From scam victims to enterprise white hats: a cybersecurity landscape map (2026)
Thirteen categories, from help for scam victims to enterprise security testing, with reported losses, announced funding, market forecasts by publisher, and an honest status of where Mithril fits.
The article body is not available in this language; showing English.
## For leaders: three takeaways
- **Fraud is a business risk as well as a consumer one.** Reported losses to the FBI’s IC3 reached $20.877 billion in 2025, and many losses are never reported ([FBI](https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions)).
- **Security testing is moving toward AI-driven tools while established vendors consolidate.** Google completed its acquisition of Wiz in March 2026, and NetSPI and Synack have agreed to merge ([Alphabet](https://abc.xyz/investor/news/news-details/2026/Google-Completes-Acquisition-of-Wiz-2026-ta7OaU2uA0/default.aspx); [NetSPI](https://www.netspi.com/newsroom/press-release/netspi-and-synack-to-merge-forming-a-leading-offensive-cybersecurity-platform/)). Expect roadmaps and contracts to change, and ask every provider how it ensures it tests only systems you own or are authorized to test.
- **Skills remain the constraint.** ISC2 estimated a global workforce gap of 4.8 million people in 2024, and 59% of respondents to its 2025 study reported critical or significant skills needs ([ISC2 2024](https://www.prnewswire.com/news-releases/growth-of-cybersecurity-workforce-slows-in-2024-as-economic-uncertainty-persists-302244585.html); [ISC2 2025](https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study)). Plan training alongside tools.
## The landscape at a glance
This post maps companies and public services in two bands. The victim side covers help before and after online fraud and account takeover. The enterprise side covers what is often sold as “white hat as a service”: security testing of systems a company owns. Each organization is grouped by what it says it does on its own official site, checked in October 2026.
Loss figures below are reported losses: what victims told the FBI, the FTC, or the police. They are not the total harm, and they are not Mithril data.
[[figure:chaos-map]]
The victim side, seven groups:
- **Fraud and scam prevention:** Sardine, Alloy, Charm Security, Resistant AI, Hawk, Pindrop, Whoscall (Gogolook), ScamAdviser.
- **Victim support and recovery:** Mithril Your records (Live), Aura, LifeLock (Gen Digital), Identity Theft Resource Center, IdentityTheft.gov (FTC), IC3 (FBI), AARP Fraud Watch Network, and in Japan the police consultation line #9110 and the consumer hotline 188.
- **Identity verification:** Persona, Socure, Veriff, Incode, TRUSTDOCK, Liquid.
- **OSINT, threat intelligence and blockchain investigation:** Mithril public evidence search (Live), Recorded Future, Flashpoint, Silent Push, BforeAI, Netcraft, TRM Labs, Chainalysis, Elliptic.
- **Trust and safety, digital risk and deepfakes:** Doppel, Outtake, Bolster AI, Blackbird.AI, Reality Defender, GetReal Security, Adaptive Security, Alice (formerly ActiveFence; [alice.io](https://alice.io/)).
- **AI security and developer AI:** HiddenLayer, Lakera (now part of [Check Point](https://www.checkpoint.com/press-releases/check-point-acquires-lakera-to-deliver-end-to-end-ai-security-for-enterprises/)), Noma Security, Protect AI (now part of Palo Alto Networks, [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs)), GMO Flatt Security, Mithril System One Coding (Live, pilot).
- **Evidence preservation:** Mithril Your records with SHA-256 fingerprints (Live), Hunchly, Page Vault, Axon.
The enterprise side, six groups:
- **AI pentesting and offensive security:** Mithril Whitehat as a Service (Planned), XBOW, Horizon3.ai, Pentera, RunSybil, Terra Security, Wiz Red Agent (Google).
- **Pentest as a service (PTaaS) and crowdsourced testing:** HackerOne, Bugcrowd, Synack, NetSPI, Cobalt.
- **Application security (SAST and DAST):** Mithril DAST and SAST (In development), Snyk, Semgrep, Checkmarx, Veracode, StackHawk, Invicti.
- **Attack graph and exposure management:** Mithril attack paths and ontology graph (In development), XM Cyber, Wiz (Google), JupiterOne.
- **Security training and cyber ranges:** Mithril Dojo (Live), Hack The Box, TryHackMe, Immersive, SANS Institute.
- **Digital forensics and incident response (DFIR):** Mithril forensic report import (In development), Cado Security (Darktrace), Binalyze, Magnet Forensics, Cellebrite.
## Victim side: reported losses keep rising
[[figure:reported-losses]]
The FBI's Internet Crime Complaint Center (IC3) received 1,008,597 complaints in 2025, up from 859,532 in 2024. Reported losses were $20.877 billion, 26% more than the year before ([IC3 2025 report](https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf); [FBI release, April 6, 2026](https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions)).
