Dux
Dux is a cybersecurity startup offering an AI-driven agentic exposure management platform for enterprise security teams. The platform uses AI agents to continuously analyze vulnerability exploitability, identify lightweight mitigations, and accelerate remediation workflows across enterprise environments.
- Company typePrivate
- Founded2025
- HeadquartersNew York, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Dux does
Dux, Inc. (operating as Dux Security) is a cybersecurity startup that sells an AI-driven agentic exposure management platform to enterprise security teams. Founded in 2024-2025 by Israel Defense Forces veterans and headquartered in New York with an R&D center in Tel Aviv, the company emerged from stealth in December 2025 alongside a $9 million seed funding round led by Redpoint, TLV Partners, and Maple Capital, with strategic participation from CrowdStrike, Okta, and Armis. The company entered the AWS & CrowdStrike Cybersecurity Accelerator in January 2026.
The product is organized as three interconnected modules: Exploitability Analysis, which maps how vulnerabilities, assets, and existing controls connect to distinguish merely reachable risks from truly exploitable ones; Lightweight Mitigations, which identifies non-patch controls and configuration changes that can close critical gaps immediately; and Remediation Acceleration, which uses AI agents to consolidate data sources, auto-tag assets, identify ownership, and orchestrate patching workflows. Underlying the platform are multi-stage AI agents that perform continuous exploitability reasoning across the enterprise security posture at machine speed.
Dux operates a SaaS subscription revenue model sold through an enterprise field-sales motion targeting CISOs and security teams at major U.S. organizations. Pricing is quote-based and not publicly disclosed. Strategic investors (CrowdStrike, Okta, Armis) imply potential ecosystem and channel distribution leverage. At the time of analysis, no named paying customers, revenue figures, or customer counts are publicly available, and the company is in early commercial scaling following its December 2025 stealth emergence.
Dux firmographics
Firmographics- Name
- Dux
- Legal name
- Dux, Inc.
- Website
- https://dux.io
- Company type
- Private
- Founded year
- 2025
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Dux is a cybersecurity startup offering an AI-driven agentic exposure management platform for enterprise security teams. The platform uses AI agents to continuously analyze vulnerability exploitability, identify lightweight mitigations, and accelerate remediation workflows across enterprise environments.
- Ownership category
- akta.pro rank
Dux industry classification
Industry- Product category
- Cybersecurity Exposure Management Software
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Third-Party & Supply Chain Exposure Monitoring (HDADAHAJ)
Keywords
Where Dux is headquartered
LocationHeadquarters
- HQ city
- New York
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
Dux business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations
Revenue model
- SaaS Subscription: Agentic exposure management platform sold as a subscription service to enterprise customers for continuous vulnerability analysis and mitigation.
Go-to-market motion1 record
Distribution channels1 record
Marketing channels1 record
Dux product offering
Product offeringCore offering
Dux provides an AI-driven agentic exposure management platform that continuously analyzes enterprise environments to determine which vulnerabilities are actually exploitable, identifies lightweight mitigations that can close gaps without patching, and accelerates remediation through automated orchestration. The platform is sold as a SaaS subscription to enterprise security teams via a direct field-sales motion.
Product overview
Dux is a unified agentic exposure management platform that combines three interconnected modules: Exploitability Analysis, Lightweight Mitigations, and Remediation Acceleration. The platform uses AI agents to continuously analyze enterprise environments, identify exploitable vulnerabilities, and automate the path to safety at machine speed. Organizations progress through a multi-stage workflow starting with identifying what vulnerabilities can actually be exploited, then applying quick mitigations where possible, and finally accelerating remediation for issues requiring patches.
Differentiator
Problem solved
Functional benefit
Products and services
- Dux Agentic Exposure Management Platform Unified AI-driven exposure management platform for enterprise security teams (CISOs and cybersecurity organizations) that combines exploitability analysis, lightweight mitigations, and remediation acceleration to close vulnerabilities at machine speed.
- Exploitability Analysis Maps how every vulnerability, asset, and control connects across the enterprise environment, separating merely reachable vulnerabilities from truly breachable ones; answers what is needed for an exploit, whether it can actually be exploited, and where existing controls already provide protection. Built for enterprise security teams.
- Lightweight Mitigations Identifies non-patch mitigations such as missing controls or configuration changes across the security posture to close critical gaps instantly, either as a stopgap while waiting on a patch or as a faster route to safety for enterprise security teams.
