PlexTrac

PlexTrac, Inc. operates as a pivotal player in the cybersecurity sector, offering a platform designed to streamline offensive security workflows and vulnerability management. Founded in 2016 by Dan DeCloss, the company originated from his direct experience with the inefficiencies of manual security reporting. DeCloss, now the CTO, channeled his extensive background in penetration testing and cybersecurity—honed in the Department of Defense and at private sector firms like Veracode, Mayo Clinic, and Anthem—into creating a solution for a pain point he knew intimately. His formal education, including a Master's in Computer Science from the Naval Postgraduate School with a focus on Information Security, provided the technical foundation for the venture.

The company's core offering is a SaaS-based platform that serves both enterprise security teams and Managed Security Service Providers (MSSPs). PlexTrac's business model is centered on subscriptions, with tiered pricing and add-on modules to cater to a diverse client base that includes Fortune 500 companies. Revenue is generated by providing tools that aggregate security assessment data from various sources, such as penetration tests and vulnerability scanners, into a single, centralized system. This consolidation allows security professionals to move beyond static reports to a more dynamic, collaborative workflow.

The platform's key function is to transform the entire lifecycle of vulnerability management. It allows teams to automate the creation of penetration test (pentest) reports, a process that can be reduced by up to 75%. Features include a centralized content library, customizable report templates, and integrations with ticketing systems like Jira and ServiceNow to automate remediation and retesting workflows. A significant differentiator is its configurable scoring engine, which helps teams prioritize vulnerabilities based on business-specific context rather than relying solely on generic scores. The platform also incorporates AI-powered capabilities, using Google Cloud's Vertex AI to generate report narratives and analyze data, further enhancing efficiency and insight. With deployment options including secure cloud, private hosted, or on-premise, PlexTrac provides flexibility for organizations with varying security requirements.

Since its bootstrapped MVP, PlexTrac has achieved significant financial milestones, including a $10 million Series A in 2021 and a $70 million Series B round in 2022, led by Insight Partners. This funding has fueled product development and market expansion. In June 2023, Andy Langsam was appointed CEO to steer the company's growth, allowing DeCloss to focus on technology and product strategy as CTO.

Keywords: penetration test reporting, vulnerability management, threat exposure management, cybersecurity workflow, offensive security, pentest automation, risk prioritization, security assessment platform, remediation tracking, MSSP security tools, enterprise security, continuous validation, security data aggregation, CTEM, vulnerability reporting, cybersecurity SaaS, automated security reports, risk-based vulnerability management, security analytics, compliance reporting