Brinqa has announced its acquisition of PlexTrac, a move that integrates offensive security validation into its enterprise exposure management platform. This strategic combination aims to provide a comprehensive solution for managing the entire cybersecurity exposure lifecycle. The deal establishes the largest standalone vendor in the Unified Exposure Management space, serving over 3,000 customers globally, including a quarter of the Fortune 500.
Enhancing the Exposure Management Lifecycle
The acquisition enriches Brinqa's platform by incorporating PlexTrac's expertise in penetration testing workflows and remediation verification. This allows security teams to validate whether identified vulnerabilities are genuinely exploitable before allocating resources for fixes. Subsequently, the platform can retest post-remediation to confirm that corrective actions were successful and the exposure has been eliminated.
This new capability directly addresses a critical component of Continuous Threat Exposure Management (CTEM). While traditional systems may indicate a task is complete, Brinqa now offers concrete validation that the underlying risk is gone. Dan Pagel, CEO of Brinqa, highlighted that PlexTrac brings profound offensive security depth from practitioners experienced in demonstrating how attackers breach systems.
A Unified Platform for Modern Security
For enterprise clients, the primary value lies in merging vulnerability prioritization with offensive security testing into a single, cohesive workflow. This integrated approach enables Brinqa to identify business-critical exposures and direct testing resources toward the highest-priority risks. The results from retesting are then fed back into the same risk-management environment for continuous improvement.
The combination also benefits PlexTrac customers by giving them access to Brinqa’s extensive exposure management infrastructure. Penetration testing teams can now align their workflows with Brinqa’s powerful prioritization engine. This ensures that security, IT, and offensive security teams are all working from a unified and prioritized view of exposures.
Fueling Growth and AI Innovation
This acquisition follows a significant growth period for Brinqa, which reported a 164% year-over-year increase in new bookings in 2025. The company has also been heavily investing in artificial intelligence, developing tools like an AI Attribution Agent. PlexTrac’s validated data on exploits and remediation will provide crucial context for these AI tools and enhance Brinqa's Cyber Risk Graph.
Thomas Krane of Insight Partners and a Brinqa board member emphasized the growing importance of validated data as security teams adopt AI. He stated that the acquisition closes a critical gap by enabling teams to prove their fixes worked. This verified information is essential for building reliable and effective AI-driven security operations across the enterprise.
Leadership and Operational Continuity
Despite the merger, PlexTrac’s products will remain available as standalone solutions, ensuring continuity for its existing customer base. This strategy allows users to maintain their current workflows while offering an optional path to adopt Brinqa's broader capabilities. Dan DeCloss, PlexTrac's founder, will join Brinqa's executive team and board to lead the combined offensive security practice.
The acquisition of PlexTrac by Brinqa marks a significant consolidation in the cybersecurity exposure management market. By combining risk-based prioritization with practitioner-led offensive security validation, the new entity is uniquely positioned to offer a complete, end-to-end solution. This integrated platform promises to streamline security operations, providing a continuous workflow from initial discovery through to validated remediation for enterprises worldwide.