- Remediation Acceleration AI-powered remediation orchestration that ties together all data sources, auto-tags assets, identifies ownership, and customizes remediation workflows to address bottlenecks from spotty data, unclear ownership, and legacy systems; ensures urgent patching fixes get completed quickly for enterprise security teams.
Quantifiable outcome
- Time to exploitation reduced from weeks to minutes
Companies that use Dux
Customer profileSegments1 record
Ideal customer profiles1 record
Dux technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability3 records
Feature3 records
Dux partnerships and signals
Strategic signalScale indicators2 records
Recent moves7 records
Expansion highlights5 records
Dux competitors and assessment
Company assessmentEmerging players
- Axonius: Axonius focuses on cyber asset attack surface management and exposure visibility, with overlapping value propositions around connecting vulnerability, asset, and control data for security teams.
- Opus Security: Opus Security focuses on cloud vulnerability remediation orchestration, addressing the same 'too many vulns, not enough resources' pain point Dux targets with its AI-driven approach.
- Wiz: Wiz is a high-growth cloud security platform with strong exposure and vulnerability prioritization capabilities. While cloud-focused, it competes for the same enterprise security budget and CISO mindshare as Dux.
- Orca Security: Orca Security provides agentless cloud exposure and vulnerability prioritization, competing for the same exposure management buyer at cloud-forward enterprises.
Direct peers
- Qualys: Qualys is a long-standing enterprise vulnerability management and exposure platform. It competes for the same CISO budget Dux targets, with a more mature but legacy cloud-delivered architecture.
- Rapid7: Rapid7 offers vulnerability management, exposure analytics, and orchestrated remediation through InsightConnect and Metasploit — overlapping heavily with Dux's exploitability analysis and remediation acceleration modules.
- CrowdStrike (Falcon Exposure Management): CrowdStrike's Falcon platform includes an exposure management module and CrowdStrike is also a Dux seed investor, creating a direct competitor/investor relationship. Both target enterprise CISOs with continuous exposure analysis.
- Vulcan Cyber: Vulcan Cyber is a focused exposure management and remediation orchestration vendor, directly competing with Dux's remediation acceleration and lightweight mitigation capabilities.
- Tenable: Tenable is the established leader in vulnerability management (Nessus) and exposure management. Mille Gandelsman, who provided a Dux testimonial, is ex-Tenable, highlighting the direct competitive overlap in the exposure management category.
Broad incumbents
- Palo Alto Networks (Cortex XSIAM/XSOAR): Palo Alto's Cortex platform bundles exposure management, SIEM, and remediation orchestration as part of a broader portfolio, competing with Dux at the enterprise platform tier.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
Dux social profiles
Digital presenceDux financial estimates
Financial estimateRevenue estimate
Valuation estimate
Dux leadership team
Management profileNumber of profiles
Dux funding detail
Funding detailFunding overview
Funding rounds2 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Dux M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Dux
What does Dux do?
Dux provides an AI-driven agentic exposure management platform that continuously analyzes enterprise environments to determine which vulnerabilities are actually exploitable, identifies lightweight mitigations that can close gaps without patching, and accelerates remediation through automated orchestration. The platform is sold as a SaaS subscription to enterprise security teams via a direct field-sales motion.
Is Dux a public or private company?
Dux is a private company. It is classified as venture growth investor backed and is currently operating.
When was Dux founded?
Dux was founded in 2025. It employs 11 to 50 people.
Where is Dux based?
Dux is headquartered in New York, United States, in the North America region.
How does Dux make money?
One revenue line is on record: saaS Subscription.
Who are Dux's main competitors?
Emerging players on record are Axonius, Opus Security, Wiz and Orca Security. Direct peers are Qualys, Rapid7, CrowdStrike (Falcon Exposure Management), Vulcan Cyber and Tenable. Palo Alto Networks (Cortex XSIAM/XSOAR) is listed as a broad incumbent.
Does Dux have an API?
No public API is recorded for Dux.
What industry is Dux in?
Dux's product category is Cybersecurity Exposure Management Software. Its primary akta.pro industry code is HDADAHAJ, Third-Party & Supply Chain Exposure Monitoring. Its NAICS code is 518 and its SIC code is 7372.