Aftra

What Aftra does

Aftra ehf. is an Icelandic-headquartered cybersecurity software company that provides an External Attack Surface Management (EASM) platform. The company, headquartered in Reykjavík at Borgartún 37, emerged as an independent entity in May 2024 after operating as a unit inside the cybersecurity consultancy Syndis; both Aftra and Syndis remain subsidiaries of the holding company Skyggnir. The platform continuously discovers an organization's external digital assets, including domains, subdomains, shadow IT, employee accounts on third-party services, and exposed credentials, then maps findings to vulnerabilities using a combination of web vulnerability scanners, a proprietary always-running scanner, and integrated Nessus network scanning. The core platform is augmented by add-on modules: an Internal Vulnerability Scanner that simulates insider or USB-borne threats beyond the firewall, an API Scanner for API endpoint discovery, a PCI Scanner for PCI DSS compliance, and Security Campaigns that surface employee-level digital footprint and breach exposure.

Aftra serves three primary personas within a customer organization: C-suite executives who need business-centric KPIs and security scores in light of new EU personal-liability regulations (NIS2, DORA), IT teams that need prioritized vulnerability remediation, and security teams that need continuous threat and anomaly detection. Named customers include Vodafone, Veritas, Securitas, Landspítali (Icelandic National Hospital), Innnes, Dominoes, Sýn, Verne Global, Embla Medical, Byko, Hagar, Origo, GoGift, and Blue Car Rental, spanning telecom, healthcare, retail, food wholesale, and security services. The platform integrates with Microsoft Defender, Slack, Jira, and Microsoft Teams for workflow handoff.

Name

Aftra

Legal name

Aftra ehf.

Website

https://aftra.io

Company type

Private

Founded year

2024

Operating status

Operating

Headcount range

11–50 employees

Short description

Aftra is an Icelandic cybersecurity company offering an External Attack Surface Management platform that continuously maps external assets, employee digital footprints, and vulnerabilities, serving C-suite, IT, and security teams primarily across European mid-market and enterprise customers.

Ownership category

akta.pro rank

Product category

Cybersecurity / Attack Surface Management

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Attack Surface Management (EASM/CAASM) (HDADAHAC)

akta.pro secondary industries

SaaS Security Posture Management (SSPM) (HDADADAI), Access Security & Identity Threat Detection (ITDR, UEBA for Identity) (HDADAAAI)

Keywords

• Attack surface management
• Vulnerability monitoring
• Cybersecurity platform
• Digital footprint analysis
• Employee risk scoring

Headquarters

HQ city

Reykjavík

HQ country

Iceland

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. SaaS Subscription: Subscription-based pricing model tailored to the size of the organization's digital footprint and specific features required. Pricing starts at 490 EUR per month and is quote-based for enterprise customers.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels7 records

Core offering

Aftra provides an External Attack Surface Management (EASM) SaaS platform that continuously discovers exposed digital assets, employee risks, shadow IT, and vulnerabilities from a hacker's perspective, then converts findings into prioritized, actionable insights and security KPIs. The core platform is sold as a subscription (starting at 490 EUR/month) and supplemented by add-on modules including an Internal Vulnerability Scanner, API Scanner, PCI Scanner, and Security Campaigns for employee risk management.

Product overview

Aftra is a cybersecurity platform built around External Attack Surface Management (EASM). The core Aftra platform provides continuous external vulnerability scanning and monitoring, discovering exposed assets and turning findings into prioritized actions. The platform is designed for both C-suite executives (providing simplified dashboards and KPIs) and IT/security teams (providing technical vulnerability management). The product portfolio includes the core Aftra EASM platform plus add-on modules: Internal Vulnerability Scanner (scans beyond the firewall for internal threats), Security Campaigns (employee security awareness through digital footprint visualization), API Scanner (discovers and secures API attack surface), and PCI Scanner (PCI DSS compliance scanning). Additional features include Dashboard Metrics, Performance Reports with AI-driven insights, Intelligent Suggestions for remediation, and Employee Risk Scoring.

