Saka korban apus-apus menyang white hat perusahaan: peta lanskap pangreksan siber (2026)
Telulas kategori, saka pitulungan kanggo korban apus-apus nganti tes pangreksan perusahaan, kanthi kerugian sing dilaporake, dana sing diumumake, prakiran pasar miturut penerbit, lan status jujur ing endi Mithril mapan.
Artikel iki dijarwakake dening mesin.
## Kanggo pimpinan: telung pokok
- **Apusan iku risiko bisnis uga risiko konsumen.** Kerugian sing dilaporake menyang IC3 FBI tekan $20.877 billion ing 2025, lan akeh kerugian ora tau dilaporake ([FBI](https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions)).
- **Tes pangreksan pindhah menyang piranti sing didorong AI nalika vendor sing wis mapan nggabung.** Google ngrampungake akuisisi Wiz ing Maret 2026, lan NetSPI lan Synack wis sarujuk kanggo nggabung ([Alphabet](https://abc.xyz/investor/news/news-details/2026/Google-Completes-Acquisition-of-Wiz-2026-ta7OaU2uA0/default.aspx); [NetSPI](https://www.netspi.com/newsroom/press-release/netspi-and-synack-to-merge-forming-a-leading-offensive-cybersecurity-platform/)). Raketekake peta dalan lan kontrak bakal owah, lan takok saben panyedhiya kepiye carane mesthekake mung nguji sistem sing sampeyan duwe utawa sing diidinake kanggo dites.
- **Katrampilan tetep dadi watesan.** ISC2 ngira bolongan tenaga global 4.8 million wong ing 2024, lan 59% responden ing studi 2025 nglaporake kabutuhan katrampilan sing kritis utawa wigati ([ISC2 2024](https://www.prnewswire.com/news-releases/growth-of-cybersecurity-workforce-slows-in-2024-as-economic-uncertainty-persists-302244585.html); [ISC2 2025](https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study)). Rencanakake pasinaon bebarengan karo piranti.
## Lanskap kanthi ringkes
Tulisan iki nggambar peta perusahaan lan layanan umum ing rong pita. Sisih korban nyakup pitulungan sadurunge lan sawise apusan online lan rebutan akun. Sisih perusahaan nyakup apa sing kerep didol minangka “white hat as a service”: tes pangreksan sistem sing diduweni perusahaan. Saben organisasi dikelompokake miturut apa sing dikandhakake ing situs resmi dhewe, dipriksa ing Oktober 2026.
Angka kerugian ing ngisor iki yaiku kerugian sing dilaporake: apa sing dikandhakake korban menyang FBI, FTC, utawa polisi. Iki dudu total karusakan, lan iki dudu data Mithril.
[[figure:chaos-map]]
Sisih korban, pitung klompok:
- **Pencegahan apusan lan apus-apus:** Sardine, Alloy, Charm Security, Resistant AI, Hawk, Pindrop, Whoscall (Gogolook), ScamAdviser.
- **Pitulungan lan pamulihan korban:** Mithril Your records (Urip), Aura, LifeLock (Gen Digital), Identity Theft Resource Center, IdentityTheft.gov (FTC), IC3 (FBI), AARP Fraud Watch Network.
- **Verifikasi identitas:** Persona, Socure, Veriff, Incode, TRUSTDOCK, Liquid.
- **OSINT, intel ancaman, lan investigasi blockchain:** Mithril public evidence search (Urip), Recorded Future, Flashpoint, Silent Push, BforeAI, Netcraft, TRM Labs, Chainalysis, Elliptic.
- **Kapercayan lan kamanan, risiko digital, lan deepfake:** Doppel, Outtake, Bolster AI, Blackbird.AI, Reality Defender, GetReal Security, Adaptive Security, Alice (biyen ActiveFence; [alice.io](https://alice.io/)).
- **Pangreksan AI lan AI pangembang:** HiddenLayer, Lakera (saiki bagean saka [Check Point](https://www.checkpoint.com/press-releases/check-point-acquires-lakera-to-deliver-end-to-end-ai-security-for-enterprises/)), Noma Security, Protect AI (saiki bagean saka Palo Alto Networks, [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs)), GMO Flatt Security, Mithril System One Coding (Urip, pilot).
- **Pangreksan bukti:** Mithril Your records kanthi sidik driji SHA-256 (Urip), Hunchly, Page Vault, Axon.
Sisih perusahaan, enem klompok:
- **Pentesting AI lan pangreksan serangan:** Mithril Whitehat as a Service (Direncanakake), XBOW, Horizon3.ai, Pentera, RunSybil, Terra Security, Wiz Red Agent (Google).
- **Pentest minangka layanan (PTaaS) lan tes saka akeh wong:** HackerOne, Bugcrowd, Synack, NetSPI, Cobalt.
- **Pangreksan aplikasi (SAST lan DAST):** Mithril DAST and SAST (Lagi digawe), Snyk, Semgrep, Checkmarx, Veracode, StackHawk, Invicti.
