CtrlHack
CtrlHack is a Russian cybersecurity software developer offering BAS Felix (Breach and Attack Simulation with 400+ attack techniques) and APT Bezdna (automated penetration testing) to enterprise and government customers across Russia and CIS, distributed through 30+ MSSP and technology partners.
- Company typePrivate
- Founded2019
- HeadquartersMoscow, Russia
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What CtrlHack does
CtrlHack (legal entity: ООО «КОНТРОЛХАК», Moscow) is a Russian cybersecurity software developer positioned as the first domestic vendor in two product categories: Breach and Attack Simulation (BAS) and Automated Penetration Testing (APT). The company markets two core products built on the shared CtrlHack Base Platform, developed in Golang, JavaScript, and Python. BAS Felix, in development since 2019, simulates over 400 attacker techniques across Windows, Linux, and macOS to validate security tool effectiveness (NGFW, sandbox, mail/server antivirus, EDR/XDR, SIEM) and incident response processes; APT Bezdna, launched in 2024, executes automated penetration tests in approximately one day with black-box and grey-box modes. A scenario database is continuously refreshed via daily analysis of several hundred global cyberattack investigation reports, reflecting 15 years of team research experience. Both products are registered in the Unified Register of Russian Computer Programs (entries 490481 and 4119582), and research is partly funded by the Foundation for Strategic Research (ФСИ).
The company serves Russian and CIS enterprise and government customers across banking/financial services, telecoms, retail, extractive/processing industries, and state-owned/sector-forming entities, with banks and government designated as primary segments. Revenue is generated via non-exclusive annual software licenses (minimum 2,500,000 RUB per year, pricing dependent on scope) and through MSSP partners who wrap BAS Felix into managed services. GTM is overwhelmingly channel-driven: over 30 technology and reseller partners (Softline, Infosec, Angara Security, STEP-LOGIC, Jet, TS Solution, and others) plus four distributors (FORTIS, IITD Group, Mont, and Belarus-based TenIT for CIS reach) deliver to end customers. Marketing is content-led (articles, video materials, demo request forms). The company has not disclosed institutional funding rounds, parent companies, or named customer logos, and operates with a lean team of approximately 6 employees while participating in programs such as PwC Venture Hub and being named in the "100 Leaders of Technology Development in Russia" list.
CtrlHack firmographics
Firmographics- Name
- CtrlHack
- Legal name
- Общество с ограниченной ответственностью «КОНТРОЛХАК»
- Website
- https://ctrlhack.ru
- Company type
- Private
- Founded year
- 2019
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- CtrlHack is a Russian cybersecurity software developer offering BAS Felix (Breach and Attack Simulation with 400+ attack techniques) and APT Bezdna (automated penetration testing) to enterprise and government customers across Russia and CIS, distributed through 30+ MSSP and technology partners.
- Ownership category
- akta.pro rank
CtrlHack industry classification
Industry- Product category
- Cybersecurity Software
- NAICS
- Computer Systems Design and Related Services (5415)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Breach & Attack Simulation (BAS) (HDADAHAD)
- akta.pro secondary industry
- Penetration Testing & Red Teaming (BPAKAHAF)
Keywords
Where CtrlHack is headquartered
LocationHeadquarters
- HQ city
- Moscow
- HQ country
- Russia
- HQ region
- Europe
Offices2 records
Markets served
CtrlHack business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure, Others
Revenue model
- Software Licensing: Non-exclusive licenses for software products CtrlHack Base Platform, CtrlHack BAS Felix, and CtrlHack APT Bezdna. Licenses are provided through partners under license agreements. Minimum annual license cost is 2,500,000 rubles, varying based on selected licensing model, functional capabilities, and customer requirements.
- MSSP Partner Services: MSSP partners use BAS Felix to provide new cybersecurity services to their customers and improve efficiency of other services. Partners gain recurring revenue streams through service delivery using CtrlHack products.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Annual license with minimum tier starting at 2,500,000 RUB |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels3 records
CtrlHack product offering
Product offeringCore offering
CtrlHack develops and sells enterprise cybersecurity testing platforms: BAS Felix, a Breach and Attack Simulation platform that automatically executes 400+ simulated hacker attack techniques against customer infrastructure to evaluate the effectiveness of deployed security tools (NGFW, sandbox, mail antivirus, endpoint antivirus, EDR/XDR) and incident response processes; and APT Bezdna, an Automated Penetration Testing platform that completes comprehensive attack scenarios in one day using black-box and grey-box testing modes without requiring operator expertise. Both platforms are built on the underlying CtrlHack Base Platform and are sold to Russian enterprise customers primarily through MSSP and technology partner channels.