Cryptocurrency complaints accounted for more than $11 billion of reported losses, and complaints that mentioned AI for nearly $893 million. People aged 60 and over reported about $7.7 billion, up 37% ([FBI](https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions)).
The FTC received about 3 million fraud reports for 2025, with $15.9 billion in reported losses, up from over $12 billion in 2024. Investment scams were $7.9 billion and imposter scams more than $3.5 billion ([FTC, March 25, 2026](https://www.ftc.gov/news-events/news/press-releases/2026/03/ftc-testifies-joint-economic-committee-agencys-efforts-combat-fraud)). Social media scams were $2.1 billion ([FTC, April 27, 2026](https://www.ftc.gov/news-events/news/press-releases/2026/04/new-ftc-data-show-people-have-lost-billions-social-media-scams)).
In Japan: the National Police Agency counted ¥325.74 billion (3,257.4億円) in losses from special fraud and social-media investment and romance fraud in 2025, up 63.6% ([NPA, PDF](https://www.npa.go.jp/bureau/criminal/souni/tokusyusagi/sagi_keihatsu2025.pdf)). Special fraud alone was 27,832 cases and about ¥142.31 billion ([NPA](https://www.npa.go.jp/bureau/safetylife/sos47/new-topics/260605/01.html)).
## Victim side: who the products are built for
[[figure:positioning]]
Most products here sell to organizations: banks, platforms, enterprises, and investigators. Fewer are built for an individual, and fewer still for the period after a loss.
## Victim side: announced funding in adjacent categories
[[figure:adjacent-funding]]
The table lists the latest publicly announced round we could source for 22 companies near this space, as of October 2026.
The announced amounts add up to about $1.50 billion. That is a sum of announced amounts (our tally) across all 22 rounds in the table, not a market figure. The rounds are not comparable equity rounds: Pindrop’s $100 million is a loan (debt), Aura’s round mixes equity and debt, Netcraft announced “over $100 million” and is counted at $100 million, and the Alice (formerly ActiveFence) and Chainalysis rounds date from 2021 and 2022.
| Company | Announced amount | Type | Announced | Category |
| --- | --- | --- | --- | --- |
| Persona | [$200M](https://www.prnewswire.com/news-releases/persona-raises-200m-at-2b-valuation-to-build-the-verified-identity-layer-for-an-agentic-ai-world-302442649.html) | Series D (equity) | 2025-04-30 | Identity |
| Chainalysis | [$170M](https://www.chainalysis.com/blog/series-f/) | Series F (equity) | 2022-05-12 | OSINT / threat intel |
| Aura | [$140M](https://www.aura.com/press/release/aura-completes-series-g-funding-round-raises-140-million-in-equity-and-debt) | Series G (equity and debt) | 2025-03-24 | Victim support |
| Netcraft | [over $100M (counted as $100M)](https://www.spectrumequity.com/news/netcraft-secures-first-funding-with-over-100m-from-spectrum-equity-names-experienced-technology-executive-ryan-woodley-as-new-ceo/) | First outside funding | July 2023 | OSINT / threat intel |
| Noma Security | [$100M](https://noma.security/blog/noma-security-raises-100m-to-drive-adoption-of-ai-agent-security/) | Series B (equity) | 2025-07-31 | AI security |
| Pindrop | [$100M](https://techcrunch.com/2024/07/17/deepfake-detecting-firm-pindrop-lands-100m-loan-to-grow-its-offerings/) | Loan (debt), not equity | 2024-07-17 | Fraud / social engineering |
| Alice (formerly ActiveFence) | [$100M](https://techcrunch.com/2021/07/26/activefence-comes-out-of-the-shadows-with-100m-in-funding-and-tech-that-detects-online-harm/) | Series A and B combined (equity) | 2021-07-26 | Trust & safety / deepfake |
| Adaptive Security | [$81M](https://www.prnewswire.com/news-releases/adaptive-security-raises-81-million-series-b-to-stop-ai-powered-cyber-threats-302643174.html) | Series B (equity) | 2025-12-16 | Fraud / social engineering |
| Doppel | [$70M](https://www.prnewswire.com/news-releases/doppel-raises-70m-series-c-to-meet-rising-demand-for-ai-driven-social-engineering-defense-302619463.html) | Series C (equity) | 2025-11-19 | Fraud / social engineering |
