GlassPortal

What GlassPortal does

GlassPortal is a SaaS vulnerability and risk management platform built for enterprise security teams overwhelmed by traditional CVSS-based scoring. Operated by Lost Sundays Technology Corp. (incorporated in New York, founded 2023) and created by cybersecurity veteran Paul Kubler, the platform ingests vulnerability telemetry from more than 50 scanning, application security, ITSM, SIEM, and cloud security tools — including Qualys, Tenable, Snyk, Tenable.io, ServiceNow, Jira, Splunk, AWS, Microsoft Azure, GCP, CrowdStrike, Palo Alto Networks, and Wiz — then correlates, groups, and re-prioritizes findings using a context-driven risk model that incorporates organizational mitigations, compliance requirements, exploit availability, environmental exposure, and asset context rather than CVSS severity alone.

The product is delivered as a customer-isolated SaaS application with no infrastructure to manage and offers an optional AI ChatBot sub-brand ("Cyber Sidekick") that uses natural language processing to answer vulnerability questions within the customer's isolated environment. GlassPortal sells via a sales-assisted, demo-led motion ([email protected], [email protected]) with custom enterprise subscription pricing; demand generation is supported by a content blog covering vulnerability management topics and weekly CVE summaries. The company is founder-owned, with no disclosed institutional funding, and operates with 1–10 employees out of New York, USA, serving enterprise security teams, DevSecOps teams, and organizations with regulatory compliance needs.

Its core revenue mechanic is annual recurring subscription contracts priced per engagement, with no public tiers and no self-serve onboarding path. Distribution is direct enterprise field sales with a global stated reach, but actual operating geography is concentrated in the USA.

Name

GlassPortal

Legal name

Lost Sundays Technology Corp.

Website

https://glassportal.io

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

1–10 employees

Short description

GlassPortal is a SaaS vulnerability and risk management platform that contextualizes findings from 50+ scanners using organizational-specific risk criteria. Founded by cybersecurity veteran Paul Kubler, it serves enterprise security and DevSecOps teams through a custom-priced, demo-led enterprise sales motion.

Ownership category

akta.pro rank

Product category

Vulnerability Management Software

NAICS

Custom Computer Programming Services (541511)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Vulnerability Assessment & Scanning (HDADAHAA)

akta.pro secondary industry

Risk Scoring, Fraud & Anomaly Detection (HDAAAHAD)

Keywords

• Vulnerability management
• Risk prioritization
• Cybersecurity SaaS
• Threat intelligence
• Security operations

Headquarters

HQ city

New York

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

1. SaaS Subscription: GlassPortal is delivered as a secure, customer-isolated SaaS solution with subscription-based pricing. Customers contact sales for demos and quotes, indicating a tiered or custom pricing model based on organizational needs, scale, and feature requirements.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels3 records

Core offering

GlassPortal is a SaaS vulnerability and risk management platform that ingests findings from over 50 scanners and security tools, correlates and groups vulnerabilities, and recalculates risk using organization-specific context (compliance requirements, data types, exploit availability, environment, IP/DNS, and CVE names) rather than relying solely on CVSS scores. It delivers prioritized, actionable remediation data to ticketing systems such as Jira and ServiceNow and adds automated threat intelligence alerts and an optional isolated AI ChatBot for vulnerability queries. The product is sold via custom annual subscriptions to enterprise security teams.

Product overview

GlassPortal is a unified vulnerability and risk management platform designed for security teams overwhelmed by traditional vulnerability management approaches. The core platform correlates and groups vulnerabilities from multiple scanners and sources, calculates risk using contextual and relational models specific to each organization's environment rather than relying solely on CVSS scores. The platform offers features including automated threat intelligence alerts, customizable risk recalculation based on compliance requirements, exploit availability, and environmental factors. It also includes an optional AI ChatBot feature to assist with vulnerability queries. GlassPortal is offered as a secure, customer-isolated SaaS solution with no infrastructure setup required.