- **Graf serangan lan manajemen paparan:** Mithril attack paths and ontology graph (Lagi digawe), XM Cyber, Wiz (Google), JupiterOne.
- **Pasinaon pangreksan lan cyber range:** Mithril Dojo (Urip), Hack The Box, TryHackMe, Immersive, SANS Institute.
- **Forensik digital lan tanggapan insiden (DFIR):** Mithril forensic report import (Lagi digawe), Cado Security (Darktrace), Binalyze, Magnet Forensics, Cellebrite.
## Sisih korban: kerugian sing dilaporake terus munggah
[[figure:reported-losses]]
Internet Crime Complaint Center (IC3) FBI nampa 1,008,597 keluhan ing 2025, munggah saka 859,532 ing 2024. Kerugian sing dilaporake $20.877 billion, 26% luwih akeh tinimbang taun sadurunge ([Pawarta IC3 2025](https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf); [Rilis FBI, April 6, 2026](https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions)).
Keluhan cryptocurrency nyakup luwih saka $11 billion kerugian sing dilaporake, lan keluhan sing nyebut AI meh $893 million. Wong umur 60 lan luwih nglaporake watara $7.7 billion, munggah 37% ([FBI](https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions)).
FTC nampa watara 3 million pawarta apusan kanggo 2025, kanthi $15.9 billion kerugian sing dilaporake, munggah saka luwih saka $12 billion ing 2024. Apus-apus investasi $7.9 billion lan apus-apus sing nyamar luwih saka $3.5 billion ([FTC, Maret 25, 2026](https://www.ftc.gov/news-events/news/press-releases/2026/03/ftc-testifies-joint-economic-committee-agencys-efforts-combat-fraud)). Apus-apus media sosial $2.1 billion ([FTC, April 27, 2026](https://www.ftc.gov/news-events/news/press-releases/2026/04/new-ftc-data-show-people-have-lost-billions-social-media-scams)).
Ing Jepang: National Police Agency ngitung ¥325.74 billion (3,257.4億円) kerugian saka apusan khusus lan apus-apus investasi lan roman media sosial ing 2025, munggah 63.6% ([NPA, PDF](https://www.npa.go.jp/bureau/criminal/souni/tokusyusagi/sagi_keihatsu2025.pdf)). Apusan khusus dhewe 27,832 kasus lan watara ¥142.31 billion ([NPA](https://www.npa.go.jp/bureau/safetylife/sos47/new-topics/260605/01.html)).
## Sisih korban: kanggo sapa produk digawe
[[figure:positioning]]
Umume produk ing kene didol menyang organisasi: bank, platform, perusahaan, lan panliti. Luwih sithik sing digawe kanggo wong siji, lan luwih sithik maneh kanggo mangsa sawise kerugian.
## Sisih korban: dana sing diumumake ing kategori cedhak
[[figure:adjacent-funding]]
Tabel nyathet babak paling anyar sing diumumake sacara umum sing bisa awake dhewe goleki sumbere kanggo 22 perusahaan cedhak ruang iki, nganti Oktober 2026.
Cacah sing diumumake nganti watara $1.50 billion. Iku gunggung cacah sing diumumake (etungan awake dhewe) ing kabeh 22 babak ing tabel, dudu angka pasar. Babak-babak iku dudu babak ekuitas sing bisa dibandhingake: $100 million Pindrop iku utangan (utang), babak Aura nyampur ekuitas lan utang, Netcraft ngumumake “luwih saka $100 million” lan dietung $100 million, lan babak Alice (biyen ActiveFence) lan Chainalysis asale saka 2021 lan 2022.