| Sardine | [$70M](https://www.sardine.ai/press/pr/fraud-and-compliance-productivity) | Series C (equity) | 2025-02-11 | Fraud / social engineering |
| TRM Labs | [$70M](https://www.trmlabs.com/resources/blog/trm-labs-announces-70m-series-c-to-scale-ai-solutions-to-disrupt-criminal-networks-and-counter-national-security-threats) | Series C (equity) | 2026-02-04 | OSINT / threat intel |
| Protect AI (now part of Palo Alto Networks) | [$60M](https://www.geekwire.com/2024/samsung-salesforce-invest-in-60m-round-for-seattle-cybersecurity-startup-protect-ai/) | Series B (equity) | 2024-08-01 | AI security |
| HiddenLayer | [$50M](https://www.hiddenlayer.com/news/hiddenlayer-raises-50m-in-series-a-funding-to-safeguard-ai) | Series A (equity) | 2023-09-19 | AI security |
| Outtake | [$40M](https://techcrunch.com/2026/01/28/ai-security-startup-outtake-raises-40m-from-iconiq-satya-nadella-bill-ackman-and-other-big-names/) | Series B (equity) | 2026-01-28 | Fraud / social engineering |
| Reality Defender | [$33M](https://www.prnewswire.com/news-releases/reality-defender-expands-series-a-to-33-million-to-enhance-ai-detection-capabilities-302283098.html) | Series A, expanded total (equity) | 2024-10-22 | Trust & safety / deepfake |
| Resistant AI | [$25M](https://resistant.ai/blog/resistant-ai-raises-25-million-in-series-b-funding-to-empower-ai-agents-to-fight-fraud-and-fincrime) | Series B (equity) | 2025-10-13 | Fraud / social engineering |
| Blackbird.AI | [$20M](https://www.prnewswire.com/news-releases/blackbirdai-raises-20m-in-series-b-funding-to-empower-organizations-with-narrative-and-perception-risk-intelligence-301851388.html) | Series B (equity) | 2023-06-15 | Trust & safety / deepfake |
| Lakera | [$20M](https://www.prnewswire.com/news-releases/lakera-raises-20m-series-a-to-secure-generative-ai-applications-302204874.html) | Series A (equity) | 2024-07-24 | AI security |
| GetReal Security | [$17.5M](https://forgepointcap.com/perspectives/getreal-security-raises-17-5m-series-a-led-by-forgepoint-capital-to-address-rapidly-growing-threats-associated-with-generative-ai-and-malicious-digital-media/) | Series A (equity) | 2025-03-26 | Trust & safety / deepfake |
| BforeAI | [$15M](https://www.prnewswire.com/news-releases/bforeai-announces-15-million-in-series-a-funding-led-by-syn-ventures-302125023.html) | Series A (equity) | 2024-04-24 | OSINT / threat intel |
| Silent Push | [$10M](https://www.silentpush.com/press-releases/series-b-funding-announcement/) | Series B (equity) | 2025-09-12 | OSINT / threat intel |
| Charm Security | [$8M](https://www.prnewswire.com/news-releases/charm-security-emerges-from-stealth-to-combat-scams-and-social-engineering-exploiting-human-vulnerabilities-securing-8m-in-seed-funding-from-team8s-venture-creation-fund-302409642.html) | Seed (equity) | 2025-03-25 | Fraud / social engineering |
By category, the same tally (sum of announced amounts, our tally) is: fraud and social-engineering defense $394M (Sardine, Charm Security, Resistant AI, Pindrop, Doppel, Adaptive Security, Outtake); OSINT and threat intelligence $365M (Chainalysis, Netcraft, TRM Labs, BforeAI, Silent Push); AI security $230M (Noma Security, Protect AI, HiddenLayer, Lakera); identity $200M (Persona); trust and safety and deepfakes $170.5M (Alice, formerly ActiveFence; Reality Defender, Blackbird.AI, GetReal Security); victim support $140M (Aura).
Left out: Socure, ChillStack, and TRUSTDOCK, because we could not confirm a comparable announced amount in US dollars.
## Enterprise side: white hat as a service
[[figure:positioning-enterprise]]
On the enterprise side, “white hat as a service” covers several kinds of work a company buys to test its own systems: autonomous or AI-assisted penetration testing, pentest services and bug bounty programs run by vetted human researchers, code and running-application scanning (SAST and DAST), attack-path analysis, training, and forensics after an incident. All of it is meant for systems the customer owns or is authorized to test.
