VulnCheck has raised $25 million in Series B financing to meet surging demand for its exploit intelligence solutions, bringing the company’s total funding to $45 million. The round was led by Sorenson Capital, with participation from National Grid Partners and existing investors including Ten Eleven Ventures and In-Q-Tel.
The Lexington, Massachusetts-based company said the new capital will be used to scale growth and expand its intelligence capabilities. VulnCheck helps global organizations close the exploitation-timing gap by delivering machine-consumable, evidence-driven intelligence that powers cybersecurity products and critical response workflows. The company’s platform is built to support automation and AI-driven threat detection, helping defenders respond to emerging threats at machine speed.
The funding follows VulnCheck’s description of a record-setting year. Over the past 12 months, the company increased enterprise annual recurring revenue by 557% year over year and government annual recurring revenue by 306%. It also climbed from No. 143 to No. 28 in all-time common vulnerabilities and exposures assignments, with nearly 2,000 CVEs assigned.
VulnCheck added nearly 7,000 new users to its community, bringing the total to more than 13,000 across cybersecurity vendors, practitioners, and vulnerability management teams. During 2025, the company added nearly 900 software and hardware vulnerabilities to its Known Exploited Vulnerabilities list, representing a 25% year-over-year expansion. According to VulnCheck research, 32% of these vulnerabilities were exploited on or before the day of CVE disclosure, up 36% from 2024.
VulnCheck said its platform analyzes first-party evidence of exploitation and scans more than 500 million records maintained on all CVEs from over 500 sources. The system refreshes data multiple times per day, providing context into threat actor activity, ransomware associations, and proof-of-concept exploits observed in the wild.
KEY QUOTES:
“VulnCheck’s fundamentally different approach has allowed the company to sustain its hypergrowth trajectory. Legacy vulnerability management solutions were built for manual analyst workflows and cover only a fraction of known vulnerabilities. VulnCheck combines the largest breadth of public and first-party exploit intelligence and delivers it first for machine-to-machine consumption, with human review as a secondary outcome, to drastically close the exploitation-timing gap. This approach has it well-positioned in the market for years to come.”
Ken Elefant, Partner, Sorenson Capital
“Modern threats require more than just scans. We’ve paired VulnCheck’s intelligence with our automated AI penetration testing and elite human analysis to deliver a continuous defense that doesn’t just find vulnerabilities—it identifies the ones that are truly exploitable. This combination empowers our customers to prioritize the risks that actually matter and close the gap on exploited CVEs.”
Mark Kuhr, Co-Founder and CTO, Synack
“The weaponization and exploitation of software vulnerabilities is happening at a much faster rate than remediation, and this is particularly concerning for security teams as the number of CVEs increases exponentially year-over-year. This funding validates our approach to providing faster, more precise, and continuously updated intelligence, and reinforces our commitment to the organizations that rely on us to outpace attackers when exploit timelines have become more compressed than ever.”
Anthony Bettini, Founder and CEO, VulnCheck
“There is growing urgency within the critical infrastructure segment to modernize how we prioritize and address potential software vulnerabilities. It’s clear that attackers are moving faster than defenders can triage flaws, and VulnCheck provides continuously updated intelligence at machine speed and with more precision than any other organization we’ve seen. We’re looking forward to supporting the company as an investor as it enters its next stage of growth.”
Arun Chetty, Vice President, National Grid Partners