Product overview
CtrlHack offers two core cybersecurity products: BAS Felix and APT Bezdna. BAS Felix is a Breach and Attack Simulation (BAS) platform that simulates hacker attack techniques to test security tool effectiveness and incident response. APT Bezdna is an automated penetration testing platform that executes various attack scenarios in a single day. Both products are built on the CtrlHack Base Platform and are entirely Russian-developed solutions. BAS Felix started development in 2019 and entered the market earlier, while APT Bezdna development began in 2023 and launched in 2024. The company claims these are the first products in Russia in the BAS and Automated Penetration Testing classes.
Differentiator
Problem solved
Functional benefit
Brands
- BAS Felix: Platform for simulation of cyber attack techniques. A system for simulating intrusions and hacker attacks that allows modeling targeted attacks across multiple vectors and assessing the readiness of deployed security controls to repel them. BAS makes protection proactive, transforming security posture assessment into a systematic and automated process.
- APT Bezdna
Products and services
- BAS Felix A Breach and Attack Simulation (BAS) platform that automatically executes simulations of 400+ hacker techniques against customer infrastructure to evaluate the effectiveness of security tools (NGFW, sandbox, mail antivirus, endpoint antivirus/servers) and incident response processes (SIEM, EDR/XDR). Supports Windows, Linux, and macOS, includes SIEM integration, and features a Scenario Editor for creating custom attack methods. Targets enterprise security teams in banks, government, and industrial organizations.
- APT Bezdna An automated penetration testing platform that executes various attack scenarios (internal pentesting, hacker techniques, vulnerability exploitation, configuration error detection) in 1 day without requiring operator expertise. Includes black-box (network access simulation) and grey-box (post-user-compromise risk assessment) testing modes, prioritizes vulnerabilities, identifies configuration weaknesses, and determines real executable cyberattack vectors. Built for enterprise security teams.
- CtrlHack Base Platform The underlying platform technology for CtrlHack's cybersecurity products, supporting BAS Felix and APT Bezdna. Developed using Golang, JavaScript, and Python. Software source code rights are registered to LLC CONTROLHACK and the platform is listed in the Russian Software Registry.
Quantifiable outcome
- 30-50% more attacking techniques detected compared to traditional methods
- +4 more outcomes
Companies that use CtrlHack
Customer profileNamed customers7 records
Segments5 records
Ideal customer profiles3 records
CtrlHack technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature3 records
CtrlHack partnerships and signals
Strategic signalPartnerships
36 partnerships are on record, tiered core, major and standard.
- FORTIScoreDistributor of CtrlHack products in Russian market. Part of the distributor network for software licensing and product distribution.
- IITD GroupcoreDistributor of CtrlHack products. Manages product distribution and licensing in the Russian market.
- MontcoreDistributor of CtrlHack products in Russian market with focus on enterprise distribution.
- TenITcoreDistributor of CtrlHack products. Belarus-based distributor expanding reach in CIS markets.
- InfosecmajorTechnology partner and reseller of CtrlHack cybersecurity products. Provides distribution and integration services.
- Angara SecuritymajorTechnology partner specializing in cybersecurity solutions. Resells and integrates CtrlHack BAS Felix and APT Bezdna products.
- SoftlinemajorMajor IT solutions provider and technology partner distributing CtrlHack products through its extensive partner network.
- STEP-LOGICmajorTechnology partner and integrator providing CtrlHack products to enterprise customers.
- JetmajorPartner distributing CtrlHack cybersecurity products in Russian market.
- TS SolutionstandardTechnology partner distributing CtrlHack products.
- DialogNaukastandardPartner distributing CtrlHack products.
- RegnansstandardPartner distributing CtrlHack products.
- Cloud NetworksstandardPartner distributing CtrlHack products in cloud and network security segments.
- SyssoftstandardPartner distributing CtrlHack products.
- RT-SolarstandardPartner distributing CtrlHack products.
- ITProtectstandardPartner specializing in IT protection solutions distributing CtrlHack products.
- ITG SecuritystandardPartner distributing CtrlHack products.
- INLINE TechnologiesstandardPartner distributing CtrlHack products.
- TrustTechstandardPartner distributing CtrlHack products.
- InfoSecurity (infosecurity.ru)standardPartner distributing CtrlHack products.
- SoftMallstandardPartner distributing CtrlHack products.
- Nav-itstandardPartner distributing CtrlHack products.
- AmetiststandardPartner distributing CtrlHack products.
- T1-IntegrationstandardPartner distributing CtrlHack products.
- TradeCom SystemsstandardPartner distributing CtrlHack products.
- ICL-STstandardPartner distributing CtrlHack products.
- AndeKstandardPartner distributing CtrlHack products.
- CrossTechstandardPartner distributing CtrlHack products.
- Unlim GroupstandardPartner distributing CtrlHack products.
- AsteritstandardPartner distributing CtrlHack products.
- ITS (Inline Telecom)standardPartner distributing CtrlHack products.
- NPP GammastandardPartner distributing CtrlHack products.
- Ti HunterstandardPartner distributing CtrlHack products.
- AxxtelstandardPartner distributing CtrlHack products.