| Perusahaan | Cacah sing diumumake | Jinis | Diumumake | Kategori |
| --- | --- | --- | --- | --- |
| Persona | [$200M](https://www.prnewswire.com/news-releases/persona-raises-200m-at-2b-valuation-to-build-the-verified-identity-layer-for-an-agentic-ai-world-302442649.html) | Series D (ekuitas) | 2025-04-30 | Identitas |
| Chainalysis | [$170M](https://www.chainalysis.com/blog/series-f/) | Series F (ekuitas) | 2022-05-12 | OSINT / intel ancaman |
| Aura | [$140M](https://www.aura.com/press/release/aura-completes-series-g-funding-round-raises-140-million-in-equity-and-debt) | Series G (ekuitas lan utang) | 2025-03-24 | Pitulungan korban |
| Netcraft | [luwih saka $100M (dietung $100M)](https://www.spectrumequity.com/news/netcraft-secures-first-funding-with-over-100m-from-spectrum-equity-names-experienced-technology-executive-ryan-woodley-as-new-ceo/) | Dana njaba kapisan | Juli 2023 | OSINT / intel ancaman |
| Noma Security | [$100M](https://noma.security/blog/noma-security-raises-100m-to-drive-adoption-of-ai-agent-security/) | Series B (ekuitas) | 2025-07-31 | Pangreksan AI |
| Pindrop | [$100M](https://techcrunch.com/2024/07/17/deepfake-detecting-firm-pindrop-lands-100m-loan-to-grow-its-offerings/) | Utangan (utang), dudu ekuitas | 2024-07-17 | Apusan / rekayasa sosial |
| Alice (biyen ActiveFence) | [$100M](https://techcrunch.com/2021/07/26/activefence-comes-out-of-the-shadows-with-100m-in-funding-and-tech-that-detects-online-harm/) | Series A lan B digabung (ekuitas) | 2021-07-26 | Kapercayan lan kamanan / deepfake |
| Adaptive Security | [$81M](https://www.prnewswire.com/news-releases/adaptive-security-raises-81-million-series-b-to-stop-ai-powered-cyber-threats-302643174.html) | Series B (ekuitas) | 2025-12-16 | Apusan / rekayasa sosial |
| Doppel | [$70M](https://www.prnewswire.com/news-releases/doppel-raises-70m-series-c-to-meet-rising-demand-for-ai-driven-social-engineering-defense-302619463.html) | Series C (ekuitas) | 2025-11-19 | Apusan / rekayasa sosial |
| Sardine | [$70M](https://www.sardine.ai/press/pr/fraud-and-compliance-productivity) | Series C (ekuitas) | 2025-02-11 | Apusan / rekayasa sosial |
| TRM Labs | [$70M](https://www.trmlabs.com/resources/blog/trm-labs-announces-70m-series-c-to-scale-ai-solutions-to-disrupt-criminal-networks-and-counter-national-security-threats) | Series C (ekuitas) | 2026-02-04 | OSINT / intel ancaman |
| Protect AI (saiki bagean saka Palo Alto Networks) | [$60M](https://www.geekwire.com/2024/samsung-salesforce-invest-in-60m-round-for-seattle-cybersecurity-startup-protect-ai/) | Series B (ekuitas) | 2024-08-01 | Pangreksan AI |
| HiddenLayer | [$50M](https://www.hiddenlayer.com/news/hiddenlayer-raises-50m-in-series-a-funding-to-safeguard-ai) | Series A (ekuitas) | 2023-09-19 | Pangreksan AI |
| Outtake | [$40M](https://techcrunch.com/2026/01/28/ai-security-startup-outtake-raises-40m-from-iconiq-satya-nadella-bill-ackman-and-other-big-names/) | Series B (ekuitas) | 2026-01-28 | Apusan / rekayasa sosial |
| Reality Defender | [$33M](https://www.prnewswire.com/news-releases/reality-defender-expands-series-a-to-33-million-to-enhance-ai-detection-capabilities-302283098.html) | Series A, total sing dilebarke (ekuitas) | 2024-10-22 | Kapercayan lan kamanan / deepfake |
| Resistant AI | [$25M](https://resistant.ai/blog/resistant-ai-raises-25-million-in-series-b-funding-to-empower-ai-agents-to-fight-fraud-and-fincrime) | Series B (ekuitas) | 2025-10-13 | Apusan / rekayasa sosial |
| Blackbird.AI | [$20M](https://www.prnewswire.com/news-releases/blackbirdai-raises-20m-in-series-b-funding-to-empower-organizations-with-narrative-and-perception-risk-intelligence-301851388.html) | Series B (ekuitas) | 2023-06-15 | Kapercayan lan kamanan / deepfake |
| Lakera | [$20M](https://www.prnewswire.com/news-releases/lakera-raises-20m-series-a-to-secure-generative-ai-applications-302204874.html) | Series A (ekuitas) | 2024-07-24 | Pangreksan AI |
| GetReal Security | [$17.5M](https://forgepointcap.com/perspectives/getreal-security-raises-17-5m-series-a-led-by-forgepoint-capital-to-address-rapidly-growing-threats-associated-with-generative-ai-and-malicious-digital-media/) | Series A (ekuitas) | 2025-03-26 | Kapercayan lan kamanan / deepfake |
| BforeAI | [$15M](https://www.prnewswire.com/news-releases/bforeai-announces-15-million-in-series-a-funding-led-by-syn-ventures-302125023.html) | Series A (ekuitas) | 2024-04-24 | OSINT / intel ancaman |
| Silent Push | [$10M](https://www.silentpush.com/press-releases/series-b-funding-announcement/) | Series B (ekuitas) | 2025-09-12 | OSINT / intel ancaman |
| Charm Security | [$8M](https://www.prnewswire.com/news-releases/charm-security-emerges-from-stealth-to-combat-scams-and-social-engineering-exploiting-human-vulnerabilities-securing-8m-in-seed-funding-from-team8s-venture-creation-fund-302409642.html) | Seed (ekuitas) | 2025-03-25 | Apusan / rekayasa sosial |
Miturut kategori, etungan sing padha (gunggung cacah sing diumumake, etungan awake dhewe) yaiku: pertahanan apusan lan rekayasa sosial $394M (Sardine, Charm Security, Resistant AI, Pindrop, Doppel, Adaptive Security, Outtake); OSINT lan intel ancaman $365M (Chainalysis, Netcraft, TRM Labs, BforeAI, Silent Push); pangreksan AI $230M (Noma Security, Protect AI, HiddenLayer, Lakera); identitas $200M (Persona); kapercayan lan kamanan lan deepfake $170.5M (Alice, biyen ActiveFence; Reality Defender, Blackbird.AI, GetReal Security); pitulungan korban $140M (Aura).