Differentiator

Problem solved

Functional benefit

Products and services

• Aftra Core Platform (EASM) External Attack Surface Management (EASM) SaaS platform that continuously discovers exposed digital assets, employee risks, shadow IT, and vulnerabilities from a hacker's perspective and converts findings into prioritized actions, security scoring, and executive-ready KPIs for security, IT, and leadership teams.
• Internal Vulnerability Scanner
• API Scanner Scanner that discovers and secures hidden API attack surfaces within an organization's digital footprint, identifying API endpoints as part of overall attack surface management.
• PCI Scanner Specialized scanner designed to help organizations with PCI DSS compliance requirements through targeted scanning for payment card industry security.
• Security Campaigns Module that enables IT managers to create campaigns showing employees their digital footprint, where company accounts are registered online, and whether their passwords have been leaked, with individual employee risk scores to reduce account takeover risk.

Quantifiable outcome

• IBM Cost of Data Breach Report 2025: Attack surface management tools decreased the average cost of a data breach by $160,547
• +1 more outcomes

Named customers6 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability5 records

Feature11 records

Partnerships

Three partnerships are on record, tiered core.

• NIC (Nordic Internet Exchange)coreChannel Partner/ Reseller/ Distributor · 30 April 2026Partnership with NIC (Nordic Internet Exchange) to expand into the Swedish market, bridging the gap between compliance and cybersecurity exposure. NIC provides internet exchange and related services in the Nordic region.
• Abero Technologies OYcoreChannel Partner/ Reseller/ Distributor · 18 October 2024Strategic partnership with Finnish technology firm Abero Technologies OY to expand into the Finnish market. Ben Bergman, COO at Abero, contributed Zero Trust expertise and recommendations for Aftra's thought leadership content. Abero specializes in helping organizations adopt Zero Trust architecture.
• SyndiscoreImplementation/ SI/ Consulting PartnerAftra's sister company and former parent company. Syndis is an Icelandic cybersecurity consulting firm specializing in security management including compliance, prevention, and post-incident mitigation. Syndis works closely with Aftra to deliver cybersecurity software and services to Icelandic and foreign markets. Both companies are subsidiaries of Skyggnir holding.

Scale indicators4 records

Recent moves9 records

Expansion highlights6 records

Direct peers

• Microsoft Defender External Attack Surface Management: Microsoft's Defender EASM, integrated into the Defender suite, targets the same enterprise external attack surface use case as Aftra, often bundled with broader Microsoft security commitments.
• Detectify: Detectify is a Sweden-based EASM and dynamic application security testing platform with a strong Nordic presence, competing directly with Aftra for the same regional enterprise and mid-market security buyers.
• Censys: Censys provides internet-wide asset discovery and external attack surface management used by security teams, overlapping directly with Aftra's asset mapping and exposure monitoring capabilities.
• CyCognito: CyCognito is an external attack surface management and risk prioritization platform sold to enterprises and security teams, directly comparable to Aftra's continuous EASM and prioritization workflow.
• CrowdStrike Falcon Surface: CrowdStrike's external attack surface management module, Falcon Surface, is part of the Falcon platform and competes head-on with Aftra's core EASM offering for enterprise security buyers, with similar asset discovery and exposure prioritization.
• Tenable ASM (Tenable.io): Tenable's attack surface management product competes directly with Aftra, combining external ASM with Tenable's Nessus vulnerability data (which Aftra also integrates with), targeting similar IT and security personas.

Broad incumbents

• Mandiant (Google Cloud) Attack Surface Management: Mandiant's ASM offering, now part of Google Cloud, provides enterprise-grade continuous external monitoring and is a broader-incumbent alternative for the same EASM use case Aftra targets.
• Bitsight: Bitsight delivers security ratings and attack surface analytics for enterprises and third-party risk programs, competing with Aftra's KPI-driven posture scoring and continuous exposure monitoring at a larger scale.
• SecurityScorecard: SecurityScorecard provides enterprise security ratings plus attack surface intelligence, overlapping with Aftra's executive-facing security scoring and continuous monitoring but on a much larger scale and with a broader vendor risk offering.
• Wiz: Wiz is a leading CNAPP platform whose external attack surface and exposure modules increasingly overlap with EASM, making it a credible broader-incumbent alternative for cloud-forward enterprise buyers comparing solutions to Aftra.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• YouTubeyoutube.com/@aftraio
• Facebookfacebook.com/profile.php
• LinkedInlinkedin.com/company/aftraio

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Aftra