White Hat

What White Hat does

White Hat Cybersecurity is an Israel-founded, globally operating offensive cybersecurity services firm that has operated since 2013 and is a wholly-owned subsidiary of EPAM Systems (NYSE: EPAM). The company delivers proactive, attacker-perspective cybersecurity services to enterprise and government clients, with a stated focus on homeland security, government, finance and banking, and aerospace sectors. Named customers include Bank Hapoalim, Mizrahi Tefahot Bank, MyHeritage, FOX, the State of California, PayBox, and Grupo Salinas. The firm maintains operational offices in Tel Aviv (headquarters), London (9 Devonshire Square), Newtown, Pennsylvania, and Singapore, supporting clients across EMEA, North America, and Asia-Pacific.

The company's core technical offering is the proprietary "Eye of the Enemy" platform, which adopts an attacker's perspective to simulate threats using customized "silver bullet" payloads and AI-powered Remote Access Trojan (RAT) simulations. Payloads are deployed on customer networks multiple times per month to validate defenses against adaptive polymorphism, self-healing code, memory mutation, and C2 traffic disguised within trusted services. Beyond the platform, White Hat offers 24/7 incident response, threat hunting, full-spectrum APT simulation, and customized penetration testing across networks, cloud infrastructure, and operational technologies. The team is composed of veterans from elite Israeli military cybersecurity units, experienced security architects, and expert ethical hackers.

White Hat operates a professional services model with bespoke, quote-based engagements and multi-year contracts, sold exclusively through a direct enterprise sales motion with consultative CTAs targeting large organizations. The firm was recognized as the 2025 Outstanding Cybersecurity Consultant by the Outstanding Awards program and produces thought leadership via its "Frontline Intel" publication channel. As a subsidiary of EPAM Systems, White Hat has access to a global digital services delivery network while maintaining a focused offensive security brand.

Name

White Hat

Legal name

White-Hat, an EPAM Company

Website

https://white-hat.co.il

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

1–10 employees

Short description

White Hat Cybersecurity, a wholly-owned subsidiary of EPAM Systems, provides proactive offensive cybersecurity services—including its proprietary Eye of the Enemy platform, incident response, and threat hunting—to enterprise and government clients in finance, aerospace, homeland security, and media globally.

Ownership category

akta.pro rank

Headquarters

HQ city

Tel Aviv

HQ country

Israel

HQ region

Middle East

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Cybersecurity Consulting and Professional Services: White Hat generates revenue through bespoke cybersecurity consulting and professional services. Services include Eye of the Enemy platform engagements, incident response, threat hunting, APT simulation, and penetration testing. Engagements are project-based and consultancy-driven, sold directly to enterprise clients. Revenue is derived from professional services delivery, likely on a contract or project fee basis.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels3 records

Core offering

White Hat is a cybersecurity services firm that delivers proactive, attacker-perspective cyber defense to enterprise and government clients. Its core offering is the proprietary "Eye of the Enemy" platform, which uses customized silver-bullet payloads and AI-powered RAT simulations to mimic real adversary behavior on customer networks. This is complemented by managed services including Incident Response (24/7 global breach support), Threat Hunting, Advanced Persistent Threat (APT) simulation, and Penetration Testing.

Product overview

White Hat is a cybersecurity services firm (an EPAM company) offering a portfolio of proactive defense services built on an attacker's perspective. The core offering includes the Eye of the Enemy platform, which provides intelligence-driven attack simulation using customized payloads, complemented by managed security services: Incident Response (24/7 breach support), Threat Hunting (proactive adversary detection), Advanced Persistent Threat (APT) simulation, and Penetration Testing. The Eye of the Enemy platform serves as the proactive defense hub, while the service offerings address reactive incident response and continuous security validation needs.