Differentiator

Problem solved

Functional benefit

Brands

• Cyber Sidekick: AI ChatBot feature that helps answer questions regarding vulnerabilities, isolated to the user's environment and data to ensure security within the questions asked.

Products and services

• GlassPortal Vulnerability and Risk Management Platform A SaaS vulnerability and risk management platform for enterprise security teams that correlates and groups findings from over 50 vulnerability scanners and security tools, recalculates risk using organization-specific context (compliance requirements, data types, exploit availability, age, IP/DNS, environment, CVE names), and pushes prioritized remediation into Jira, ServiceNow, and SIEM systems. Delivered as a secure, customer-isolated SaaS with no infrastructure setup.
• Cyber Sidekick (AI ChatBot for Vulnerability Help) An optional AI ChatBot add-on for the GlassPortal platform that uses natural language processing to answer questions about vulnerabilities. It is isolated to the customer's environment and data to ensure security and prevent data leakage.

Quantifiable outcome

• Users report significant time savings by eliminating Excel-based vulnerability management processes
• +2 more outcomes

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration61 records

AI capability2 records

Feature6 records

Partnerships

28 partnerships are on record, tiered core.

• QualyscoreTechnology or IntegrationGlassPortal integrates with Qualys vulnerability scanner, allowing customers to ingest Qualys scan data into the GlassPortal platform for contextual risk prioritization and unified vulnerability management.
• TenablecoreTechnology or IntegrationGlassPortal supports Tenable, Tenable.io, and Tenable.sc products, enabling integration with Tenable's vulnerability scanning ecosystem including Nessus agents.
• SnykcoreTechnology or IntegrationIntegration with Snyk's developer security platform, allowing GlassPortal to incorporate Snyk vulnerability data into its contextual risk assessment.
• ServiceNowcoreTechnology or IntegrationGlassPortal integrates with ServiceNow, enabling bidirectional data flow where vulnerability data can be ingested and remediation tasks pushed back to ServiceNow for workflow management.
• JiracoreTechnology or IntegrationIntegration with Jira allows GlassPortal to push prioritized vulnerabilities to Jira for tracking and remediation workflow integration.
• SplunkcoreTechnology or IntegrationGlassPortal integrates with Splunk for output of transformed vulnerability data to SIEM platforms and security analytics.
• AWScoreTechnology or IntegrationIntegration with Amazon Web Services for ingesting AWS-specific vulnerability data and cloud security findings.
• MicrosoftcoreTechnology or IntegrationIntegrations with Microsoft security tools including Azure, GitHub, GitHub Dependabot, and Microsoft Sentinel for comprehensive vulnerability data ingestion and output.
• Rapid7coreTechnology or IntegrationGlassPortal supports Rapid7's vulnerability assessment tools for integration into its contextual risk management platform.
• CrowdstrikecoreTechnology or IntegrationIntegration with CrowdStrike's endpoint protection and security tools for vulnerability data correlation.
• Palo Alto NetworkscoreTechnology or IntegrationGlassPortal integrates with Palo Alto Networks firewalls and security products for network vulnerability context.
• GCPcoreTechnology or IntegrationIntegration with Google Cloud Platform for ingesting GCP-specific vulnerability and security findings.
• GitHubcoreTechnology or IntegrationIntegration with GitHub and GitHub Dependabot for developer-focused vulnerability data including dependency vulnerabilities in code repositories.
• WizcoreTechnology or IntegrationIntegration with Wiz cloud security platform for cloud-native vulnerability data ingestion.
• Orca SecuritycoreTechnology or IntegrationIntegration with Orca Security's cloud security platform for agentless vulnerability detection data.
• SentinelOnecoreTechnology or IntegrationGlassPortal integrates with SentinelOne endpoint protection for vulnerability correlation.
• SonatypecoreTechnology or IntegrationIntegration with Sonatype's developer-friendly security tools for software supply chain vulnerability data.
• WhiteSource (Mend)coreTechnology or IntegrationIntegration with WhiteSource/Mend for open source security and license compliance vulnerability data.
• Prisma CloudcoreTechnology or IntegrationIntegration with Palo Alto Networks Prisma Cloud for cloud security posture management data.
• TaniumcoreTechnology or IntegrationIntegration with Tanium's endpoint management and security platform for unified vulnerability data.
• Burp SuitecoreTechnology or IntegrationIntegration with PortSwigger's Burp Suite web application security testing tool.
• MandiantcoreTechnology or IntegrationIntegration with Mandiant's threat intelligence and incident response capabilities.
• HackerOnecoreTechnology or IntegrationIntegration with HackerOne's bug bounty and penetration testing platform for crowdsourced vulnerability data.
• BugCrowdcoreTechnology or IntegrationIntegration with BugCrowd's crowdsourced security platform for vulnerability findings.
• VeracodecoreTechnology or IntegrationIntegration with Veracode's application security testing platform for static and dynamic analysis vulnerability data.
• CheckmarxcoreTechnology or IntegrationIntegration with Checkmarx's application security testing for SAST and SCA vulnerability data.
• FortifycoreTechnology or IntegrationIntegration with Micro Focus Fortify for application security vulnerability data.
• SonarQubecoreTechnology or IntegrationIntegration with SonarQube's code quality and security platform for developer-focused vulnerability data.

