The Standoff
- Company typePrivate
- Founded2016
- HeadquartersMoscow, Russia
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
The Standoff firmographics
Firmographics- Name
- The Standoff
- Legal name
- Joint-Stock Company Positive Technologies
- Website
- https://standoff365.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Ownership category
- akta.pro rank
The Standoff industry classification
Industry- Product category
- Cybersecurity — Bug Bounty & Cyber Resilience Testing
- NAICS
- Investigation and Security Services (5616), Security Systems Services (56162)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Penetration Testing & Red Teaming (BPAKADAE)
- akta.pro secondary industries
- Vulnerability Management & Penetration Testing Services (BPAEADAD), Threat Intelligence, Hunting & Adversary Emulation (BPAKAHAE), Security Awareness, Training & Compliance Attestation (HDADAIAJ)
Keywords
Where The Standoff is headquartered
LocationHeadquarters
- HQ city
- Moscow
- HQ country
- Russia
- HQ region
- Europe
Offices1 record
Markets served
The Standoff business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Operations, Marketing or Sales, Infrastructure
Revenue model
- Bug Bounty Program Fees: Companies pay to host vulnerability discovery programs on the platform. Reward amounts vary by vulnerability severity and program scope, with payouts ranging from ₽65K average to up to ₽10M for major programs (e.g., VK, MAX). Researchers earn bounties for valid vulnerability reports.
- Cyber Stress Testing Services: Premium assessment service where companies engage researchers to demonstrate attack chains leading to non-tolerable events. Rewards paid only for validated reports showing real attack paths. Programs run through partners Positive Technologies and JSC Kiberispytanie.
- SOC Team Training (Defend): Enterprise training programs for security operations center teams. 12+ real-world APT attack scenarios, 70+ practical cases from Standoff cyberbattles, workshops with expert mentors.
- Cyberdrills: One-day intensive team assessment for cybersecurity readiness. Two formats: Standard (basic investigation skills) and Advanced (experienced teams with industry-specific scenarios).
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Outcome Based/ Performance | Pay-as-you-go | Bug Bounty payouts vary by vulnerability severity and program |
| Outcome Based/ Performance | Pay-as-you-go | Cyber Stress Testing rewards by attacker sophistication |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels8 records
The Standoff product offering
Product offeringCore offering
The Standoff 365 is a cyber resilience platform that connects 40,000+ white hat hackers with organizations seeking vulnerability discovery, cyber stress testing, SOC team training, and competitive cybersecurity exercises. Companies define non-tolerable events and researchers demonstrate attack chains leading to those events for bounties. The platform bundles bug bounty programs, cyber stress testing, hands-on cyberrange training (Hackbase), APT attack training for SOC teams (Defend), one-day team assessments (Cyberdrills), and an annual international Cyberbattle competition.
Product overview
The Standoff 365 is a cyber resilience platform offering multiple interconnected cybersecurity services. The platform is built around a community of 40,000+ white hat hackers and provides several core offerings: Cyber Stress Testing (assessing organization resilience through realistic attack simulation), Bug Bounty (vulnerability discovery programs with 400+ programs), Cyberbattle (international cybersecurity competitions), Hackbase (hands-on cyberrange training), Defend (APT attack training for SOC teams), and Cyberdrills (team maturity assessment). The platform operates bug bounty programs for major Russian companies including VK (VKontakte, RuStore, VK Pay), Positive Technologies (MaxPatrol SIEM, MaxPatrol VM), and numerous other organizations. Researchers can earn rewards ranging from ₽50,000 to ₽60,000,000 depending on vulnerability severity and program type.
Differentiator
Problem solved
Functional benefit
Brands
- Cyber Stress Testing: Cyber resilience testing for businesses where researchers safely simulate attacks to assess organizational cyber resilience.
- Bug Bounty
- Cyberbattle
- Hackbase
- Defend
- Cyberdrills
- Cyber Evaluation
Products and services
- Standoff 365 The main ENA cyber resilience platform that unites 40,000+ white hat hackers and gives businesses a controlled environment to test their defenses under realistic conditions. Bundles multiple cybersecurity services including Cyber Stress Testing, Bug Bounty, Cyberbattle, Hackbase, Defend, and Cyberdrills.
- Cyber Stress Testing Cyber resilience testing service where researchers safely simulate attacks to assess how likely non-tolerable events could be caused. Companies define non-tolerable events and pay only for validated reports demonstrating attack chains leading to those events. Rewards vary by attacker sophistication from ₽1M-5M (novice) up to ₽100M+ (state-backed APT).