Differentiator

Problem solved

Functional benefit

Products and services

• Eye of the Enemy A defense strategy platform that adopts the attacker's perspective to identify and block threats. Uses customized 'silver bullet' payloads to simulate real attacks, tailored to each customer's system, deployed monthly to develop rules that fortify networks and keep defenses ahead of evolving threats. Targeted at enterprise and government clients.
• Incident Response 24/7 worldwide incident response team that ensures swift return to normal operations after cyber attacks. Collaborates with client security teams to study attack vectors, implement solutions, and recover using client's existing resources. Targeted at enterprise and government organizations under active breach.
• Threat Hunting Proactive service that seeks adversaries and suspicious activities within an organization's perimeter. Identifies weak points, protects critical assets, detects malware, blocks attack vectors, and enhances automated detection systems to prevent future breaches. Targeted at large organizations in finance, government, aerospace, and homeland security.
• Advanced Persistent Threat (APT) Simulation Simulates full-scale attack flows on an organization from intelligence gathering to attack execution. Conducts thousands of attack scenarios across various vectors to identify and exploit weaknesses including infrastructure vulnerabilities and human factors. Targeted at enterprise and government security teams.
• Penetration Testing Customized penetration tests tailored to client environments covering network connections, organizational scope, application layers, cloud and infrastructure, along with detailed information security surveys. Targeted at enterprise and government clients requiring security validation.

Quantifiable outcome

• Payloads run on customer networks multiple times per month to keep clients ahead of attackers

Named customers7 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

One partnership is on record.

• EPAM SystemscoreStrategic or Co-development PartnerWhite Hat is a wholly-owned subsidiary of EPAM Systems, a global software product development and platform services company. The acquisition by EPAM integrates White Hat's offensive cybersecurity capabilities with EPAM's broader digital transformation and software engineering services. White Hat operates under the EPAM brand as 'White Hat, an EPAM Company.'

Scale indicators2 records

Recent moves5 records

Expansion highlights4 records

Broad incumbents

• Mandiant (Google Cloud): Mandiant is a leading incident response and threat intelligence firm now part of Google Cloud. It directly overlaps with White Hat's incident response, threat hunting, and APT simulation services, but operates at much larger scale with a broader portfolio.
• CrowdStrike Services: CrowdStrike's services arm delivers incident response, proactive adversary hunting, and penetration testing to enterprise and government clients. It is a broad incumbent with overlapping offensive security capabilities and a much larger installed base than White Hat.
• Trustwave: Trustwave provides managed detection and response, penetration testing, and incident response to enterprises globally. It overlaps with White Hat across the offensive and defensive cybersecurity services stack but at significantly larger scale.
• Rapid7 Services: Rapid7 combines a security data platform with offensive services including penetration testing and managed detection and response. It is a broader incumbent serving similar enterprise and financial-services customer segments as White Hat.
• Optiv: Optiv is a large cybersecurity solutions integrator offering advisory, managed security, and offensive services. It competes with White Hat for enterprise cybersecurity consulting engagements and offers a broader portfolio of services.
• Palo Alto Networks Unit 42: Unit 42 is Palo Alto Networks' threat intelligence and incident response consultancy. It competes head-to-head with White Hat on APT simulation, red team engagements, and incident response for large enterprises, but benefits from integration with Palo Alto's broader security platform.

Direct peers

• NCC Group: NCC Group is a UK-headquartered global cybersecurity consultancy offering penetration testing, incident response, and threat intelligence. Comparable to White Hat in service mix, geographic reach (UK/US/Asia-Pacific offices), and enterprise/government customer focus.
• Coalfire: Coalfire is a cybersecurity advisory firm offering penetration testing, red team, and incident response services. It competes with White Hat in offensive security engagements for regulated industries, with a comparable boutique-to-mid-market service profile.
• Bishop Fox: Bishop Fox is a pure-play offensive security firm specializing in penetration testing, red teaming, and adversary emulation. It is one of the closest direct competitors to White Hat in boutique offensive cybersecurity services for large enterprises.

Emerging players

• Cybereason: Cybereason is an Israeli-origin cybersecurity firm offering endpoint detection, threat hunting, and incident response. It shares White Hat's Israeli cybersecurity talent heritage and overlapping service portfolio but has scaled into a global product-led company.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/3510657

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about White Hat