What Borg does

Borg is a privately held offensive-security company headquartered in Trondheim, Norway, founded in mid-2024 by five co-founders (Hans, Alexander, Theodor, Jonas, Herman) who originated as web3 bug-bounty researchers. The company sells the Odin platform, which combines four operational verticals — Discover, Attack, Report & Confirm, Mitigate & Retest — and packages three core modules: Mjolnir (autonomous penetration testing), Huginn (continuous asset discovery across subdomains, related domains, IP ranges, and open ports), and Gungnir (continuous red teaming). These capabilities are delivered either as platform subscriptions or through an Embedded Research Service in which Borg operates as a long-term extension of the client's security team.

The business was originally structured as Borg Research (parent) and Borg Security (operating subsidiary) and was rebranded to a single 'Borg' brand on January 2, 2026, consolidating the predecessor Watchdog asset-discovery framework into Odin. The company initially focused on 'web2.5' platforms — web3 applications built on web2 infrastructure where classic vulnerabilities such as XSS, IDOR, and broken access controls can result in irreversible loss of funds — and has since expanded its stated target verticals to fintech, AI, infrastructure, and high-traffic consumer applications. GTM is enterprise-direct with a 'Book a Demo' motion and quote-based pricing; no pricing tiers or revenue figures are publicly disclosed.

Borg is bootstrapped with no external funding rounds disclosed in the available material and operates with 1-10 employees, having moved to a second, larger Trondheim office in May 2025 after outgrowing its first office (August 2024) within nine months. The company holds a Silver Supporter relationship with OWASP and maintains a content-led marketing presence on its blog, X, and LinkedIn. Named customers are not disclosed.

Name

Borg

Legal name

Borg Security AS

Website

https://borgsecurity.io

Company type

Private

Founded year

2024

Operating status

Operating

Headcount range

1–10 employees

Short description

Borg is a Trondheim-based offensive security company that sells the Odin platform — combining autonomous pentesting (Mjolnir), continuous asset discovery (Huginn), and continuous red teaming (Gungnir) — plus long-term Embedded Research Service partnerships to enterprise clients in web3, fintech, AI, infrastructure, and high-traffic consumer applications.

Ownership category

akta.pro rank

Product category

Offensive Security / Continuous Penetration Testing

NAICS

Testing Laboratories and Services (54138), Other Computer Related Services (541519)

SIC

Services-Testing Laboratories (8734)

akta.pro primary industry

Penetration Testing Platforms (PTaaS) (HDADAHAG)

akta.pro secondary industries

Penetration Testing & Red Teaming (BPAKADAE), Vulnerability Management & Penetration Testing Services (BPAEADAD), Penetration Testing & Red Teaming (BPAKAHAF)

Keywords

• Offensive security testing
• Continuous penetration testing
• Asset discovery platform
• Red teaming services
• Application security platform

Headquarters

HQ city

Trondheim

HQ country

Norway

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Embedded Research Service: Long-term offensive security partnerships where Borg operates as an extension of the client's team. These are ongoing partnerships rather than one-time engagements.
2. Platform Subscriptions: Access to the Odin platform with its four verticals: Discover, Attack, Report & Confirm, and Mitigate & Retest.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

Borg sells the Odin unified offensive security platform, which combines continuous asset discovery (Huginn), autonomous penetration testing (Mjolnir), and continuous red teaming (Gungnir) across four verticals — Discover, Attack, Report & Confirm, and Mitigate & Retest. Alongside the platform, Borg delivers an Embedded Research Service in which its security researchers operate as a long-term extension of enterprise clients' teams. Customers are enterprises that ship code quickly and need continuous, integrated security coverage instead of annual pentest reports.

Product overview

Borg offers a unified platform called Odin with four operational verticals (Discover, Attack, Report & Confirm, Mitigate & Retest) plus specialized products. The product suite includes Mjolnir (autonomous pentesting), Huginn (continuous asset discovery), and Gungnir (continuous red teaming), all integrated into the Odin platform. The Embedded Research Service provides long-term offensive security partnerships. Originally founded as Borg Security specializing in web2.5 security (bridging web2 and web3), Borg has expanded to serve fintech, AI, infrastructure, and high-traffic consumer applications.

