What Casco does

Casco (legal entity Transmittr, Inc.) is a San Francisco-based cybersecurity company founded in 2025 by ex-AWS AI & Security engineers Rene Brandel (CEO) and Ian Saultz (CTO). The company operates an agentic AI-powered autonomous penetration testing platform that continuously tests web applications, APIs, cloud infrastructure, and AI systems for vulnerabilities, with an optional human-supervised tier (Casco Supervised) pairing the AI agent with ex-AWS, NSA, and US Military security engineers. Testing coverage spans OWASP Top 10, OWASP API Top 10, OWASP LLM Top 10, OWASP Cloud Top 10, and the OWASP Agentic Threat Model. The platform is CREST-accredited as of 2026, OWASP AI Exchange Gold Sponsor, and the company reports 300+ customer engagements including Gusto, Spreedly, SixtyFour, CrewAI, Whop, and Levelsfyi.

The product is delivered as a cloud-based subscription with monthly billing and tiered pricing, supplemented by professional services for CREST-attested supervised pentests. Underlying AI compute relies on third-party providers (AWS AI and Hugging Face) wrapped in a proprietary agentic orchestration layer. Go-to-market combines direct enterprise field sales (Technical Account Executives at $350,000 OTE targeting AppSec leaders and CISOs), self-service demo booking for mid-market, and partner channels including Vouch Insurance (20% off mutual annual pentest), Scout, and Network Right. The company is seed-funded (June 2025) by Y Combinator, FundersClub, Pioneer Fund, and Rebel Fund, with 11–50 employees and active hiring across engineering and revenue roles.

Name

Casco

Legal name

Transmittr, Inc.

Website

https://casco.com

Company type

Private

Founded year

2025

Operating status

Operating

Headcount range

11–50 employees

Short description

Casco (Transmittr, Inc.) is a San Francisco-based cybersecurity company founded in 2025 that provides an agentic AI-powered autonomous penetration testing platform for web apps, APIs, cloud infrastructure, and AI systems, serving 300+ customers from AI startups to enterprises like Gusto and Spreedly.

Ownership category

akta.pro rank

Product category

Application Security Testing

NAICS

Testing Laboratories and Services (541380)

SIC

Services-Testing Laboratories (8734)

akta.pro primary industry

Penetration Testing Platforms (PTaaS) (HDADAHAG)

Keywords

• Autonomous security testing
• Penetration testing services
• AI security testing
• Application vulnerability assessment
• Cloud security testing

Headquarters

HQ city

San Francisco

HQ country

United States

HQ region

North America

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Subscription-based Cloud Security Testing: Cloud-based autonomous security testing service with subscription pricing. Customers pay monthly fees based on product tier and usage. Automatic monthly billing with payment method on file.
2. Supervised Penetration Testing Services: Expert human security engineers backed by autonomous testing platform deliver CREST-approved penetration tests with human attestation. Covers OWASP Top 10, OWASP API Top 10, OWASP LLM Top 10, OWASP Cloud Top 10, and OWASP Agentic Threat Model.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels5 records

Core offering

Casco provides a cloud-based autonomous security testing platform that uses agentic AI to continuously probe web applications, APIs, cloud infrastructure, and AI systems for vulnerabilities. The core offering is paired with an optional Casco Supervised service tier where human security engineers (ex-AWS, NSA, US Military) validate findings, deliver CREST-accredited penetration tests, and produce detailed reports with CVSS scoring, reproduction steps, and prioritized remediation recommendations. The platform also offers one-click automated retest verification once fixes are applied.

Product overview

Casco offers a cloud-based autonomous security testing platform for web apps, APIs, infrastructure, and AI systems. The core product is the Casco Autonomous Security Testing platform, which operates continuously and optionally with human supervision. An enhanced tier called Casco Supervised pairs autonomous pentesting agents with expert human security engineers. The company also provides free utility tools including a Bug Bounty Budget Calculator and CVSS Calculator.