- TRCTechstandardPartner distributing CtrlHack products.
- MSSP Partners (unspecified)coreMSSP partners use BAS Felix to provide new cybersecurity services to their customers and improve efficiency of their other services. Benefits include improved protection effectiveness, confidence in threat protection, operational automation, simple and fast service launch, and flexible cooperation terms.
Scale indicators7 records
Recent moves5 records
Expansion highlights5 records
CtrlHack competitors and assessment
Company assessmentDirect peers
- SafeBreach: SafeBreach provides a breach and attack simulation platform that runs playbook-based adversary simulations against customer environments. It is a direct competitor to BAS Felix with overlapping functionality in continuous security validation and control effectiveness testing.
- Picus Security: Picus is a leading Breach and Attack Simulation platform vendor that continuously simulates adversary techniques to validate security controls. It competes head-to-head with BAS Felix in the same product category, serving enterprise customers with similar simulation-driven validation use cases.
- Cymulate: Cymulate delivers a SaaS-based breach and attack simulation and exposure validation platform covering email, endpoint, network, and cloud attack vectors. It is a direct competitor to BAS Felix for enterprises seeking broad-spectrum BAS capabilities.
- Pentera: Pentera offers automated security validation and automated penetration testing across on-premises and cloud environments. It directly competes with both BAS Felix (continuous validation) and APT Bezdna (automated pentest), serving similar enterprise and MSSP channels.
- AttackIQ: AttackIQ is one of the most established BAS platforms, built around an open adversary emulation framework and MITRE ATT&CK alignment. It is a direct competitor to BAS Felix for enterprises seeking automated attack technique simulation and security control validation.
Broad incumbents
- Positive Technologies: Positive Technologies is a leading Russian cybersecurity vendor offering penetration testing, vulnerability management, and security assessment products. It is a broad incumbent competing in the same Russian enterprise market with overlapping vulnerability assessment and pentest offerings.
- Randori (IBM Security): Randori, now part of IBM Security, provides attack surface management and continuous red-teaming-as-a-service. It is a broad incumbent that competes with both BAS Felix (continuous validation) and APT Bezdna (automated pentest) for enterprise customers.
- Kaspersky: Kaspersky is a global cybersecurity company with Russian roots offering endpoint protection, threat intelligence, and security services to enterprises. It is a broad incumbent that competes in the same Russian enterprise market and overlapping customer base as CtrlHack.
Emerging players
- Bishop Fox: Bishop Fox is a cybersecurity consulting and product firm known for automated attack surface management and offensive security tooling. It overlaps with APT Bezdna's automated pentest positioning and with BAS Felix's continuous testing use cases, though it also runs a sizable manual services practice.
- Scythe: Scythe is an emerging breach and attack simulation platform built around adversary emulation playbooks and threat-informed assessments. It overlaps meaningfully with BAS Felix for mid-market and enterprise customers but operates at a smaller scale than top BAS incumbents.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
CtrlHack social profiles
Digital presenceCtrlHack compliance and trust
Trust signalCompliance2 records
CtrlHack financial estimates
Financial estimateRevenue estimate
Valuation estimate
CtrlHack leadership team
Management profileNumber of profiles
CtrlHack funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
CtrlHack M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about CtrlHack
What does CtrlHack do?
CtrlHack develops and sells enterprise cybersecurity testing platforms: BAS Felix, a Breach and Attack Simulation platform that automatically executes 400+ simulated hacker attack techniques against customer infrastructure to evaluate the effectiveness of deployed security tools (NGFW, sandbox, mail antivirus, endpoint antivirus, EDR/XDR) and incident response processes; and APT Bezdna, an Automated Penetration Testing platform that completes comprehensive attack scenarios in one day using black-box and grey-box testing modes without requiring operator expertise. Both platforms are built on the underlying CtrlHack Base Platform and are sold to Russian enterprise customers primarily through MSSP and technology partner channels.
Is CtrlHack a public or private company?
CtrlHack is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was CtrlHack founded?
CtrlHack was founded in 2019. It employs 1 to 10 people.
Where is CtrlHack based?
CtrlHack is headquartered in Moscow, Russia, in the Europe region.
How does CtrlHack make money?
Two revenue lines are on record. Software Licensing is the primary driver. The others are MSSP Partner Services.
Who are CtrlHack's main competitors?
Direct peers on record are SafeBreach, Picus Security, Cymulate, Pentera and AttackIQ. Broad incumbents are Positive Technologies, Randori (IBM Security) and Kaspersky. Emerging players are Bishop Fox and Scythe.
Does CtrlHack have an API?
No public API is recorded for CtrlHack.
What industry is CtrlHack in?
CtrlHack's product category is Cybersecurity Software. Its primary akta.pro industry code is HDADAHAD, Breach & Attack Simulation (BAS), with a secondary code of BPAKAHAF, Penetration Testing & Red Teaming. Its NAICS code is 5415 and its SIC code is 7372.