Achilles Heel Technologies

What Achilles Heel Technologies does

Achilles Heel Technologies is a privately held cybersecurity firm founded in 2017 and headquartered in Orem, Utah, that develops proprietary mathematical modeling software to identify vulnerabilities in complex cyber-physical-human systems. The company's core technology applies research in multiagent systems, game theory, distributed optimization, and model reduction to model interdependencies between cyber, physical, and human components of critical infrastructure, enabling customers to prioritize defensive investment against the attacks that would cause the most damage. Its product portfolio comprises four solution areas: Electrical Grid & Power Systems Vulnerability Analysis, an Emergency Services Suite (including NG-9-1-1 System Vulnerability Analysis and a Simulation Software Suite), Water System Vulnerability Analysis, and broader Critical Infrastructure Protection Services (penetration testing, digital twinning, attack design modeling).

The company sells primarily to U.S. federal government agencies — most notably the Department of Homeland Security (DHS S&T) and the Department of Energy (DOE) — through SBIR grant programs and direct procurement, with no documented commercial enterprise licensing revenue. Identified contract awards total approximately $10.16M, including a $1.96M DHS award in 2020 and an $8.2M DOE SBIR R&D grant in 2022. The technical team is anchored by CEO Jerry Rudisin (30+ years B2B software executive experience) and academic co-founders with PhD-level expertise from BYU and UC Santa Barbara, supported by an ongoing research collaboration with Brigham Young University. Revenue mechanics are dominated by government grants supplemented by professional services and one-time software licenses, with pricing not publicly disclosed and customer concentration effectively 100% federal.

Name

Achilles Heel Technologies

Legal name

Achilles Heel Technologies

Website

https://aht.ai

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

1–10 employees

Short description

Achilles Heel Technologies is a Utah-based cybersecurity firm that uses proprietary mathematical modeling and simulation software to identify critical vulnerabilities in cyber-physical-human systems, serving primarily U.S. federal agencies (DHS, DOE) and critical infrastructure operators through SBIR grants and direct contracts.

Ownership category

akta.pro rank

Product category

Critical Infrastructure Cybersecurity

NAICS

Computer Systems Design and Related Services (5415)

SIC

Services-Computer Programming Services (7371)

akta.pro primary industry

Vulnerability Intelligence & Exploit Prediction (HDADAHAI)

akta.pro secondary industries

OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN), Vulnerability Management & Penetration Testing Services (BPAEADAD), Vulnerability & Patch Management for OT Assets (EUADANAF)

Keywords

• Critical infrastructure cybersecurity
• Cyber-physical vulnerability analysis
• Attack surface modeling
• Penetration testing services
• Digital twin security

Headquarters

HQ city

Orem

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Cybersecurity Assessment Services: Provide vulnerability analysis, penetration testing, and attack modeling services to government and enterprise customers for critical infrastructure protection.
2. Software Solutions: Deliver specialized simulation software suites (e.g., NG-9-1-1 Simulation Software Suite) and digital twin solutions for critical infrastructure vulnerability analysis.
3. DOE/DHS SBIR Research Grants: Funded research and development projects through Small Business Innovation Research programs with Department of Energy and Department of Homeland Security.

Go-to-market motion1 record

Distribution channels2 records

Marketing channels2 records

Core offering

Achilles Heel Technologies develops and applies cutting-edge mathematical modeling and proprietary software to identify the most damaging vulnerabilities in complex cyber-physical-human systems. The company delivers vulnerability analysis, penetration testing, attack design modeling, digital twinning, and simulation software suites for critical infrastructure sectors including electrical grids, water systems, emergency services (NG-9-1-1), and defense systems. Its offerings combine professional cybersecurity assessment services with specialized software solutions sold to government and enterprise customers.