Sing ditinggal: Socure, ChillStack, lan TRUSTDOCK, amarga awake dhewe ora bisa mesthekake cacah sing diumumake sing bisa dibandhingake ing dolar AS.
## Sisih perusahaan: white hat minangka layanan
[[figure:positioning-enterprise]]
Ing sisih perusahaan, “white hat as a service” nyakup pirang-pirang jinis kerja sing dituku perusahaan kanggo nguji sisteme dhewe: tes penetrasi otonom utawa dibantu AI, layanan pentest lan program bug bounty sing dilakokake dening panliti manungsa sing wis disaring, pindai kode lan aplikasi sing mlaku (SAST lan DAST), analisis jalur serangan, pasinaon, lan forensik sawise kedadeyan. Kabeh iki kanggo sistem sing diduweni pelanggan utawa sing diidinake kanggo dites.
## Sisih perusahaan: menyang ngendi babak 2025–2026 lunga
[[figure:enterprise-funding]]
Ing kumpulan perusahaan sing awake dhewe survei, babak venture 2025–2026 lunga menyang tes serangan sing didorong AI: XBOW ngumumake Series C $120 million ing Maret 2026 lan dana Series C tambahan $35 million ing Mei 2026 ([XBOW, Maret 18, 2026](https://xbow.com/news/xbow-raises-120m-to-scale); [XBOW, Mei 6, 2026](https://xbow.com/news/xbow-secures-additional-35m-from-strategic-investors)); Horizon3.ai Series D $100 million ing Juni 2025 ([Horizon3.ai](https://horizon3.ai/news/press-release/horizon3-ai-raises-100m-to-cement-leadership-in-autonomous-security/)); Pentera Series D $60 million ing Maret 2025 ([Pentera](https://pentera.io/press-release/pentera-60m-funding-security-validation-growth/)); RunSybil total dana $40 million ing Maret 2026 ([RunSybil](https://www.runsybil.com/blog/runsybil-raises-40m-to-build-the-ai-native-platform-for-offensive-security)); lan Terra Security Series A $30 million ing September 2025 ([Terra Security](https://www.terra.security/blog/terra-security-raises-30m-series-a-to-redefine-penetration-testing-with-agentic-ai)). Gunggunge $385 million, gunggung cacah sing diumumake (etungan awake dhewe), kanthi rong pengumuman XBOW dietung kapisah. Ing pangreksan aplikasi, Semgrep ngumumake Series D $100 million ing Februari 2025 ([Semgrep](https://www.prnewswire.com/news-releases/semgrep-announces-100m-series-d-funding-to-advance-ai-powered-code-security-302367780.html)). Iki sampel awake dhewe, dudu kabeh pasar.
Kategori sing luwih lawas ngalami konsolidasi, dudu babak anyar. Google sarujuk ing Maret 2025 kanggo akuisisi Wiz kanthi $32 billion, tundhuk penyesuaian panutup ([Formulir 8-K Alphabet, Maret 18, 2025](https://www.sec.gov/Archives/edgar/data/1652044/000165204425000027/goog-20250318.htm)), lan ngrampungake akuisisi ing Maret 11, 2026 ([Alphabet](https://abc.xyz/investor/news/news-details/2026/Google-Completes-Acquisition-of-Wiz-2026-ta7OaU2uA0/default.aspx)). NetSPI lan Synack ngumumake sarujuk pasti kanggo nggabung ing September 2, 2026, didhukung KKR; gabungan dikarepake rampung ing Oktober 2026, lan awake dhewe durung weruh dikukuhake wis rampung ([NetSPI](https://www.netspi.com/newsroom/press-release/netspi-and-synack-to-merge-forming-a-leading-offensive-cybersecurity-platform/)). Darktrace ngumumake usulan akuisisi Cado Security ing Januari 9, 2025 ([Darktrace](https://www.darktrace.com/news/darktrace-announces-proposed-acquisition-of-cado-security-a-cloud-investigation-and-response-specialist)).
