What Positive Technologies does

Positive Technologies (legal entity AO Pozitiv Teknoldzhiz, MOEX ticker POSI) is a Russian-founded (2002) and Moscow-headquartered cybersecurity company that built an integrated portfolio of 25+ proprietary products under its "Result-Driven Cybersecurity" (RKB) methodology. The portfolio spans MaxPatrol SIEM (with an in-house LogSpace DB and a BAD ML module of ~30 models), MaxPatrol VM, MaxPatrol EDR/EPP, MaxPatrol 360 for SOC orchestration, MaxPatrol O2 (AI-first autonomous response) and MaxPatrol Carbon (stochastic attack-path prediction), the PT NGFW (1-400 Gbps throughput, FSTEK-certified), PT NAD, PT Sandbox, PT ISIM (ICS security with 130+ protocol support), PT EASM (built on CyberOK's SКIPA), PT X (outcome-guaranteed cloud-managed protection), PT Data Security, Kiberpogoda attack-forecasting, and the PT Naira AI assistant that operates without external LLM calls. The technology stack is anchored by the Positive Research center's threat intelligence — 1,000+ incident investigations per year, 100+ zero-day disclosures per year, 16,000+ industrial threat rules — which feeds automated expertise packages into the product ecosystem.

The company serves over 4,000 organizations globally, including 80% of Russia's Expert-400 rated enterprises, with named customers concentrated in Russian state-owned and strategic sectors: VTB, Rostec, Rosneft, Lukoil, Transneft, Rostelecom, MegaFon, Russian Railways, Rosseti, Rosenergoatom, Magnit, and government entities. Its customer segments span government and CII, large enterprises, industrial/OT operators, telecoms/MSSPs, and SMB. Go-to-market combines direct enterprise sales, inside sales with free pilots/test drives, channel partners and MSSPs across Russia/CIS, and dedicated regional operations in Vietnam, Latin America (Brazil/Mexico/Argentina), and CIS. Revenue is generated through software subscriptions and perpetual licenses, hardware appliances (PT NGFW PAK and PT ISIM), professional services (PT ESC incident response, implementation), managed services (PT X), and education/training (Positive Education).

H1 2025 deliveries were reported at 7.4 billion RUB (+49% YoY); the company has been publicly listed on the Moscow Exchange since 2021 and reported over 210,000 shareholders as of mid-2026. International expansion is concentrated in markets where Western vendors are constrained — CIS (Belarus, Kazakhstan, Uzbekistan, Kyrgyzstan), Iran, Southeast Asia (Vietnam, Myanmar), Latin America (Brazil, Mexico, Argentina, Venezuela), and Mongolia — under a "digital sovereignty" positioning that the company explicitly pursues in partnership with allied governments.

Name

Positive Technologies

Legal name

АО «Позитив Текнолоджиз» (Positive Technologies JSC)

Website

https://ptsecurity.com

Company type

Public

Founded year

2002

Operating status

Operating

Headcount range

1,001–5,000 employees

Short description

Positive Technologies is a Moscow-headquartered, publicly traded (MOEX: POSI) Russian cybersecurity vendor offering 25+ integrated products — SIEM, EDR, NGFW, ICS security, AI-driven SOC, and managed protection — to 4,000+ government, banking, telecom, and critical-infrastructure customers across Russia, CIS, Southeast Asia, and Latin America.

Ownership category

akta.pro rank

Product category

Cybersecurity Software Platform

NAICS

Security Systems Services (56162), Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (5415)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ)

akta.pro secondary industries

Network Security Services (Firewall/VPN/ZTNA/SASE Integration) (BPAEAEAG), OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN), Cloud Security & Compliance Services (BPAEACAG), Remote Access & Privileged Access for OT (ZTA/PAM for Vendors) (HDADAJAG)

Keywords

• Cybersecurity software platform
• Vulnerability management solutions
• Endpoint security software
• Industrial control security
• Managed security services

Headquarters

HQ city

Seoul

HQ country

South Korea

HQ region

Asia

Offices5 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Supply Chain

Revenue model

1. Software Licenses and Subscriptions: Sale and licensing of 25+ proprietary cybersecurity products including MaxPatrol SIEM, MaxPatrol VM, MaxPatrol EDR, MaxPatrol EPP, PT NGFW, PT NAD, PT Sandbox, PT ISIM, and others. Products are offered as subscriptions and perpetual licenses
2. Hardware Appliances: Sale of hardware appliances including PT NGFW packet hardware complexes (PAK) in various models (1005 to 3050) with throughput from 1 Gbps to 400 Gbps, and PT ISIM hardware-software complexes for industrial infrastructure
3. Professional Services: Incident response services through PT ESC, retrospective analysis, expert center services, technical support, and professional services for product implementation and management
4. Cloud / Managed Services: PT X cloud-based security solution providing 24/7 monitoring and response as a managed service with guaranteed results; PT ISIM and NGFW available as cloud/virtual solutions
5. Education and Training: Training courses through Positive Education center including product operation courses, cybersecurity skills development, and Standoff cyber polygon practical training