## Enterprise side: where the 2025–2026 rounds went
[[figure:enterprise-funding]]
In the set of enterprise companies we surveyed, the 2025–2026 venture rounds went to AI-driven offensive testing: XBOW announced a $120 million Series C in March 2026 and $35 million of additional Series C financing in May 2026 ([XBOW, March 18, 2026](https://xbow.com/news/xbow-raises-120m-to-scale); [XBOW, May 6, 2026](https://xbow.com/news/xbow-secures-additional-35m-from-strategic-investors)); Horizon3.ai a $100 million Series D in June 2025 ([Horizon3.ai](https://horizon3.ai/news/press-release/horizon3-ai-raises-100m-to-cement-leadership-in-autonomous-security/)); Pentera a $60 million Series D in March 2025 ([Pentera](https://pentera.io/press-release/pentera-60m-funding-security-validation-growth/)); RunSybil $40 million in total funding in March 2026 ([RunSybil](https://www.runsybil.com/blog/runsybil-raises-40m-to-build-the-ai-native-platform-for-offensive-security)); and Terra Security a $30 million Series A in September 2025 ([Terra Security](https://www.terra.security/blog/terra-security-raises-30m-series-a-to-redefine-penetration-testing-with-agentic-ai)). Together that is $385 million, a sum of announced amounts (our tally), with XBOW’s two announcements counted separately. In application security, Semgrep announced a $100 million Series D in February 2025 ([Semgrep](https://www.prnewswire.com/news-releases/semgrep-announces-100m-series-d-funding-to-advance-ai-powered-code-security-302367780.html)). This is our sample, not the whole market.
Older categories saw consolidation instead of new rounds. Google agreed in March 2025 to acquire Wiz for $32 billion, subject to closing adjustments ([Alphabet Form 8-K, March 18, 2025](https://www.sec.gov/Archives/edgar/data/1652044/000165204425000027/goog-20250318.htm)), and completed the acquisition on March 11, 2026 ([Alphabet](https://abc.xyz/investor/news/news-details/2026/Google-Completes-Acquisition-of-Wiz-2026-ta7OaU2uA0/default.aspx)). NetSPI and Synack announced a definitive agreement to merge on September 2, 2026, backed by KKR; the merger is expected to close in October 2026, and we have not seen it confirmed as closed ([NetSPI](https://www.netspi.com/newsroom/press-release/netspi-and-synack-to-merge-forming-a-leading-offensive-cybersecurity-platform/)). Darktrace announced a proposed acquisition of Cado Security on January 9, 2025 ([Darktrace](https://www.darktrace.com/news/darktrace-announces-proposed-acquisition-of-cado-security-a-cloud-investigation-and-response-specialist)).
## Market forecasts, publisher by publisher
[[figure:market-size]]
Gartner forecast worldwide end-user spending on information security of $213 billion in 2025 and $240 billion in 2026, up 12.5%, from $193 billion in 2024 ([Gartner press release, July 29, 2025](https://www.gartner.com/en/newsroom/press-releases/2025-07-29-gartner-forecasts-worldwide-end-user-spending-on-information-security-to-total-213-billion-us-dollars-in-2025)). These are Gartner's forecasts.
Deloitte's Center for Financial Services forecast that fraud losses enabled by generative AI in the US could reach $40 billion by 2027, from $12.3 billion in 2023, a 32% compound annual growth rate ([Deloitte, May 29, 2024](https://www.deloitte.com/us/en/insights/industry/financial-services/deepfake-banking-fraud-risk-on-the-rise.html)). This is a forecast.
## Enterprise segment forecasts and the skills gap
[[figure:segment-forecasts]]
Enterprise segment forecasts come from different publishers, with different definitions, base years and horizons. They are listed side by side and are not added up.
| Segment | Base estimate | Forecast | CAGR | Publisher, date |
| --- | --- | --- | --- | --- |
| Penetration testing | $1.98B (2025) | $4.39B (2031) | 14.2% | [MarketsandMarkets, March 2026](https://www.marketsandmarkets.com/PressReleases/penetration-testing.asp) |
| Exposure management | $2.2B (2024) | $7.6B (2029) | 28.3% | [MarketsandMarkets, March 2024](https://www.prnewswire.com/news-releases/exposure-management-market-worth-7-6-billion-by-2029---exclusive-report-by-marketsandmarkets-302090329.html) |
| Digital forensics | $12.94B (2025) | $22.81B (2030) | 12.0% | [MarketsandMarkets, May 2025](https://www.marketsandmarkets.com/PressReleases/digital-forensics.asp) |
| Cybersecurity training | not stated in the release | $13.70B (2030) | 17.4% (2024–2030) | [Grand View Research, March 2024](https://www.grandviewresearch.com/press-release/global-cyber-security-training-market) |
| Application security | $41.16B (2026) | $66.03B (2031) | 9.9% | [MarketsandMarkets, March 2026](https://www.prnewswire.com/news-releases/application-security-market-worth-66-03-billion-by-2031--marketsandmarkets-302713211.html) |
All five are global market estimates published in press releases. The publishers’ scopes overlap (for example, penetration testing and application security), which is one more reason not to add them.