Recent moves5 records

Expansion highlights5 records

Direct peers

• Qualys: Qualys provides the Qualys VMDR platform for vulnerability detection and response with its own TruRisk prioritization. Like Tenable, it competes as an integrated scanner + risk platform while also feeding data into GlassPortal as a core integration partner.
• Snyk: Snyk is a developer security platform focused on SCA, SAST, and container vulnerabilities. GlassPortal ingests Snyk findings as part of its DevSecOps use case, and both compete for the same developer/AppSec prioritization workflow.
• Tenable: Tenable is a leading vulnerability management platform (Nessus, Tenable.io, Tenable.sc) that already integrates with GlassPortal. Both target enterprise security teams prioritizing vulnerabilities, though Tenable bundles scanning with its own contextual scoring (VPR) versus GlassPortal's separate prioritization layer.
• Wiz: Wiz is an agentless cloud security platform whose vulnerability management capabilities (CSPM/CNAPP) increasingly compete with traditional VM tools. GlassPortal integrates Wiz data for cloud-native vulnerability context.
• Kenna Security (Cisco Vulnerability Management): Kenna Security (now part of Cisco) built its business on risk-based vulnerability management, the same conceptual wedge GlassPortal uses to differentiate from raw CVSS scoring. It is a direct competitor in prioritization logic.
• Brinqa: Brinqa is a vulnerability risk management platform that correlates findings from multiple sources and applies contextual business risk scoring. It is one of the closest pure-play competitors to GlassPortal's positioning.
• Orca Security: Orca Security is an agentless cloud security platform with side-by-side vulnerability prioritization. Its cloud-focused approach overlaps with GlassPortal's coverage of cloud and infrastructure findings.
• Rapid7: Rapid7's InsightVM (and Metasploit) offer vulnerability assessment with the Real Risk Score prioritization model, directly overlapping with GlassPortal's context-driven approach for security teams.

Broad incumbents

• CrowdStrike: CrowdStrike Falcon Spotlight bundles vulnerability management into its endpoint security platform with proprietary risk scoring. As an endpoint incumbent it competes broadly rather than as a pure-play VM vendor.
• Palo Alto Networks (Prisma Cloud): Palo Alto Networks Prisma Cloud bundles cloud vulnerability and posture management into a broad security platform. As a platform incumbent it competes with standalone VM tools and feeds GlassPortal through its integration.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks6 records

Key highlights6 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about GlassPortal