Pricing tiers

Go-to-market motion5 records

Distribution channels9 records

Marketing channels12 records

Core offering

Positive Technologies develops and sells an integrated cybersecurity platform comprising 25+ proprietary products covering security information and event management (MaxPatrol SIEM), vulnerability management (MaxPatrol VM), endpoint protection and detection (MaxPatrol Endpoint Security), next-generation firewall (PT NGFW), network traffic analysis (PT NAD), sandboxing (PT Sandbox), industrial control system security (PT ISIM), external attack surface management (PT EASM), automated penetration testing (PT Dephaze), email security, AI-driven autonomous SOC operations (MaxPatrol O2, MaxPatrol Carbon), and the PT Naira AI assistant. The company also delivers managed cloud-based expert protection (PT X), incident response services (PT ESC), professional services, and the Standoff cyber range and Positive Education training programs.

Product overview

Positive Technologies is a cybersecurity company offering a comprehensive portfolio of security solutions under the 'Result-Driven Cybersecurity' (RKB) methodology. The product ecosystem operates as an integrated platform-plus-modules architecture rather than standalone products. Core products include: MaxPatrol SIEM (security information and event management with ML-based anomaly detection); MaxPatrol O2 and MaxPatrol Carbon (meta-products for autonomous SOC operations and proactive threat management); MaxPatrol VM (vulnerability management); MaxPatrol Endpoint Security (unified EPP/EDR endpoint protection); MaxPatrol 360 (unified SOC management). Network security products include: PT NGFW (next-generation firewall with 400+ Gbps throughput); PT NAD (network traffic analysis); PT Sandbox (malware analysis); PT ISIM (industrial control system security with 130+ protocol support). Application security includes: PT Application Firewall; PT Application Inspector; PT BlackBox; PT MAZE (mobile app testing with AI agents). Cloud and data security products include: PT X (cloud-based expert protection); PT Data Security (AI-powered data classification and protection); PT Container Security. The ecosystem also includes: PT EASM (external attack surface management); Kiberpogoda (attack forecasting); PT Email Security (multi-layer email protection); PT Dephaze (automated pentesting); XSpider PRO (vulnerability scanner); PT Threat Intelligence; PT Naira (AI assistant). Services include PT ESC (incident response), Standoff cyber range, and Positive Education training platform. Products are complemented by the MITRE ATT&CK aligned expertise database with regular automatic updates.

Differentiator

Problem solved

Functional benefit

Brands

• MaxPatrol: Comprehensive security product line including MaxPatrol SIEM (security information and event management), MaxPatrol VM (vulnerability management), MaxPatrol 360, MaxPatrol EDR (endpoint detection and response), MaxPatrol EPP (endpoint protection platform), and MaxPatrol Carbon.
• Positive Education
• Standoff
• PT X
• PT NGFW
• PT NAD
• PT Application Inspector
• PT Mail Threat Scanner
• PT Sandbox
• PT Network Attack Discovery
• PT Industrial Security Incident Manager
• PT Extended Endpoint Detection and Response