The skills gap is the other half of the story. ISC2 estimated a global cybersecurity workforce gap of 4.8 million people in 2024, up 19% year on year, against a workforce of about 5.5 million. The top skills gaps respondents named were AI (34%), cloud security (30%), zero trust (27%), digital forensics and incident response (25%) and application security (24%) ([ISC2, September 2024](https://www.prnewswire.com/news-releases/growth-of-cybersecurity-workforce-slows-in-2024-as-economic-uncertainty-persists-302244585.html)). In ISC2’s 2025 study of 16,029 respondents, 59% reported critical or significant skills needs, and 88% had experienced at least one significant consequence of a skills shortage ([ISC2, December 2025](https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study)).
## Comparison table
### Capabilities, from public sources
Company entries are based on each company’s own pages or announcements. A company missing from a row means we did not find it in the sources we checked, not that it lacks the capability. Mithril’s column uses three statuses: **Live** (offered and working), **In development** (built in code, not offered) and **Planned**.
| Capability | Mithril status | Described publicly by (examples) |
| --- | --- | --- |
| Human white-hat services (pentest, bug bounty) | Planned: Whitehat as a Service | [HackerOne](https://www.hackerone.com/product/bug-bounty-platform) (bug bounty community), [Bugcrowd](https://www.bugcrowd.com/press-release/bugcrowd-secures-102-million-in-strategic-growth-funding-to-scale-ai-powered-crowdsourced-security-platform/), Synack and NetSPI (merger agreed September 2026, [announcement](https://www.netspi.com/newsroom/press-release/netspi-and-synack-to-merge-forming-a-leading-offensive-cybersecurity-platform/)), [Cobalt](https://www.globenewswire.com/news-release/2020/08/20/2081369/0/en/Cobalt-io-raises-29-million-to-expand-its-Pentest-as-a-Service-platform-and-transform-software-security-testing.html) |
| AI-agent or autonomous offensive testing | In development: agent runtime and a gated research model; not offered | [XBOW](https://xbow.com/news/xbow-raises-120m-to-scale), [Horizon3.ai NodeZero](https://horizon3.ai/nodezero/), [Pentera](https://www.securityweek.com/security-validation-firm-pentera-banks-60m-series-d/) (validation), [HackerOne Agentic PTaaS](https://www.hackerone.com/press-release/hackerone-introduces-agentic-ptaas-deliver-continuous-expert-verified-pentesting), [Wiz Red Agent](https://www.wiz.io/blog/wiz-red-agent-is-ga) |
| Running-application testing (DAST-type) | In development: tested locally only; no hosted service | [XBOW](https://xbow.com/news/xbow-raises-120m-to-scale), [Snyk API & Web](https://snyk.io/product/dast-api-web/), [Wiz Red Agent](https://www.wiz.io/blog/wiz-red-agent-is-ga) |
| Code analysis (SAST) | In development: Python only, tested locally; no hosted service | [HackerOne Code](https://www.hackerone.com/product/code), [Snyk Code](https://snyk.io/product/snyk-code/), [Wiz SAST](https://www.wiz.io/blog/introducing-wiz-sast-where-code-risk-meets-cloud-context) |
| Attack path or attack graph analysis | In development: cloud attack paths; no hosted service | [Horizon3.ai](https://horizon3.ai/nodezero/), [Pentera](https://www.securityweek.com/security-validation-firm-pentera-banks-60m-series-d/), [Wiz](https://www.wiz.io/lp/wiz-security-graph), [XM Cyber](https://xmcyber.com/platform/attack-graph-analysis/) |
| Security graph or data model | In development: ontology graph | [Wiz Security Graph](https://www.wiz.io/lp/wiz-security-graph) |
| Integration ecosystem | In development: adapters for 17 products and formats, sample-data tests only; the goal is 100+, not a current count | [Wiz](https://www.wiz.io/blog/wiz-integration-network-reaches-300) (300 partner integrations, July 2026), [XM Cyber](https://xmcyber.com/platform/attack-graph-analysis/) (no count stated) |
| Training and cyber ranges | Live: Dojo, training on synthetic material, not a certification | [Hack The Box](https://www.hackthebox.com/) (labs and ranges), [Immersive](https://www.businesswire.com/news/home/20221007005544/en/Immersive-Labs-Secures-%2466-Million-in-New-Capital-and-Expands-its-Leadership-Team-to-Accelerate-Growth), [TryHackMe](https://tryhackme.com/about) |
| Forensics and incident response | In development: import of existing tools’ reports with SHA-256 provenance | Cado Security ([Darktrace](https://www.darktrace.com/news/darktrace-announces-proposed-acquisition-of-cado-security-a-cloud-investigation-and-response-specialist)), [Binalyze](https://www.moltenventures.com/news/molten-leads-19-million-series-a-in-binalyze) |
