ImmuniWeb
ImmuniWeb is a Geneva-based cybersecurity vendor operating the ImmuniWeb AI Platform, an AI-augmented application security testing, penetration testing, and Continuous Threat Exposure Management platform that serves 1,000+ enterprise customers across 50+ countries in finance, healthcare, government, and regulated industries.
- Company typePrivate
- Founded2015
- HeadquartersGeneva, Switzerland
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What ImmuniWeb does
ImmuniWeb SA is a privately held Swiss cybersecurity company headquartered in Geneva, operating the ImmuniWeb AI Platform — an application security testing and compliance platform with integrated Continuous Threat Exposure Management (CTEM). The platform combines proprietary machine learning models (developed and finetuned for seven-plus years) with human expert penetration testers, delivering six integrated product modules: Discovery (external attack surface management and dark web monitoring), Neuron (web application scanning), Neuron Mobile (mobile scanning), On-Demand (web/API penetration testing), MobileSuite (mobile penetration testing), and Continuous (continuous scanning and pen testing). A contractual zero-false-positive SLA backed by a money-back guarantee is the headline commercial differentiator, supported by CREST, ISO 9001:2015, and ISO 27001:2022 certifications. The platform natively integrates with the dominant DevSecOps stack (Jenkins, GitHub, GitLab, Azure Pipelines, Jira, ServiceNow, Splunk, Slack, Teams, Okta, AWS, Azure, GCP) and supports the major security and privacy frameworks (GDPR, EU DORA, NIS2, HIPAA, PCI DSS, ISO 27001, SOC 2).
ImmuniWeb sells primarily through enterprise field sales across four global offices (Geneva, London, Washington D.C., Dubai) with a complementary self-serve 'Buy Online' channel and a formal partner program. The company serves 1,000+ enterprise customers across 50+ countries, with a named customer base that spans financial services (Crédit Agricole next bank, Swissquote, Arab Bank Switzerland, SIX Group, Banca dello Stato del Cantone Ticino), consulting (BDO, UNIRISC), internet/commerce (eBay Classifieds), logistics (DP World), healthcare and life sciences (HUG, Celgene), telecom (ITU), media (Haymarket), retail (Netto), and government (Rennes Métropole). Revenue mechanics combine SaaS subscriptions across the six modules with custom enterprise agreements; Attack Surface Management is priced as a fixed monthly fee per company regardless of asset count. The company appears founder-owned (Dr. Ilia Kolochenko, CEO and Chief Architect) with no disclosed external funding rounds, and has historically pursued organic growth supported by a product-led growth layer of free community security testing tools.
Recent strategic activity centers on product expansion: Q3 2025 launched penetration testing for AI-powered systems and expanded CTEM offerings; Q4 2025 introduced AI-specific vulnerability testing, Post-Quantum Cryptography detection, EU DORA compliance features, and Okta SSO; Q1 2026 shipped another major platform update. The company has collected multiple international awards in 2026 — Industry Eagles Gold, TITAN Business Awards triple win, Global InfoSec Awards triple win at RSAC 2026 — and contributed data to the 2026 Verizon Data Breach Investigations Report. With 101-250 employees and a Gartner Peer Insights rating of 4.8/5.0, ImmuniWeb occupies a mid-sized, vertically deep position in the enterprise application security market, competing on AI-augmented accuracy and certification-driven trust rather than pure pricing.
ImmuniWeb firmographics
Firmographics- Name
- ImmuniWeb
- Legal name
- ImmuniWeb SA
- Website
- https://immuniweb.com
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- ImmuniWeb is a Geneva-based cybersecurity vendor operating the ImmuniWeb AI Platform, an AI-augmented application security testing, penetration testing, and Continuous Threat Exposure Management platform that serves 1,000+ enterprise customers across 50+ countries in finance, healthcare, government, and regulated industries.
- Ownership category
- akta.pro rank
ImmuniWeb industry classification
Industry- Product category
- Application Security Testing
- NAICS
- Computer Systems Design and Related Services (54151)
- SIC
- Services-Computer Integrated Systems Design (7373), Services-Testing Laboratories (8734)
- akta.pro primary industry
- Vulnerability Management, Pen Testing & Attack Surface Management (ASM) (HLACAJAN)
Keywords
Where ImmuniWeb is headquartered
LocationHeadquarters
- HQ city
- Geneva
- HQ country
- Switzerland
- HQ region
- Europe
Offices4 records
Markets served
ImmuniWeb business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure
Revenue model
- SaaS Subscription — Application Security Testing: Cloud-based subscription model for the ImmuniWeb AI Platform providing ongoing access to security scanning, penetration testing, attack surface management, and dark web monitoring tools. Customers subscribe to specific products (Discovery, Neuron, On-Demand, MobileSuite, Continuous) with pricing based on company size and asset scope.