## Prakiran pasar, penerbit saben penerbit
[[figure:market-size]]
Gartner mrakirake belanja panganggo pungkasan ing saindenging donya kanggo pangreksan informasi $213 billion ing 2025 lan $240 billion ing 2026, munggah 12.5%, saka $193 billion ing 2024 ([Siaran pers Gartner, Juli 29, 2025](https://www.gartner.com/en/newsroom/press-releases/2025-07-29-gartner-forecasts-worldwide-end-user-spending-on-information-security-to-total-213-billion-us-dollars-in-2025)). Iki prakiran Gartner.
Center for Financial Services Deloitte mrakirake kerugian apusan sing bisane amarga AI generatif ing AS bisa tekan $40 billion ing 2027, saka $12.3 billion ing 2023, tingkat tuwuh taunan majemuk 32% ([Deloitte, Mei 29, 2024](https://www.deloitte.com/us/en/insights/industry/financial-services/deepfake-banking-fraud-risk-on-the-rise.html)). Iki prakiran.
## Prakiran segmen perusahaan lan kurang katrampilan
[[figure:segment-forecasts]]
Prakiran segmen perusahaan asale saka penerbit sing beda, kanthi definisi, taun dhasar, lan cakrawala sing beda. Daftar kasebut jejer lan ora dijumlahake.
| Segmen | Prakiran dhasar | Prakiran | CAGR | Penerbit, tanggal |
| --- | --- | --- | --- | --- |
| Tes penetrasi | $1.98B (2025) | $4.39B (2031) | 14.2% | [MarketsandMarkets, Maret 2026](https://www.marketsandmarkets.com/PressReleases/penetration-testing.asp) |
| Manajemen paparan | $2.2B (2024) | $7.6B (2029) | 28.3% | [MarketsandMarkets, Maret 2024](https://www.prnewswire.com/news-releases/exposure-management-market-worth-7-6-billion-by-2029---exclusive-report-by-marketsandmarkets-302090329.html) |
| Forensik digital | $12.94B (2025) | $22.81B (2030) | 12.0% | [MarketsandMarkets, Mei 2025](https://www.marketsandmarkets.com/PressReleases/digital-forensics.asp) |
| Pasinaon pangreksan siber | ora disebut ing rilis | $13.70B (2030) | 17.4% (2024–2030) | [Grand View Research, Maret 2024](https://www.grandviewresearch.com/press-release/global-cyber-security-training-market) |
| Pangreksan aplikasi | $41.16B (2026) | $66.03B (2031) | 9.9% | [MarketsandMarkets, Maret 2026](https://www.prnewswire.com/news-releases/application-security-market-worth-66-03-billion-by-2031--marketsandmarkets-302713211.html) |
Kelimane iku prakiran pasar global sing diterbitake ing siaran pers. Cakupan penerbit tumpang-tindih (contone, tes penetrasi lan pangreksan aplikasi), iku alesan maneh supaya aja dijumlahake.
Kurang katrampilan iku separo liyane critane. ISC2 ngira bolongan tenaga pangreksan siber global 4.8 million wong ing 2024, munggah 19% saka taun menyang taun, dibandhingake tenaga watara 5.5 million. Bolongan katrampilan paling dhuwur sing disebut responden yaiku AI (34%), pangreksan cloud (30%), zero trust (27%), forensik digital lan tanggapan insiden (25%), lan pangreksan aplikasi (24%) ([ISC2, September 2024](https://www.prnewswire.com/news-releases/growth-of-cybersecurity-workforce-slows-in-2024-as-economic-uncertainty-persists-302244585.html)). Ing studi ISC2 2025 saka 16,029 responden, 59% nglaporake kabutuhan katrampilan sing kritis utawa wigati, lan 88% wis ngalami paling ora siji akibat wigati saka kurang katrampilan ([ISC2, Desember 2025](https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study)).
## Tabel bandhingan
### Kapabilitas, saka sumber umum
Entri perusahaan adhedhasar kaca utawa pengumuman dhewe saben perusahaan. Perusahaan sing ora ana ing sawijining baris tegese awake dhewe ora nemokake ing sumber sing dipriksa, dudu tegese ora duwe kapabilitas kasebut. Kolom Mithril nganggo telung status: **Urip** (ditawakake lan mlaku), **Lagi digawe** (wis dibangun ing kode, durung ditawakake) lan **Direncanakake**.