| Victim-side support | Live: Your records | Aura, LifeLock (Gen Digital), IdentityTheft.gov (FTC), Identity Theft Resource Center |
### Companies at a glance
| Company | What it says it does | Latest public funding or event |
| --- | --- | --- |
| XBOW | Autonomous offensive testing of applications | [$120M Series C](https://xbow.com/news/xbow-raises-120m-to-scale) (March 2026) and [$35M additional Series C](https://xbow.com/news/xbow-secures-additional-35m-from-strategic-investors) (May 2026) |
| Horizon3.ai | NodeZero autonomous pentesting | [$100M Series D](https://horizon3.ai/news/press-release/horizon3-ai-raises-100m-to-cement-leadership-in-autonomous-security/) (June 2025) |
| Pentera | Automated security validation | [$60M Series D](https://pentera.io/press-release/pentera-60m-funding-security-validation-growth/) (March 2025) |
| RunSybil | AI-native offensive security platform | [$40M total funding](https://www.runsybil.com/blog/runsybil-raises-40m-to-build-the-ai-native-platform-for-offensive-security) (March 2026) |
| Terra Security | Agentic pentesting with a human in the loop | [$30M Series A](https://www.terra.security/blog/terra-security-raises-30m-series-a-to-redefine-penetration-testing-with-agentic-ai) (September 2025) |
| HackerOne | Bug bounty community; Agentic PTaaS (January 2026) | [$49M Series E](https://www.hackerone.com/press-release/hackerone-caps-growth-year-49-million-investment) (January 2022) |
| Bugcrowd | Crowdsourced security | [$102M strategic growth funding](https://www.bugcrowd.com/press-release/bugcrowd-secures-102-million-in-strategic-growth-funding-to-scale-ai-powered-crowdsourced-security-platform/) (February 2024) |
| Synack | Vetted-researcher security testing | [$52M Series D](https://www.businesswire.com/news/home/20200528005407/en/Synacks-%2452-Million-Investment-Fuels-Future-of-Remote-Security-Testing-from-Worlds-Elite-Hackers) (May 2020); [merger agreement with NetSPI](https://www.netspi.com/newsroom/press-release/netspi-and-synack-to-merge-forming-a-leading-offensive-cybersecurity-platform/) (announced September 2026; expected to close October 2026) |
| Cobalt | Pentest as a service | [$29M Series B](https://www.globenewswire.com/news-release/2020/08/20/2081369/0/en/Cobalt-io-raises-29-million-to-expand-its-Pentest-as-a-Service-platform-and-transform-software-security-testing.html) (August 2020) |
| Snyk | Developer security, including SAST and DAST | [$196.5M Series G](https://snyk.io/news/snyk-closes-196-5-million-series-g-funding-at-7-4-billion-valuation/) (December 2022) |
| Semgrep | AI-powered code security | [$100M Series D](https://www.prnewswire.com/news-releases/semgrep-announces-100m-series-d-funding-to-advance-ai-powered-code-security-302367780.html) (February 2025) |
| StackHawk | Developer-first DAST | [$20.7M Series B](https://www.prnewswire.com/news-releases/stackhawk-raises-20-7-million-in-series-b-funding-for-developer-first-application-and-api-security-testing-as-market-demand-soars-for-better-security-301545922.html) (May 2022) |
| Wiz (Google) | Cloud security, Security Graph, Red Agent, SAST | [Acquired by Google for $32B](https://www.sec.gov/Archives/edgar/data/1652044/000165204425000027/goog-20250318.htm) (agreed March 2025, subject to closing adjustments); [completed](https://abc.xyz/investor/news/news-details/2026/Google-Completes-Acquisition-of-Wiz-2026-ta7OaU2uA0/default.aspx) (March 2026) |
| XM Cyber | Attack graph analysis | [Acquired by Schwarz Group](https://gruppe.schwarz/en/press/archive/2021/schwarz-group-acquires-israeli-hybrid-cloud-cybersecurity-innovator-xm-cyber) (November 2021) |
| JupiterOne | Cyber asset graph | [$70M Series C](https://www.prnewswire.com/news-releases/jupiterone-achieves-valuation-of-over-1b-with-70m-series-c-funding-to-fuel-innovation-in-cybersecurity-and-democratize-access-for-all-301559956.html) (June 2022) |
| Hack The Box | Hacking labs and ranges | [$55M Series B](https://www.carlyle.com/media-room/news-release-archive/carlyle-leads-55m-series-b-investment-round-in-hack-the-box) (January 2023) |
| Immersive | Cyber workforce training | [$66M](https://www.businesswire.com/news/home/20221007005544/en/Immersive-Labs-Secures-%2466-Million-in-New-Capital-and-Expands-its-Leadership-Team-to-Accelerate-Growth) (October 2022) |
| TryHackMe | Beginner-friendly labs | [No outside investment](https://tryhackme.com/about) (company site) |