- SaaS Subscription — Attack Surface Management (Fixed Monthly): ImmuniWeb Discovery is priced at a fixed monthly price per company regardless of the number of IT assets, security events or incidents. This provides predictability for enterprise customers managing large, dynamic attack surfaces.
- Professional Services — Penetration Testing: Manual penetration testing services delivered by human security experts, including API penetration testing, mobile penetration testing (MobileSuite), web penetration testing (On-Demand), and specialized AI-powered system testing. These are delivered as subscriptions with contractual SLAs and zero false positive guarantees.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Pay-as-you-go | Community / Free Tier — Free security testing tools |
| Subscription | Monthly | Commercial SaaS Platform — subscription-based |
| Subscription | Annual | Managed / Enterprise — Custom contracts |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels8 records
ImmuniWeb product offering
Product offeringCore offering
ImmuniWeb operates an AI-powered Application Security and Compliance Platform that combines proprietary machine learning technology with human expert penetration testers to deliver web, mobile, and API security testing, attack surface management, dark web monitoring, and compliance reporting. The platform is offered through six integrated modules (Discovery, Neuron, Neuron Mobile, On-Demand, MobileSuite, and Continuous) under a subscription model with a contractual zero false positive SLA, serving over 1,000 enterprise customers across 50+ countries.
Product overview
ImmuniWeb is an Application Security and Compliance Platform with Continuous Threat Exposure Management (CTEM) capabilities. The platform is built around a unified AI-powered architecture combining proprietary machine learning technology with human expert penetration testers. The product portfolio consists of six integrated modules: Discovery (external attack surface management and dark web monitoring), Neuron (automated web security scanning), Neuron Mobile (mobile app security scanning), On-Demand (manual web/API penetration testing), MobileSuite (manual mobile penetration testing), and Continuous (continuous scanning and pen testing). The platform emphasizes a contractual zero false positive SLA and supports DevSecOps CI/CD integration across 25+ tools including Jenkins, GitHub, GitLab, Jira, Slack, and Splunk.
Differentiator
Problem solved
Functional benefit
Brands
- ImmuniWeb Discovery: Continuous Threat Exposure Management product for attack surface discovery and monitoring
- ImmuniWeb On-Demand
- ImmuniWeb Neuron
- ImmuniWeb MobileSuite
- ImmuniWeb Neuron Mobile
- ImmuniWeb Continuous
Products and services
- ImmuniWeb Discovery
Quantifiable outcome
- Over 485M+ cumulative security tests performed (490M+ on later page loads) with 130,000+ tests per day
- +3 more outcomes
Companies that use ImmuniWeb
Customer profileNamed customers16 records
Segments4 records
Ideal customer profiles3 records
ImmuniWeb technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration27 records
AI capability7 records
Feature7 records
ImmuniWeb partnerships and signals
Strategic signalPartnerships
Ten partnerships are on record, tiered core and minor.
- Amazon (Amazon Web Services integration)coreDeep integration with AWS cloud services for cloud security testing, including AWS-specific scanning capabilities and deployment compatibility. AWS is featured prominently in the DevSecOps integrations section alongside other major cloud and technology platforms.
- Microsoft (Azure, Azure Pipelines, Microsoft Teams)coreIntegration with Microsoft Azure cloud, Azure Pipelines CI/CD, and Microsoft Teams for notifications. Also a webinar platform partner for 'Cybersecurity, Privacy and Data Protection Law in 2026'. Integration enables DevSecOps automation within Microsoft environments.
- GitHubcoreIntegration with GitHub for CI/CD pipeline security testing, enabling automated security scanning within GitHub-based development workflows.
- GitLabcoreIntegration with GitLab for automated security testing within CI/CD pipelines using GitLab's CI/CD infrastructure.
- JenkinscoreIntegration with Jenkins for automated security testing in Jenkins-based CI/CD pipelines, enabling DevSecOps automation.
- Atlassian (Jira, Confluence)coreIntegration with Jira for bug tracking and vulnerability management, and Confluence for documentation. Enables seamless workflow between security findings and development issue tracking.
- OktacoreIntegration with Okta identity provider for SSO and MFA authentication, expanded in Q4 2025. Enables secure enterprise authentication for ImmuniWeb platform access.
- Azure PipelinescoreIntegration with Microsoft Azure Pipelines for automated security testing within Azure DevOps CI/CD workflows.
- Partner Program (Resellers, VARs, Consultants)minorFormal partner program including Partner Portal login, Partner Directory, and ImmuniWeb Certified Professional certification. Partners include resellers, value-added resellers, and security consultants who resell or integrate ImmuniWeb services.