| Kapabilitas | Status Mithril | Diterangake sacara umum dening (conto) |
| --- | --- | --- |
| Layanan white-hat manungsa (pentest, bug bounty) | Direncanakake: Whitehat as a Service | [HackerOne](https://www.hackerone.com/product/bug-bounty-platform) (komunitas bug bounty), [Bugcrowd](https://www.bugcrowd.com/press-release/bugcrowd-secures-102-million-in-strategic-growth-funding-to-scale-ai-powered-crowdsourced-security-platform/), Synack lan NetSPI (sarujuk nggabung September 2026, [pengumuman](https://www.netspi.com/newsroom/press-release/netspi-and-synack-to-merge-forming-a-leading-offensive-cybersecurity-platform/)), [Cobalt](https://www.globenewswire.com/news-release/2020/08/20/2081369/0/en/Cobalt-io-raises-29-million-to-expand-its-Pentest-as-a-Service-platform-and-transform-software-security-testing.html) |
| Tes serangan agen AI utawa otonom | Lagi digawe: runtime agen lan model riset sing digerbang; durung ditawakake | [XBOW](https://xbow.com/news/xbow-raises-120m-to-scale), [Horizon3.ai NodeZero](https://horizon3.ai/nodezero/), [Pentera](https://www.securityweek.com/security-validation-firm-pentera-banks-60m-series-d/) (validasi), [HackerOne Agentic PTaaS](https://www.hackerone.com/press-release/hackerone-introduces-agentic-ptaas-deliver-continuous-expert-verified-pentesting), [Wiz Red Agent](https://www.wiz.io/blog/wiz-red-agent-is-ga) |
| Tes aplikasi sing mlaku (jinis DAST) | Lagi digawe: mung dites sacara lokal; ora ana layanan sing di-host | [XBOW](https://xbow.com/news/xbow-raises-120m-to-scale), [Snyk API & Web](https://snyk.io/product/dast-api-web/), [Wiz Red Agent](https://www.wiz.io/blog/wiz-red-agent-is-ga) |
| Analisis kode (SAST) | Lagi digawe: mung Python, dites sacara lokal; ora ana layanan sing di-host | [HackerOne Code](https://www.hackerone.com/product/code), [Snyk Code](https://snyk.io/product/snyk-code/), [Wiz SAST](https://www.wiz.io/blog/introducing-wiz-sast-where-code-risk-meets-cloud-context) |
| Analisis jalur serangan utawa graf serangan | Lagi digawe: jalur serangan cloud; ora ana layanan sing di-host | [Horizon3.ai](https://horizon3.ai/nodezero/), [Pentera](https://www.securityweek.com/security-validation-firm-pentera-banks-60m-series-d/), [Wiz](https://www.wiz.io/lp/wiz-security-graph), [XM Cyber](https://xmcyber.com/platform/attack-graph-analysis/) |
| Graf pangreksan utawa model data | Lagi digawe: graf ontologi | [Wiz Security Graph](https://www.wiz.io/lp/wiz-security-graph) |
| Ekosistem integrasi | Lagi digawe: adaptor kanggo 17 produk lan format, mung tes data sampel; tujuane 100+, dudu cacah saiki | [Wiz](https://www.wiz.io/blog/wiz-integration-network-reaches-300) (300 integrasi mitra, Juli 2026), [XM Cyber](https://xmcyber.com/platform/attack-graph-analysis/) (ora ana cacah sing disebut) |
| Pasinaon lan cyber range | Urip: Dojo, pasinaon ing bahan sintetis, dudu sertifikasi | [Hack The Box](https://www.hackthebox.com/) (lab lan range), [Immersive](https://www.businesswire.com/news/home/20221007005544/en/Immersive-Labs-Secures-%2466-Million-in-New-Capital-and-Expands-its-Leadership-Team-to-Accelerate-Growth), [TryHackMe](https://tryhackme.com/about) |
| Forensik lan tanggapan insiden | Lagi digawe: impor dokumen saka piranti sing wis ana kanthi provenans SHA-256 | Cado Security ([Darktrace](https://www.darktrace.com/news/darktrace-announces-proposed-acquisition-of-cado-security-a-cloud-investigation-and-response-specialist)), [Binalyze](https://www.moltenventures.com/news/molten-leads-19-million-series-a-in-binalyze) |
| Pitulungan sisih korban | Urip: Your records | Aura, LifeLock (Gen Digital), IdentityTheft.gov (FTC), Identity Theft Resource Center |
### Perusahaan sakdhelik
| Perusahaan | Apa sing dikandhakake | Dana umum paling anyar utawa kedadeyan |
| --- | --- | --- |
| XBOW | Tes serangan otonom marang aplikasi | [$120M Series C](https://xbow.com/news/xbow-raises-120m-to-scale) (Maret 2026) lan [$35M Series C tambahan](https://xbow.com/news/xbow-secures-additional-35m-from-strategic-investors) (Mei 2026) |
| Horizon3.ai | Pentesting otonom NodeZero | [$100M Series D](https://horizon3.ai/news/press-release/horizon3-ai-raises-100m-to-cement-leadership-in-autonomous-security/) (Juni 2025) |
| Pentera | Validasi pangreksan otomatis | [$60M Series D](https://pentera.io/press-release/pentera-60m-funding-security-validation-growth/) (Maret 2025) |