Product overview

Achilles Heel Technologies offers a unified cybersecurity platform that uniquely models complex cyber-physical-human systems to identify vulnerabilities and assess potential attack damage. The platform comprises specialized solution modules for critical infrastructure sectors: Electrical Grid & Power Systems Vulnerability Analysis (advanced attack-modeling and software vulnerability analysis), Emergency Services Solution Suite (including NG-9-1-1 System Vulnerability Analysis, NG-9-1-1 Simulation Software Suite, Cyber-Attack Simulations, and Digital Twin of 9-1-1 Systems), Critical Infrastructure Protection Services (penetration testing as a service, digital twinning, attack design modeling), and Water System Vulnerability Analysis (attack surface modeling). The company serves government and enterprise customers in defense, finance, air-traffic control, refining, manufacturing, and related sectors.

Differentiator

Problem solved

Functional benefit

Products and services

• Electrical Grid & Power Systems Vulnerability Analysis

Quantifiable outcome

• Identifies vulnerabilities that would cause the most damage, enabling prioritized defense investments
• +1 more outcomes

Named customers5 records

Segments5 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Partnerships

One partnership is on record.

• Brigham Young University (BYU)coreStrategic or Co-development PartnerDavid Grimsman serves as Assistant Professor in the Computer Science Department at BYU and leads product development for the company. Benjamin Francis was a postdoctoral fellow at BYU before joining as Chief Scientist. The company collaborates with BYU on multiagent systems, game theory, distributed optimization, mechanism design, and security research. BYU research expertise supports the company's technical capabilities.

Scale indicators4 records

Recent moves5 records

Expansion highlights5 records

Direct peers

• Dragos: Dragos provides OT/ICS cybersecurity for critical infrastructure (electric, water, oil & gas) including asset discovery, threat detection, and vulnerability management. Directly comparable in target verticals (electric grid, industrial operators) and federal/government customer base.
• SafeBreach: SafeBreach provides breach and attack simulation (BAS) and continuous security validation, enabling organizations to identify exploitable vulnerabilities and prioritize remediation. Comparable in attack simulation and vulnerability prioritization capability.
• Claroty: Claroty specializes in cybersecurity for cyber-physical systems across industrial, healthcare, and commercial environments, with deep penetration into U.S. federal and critical infrastructure accounts. Comparable in CPS/OT vulnerability analysis and federal go-to-market.
• Nozomi Networks: Nozomi Networks delivers OT and IoT visibility, vulnerability assessment, and attack simulation for critical infrastructure operators including utilities and industrial customers. Closely comparable in vulnerability analysis for OT environments.
• XM Cyber: XM Cyber delivers continuous exposure management and attack path simulation, identifying how attackers would chain vulnerabilities to cause damage. Closely comparable in 'most-damaging attack path' prioritization methodology.

Broad incumbents

• Sandia National Laboratories: Sandia conducts national-security-oriented research on cyber-physical system vulnerabilities, including infrastructure risk assessment for DOE and DHS. Overlaps with Achilles Heel's mission of modeling critical infrastructure attack surfaces and is a potential customer/partner.
• Idaho National Laboratory (INL): DOE-affiliated national laboratory conducting cyber-physical system vulnerability research, attack scenario modeling, and critical infrastructure protection programs. Comparable as a federally-funded peer performing mathematical attack modeling for power systems and OT infrastructure.
• Tenable: Tenable provides enterprise vulnerability management, OT security (Tenable.ot), and exposure analytics used across federal agencies and critical infrastructure. Comparable as a broader-incumbent competitor in vulnerability assessment and OT asset visibility.

Emerging players

• SCYTHE: SCYTHE offers an adversary emulation and attack simulation platform used by enterprises and federal agencies to test defensive posture. Comparable in cyber-attack simulation methodology and emerging-adopter federal/government customer base.

Others

• CISA (Cybersecurity and Infrastructure Security Agency): CISA is the U.S. federal civilian agency responsible for critical infrastructure cybersecurity, including vulnerability assessments for emergency services and grid operators. Comparable as a customer/partner ecosystem participant funding and consuming vulnerability analysis work similar to Achilles Heel's offerings.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Profiles7 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Achilles Heel Technologies