- Cisco (via Industry Eagles Awards judging)minorCisco cybersecurity experts participated as judges in the Industry Eagles Awards 2026, where ImmuniWeb won Gold. This reflects industry recognition from Cisco but is not a commercial partnership.
Scale indicators7 records
Recent moves6 records
Expansion highlights6 records
ImmuniWeb competitors and assessment
Company assessmentBroad incumbents
- Qualys: Cloud-based vulnerability management and security platform with broad AppSec, ASM, and compliance offerings. Public company serving large enterprise customers with overlapping but broader capabilities than ImmuniWeb.
- Tenable: Vulnerability management leader with Nessus-based scanning and cloud security posture management. Incumbent in the broader enterprise vulnerability management space that ImmuniWeb targets with its Discovery and Neuron products.
- Rapid7: Public security analytics company offering vulnerability management, AppSec, and SIEM. Broader portfolio than ImmuniWeb but directly competes in enterprise vulnerability and AppSec testing.
Direct peers
- Checkmarx: Enterprise application security testing vendor providing SAST, DAST, SCA, and API security. Directly comparable to ImmuniWeb in enterprise AppSec with strong CI/CD integration focus.
- Veracode: Application security testing platform offering SAST, DAST, SCA, and manual penetration testing to enterprise customers. Directly comparable to ImmuniWeb across web/API/mobile AppSec and serves similar regulated industries.
- HackerOne: Platform combining human-expert penetration testing with attack surface management and bug bounty programs. Comparable to ImmuniWeb's human-augmented testing model and CTEM/Discovery offerings.
- Invicti (Netsparker): DAST-first application security platform known for proof-based scanning with low false positives. Closely comparable to ImmuniWeb's Neuron and On-Demand web/AppSec testing products.
- Detectify: External attack surface management platform with crowdsourced vulnerability research. Directly comparable to ImmuniWeb Discovery's external ASM and dark web monitoring capabilities.
- Bugcrowd: Crowdsourced penetration testing and ASM platform combining human security researchers with platform automation. Similar human + automation testing model to ImmuniWeb's pen testing products.
- Snyk: Developer security platform providing SAST, SCA, container, and IaC security. Overlaps with ImmuniWeb's DevSecOps-integrated AppSec scanning and targets a similar enterprise and mid-market buyer base.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
ImmuniWeb social profiles
Digital presenceImmuniWeb compliance and trust
Trust signalCompliance3 records
ImmuniWeb financial estimates
Financial estimateRevenue estimate
Valuation estimate
ImmuniWeb leadership team
Management profileNumber of profiles
Profiles7 records
ImmuniWeb funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
ImmuniWeb M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about ImmuniWeb
What does ImmuniWeb do?
ImmuniWeb operates an AI-powered Application Security and Compliance Platform that combines proprietary machine learning technology with human expert penetration testers to deliver web, mobile, and API security testing, attack surface management, dark web monitoring, and compliance reporting. The platform is offered through six integrated modules (Discovery, Neuron, Neuron Mobile, On-Demand, MobileSuite, and Continuous) under a subscription model with a contractual zero false positive SLA, serving over 1,000 enterprise customers across 50+ countries.
Is ImmuniWeb a public or private company?
ImmuniWeb is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was ImmuniWeb founded?
ImmuniWeb was founded in 2015. It employs 101 to 250 people.
Where is ImmuniWeb based?
ImmuniWeb is headquartered in Geneva, Switzerland, in the Europe region.
How does ImmuniWeb make money?
Three revenue lines are on record. SaaS Subscription — Application Security Testing is the primary driver. The others are saaS Subscription — Attack Surface Management (Fixed Monthly) and professional Services — Penetration Testing.
Who are ImmuniWeb's main competitors?
Broad incumbents on record are Qualys, Tenable and Rapid7. Direct peers are Checkmarx, Veracode, HackerOne, Invicti (Netsparker), Detectify, Bugcrowd and Snyk.
Does ImmuniWeb have an API?
Yes. ImmuniWeb offers API access for integrating security testing data with external systems. The API enables synchronization of attack surface management data directly with SIEM systems, export of vulnerability findings to PDF or XLS files, and automated CI/CD pipeline integration for web and API security testing. API is available for customers to integrate findings into their existing security infrastructure.
What industry is ImmuniWeb in?
ImmuniWeb's product category is Application Security Testing. Its primary akta.pro industry code is HLACAJAN, Vulnerability Management, Pen Testing & Attack Surface Management (ASM). Its NAICS code is 54151 and its SIC code is 7373.