| RunSybil | Platform pangreksan serangan asli AI | [$40M total dana](https://www.runsybil.com/blog/runsybil-raises-40m-to-build-the-ai-native-platform-for-offensive-security) (Maret 2026) |
| Terra Security | Pentesting agenik kanthi manungsa ing loop | [$30M Series A](https://www.terra.security/blog/terra-security-raises-30m-series-a-to-redefine-penetration-testing-with-agentic-ai) (September 2025) |
| HackerOne | Komunitas bug bounty; Agentic PTaaS (Januari 2026) | [$49M Series E](https://www.hackerone.com/press-release/hackerone-caps-growth-year-49-million-investment) (Januari 2022) |
| Bugcrowd | Pangreksan saka akeh wong | [$102M dana pertumbuhan strategis](https://www.bugcrowd.com/press-release/bugcrowd-secures-102-million-in-strategic-growth-funding-to-scale-ai-powered-crowdsourced-security-platform/) (Februari 2024) |
| Synack | Tes pangreksan dening panliti sing wis disaring | [$52M Series D](https://www.businesswire.com/news/home/20200528005407/en/Synacks-%2452-Million-Investment-Fuels-Future-of-Remote-Security-Testing-from-Worlds-Elite-Hackers) (Mei 2020); [sarujuk nggabung karo NetSPI](https://www.netspi.com/newsroom/press-release/netspi-and-synack-to-merge-forming-a-leading-offensive-cybersecurity-platform/) (diumumake September 2026; dikarepake rampung Oktober 2026) |
| Cobalt | Pentest minangka layanan | [$29M Series B](https://www.globenewswire.com/news-release/2020/08/20/2081369/0/en/Cobalt-io-raises-29-million-to-expand-its-Pentest-as-a-Service-platform-and-transform-software-security-testing.html) (Agustus 2020) |
| Snyk | Pangreksan pangembang, klebu SAST lan DAST | [$196.5M Series G](https://snyk.io/news/snyk-closes-196-5-million-series-g-funding-at-7-4-billion-valuation/) (Desember 2022) |
| Semgrep | Pangreksan kode sing didorong AI | [$100M Series D](https://www.prnewswire.com/news-releases/semgrep-announces-100m-series-d-funding-to-advance-ai-powered-code-security-302367780.html) (Februari 2025) |
| StackHawk | DAST sing ngutamakake pangembang | [$20.7M Series B](https://www.prnewswire.com/news-releases/stackhawk-raises-20-7-million-in-series-b-funding-for-developer-first-application-and-api-security-testing-as-market-demand-soars-for-better-security-301545922.html) (Mei 2022) |
| Wiz (Google) | Pangreksan cloud, Security Graph, Red Agent, SAST | [Diakuisisi Google kanthi $32B](https://www.sec.gov/Archives/edgar/data/1652044/000165204425000027/goog-20250318.htm) (disarujuki Maret 2025, tundhuk penyesuaian panutup); [rampung](https://abc.xyz/investor/news/news-details/2026/Google-Completes-Acquisition-of-Wiz-2026-ta7OaU2uA0/default.aspx) (Maret 2026) |
| XM Cyber | Analisis graf serangan | [Diakuisisi Schwarz Group](https://gruppe.schwarz/en/press/archive/2021/schwarz-group-acquires-israeli-hybrid-cloud-cybersecurity-innovator-xm-cyber) (November 2021) |
| JupiterOne | Graf aset siber | [$70M Series C](https://www.prnewswire.com/news-releases/jupiterone-achieves-valuation-of-over-1b-with-70m-series-c-funding-to-fuel-innovation-in-cybersecurity-and-democratize-access-for-all-301559956.html) (Juni 2022) |
| Hack The Box | Lab lan range hacking | [$55M Series B](https://www.carlyle.com/media-room/news-release-archive/carlyle-leads-55m-series-b-investment-round-in-hack-the-box) (Januari 2023) |
| Immersive | Pasinaon tenaga pangreksan siber | [$66M](https://www.businesswire.com/news/home/20221007005544/en/Immersive-Labs-Secures-%2466-Million-in-New-Capital-and-Expands-its-Leadership-Team-to-Accelerate-Growth) (Oktober 2022) |
| TryHackMe | Lab sing ramah kanggo pamula | [Ora ana investasi njaba](https://tryhackme.com/about) (situs perusahaan) |
| Cado Security | Forensik cloud | [Darktrace ngumumake akuisisi](https://www.darktrace.com/news/darktrace-announces-proposed-acquisition-of-cado-security-a-cloud-investigation-and-response-specialist) (Januari 2025) |
| Binalyze | Platform DFIR | [$19M Series A](https://www.moltenventures.com/news/molten-leads-19-million-series-a-in-binalyze) (September 2023) |
## Ing endi Mithril mapan
Mithril, saka Kotoba Labs Inc., mbangun siji platform white-hat sing diwiwiti saka korban lan dikarepake nganti menyang perusahaan. Saiki piranti sing urip ana ing sisih korban lan pasinaon. Tes perusahaane lagi digawe, lan Whitehat as a Service kanggo perusahaan direncanakake: layanan kaya ngono ora ditawakake, lan ora ana asil pelanggan umum. Dokumentasi Mithril isih nggambarake situs anyar minangka implementasi calon, dadi priksa saben kaca sadurunge ngandelake.
