U.S. DOT PHMSA R&D Project #693JK32410014POTA to develop an AI-driven pipeline incident team training platform.

Name

ThreatGEN

Legal name

Derezzed Inc.

Website

https://threatgen.com

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

1–10 employees

Short description

ThreatGEN builds AI-powered cybersecurity training and simulation software, anchored by its AutoTableTop platform and Red vs. Blue multiplayer game. It serves energy, utilities, education, and Fortune 500/DoD critical-infrastructure customers.

Ownership category

akta.pro rank

Product category

Cybersecurity Training Software

NAICS

Computer Training (611420), Software Publishers (5132)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Cybersecurity Learning Platforms (EDAFANAF)

akta.pro secondary industry

Cybersecurity (EDAAAPAC)

Keywords

• Cybersecurity training software
• Incident response platform
• Industrial cybersecurity simulation
• Tabletop exercise automation
• ICS OT security training

Headquarters

HQ city

Houston

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. SaaS Subscription (AutoTableTop): Annual or monthly subscription model for AutoTableTop platform access. Self-hosted deployment with pricing scaling based on team size rather than number of facilitators.
2. Software Licenses (Red vs. Blue): Multi-edition licensing model including Game Edition (Steam), Professional Edition, Enterprise Edition, Education Edition, CTF/Tournament Edition, and Competition Edition. Pricing varies by edition type and use case (commercial vs. academic).
3. Partner Reseller Revenue: Revenue generated through certified resellers (UTSI International, K logix) who both sell and facilitate exercises with their own bench.
4. Courseware and Training: Structured training courses including cybersecurity awareness, product training, ICS/OT masterclass, and practitioner courses. Some courses at $199.99, education licenses available.
5. Professional Services: End-to-end delivery through systems integrators and consulting partners for organizations requiring guided implementation and facilitation.

Pricing tiers

Go-to-market motion1 record

Distribution channels5 records

Marketing channels6 records

Core offering

ThreatGEN develops and sells AI-powered cybersecurity training software for industrial and enterprise environments. Its flagship AutoTableTop™ platform uses generative AI to generate, run, and grade incident response tabletop exercises tailored to a customer's environment, stack, and team in minutes, while ThreatGEN® Red vs. Blue is a multiplayer cybersecurity strategy game for training Red Team and Blue Team skills. Both products are sold as software subscriptions/licenses targeting critical infrastructure operators, Fortune 500 enterprises, Department of Defense customers, and higher education cybersecurity programs.

Product overview

ThreatGEN offers two flagship products: AutoTableTop™ and ThreatGEN® Red vs. Blue. AutoTableTop is an AI-powered tabletop exercise platform that generates industry-specific incident response scenarios using generative AI, reducing preparation time from weeks to minutes. Red vs. Blue is the world's first multiplayer cybersecurity strategy game, teaching cybersecurity concepts through gamification with adaptive adversary AI. The company also offers structured training courses and documentation for both platforms, serving organizations in critical infrastructure sectors including energy, utilities, and manufacturing.

Differentiator

Problem solved

Functional benefit

Products and services

• AutoTableTop™ AI-powered tabletop exercise platform that generates, runs, and grades incident response tabletop exercises tailored to the user's environment, stack, and team in minutes rather than weeks. Self-hosted so that no data leaves the customer's infrastructure. Targeted at critical infrastructure operators, Fortune 500 enterprises, DoD customers, and consulting partners running facilitated cyber readiness exercises.
• ThreatGEN® Red vs. Blue The world's first multiplayer cybersecurity strategy game, available in Game, Professional, Enterprise, Education, CTF/Tournament, and Competition editions. Used for training, tournaments, and helping non-technical leadership understand cybersecurity strategy through gamified Red Team and Blue Team gameplay with adaptive adversary AI.
• ThreatGEN Courses Structured online training courses covering cybersecurity awareness for end users and executives, product onboarding for AutoTableTop and Red vs. Blue, and deeper practitioner topics such as ICS/OT cybersecurity kill chain analysis. Used by individuals, enterprise learners, and educational institutions.

Quantifiable outcome

• 24,000+ scenarios run on the platform
• +3 more outcomes

Named customers13 records

Segments5 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

AI capability2 records

Feature6 records

Partnerships

16 partnerships are on record, tiered core, gold, flagship and regional.