| Cado Security | Cloud forensics | [Darktrace announced acquisition](https://www.darktrace.com/news/darktrace-announces-proposed-acquisition-of-cado-security-a-cloud-investigation-and-response-specialist) (January 2025) |
| Binalyze | DFIR platform | [$19M Series A](https://www.moltenventures.com/news/molten-leads-19-million-series-a-in-binalyze) (September 2023) |
## Where Mithril fits
Mithril, from Kotoba Labs Inc., is building one white-hat platform that starts with the victim and is meant to extend to enterprises. Today its live tools are on the victim and learning side. Its enterprise testing is in development, and Whitehat as a Service for enterprises is planned: no such service is offered, and there are no public customer results. Mithril’s documentation still describes the new site as a candidate implementation, so check each page before relying on it.
| Capability | Status | What that means today |
| --- | --- | --- |
| Your records | Live | After signing in, a person keeps dated, text-only notes; each saved note shows its save time and SHA-256 fingerprint, and only that person can read it. People file their own reports; Mithril does not investigate, identify anyone, recover money, or file anything for anyone ([mithril.fund](https://mithril.fund/)). |
| Phishing check and public evidence search | Live | A public domain check (a miss is not a safety verdict) and a read-only search over a dated public security snapshot, usable without signing in ([endpoint reference](https://docs.mithril.fund/reference/endpoints)). |
| System One Coding | Live (pilot) | A registered free pilot of a staged coding harness; the docs say it is not an availability guarantee ([docs](https://docs.mithril.fund/system-one-coding)). |
| Dojo | Live | An AI-agent white-hat learning path and short video lessons, using fictional text and synthetic data, plus team training packages quoted per customer. It does not test real third-party systems, and completion records are not a certification ([Dojo](https://app.mithril.fund/dojo)). |
| Security suite (DAST, SAST, cloud attack paths and other checks) | In development | Built in code and tested locally; not offered as a service and not hosted. The docs list these as intended capabilities that need an authorized scope, real input data, tenant isolation and execution evidence before they can be advertised as available ([security services](https://docs.mithril.fund/reference/security-services)). |
| Forensic report import | In development | Import of reports from existing forensic tools into an evidence store with SHA-256 provenance; the public product list marks each format “unverified” ([list](https://api.mithril.fund/v1/forensics/products)). |
| Ontology graph | In development | A public explorer is a candidate; tenant graphs are not connected yet ([graph docs](https://docs.mithril.fund/graph)). |
| Managed models, including a security-research route | In development | The research route requires a research-scope declaration and fails closed until its route is connected ([models](https://docs.mithril.fund/reference/models)). Guarded inference with content moderation and refusal auditing is planned and needs a measured, dated verification first ([guardrails](https://docs.mithril.fund/reference/guardrails-firewall)). |
| Third-party integrations | In development | See below. |
| Whitehat as a Service for enterprises | Planned | No service exists yet. |
| Forensics driven by managed models | Planned | Not built. |
| Ethical-hacker ranking | Planned | The Dojo page says ranking is in preparation. |
| Researcher identity enrollment | Planned | Not offered yet ([registration state](https://mithril.fund/ekyc.md)). |
Mithril has built adapters for 17 security products and forensic report formats. None has been verified against a live account yet: testing so far uses sample data only, and four of the forensic formats are stored as files rather than parsed. The goal is 100+; that is an aim, not a current count.
Any scanning, DAST-style or SAST-style, is only for systems the customer owns or is authorized to test. Mithril does not offer testing of anyone else’s systems.
## What this means for victims
If you have lost money or an account, start a dated record now and keep the originals. The FBI asks for the scammer's name, how they contacted you, dates, how you paid, where the money went, and a description of your interactions ([FBI](https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions)).
