Brinqa has acquired PlexTrac, adding offensive security validation, workflow and reporting capabilities to its exposure management platform and creating what the company describes as the largest standalone vendor in Unified Exposure Management. Financial terms of the transaction were not disclosed.
The combined company now serves more than 3,000 customers across 57 countries, including more than 25% of the Fortune 500.
The acquisition brings together two companies that were independently recognized in the Gartner Magic Quadrant for Exposure Assessment Platforms.
PlexTrac adds offensive security validation capabilities designed to help Brinqa customers verify that vulnerabilities and other exposures have actually been remediated rather than relying solely on a ticket or workflow status indicating that an issue has been closed.
Brinqa sees that validation capability as the missing component needed to close the Continuous Threat Exposure Management, or CTEM, loop.
The combined platform is designed to support exposure discovery and prioritization, remediation workflows and subsequent testing that confirms whether a fix worked and remained effective.
For Brinqa customers, PlexTrac adds the ability to generate validated evidence supporting remediation claims made to auditors, insurers, boards and other stakeholders.
For PlexTrac customers, the combination connects penetration testing and offensive security workflows directly with Brinqa’s broader exposure prioritization platform.
The system can support pre-remediation testing to establish whether an exposure is exploitable and post-remediation retesting to verify that the vulnerability has been resolved.
Brinqa said every confirmed exploit and remediation result generated through PlexTrac can flow into its data layer, strengthening the company’s Cyber Risk Graph.
That validated information can also be used by Brinqa’s AI agents or by third-party AI models connected through the company’s Bring Your Own AI program.
Brinqa has been expanding its AI capabilities with MCP interfaces, an AI Attribution Agent and an AI Deduplication Agent.
The company said new bookings grew 164% year over year in 2025, while average selling prices for new customers increased 32%.
Momentum continued into 2026, with new-logo bookings more than doubling year over year and existing customers expanding their deployments.
Brinqa has spent more than a decade developing exposure management technology for large enterprises, with customers including Nestlé, PhonePe, Cambia Health Solutions, Guidewire and SAP.
PlexTrac provides an AI-powered platform for penetration testing reporting and threat exposure management.
Its customers include enterprises and security providers such as Expedia, Royal Caribbean, Mandiant and Deloitte.
PlexTrac founder and Chief Customer Brand Officer Dan DeCloss will join Brinqa’s executive leadership team and board of directors and lead the combined company’s offensive security practice.
PlexTrac’s existing products will continue to operate as standalone offerings, allowing current customers to maintain their existing workflows while providing an option to expand into Brinqa’s broader exposure management platform.
Brinqa is positioning the combined platform as an operating system for enterprise exposure management where prioritization, remediation decisions, offensive security validation and evidence of remediation can be managed within a common environment.
Covington & Burling represented Brinqa in the transaction.
KEY QUOTES:
“We’ve spent over a decade building the platform enterprise security teams trust to prioritize what to fix first. PlexTrac brings real offensive security depth, from practitioners who have spent years proving exactly how attackers get in.”
“Pairing that expertise with our exposure assessment platform gives customers proof they can defend to a board, an auditor, or any AI system acting on that data.”
Dan Pagel, CEO of Brinqa
“Exposure management only matters if teams can prove the fix worked, and that’s the gap Brinqa now closes.”
“We’ve watched this team build category-defining technology, and this acquisition sharpens their lead at a moment when security organizations are demanding validated, AI-ready data.”
Thomas Krane, Managing Director at Insight Partners and Brinqa Board Member
“PlexTrac was built by offensive security practitioners, for offensive security practitioners, and that’s not changing.”
“Joining Brinqa gives our team a bigger platform to prove that hands-on offensive security expertise still matters, even as more of this work gets automated.”
Dan DeCloss, Founder and Chief Customer Brand Officer of PlexTrac