• FRENOScoreTechnology or Integration · 18 February 2025API-level integration partnership where FRENOS's platform integrates directly with ThreatGEN at the API layer for continuous OT exposure analysis. FRENOS is an autonomous OT security assessment specialist.
• OT-ISACcoreStrategic or Co-development Partner · 27 November 2024Operational Technology Information Sharing and Analysis Center partnership managed by GRF Asia-Pacific Pte Ltd. Strategic partnership for OT cybersecurity threat intelligence sharing.
• Defend-OTgoldChannel Partner/ Reseller/ Distributor · 14 October 2024Belgium-based OT cybersecurity firm joined as Gold Partner to enhance cybersecurity preparedness and incident response capabilities for organizations across the Benelux region.
• Morgan Franklin ConsultingcoreImplementation/ SI/ Consulting Partner · 10 September 2024Strategic partnership with prominent cybersecurity consulting and services firm to expand delivery capabilities.
• CyberwisegoldChannel Partner/ Reseller/ Distributor · 23 January 2023GOLD partner within growing partner channel designed to deliver results in tabletop exercises worldwide.
• LOGIICcoreStrategic or Co-development Partner · 18 June 2021Selected by Linking the Oil and Gas Industry to Improve Cybersecurity program to perform Industrial Vulnerability Scoring System (IVSS) study, providing alternative to CVSS for industrial systems. Funded by DHS and oil/gas majors (BP, Chevron, Shell, etc.).
• SecurityGate.iocoreStrategic or Co-development Partner · 9 June 2021Strategic collaboration to extend SecurityGate.io's deployment and services capabilities with ThreatGEN's world-class OT cybersecurity services. Risk management SaaS integration.
• BlumiracoreStrategic or Co-development Partner · 18 November 2020Partnership to deliver full stack OT cybersecurity monitoring solution. Blumira provides automated detection and response; ThreatGEN provides OT expertise. Joint roundtable discussions and webinars delivered.
• CyberConflagshipGTM or Marketing Partner · 16 January 2020Title sponsor of CyberCon 2020 CISO summit and workforce development conference for industrial utility. Clint Bodungen serves as industrial cybersecurity content advisor.
• Edge Realm Inc.coreTechnology or IntegrationEdge Realm integrates ThreatGEN's AutoTableTop into its ERVault Integrated Risk Management Platform at OSI level 7 layer. ERVault is a factory-assembled, containerized, sovereign HPC platform with integrated security.
• UTSI InternationalflagshipChannel Partner/ Reseller/ DistributorSilver Partner and authorized reseller providing facilitation for cybersecurity tabletop exercises using AutoTableTop platform. 40 years of OT cybersecurity, ICS/SCADA expertise serving pipeline operators.
• ArcovacoreImplementation/ SI/ Consulting PartnerSystems integrator providing engineering-led services to design, build, and integrate ThreatGEN into larger operational and security programs.
• K logixregionalChannel Partner/ Reseller/ DistributorNew England-based cybersecurity firm reselling and facilitating ThreatGEN exercises with focus on Fortune 500 cyber programs. Helps security leaders communicate with executives.
• Crafted Compliance, Inc.regionalChannel Partner/ Reseller/ DistributorReseller of Professional and Enterprise Edition in Florida, USA.
• Eged ApSregionalChannel Partner/ Reseller/ DistributorReseller of Professional and Enterprise Edition in Denmark.
• Global Process Automation (GPA)regionalChannel Partner/ Reseller/ DistributorReseller of Professional and Enterprise Edition gamification and courseware in North Carolina, USA.

Scale indicators6 records

Recent moves8 records

Expansion highlights6 records

Direct peers

• Immersive Labs: Provides cyber resilience, crisis simulation, and incident response training to enterprises and governments. Directly comparable to ThreatGEN's AutoTableTop in delivering automated, AI-assisted cybersecurity exercises that upskill defenders and executives.
• Cyberbit: Operates cyber ranges and OT/ICS training simulators for SOC teams and critical infrastructure operators. Closely comparable to ThreatGEN's OT-focused, simulation-driven approach to incident response readiness.
• RangeForce: Cloud-native cyber skills training platform offering hands-on labs and exercises for enterprise security teams. Overlaps with ThreatGEN in delivering continuous, role-based cybersecurity readiness content.

Emerging players

• Hack The Box: Community-driven cybersecurity upskilling platform with gamified labs and capture-the-flag competitions. Comparable to the gamification-and-engagement model of ThreatGEN Red vs. Blue, though lighter on enterprise OT simulation.
• AttackIQ: Breach and attack simulation platform used by enterprises to validate security control effectiveness. Adjacent to ThreatGEN because both feed enterprise continuous-readiness programs, though AttackIQ emphasizes adversary emulation rather than tabletop exercise generation.
• SafeBreach: Breach and attack simulation vendor providing continuous security validation for enterprises. Comparable as a cousin category to ThreatGEN's exercise-based readiness programs, though focused on technical control validation rather than tabletop scenarios.
• Cybrary: Online cybersecurity training platform with hands-on labs and career-development content. Comparable to ThreatGEN's courseware plus gamified learning model, though broader and less OT-specific.

Broad incumbents

• SANS Institute: Largest cybersecurity training and certification body for practitioners and SOC teams. Broad incumbent in the cyber training market that ThreatGEN targets, particularly through ICS/SCADA and incident response curricula.
• KnowBe4: Security awareness and phishing simulation platform for end users and executives. Comparable to ThreatGEN's awareness and executive-briefing courseware, though mostly focused on human-factor phishing rather than OT tabletop exercises.

Others

• CISA / NIST ICS Cybersecurity Training Resources: Government-published OT/ICS cybersecurity training and exercise resources (CISA, NIST). ThreatGEN competes for the same OT security training budget and attention span while leveraging self-hosted and AI-generated content as differentiation.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/threatgen_rvb
• YouTubeyoutube.com/channel/UCGkH-fsezswtNJ9Rva-yNLg
• LinkedInlinkedin.com/company/threatgenvr

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Funding overview

Funding rounds2 records

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ThreatGEN