Differentiator

Problem solved

Functional benefit

Brands

• Mjolnir: Autonomous Pentesting product that performs automated penetration testing to find vulnerabilities that traditional scanners miss.
• Huginn
• Gungnir
• Odin
• Watchdog

Products and services

• Odin Platform Unified offensive security platform combining continuous asset discovery, automated pentesting, continuous red teaming, reporting, and remediation tracking. Built for enterprises that ship code rapidly and need security embedded into developer workflows.
• Mjolnir Autonomous penetration testing solution that identifies vulnerabilities in web applications without prior knowledge of the codebase. Finds issues that traditional scheduled scanners and pentests miss, operating as part of the Odin platform's Attack vertical.
• Huginn Continuous asset discovery framework that identifies exposed subdomains, related domains, IP ranges, and open ports with precision. Provides ongoing visibility into organizational attack surface as part of Odin's Discover vertical.
• Gungnir Continuous red teaming capability providing ongoing offensive security testing beyond point-in-time assessments. Operates as an extension of the client's security team and forms part of Odin's Attack vertical.
• Embedded Research Service Long-term offensive security partnership where Borg operates as an extension of the client's team, delivering continuous research and testing tailored to the organization's specific risk profile.

Segments5 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability1 record

Feature5 records

Partnerships

One partnership is on record.

• OWASP (Open Web Application Security Project)minorOthersBorg is a Silver Supporter of OWASP, demonstrating community engagement and industry credibility in the application security space.

Scale indicators2 records

Recent moves7 records

Expansion highlights5 records

Direct peers

• Trail of Bits: Trail of Bits is a security research and consulting firm with deep web3/blockchain expertise that also publishes open-source offensive security tooling. Borg's web2.5 specialization and researcher-driven positioning make this a strong analogue.
• Detectify: Detectify delivers crowdsourced attack-surface monitoring and automated web application pentesting, directly overlapping with Borg's Huginn (continuous asset discovery) and Mjolnir products. Both companies are also Northern European-headquartered.
• Pentera: Pentera is the leading automated security validation / PTaaS platform, offering continuous, agent-driven penetration testing against enterprise infrastructure. It is the closest direct competitor to Borg's Mjolnir autonomous-pentest and Odin platform.
• HackerOne: HackerOne is the largest bug-bounty and Pentest as a Service platform, combining crowdsourced researcher access with platform tooling. Borg's positioning as researcher-led offensive security with proprietary automation is directly comparable.
• Bishop Fox: Bishop Fox is a research-led offensive security firm that combines manual expertise with proprietary tooling (e.g., its Cosmos platform) for continuous testing. Its model and customer base closely mirror Borg's Embedded Research Service offering.
• Hadrian: Hadrian provides continuous offensive security through automated asset discovery and hacker-style testing. Like Borg, it combines ASM with offensive depth, is Europe-based (Amsterdam), and targets fast-shipping digital companies.
• Cobalt: Cobalt runs a PTaaS marketplace connecting enterprises with vetted security testers for on-demand and continuous pentesting engagements, closely mirroring Borg's Embedded Research Service plus platform subscription model.
• Bugcrowd: Bugcrowd operates a crowdsourced security platform spanning bug bounties, pentests, and ASM, competing for the same continuous-offensive-security budget that Borg targets with Odin.

Broad incumbents

• Snyk: Snyk is a broad developer-security platform covering SAST, SCA, IaC, and increasingly runtime/offensive capabilities. It does not directly compete on PTaaS but competes for the same "secure developer workflow" budget that Borg's Odin platform targets.
• Tenable: Tenable is a major vulnerability management incumbent (Nessus) that has added attack-surface management and exposure validation features. Its broader portfolio overlaps with Borg's Discover and Report verticals but lacks the dedicated red-teaming and pentesting depth.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/BorgHQ
• LinkedInlinkedin.com/company/borghq

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Borg