TRAPA Security

What TRAPA Security does

TRAPA Security is a Taiwan-based offensive security firm founded in 2020 that operates two complementary lines of business: a product platform and professional services. The company is headquartered in New Taipei City (Banqiao District) with a small team of approximately 9 employees drawn from former SOC team members, PSIRT members, and veteran vulnerability researchers. Its core product is TRAPA CYBER RANGE™, a cyber range platform that simulates real-world APT attack chains to train blue team personnel in incident response, integrating with MITRE ATT&CK and NIST NICE frameworks to provide structured exercises and performance measurement. The platform is positioned as a hands-on training environment that exposes security teams to authentic attack strategies under resource-constrained conditions.

Beyond the platform, TRAPA Security generates revenue from professional services including vulnerability research, reverse engineering, and product security advisory for enterprise clients and technology vendors. The company has disclosed a substantial volume of CVEs to major global vendors including Microsoft, Samsung, Google, Trend Micro, Zyxel, and ASUSTOR, with disclosures continuing through 2026. Team members have earned recognition including Samsung Mobile Hall of Fame, Microsoft MSRC Most Valuable Security Researcher, multiple DEF CON CTF runner-up finishes, and 3rd place at Pwn2Own Tokyo 2020. The team also organized HITCON CTF from 2015 to 2021 and participates in long-running collaborations with AIS3 and HITCON for cybersecurity education and community building.

The business model is professional services-led, with three revenue streams: blue team training services via TRAPA CYBER RANGE, vulnerability research consulting, and product security advisory. Pricing is not publicly disclosed. Go-to-market is enterprise field sales supplemented by event-driven visibility through security conferences (Black Hat USA, POC, HITCON) and CTF competition participation. Target customer segments are enterprise security teams and technology vendors as primary, with government agencies as secondary. The company is privately held with no disclosed venture capital backing, no management team listed, and no reported funding rounds.

Name

TRAPA Security

Legal name

TRAPA Security

Website

https://trapa.tw

Company type

Private

Founded year

2020

Operating status

Operating

Headcount range

1–10 employees

Short description

TRAPA Security is a Taiwan-based offensive security firm offering the TRAPA CYBER RANGE blue team training platform and vulnerability research services to enterprise security teams, technology vendors, and government agencies. Founded in 2020 by former SOC and PSIRT practitioners.

Ownership category

akta.pro rank

Product category

Cybersecurity Training & Simulation

NAICS

Computer Systems Design and Related Services (54151), Investigation and Security Services (5616)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Security Analytics & Detection Engineering (HDADAGAE)

akta.pro secondary industries

Vulnerability Intelligence & Exploit Prediction (HDADAHAI), Bug Bounty, Vulnerability Disclosure & Security Services (FSAPAJAL)

Keywords

• Blue team training
• Cyber range platform
• Vulnerability research
• APT attack simulation
• Offensive security services

Headquarters

HQ city

New Taipei City (Banqiao District)

HQ country

Taiwan

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Blue Team Training Services: Revenue from TRAPA CYBER RANGE training exercises and blue team capability development programs for enterprise and government security teams.
2. Vulnerability Research Services: Consulting services for advanced vulnerability research, reverse engineering, and product security assessments for enterprise clients.
3. Product Security Advisory: Vulnerability intelligence and product security consulting services, providing security recommendations and advisory support.

Go-to-market motion2 records

Distribution channels1 record

Marketing channels4 records

Core offering

TRAPA Security develops and operates TRAPA CYBER RANGE™, a cyber range platform that simulates real-world APT attack chains for blue team training and exercises. The platform integrates with MITRE ATT&CK and NIST NICE frameworks to systematically expose security personnel to authentic attack strategies. In addition to the platform, the company provides professional vulnerability research, reverse engineering, and product security assessment services for enterprise clients.

Product overview

TRAPA Security operates as an offensive security services company with a primary product offering called TRAPA CYBER RANGE™. This is a cyber range platform designed for blue team training and practical exercises. In addition to the core product platform, the company provides professional security research services including vulnerability research, product security assessments, and consulting services. The company was founded in 2020 in Taiwan by former SOC team members, PSIRT members, and vulnerability researchers.