Products and services

• MaxPatrol SIEM Security Information and Event Management system for enterprises and SOCs that detects complex attacks in real-time through correlation rules, ML-based behavioral anomaly detection (BAD), and automated expertise packages updated monthly; processes over 540,000 events per second per core.
• MaxPatrol O2 AI-first meta-product that automates the full incident lifecycle for SOC and security teams, conducting autonomous investigation and response to cyber threats with minimal human involvement.
• MaxPatrol Carbon Proactive cyber resilience management meta-product that automatically predicts hacker actions using stochastic algorithms and the PT Threat Modeling Engine to identify potential attack paths before breaches occur.
• MaxPatrol VM Next-generation vulnerability management system for enterprise security teams that delivers trending vulnerability data within 12 hours and supports compliance control.
• MaxPatrol Endpoint Security Unified endpoint security product combining EPP (antivirus) and EDR on a single agent, supporting 30+ operating systems including Russian domestic OS, intended for enterprise endpoint protection.
• MaxPatrol 360 Unified center for managing investigations and operational SOC work, accelerating incident response by 50% and enabling centralized management of hundreds of clients for MSSPs and large enterprises.
• PT X Cloud-based 24/7 expert-managed cybersecurity service that delivers continuous monitoring and response using LLM and ML technologies with guaranteed results and financial compensation if breaches occur; offered in Base and Pro tiers differentiated by attack value coverage.
• PT NGFW Russian next-generation firewall for high-load systems, certified by FSTEK, processing traffic at speeds exceeding 400 Gbit/s with deep packet inspection for enterprise and data center perimeters.
• PT EASM External attack surface management platform that discovers everything accessible from the internet from an attacker's perspective using hybrid ML agents and white-hat hacker expertise, helping enterprises eliminate risks before attack.
• PT Sandbox Sandbox solution that protects specific customer infrastructure by analyzing suspicious objects in isolated environments with static, behavioral, and retrospective analysis for enterprise security teams.
• PT NAD Network traffic analysis system (NTA/NDR) for enterprises that detects attacks through deep packet inspection and behavioral analysis.
• PT Application Firewall Web application firewall for continuous protection of web-facing enterprise applications through precise detection and blocking of web attacks.
• PT ISIM Industrial control system security solution that ensures cyber resilience of technological infrastructures in industrial organizations, with support for 130+ industrial protocols and FSTEK certification.
• PT Email Security Multi-layered corporate email protection system combining static, behavioral, and reputation analysis to block phishing, malware, and advanced email-borne threats.
• PT Dephaze Automated internal infrastructure penetration testing system that demonstrates realistic attack paths without requiring agent installation for enterprise security validation.
• PT Data Security Data security platform providing complete visibility and protection of corporate data regardless of format or storage location through AI-powered classification.
• XSpider PRO Next-generation vulnerability scanner providing a complete vulnerability landscape for small and medium infrastructures up to 500 hosts, with full compatibility with Russian operating systems.
• Kiberpogoda (Cyberweather) Attack forecasting platform that analyzes the external environment around companies and their ecosystems, building attack scenarios translated into business impacts.
• PT MAZE Mobile application security testing platform that uses AI agents for reverse engineering and attack simulation against customer mobile apps.
• PT Naira Cross-product AI assistant that analyzes vulnerabilities and configurations and provides recommendations in natural language, operating without external LLM dependencies and without third-party data transfer.
• PT ESC (Expert Security Center) Expert Security Center service for enterprises providing incident response, retrospective analysis, and cybersecurity monitoring for corporate systems.
• Standoff Cyber Range Platform Cyber polygon platform that recreates technology and business processes of real companies for hands-on cybersecurity training, exercises, and competitive cyber battle events.
• Positive Education Educational portal offering online courses on Positive Technologies products, cybersecurity skills development, and corporate education programs.

Quantifiable outcome

• In 100% of internal penetration tests, full infrastructure control was established by PT Dephaze
• +9 more outcomes

Named customers30 records

Segments6 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability8 records

Feature9 records

Partnerships

Four partnerships are on record, tiered core and minor.

• Government of VietnamcoreStrategic or Co-development Partner · 1 November 2025Bilateral cybersecurity cooperation agreement announced at Hanoi Convention inauguration in late 2025 as part of Russia's expanding cyber footprint across Southeast Asia. Vietnam serves as the centrepiece of Positive Technologies' regional expansion through joint training programs and partnerships enabling Southeast Asian states to build sovereign cybersecurity capabilities.
• Iran, Belarus, Kazakhstan, Uzbekistan, Kyrgyzstan (Government partnerships)coreStrategic or Co-development PartnerPositive Technologies is increasing market share through collaboration with Iran, Belarus, Kazakhstan, Uzbekistan, Kyrgyzstan, and other countries. Expansion aims to promote Russia's digital sovereignty and develop sovereign internet technologies, especially in authoritarian states.
• Wone ITminorImplementation/ SI/ Consulting PartnerWone IT is an implementation partner that works together with Positive Technologies on cybersecurity projects for enterprises. Example: joint project with AO Ural Steel (Уральская сталь) for building cybersecurity using Positive Technologies solutions.
• CyberOK (Developer of SКIPA platform)coreTechnology or IntegrationPT EASM solution is based on the SКIPA platform developed by CyberOK (software developer), which has proven its effectiveness in managing the security of the digital perimeter in national-level projects. CyberOK's technology provides the foundation for PT EASM's external attack surface management capabilities.

Scale indicators14 records

Recent moves7 records

Expansion highlights8 records

Market position

Competitive moat6 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/PTsecurity_UK
• Facebookfacebook.com/PositiveTechnologies
• LinkedInlinkedin.com/company/positive-technologies

Compliance11 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles7 records

Subsidiaries4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Positive Technologies