Why We Invested in Hackurity

Hackurity does advanced penetration testing across the entire attack surface, not a slice of it. Web and mobile applications, internal and external networks, embedded and IoT systems, even deep- and dark-web exposure: the breadth most organisations have to stitch together from three or four specialist firms, delivered instead as one managed, autonomous service. At the core is their VulPen engine, which fuses penetration testing and vulnerability scanning into a single automated process running 24/7/365, and it plugs into the tools security teams already use, from Rapid7 and Tenable to CrowdStrike and ServiceNow.

We backed them because that combination is genuinely rare, and because they sit on the right side of the AI shift. Their model is human by design: an expert reviews every finding before it reaches the customer. The agents make their testers sharper, not redundant.

This is our cybersecurity pillar at full reach. The hard part of offensive security was never testing one application well. It is covering everything an attacker can touch — the application layer, firmware and embedded systems, the network, and the deep web — and being genuinely good in each. That span of capability is Hackurity’s moat, the kind of depth you can’t fake or clone in a hurry. A gap anywhere on that surface is the quiet kind of failure we exist to catch before an attacker does.

Most pentest providers are sharp at one thing and quiet about the rest. Hackurity tests the whole board — your applications, your networks, your embedded and IoT systems, and your exposure on the deep and dark web — continuously rather than once a year, and every finding is checked by a human before it lands on your desk. You get one partner with specialist depth in each area, plug-and-play integration with the stack you already run, and an audit trail your regulator will accept. The point is simple: you find every way in before someone else does.