- [Account takeover: a timeline and evidence list](/account-takeover-timeline-evidence-list?lang=en)
- [Crypto fraud: a remittance table](/crypto-fraud-remittance-table?lang=en)
- [IC3 complaint worksheet](/ic3-complaint-worksheet?lang=en) (for the US FBI Internet Crime Complaint Center)
- [Mithril docs](https://mithril.fund/docs)
Report to your bank or payment provider, the platform where it happened, and your police or national reporting service. In the US that includes [IC3](https://www.ic3.gov) and the FTC at [ReportFraud.ftc.gov](https://reportfraud.ftc.gov) (checked 2026-10-06). In Japan: the police consultation line #9110 and the consumer hotline 188.
## One-page summary
[[figure:summary]]
## Sources
- FBI IC3, [2025 Internet Crime Report](https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf) (PDF)
- FBI, [press release, April 6, 2026](https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions)
- FTC, [testimony release, March 25, 2026](https://www.ftc.gov/news-events/news/press-releases/2026/03/ftc-testifies-joint-economic-committee-agencys-efforts-combat-fraud)
- FTC, [social media scams release, April 27, 2026](https://www.ftc.gov/news-events/news/press-releases/2026/04/new-ftc-data-show-people-have-lost-billions-social-media-scams)
- National Police Agency (Japan), [page dated 2026-06-05](https://www.npa.go.jp/bureau/safetylife/sos47/new-topics/260605/01.html) and [2025 fraud statistics](https://www.npa.go.jp/bureau/criminal/souni/tokusyusagi/sagi_keihatsu2025.pdf) (PDF)
- Gartner, [press release, July 29, 2025](https://www.gartner.com/en/newsroom/press-releases/2025-07-29-gartner-forecasts-worldwide-end-user-spending-on-information-security-to-total-213-billion-us-dollars-in-2025)
- Deloitte, [Deepfake banking fraud risk on the rise, May 29, 2024](https://www.deloitte.com/us/en/insights/industry/financial-services/deepfake-banking-fraud-risk-on-the-rise.html)
- ISC2, [2024 workforce study release](https://www.prnewswire.com/news-releases/growth-of-cybersecurity-workforce-slows-in-2024-as-economic-uncertainty-persists-302244585.html) and [2025 workforce study](https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study)
- MarketsandMarkets: [penetration testing](https://www.marketsandmarkets.com/PressReleases/penetration-testing.asp), [exposure management](https://www.prnewswire.com/news-releases/exposure-management-market-worth-7-6-billion-by-2029---exclusive-report-by-marketsandmarkets-302090329.html), [digital forensics](https://www.marketsandmarkets.com/PressReleases/digital-forensics.asp), [application security](https://www.prnewswire.com/news-releases/application-security-market-worth-66-03-billion-by-2031--marketsandmarkets-302713211.html); Grand View Research: [cybersecurity training](https://www.grandviewresearch.com/press-release/global-cyber-security-training-market)
- Alphabet, [Form 8-K on the Wiz agreement, March 18, 2025](https://www.sec.gov/Archives/edgar/data/1652044/000165204425000027/goog-20250318.htm) and [Google completes acquisition of Wiz](https://abc.xyz/investor/news/news-details/2026/Google-Completes-Acquisition-of-Wiz-2026-ta7OaU2uA0/default.aspx); Check Point, [acquisition of Lakera](https://www.checkpoint.com/press-releases/check-point-acquires-lakera-to-deliver-end-to-end-ai-security-for-enterprises/); NetSPI, [merger announcement](https://www.netspi.com/newsroom/press-release/netspi-and-synack-to-merge-forming-a-leading-offensive-cybersecurity-platform/); Darktrace, [Cado Security announcement](https://www.darktrace.com/news/darktrace-announces-proposed-acquisition-of-cado-security-a-cloud-investigation-and-response-specialist)
- Funding: the linked announcement in each table row. Company descriptions: each organization’s official site, checked in October 2026.
In Japan: Parts that include text from the National Police Agency (Japan) are summarized and rearranged by the editors (created by editing and processing). Sources: the National Police Agency (Japan) website "[令和７年における特殊詐欺及びＳＮＳ型投資・ロマンス詐欺の認知・検挙状況等について（確定値）](https://www.npa.go.jp/bureau/safetylife/sos47/new-topics/260605/01.html)" and its [PDF summary](https://www.npa.go.jp/bureau/criminal/souni/tokusyusagi/sagi_keihatsu2025.pdf) (both checked 2026-10-06). Terms of use follow the National Police Agency (Japan) [Terms of use](https://www.npa.go.jp/rules/index.html) (Public Data License (Version 1.0) (PDL1.0), checked 2026-10-06). The processed text is not presented as if the National Police Agency (Japan) created it.
## Corrections
Company descriptions and placements are based on public pages and may be out of date. If something here is wrong, contact us through [mithril.fund](https://mithril.fund) and we will correct it.