- Bug Bounty Russia's largest bug hunting platform that rewards ethical hackers for finding security flaws in organizations' apps, services, and other assets. Features 24K+ reports submitted and 400+ programs since launch, with an average payout of ₽65K per vulnerability and the largest single bounty of ₽4.9M. Programs include VK, T-Bank, Ozon, Wildberries, and Kontur with rewards ranging from ₽500K to ₽10M.
- Cyberbattle International cybersecurity competition designed to test and enhance offensive and defensive cybersecurity skills on a highly realistic infrastructure with 300+ technological and business processes, including controllers and SCADA systems. Features red team vs blue team exercises, software vendor feedback rounds, security tool vendor showcases, and digital twin simulations.
- Hackbase 24/7 cyberrange where white hat hackers can sharpen their security assessment and vulnerability discovery skills on replicas of real-world systems featuring SCADA systems, PLCs, and business processes. Offers three training options: Bootcamp (beginner-friendly with hints), Industry (replicas of real-world industries), and Standalone (standalone hosts with unique vulnerabilities).
- Standoff Defend Cyberrange training designed to strengthen SOC team capabilities against APT attacks through realistic incident investigation scenarios. Uses real APT attack simulations, digital twins of IT environments, and measures MTTD/MTTR metrics aligned with the MITRE ATT&CK framework. Includes workshops with expert mentors.
- Standoff Cyberdrills One-day intensive retrospective attack investigation training for cybersecurity teams. Available in Standard format for teams with basic skills and Advanced format for experienced teams with complex attack chains modeled on real APT group tactics.
Quantifiable outcome
- 457+ million rubles paid to researchers
- +4 more outcomes
Companies that use The Standoff
Customer profileNamed customers11 records
Segments4 records
Ideal customer profiles2 records
The Standoff technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature5 records
The Standoff partnerships and signals
Strategic signalPartnerships
Two partnerships are on record, tiered flagship and core.
- Positive TechnologiesflagshipPositive Technologies is the organizer of Standoff 365 and offers cyber stress testing programs with financial responsibility for clients' security. This is the first company in the Russian cybersecurity market to take financial responsibility for clients' security through cyber stress testing using a methodology designed to achieve cyber resilience.
- JSC KiberispytaniecorePartner for conducting cyber stress testing assessments using proprietary methodology. Provides expert council for organizing and conducting cyber stress tests for organizations seeking to validate their cyber resilience.
Scale indicators10 records
Recent moves5 records
Expansion highlights5 records
The Standoff competitors and assessment
Company assessmentMarket position
Competitive moat5 records
Key highlights6 records
Customer concentration
The Standoff social profiles
Digital presenceThe Standoff financial estimates
Financial estimateRevenue estimate
Valuation estimate
The Standoff leadership team
Management profileNumber of profiles
The Standoff funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
The Standoff M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about The Standoff
What does The Standoff do?
The Standoff 365 is a cyber resilience platform that connects 40,000+ white hat hackers with organizations seeking vulnerability discovery, cyber stress testing, SOC team training, and competitive cybersecurity exercises. Companies define non-tolerable events and researchers demonstrate attack chains leading to those events for bounties. The platform bundles bug bounty programs, cyber stress testing, hands-on cyberrange training (Hackbase), APT attack training for SOC teams (Defend), one-day team assessments (Cyberdrills), and an annual international Cyberbattle competition.
Is The Standoff a public or private company?
The Standoff is a private company. It is classified as corporate owned and is currently operating.
When was The Standoff founded?
The Standoff was founded in 2016. It employs 1 to 10 people.
Where is The Standoff based?
The Standoff is headquartered in Moscow, Russia, in the Europe region.
How does The Standoff make money?
Four revenue lines are on record. Bug Bounty Program Fees are the primary driver. The others are cyber Stress Testing Services, SOC Team Training (Defend) and cyberdrills.
Does The Standoff have an API?
No public API is recorded for The Standoff.
What industry is The Standoff in?
The Standoff's product category is Cybersecurity — Bug Bounty & Cyber Resilience Testing. Its primary akta.pro industry code is BPAKADAE, Penetration Testing & Red Teaming, with a secondary code of BPAEADAD, Vulnerability Management & Penetration Testing Services. Its NAICS code is 5616 and its SIC code is 7370.