Specular

What Specular does

Specular is a private cybersecurity software company, headquartered in San Francisco and incorporated as Specular Corporation, that sells an AI-driven platform for external attack surface management, continuous threat exposure management (CTEM), and external pen testing. The product targets enterprise security teams, IT and infrastructure operators, and CISOs at organizations with hybrid (on-prem plus cloud) environments, with healthcare and education as emphasized verticals.

The platform is built on a modular multi-agent framework orchestrated by an Intelligence Core, comprising Recon Agents for continuous asset discovery (including shadow IT), Exploit Validation Agents that replay requests and parse responses to confirm real-world exploitability, and Playbook Agents that generate tailored remediation steps and route them into ticketing or chat tools. Deep Research AI agents produce customized natural-language analysis per finding, and a RAG pipeline queries ServiceNow, Microsoft Azure, SharePoint, Confluence, JIRA, and CMDB systems to enrich external vulnerability data with internal asset ownership and business context. Specular has achieved SOC2 Type II certification and disclosed a CVE (CVE-2024-56735) in healthcare credentialing software affecting 23 organizations.

The company operates a pure enterprise SaaS model with annual subscriptions, no publicly disclosed pricing, and a consultative demo-driven sales motion; its distribution is direct-only, with no channel, marketplace, or self-serve path. Customers visible in source material are limited to SUNY ESF (education) and an unnamed healthcare organization. Founded in 2024 with 1-10 employees and early-stage backing from Accelerator Ventures and Leblon Capital, Specular is in an early commercialization phase with no disclosed revenue.

Name

Specular

Legal name

Specular Corporation

Website

https://specular.ai

Company type

Private

Founded year

2024

Operating status

Operating

Headcount range

11–50 employees

Short description

Specular is a San Francisco-based AI cybersecurity platform that uses a multi-agent framework (Recon, Exploit Validation, Playbook) to continuously discover, validate, and remediate external vulnerabilities for enterprise security teams, with healthcare and education as lead verticals.

Ownership category

akta.pro rank

Product category

Vulnerability Management

NAICS

Computer Systems Design and Related Services (5415), Security Systems Services (56162)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Vulnerability Assessment & Scanning (HDADAHAA)

akta.pro secondary industry

Enterprise Search, Indexing & Content Discovery (HDAEAGAH)

Keywords

• Attack surface management
• Vulnerability management
• Continuous threat exposure
• External pen testing
• AI security platform

Headquarters

HQ city

San Francisco

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations

Revenue model

1. SaaS Platform Subscription: Specular operates as a SaaS cybersecurity platform with subscription-based pricing. The platform is sold as an annual subscription with enterprise contracts negotiated through the 'Request a Demo' sales process. No freemium or usage-based model is disclosed.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels3 records

Core offering

Specular is an AI-driven cybersecurity SaaS platform that deploys a multi-agent framework to continuously discover, validate, and remediate vulnerabilities and misconfigurations across an organization's external attack surface. It combines Recon Agents for continuous asset and shadow-IT discovery, Exploit Validation Agents that confirm real-world exploitability through HTTP request/response analysis, and Playbook Agents that generate tailored remediation steps and route them into Jira, Slack, and CMDB-connected workflows, all enriched via RAG against internal knowledge stores.

Product overview

Specular is a unified AI-driven cybersecurity platform built on a modular multi-agent framework. The core Specular platform orchestrates three specialized agent types: Recon Agents (for continuous asset discovery), Exploit Validation Agents (for exploitability confirmation), and Playbook Agents (for generating remediation guidance). Deep Research AI enriches findings with internal context via RAG integrations. The platform addresses three primary use cases: Attack Surface Management (continuous external exposure analysis), Continuous Threat Exposure Management (CTEM), and External Pen Testing—all powered by the same underlying agentic architecture.

Differentiator

Problem solved

Functional benefit

Products and services

• Specular Platform AI-driven SaaS security platform built on a modular multi-agent framework that bridges security, engineering, and IT by continuously identifying, assessing, and remediating external-facing vulnerabilities and misconfigurations across hybrid (on-prem, cloud, and third-party) environments. Sold to enterprise security teams, IT teams, and CISOs via an annual SaaS subscription with demo-led enterprise sales.
• Attack Surface Management Continuous external exposure analysis module providing a continuously updated view of internet-facing services across on-prem, cloud, and third-party infrastructure, with validated exploitability findings enriched by internal business context. Marketed on a dedicated use-case page for enterprise security teams managing external attack surface.
• Continuous Threat Exposure Management (CTEM) Continuous, attacker-driven view of external attack surface that uses AI agents to execute the CTEM lifecycle—scoping, discovery, prioritization, validation, and mobilization—replacing manual and episodic testing with autonomous agentic workflows that deliver validated, fix-ready findings.
• External Pen Testing Continuous external assessment intended as a replacement for static, periodic pentests; uses autonomous agentic workflows to discover external exposures, validate exploitability recursively, and produce customized remediation guidance in real time.

Quantifiable outcome

• Cuts triage time dramatically by validating exploitability and removing false positives
• +3 more outcomes

Named customers3 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration6 records

AI capability8 records

Feature6 records

Partnerships

Eight partnerships are on record, tiered core.

• ServiceNowcoreTechnology or IntegrationIntegration with ServiceNow allows Specular to query ServiceNow incidents and tickets affiliated with services, enabling asset ownership identification and ticket enrichment for remediation workflows.
• Microsoft AzurecoreTechnology or IntegrationIntegration with Azure enables querying of networking rules and cloud metadata to enrich vulnerability findings with deployment context and asset ownership information.
• SharePointcoreTechnology or IntegrationIntegration allows querying SharePoint to identify asset owners and access internal documentation for vulnerability context enrichment.
• ConfluencecoreTechnology or IntegrationIntegration with Confluence enables querying internal wikis and documentation to enrich discovered services and vulnerabilities with business context.
• JIRAcoreTechnology or IntegrationPlaybook agents route remediation steps directly into JIRA ticketing system, enabling seamless workflow integration for engineering teams.
• SlackcoreTechnology or IntegrationRemediation guidance is delivered directly to Slack, enabling real-time notifications and workflow integration for security and IT teams.
• CMDB SystemscoreTechnology or IntegrationIntegration with Configuration Management Databases enables correlation of external exposure data with internal asset information, asset ownership, and deployment context.
• DNS Providers (AWS Route 53, Azure DNS, GoDaddy)coreTechnology or IntegrationDirect integrations with domain registrars and DNS providers enable comprehensive external attack surface enumeration combining outside-in and inside-out approaches.

Scale indicators1 record

Recent moves6 records

Expansion highlights5 records

Market position

Strengths4 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/specular-security

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds1 record

Investors2 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Specular