Differentiator

Problem solved

Functional benefit

Brands

• TRAPA CYBER RANGE™: A blue team training platform providing hands-on cybersecurity exercises simulating real APT attacks for security personnel awareness training.

Products and services

• TRAPA CYBER RANGE™ A cyber range platform that simulates real APT (Advanced Persistent Threat) attack chains for blue team training exercises. It allows enterprise and government security teams to practice incident response in simulated resource-constrained environments, integrating with MITRE ATT&CK and NIST NICE frameworks to systematically train security personnel.
• Vulnerability Research Services

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

Seven partnerships are on record, tiered core and minor.

• HITCONcoreStrategic or Co-development PartnerLong-term partnership with HITCON security community. TRAPA team members participate as HITCON CTF team members, contributing to the community since 2015-2021 as main organizers. The company also supports HITCON Hackdoor security escape room events for public awareness.
• AIS3coreStrategic or Co-development PartnerLong-term collaboration with AIS3 (Advanced Information Security Summer School) program for cybersecurity education and talent development in Taiwan.
• MicrosoftminorOthersMicrosoft is a vendor to whom TRAPA Security has disclosed security vulnerabilities in Microsoft products. Team member recognized as MSRC Most Valuable Security Researcher.
• SamsungminorOthersSamsung is a vendor to whom TRAPA Security has disclosed security vulnerabilities in Samsung products. Team member inducted into Samsung Mobile Hall of Fame.
• GoogleminorOthersGoogle is a vendor to whom TRAPA Security has disclosed security vulnerabilities in Google products including Chrome.
• Trend MicrominorOthersTrend Micro is a vendor to whom TRAPA Security has disclosed multiple security vulnerabilities in Trend Micro Apex One and other products.
• ZyxelminorOthersZyxel is a vendor to whom TRAPA Security has disclosed security vulnerabilities in Zyxel Firewall products.

Scale indicators2 records

Recent moves12 records

Expansion highlights4 records

Direct peers

• RangeForce: RangeForce provides a cloud-based cyber range and skills assessment platform for SOC and blue team training. Like TRAPA CYBER RANGE, it focuses on realistic attack simulation and team performance measurement, making it a directly comparable training platform peer.
• Immersive Labs: Immersive Labs is a cyber resilience platform that delivers hands-on cybersecurity exercises, labs, and crisis simulations for enterprise blue and red teams. It is the closest direct peer to TRAPA CYBER RANGE, competing head-to-head for enterprise SOC training budgets.
• Cyberbit: Cyberbit offers a cyber range platform for SOC training, incident response simulation, and security talent assessment. It competes in the same blue team simulation category as TRAPA CYBER RANGE, particularly in enterprise and government training programs.

Broad incumbents

• Mandiant: Mandiant (now Google Cloud) is a leading incident response, threat intelligence, and security validation firm. It is a broad incumbent peer to TRAPA's vulnerability research and product security advisory services, with overlapping enterprise and government buyers.
• SANS Institute: SANS Institute is the dominant incumbent in cybersecurity training, offering courses, certifications, and range exercises across offensive and defensive disciplines. It is a broad incumbent peer because enterprise buyers compare TRAPA's blue team training against SANS-curated programs.

Regional players

• TeamT5: TeamT5 is a Taiwan-headquartered threat intelligence and APT-focused cybersecurity firm that also leverages elite regional research talent. It overlaps with TRAPA on Taiwan-based offensive security research and enterprise/government threat advisory services.

Emerging players

• Hack The Box: Hack The Box is a gamified cybersecurity upskilling platform covering offensive and defensive training. While more oriented to individual learners and CTF-style content, it overlaps with TRAPA on community-driven security training and adversarial simulation content.
• Picus Security: Picus Security provides breach and attack simulation plus security validation, helping enterprises measure defensive readiness against real-world threats. It is comparable to TRAPA CYBER RANGE's simulation and defensive-readiness value proposition.

Market position

Strengths1 record

Weaknesses1 record

Competitive moat4 records

Key risks5 records

Key highlights5 records

Customer concentration

• Xx.com/TrapaSecurity
• GitHubgithub.com/TrapaSecurity
• Facebookfacebook.com/TrapaSec
• LinkedInlinkedin.com/company/trapasecurity

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about TRAPA Security