Differentiator

Problem solved

Functional benefit

Brands

• Casco Supervised: Expert human security engineers combined with autonomous pentesting agent for penetration testing services
• Bug Bounty Budget Calculator
• CVSS Calculator

Products and services

• Casco Autonomous Security Testing Cloud-based autonomous security testing platform that continuously tests web applications, APIs, infrastructure, and AI systems for vulnerabilities; human supervision is available optionally.
• Casco Supervised Expert human security engineers (formerly of AWS, NSA, and US Military) combined with the autonomous pentesting AI agent, covering OWASP Top 10, OWASP API Top 10, OWASP LLM Top 10, OWASP Cloud Top 10, OWASP Agentic Threat Model, and proprietary threat vectors; includes false-positive verification and direct communication with engineers.
• Bug Bounty Budget Calculator Free tool for estimating bug bounty program costs based on company size and expected vulnerability findings, using real market data from 2024-2025.
• CVSS Calculator Quick CVSS (Common Vulnerability Scoring System) calculator tool that accepts vector values and auto-copies results to clipboard.

Quantifiable outcome

• Trusted by 300+ companies from enterprises to fast-moving startups
• +2 more outcomes

Named customers14 records

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability3 records

Feature4 records

Partnerships

Four partnerships are on record, tiered core and minor.

• Vouch InsurancecoreGTM or Marketing Partner · 8 June 2025Partnership providing mutual customer benefits: Vouch Insurance customers receive 20% discount on annual pentesting with Casco, while Casco customers receive up to 5% off Vouch insurance premiums. Includes priority scheduling for security reviews covering web, cloud, and AI applications.
• CrewAIcoreStrategic or Co-development Partner · 28 May 2025Leading multi-agent AI platform chose Casco for security testing, demonstrating CrewAI's commitment to providing a secure and trustworthy environment. Casco's specialized focus on agentic AI security helps CrewAI innovate rapidly and securely.
• ScoutminorGTM or Marketing PartnerPartner providing 20% off Scout subscription for the first year to mutual customers. Scout is an AI workflow platform for creators and growing teams.
• Network RightminorGTM or Marketing PartnerFractional IT team partnership offering up to 20% discount on annual pentesting with Casco and up to 20% discount with Network Right IT Services for startups and scale-ups.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• HackerOne: HackerOne is a major bug bounty and pentest platform with a large community of security researchers and an enterprise product suite. It competes with Casco in the on-demand and continuous security testing space, particularly for organizations that already use bug bounty programs.
• Cobalt: Cobalt is a leading Penetration Testing as a Service (PTaaS) platform that connects customers to a vetted community of testers. Like Casco, it offers on-demand, cloud-based pentest delivery and is moving into continuous testing, making it the closest direct competitor in PTaaS category and GTM motion.
• Bugcrowd: Bugcrowd operates a crowdsourced security testing platform combining bug bounty, PTaaS, and attack surface management. It is a direct peer to Casco in offering continuous and on-demand testing services to enterprise security teams.
• Bishop Fox: Bishop Fox is a long-established offensive security firm offering traditional and continuous penetration testing services. It competes with Casco in the high-quality, expert-led pentest segment that Casco targets with its Casco Supervised tier.

Broad incumbents

• NCC Group: NCC Group is a large global cybersecurity consultancy with a substantial penetration testing practice. It is a broad incumbent in the same category as Casco, particularly competing for enterprise and regulated-buyer pentest engagements.
• Snyk: Snyk is a broad developer security platform covering code, dependencies, containers, and infrastructure, and has been expanding into AI-application security. It competes with Casco at the AppSec buyer level, though with a more developer-tooling focus than pentesting.

Emerging players

• Apiiro: Apiiro provides application and code risk analysis with growing AI/LLM-related security capabilities. It is an emerging player with partial overlap to Casco's mission of identifying application and AI-system risks before they reach production.
• Protect AI: Protect AI offers security and testing tools specifically for AI/ML systems, including LLM and ML model vulnerability scanning. It is an emerging player in the AI-system security testing niche that Casco also targets.
• Traceable AI: Traceable AI focuses on API and AI application security, including testing for LLM and AI-agent-specific threats. It overlaps with Casco's API and AI-system testing coverage, though from a more productized AppSec platform angle rather than pentest-as-a-service.

Regional players

• Outpost24: Outpost24 is a European-headquartered PTaaS and attack surface management vendor with strong presence outside the US. It is a regional player that competes with Casco in the PTaaS category, particularly for European enterprise customers.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds2 records

Investors5 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Casco