| Kapabilitas | Status | Tegese dina iki |
| --- | --- | --- |
| Your records | Urip | Sawise mlebu, wong nyimpen cathetan mawa tanggal, mung teks; saben cathetan sing disimpen nuduhake wektu simpen lan sidik driji SHA-256, lan mung wong kuwi sing bisa maca. Wong ngajokake pawartane dhewe; Mithril ora nliti, ora ngenali sapa wae, ora mulihake dhuwit, utawa ora ngajokake apa-apa kanggo sapa wae ([mithril.fund](https://mithril.fund/)). |
| Priksa phishing lan panggolèkan bukti umum | Urip | Priksa domain umum (kelangan dudu putusan aman) lan panggolèkan mung-waca ing snapshot pangreksan umum mawa tanggal, bisa dianggo tanpa mlebu ([rujukan endpoint](https://docs.mithril.fund/reference/endpoints)). |
| System One Coding | Urip (pilot) | Pilot gratis sing kadhaptar saka harness kodhe miturut tataran; dokumen ngomong iki dudu jaminan kasedhiyan ([dokumen](https://docs.mithril.fund/system-one-coding)). |
| Dojo | Urip | Jalur pasinaon white-hat agen AI lan pelajaran video cekak, nganggo teks fiksi lan data sintetis, ditambah paket pasinaon tim sing dikutip saben pelanggan. Iki ora nguji sistem pihak katelu sing nyata, lan cathetan rampungan dudu sertifikasi ([Dojo](https://app.mithril.fund/dojo)). |
| Paket pangreksan (DAST, SAST, jalur serangan cloud, lan priksa liyane) | Lagi digawe | Dibangun ing kode lan dites sacara lokal; durung ditawakake minangka layanan lan durung di-host. Dokumen nyathet iki minangka kapabilitas sing dikarepake sing butuh ruang lingkup sing diidinake, data input nyata, isolasi tenant, lan bukti eksekusi sadurunge bisa diiklanake sumadhiya ([layanan pangreksan](https://docs.mithril.fund/reference/security-services)). |
| Impor dokumen forensik | Lagi digawe | Impor dokumen saka piranti forensik sing wis ana menyang panyimpenan bukti kanthi provenans SHA-256; dhaptar produk umum nandhani saben format “ora kaverifikasi” ([dhaptar](https://api.mithril.fund/v1/forensics/products)). |
| Graf ontologi | Lagi digawe | Panjlajah umum iku calon; graf tenant durung kasambung ([dokumen graf](https://docs.mithril.fund/graph)). |
| Model sing dikelola, klebu rute riset pangreksan | Lagi digawe | Rute riset njaluk deklarasi ruang lingkup riset lan gagal kanthi tetep nutup nganti rute kasebut kasambung ([model](https://docs.mithril.fund/reference/models)). Inferensi sing dijaga kanthi moderasi isi lan audit penolakan direncanakake lan butuh verifikasi sing diukur lan mawa tanggal dhisik ([pagar](https://docs.mithril.fund/reference/guardrails-firewall)). |
| Integrasi pihak katelu | Lagi digawe | Deleng ngisor. |
| Whitehat as a Service kanggo perusahaan | Direncanakake | Durung ana layanan. |
| Forensik sing didorong model sing dikelola | Direncanakake | Durung dibangun. |
| Peringkat hacker etis | Direncanakake | Kaca Dojo ngomong peringkat lagi disiapake. |
| Dhaptar identitas panliti | Direncanakake | Durung ditawakake ([kahanan dhaptar](https://mithril.fund/ekyc.md)). |
Mithril wis mbangun adaptor kanggo 17 produk pangreksan lan format dokumen forensik. Durung ana sing kaverifikasi marang akun sing urip: tes nganti saiki mung nganggo data sampel, lan papat format forensik disimpen minangka berkas, dudu diurai. Tujuane 100+; iku tujuan, dudu cacah saiki.
Sembarang pindai, gaya DAST utawa gaya SAST, mung kanggo sistem sing diduweni pelanggan utawa sing diidinake kanggo dites. Mithril ora nawakake tes sistem wong liya.
## Apa tegese iki kanggo korban
Yen sampeyan kelangan dhuwit utawa akun, wiwiti cathetan mawa tanggal saiki lan simpen asline. FBI njaluk jeneng sing ngapusi, carane dheweke ngubungi sampeyan, tanggal, carane sampeyan mbayar, menyang ngendi dhuwite lunga, lan katrangan interaksi sampeyan ([FBI](https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions)).
- [Rebutan akun: garis wektu lan dhaptar bukti](/account-takeover-timeline-evidence-list?lang=en)
- [Apusan kripto: tabel kiriman dhuwit](/crypto-fraud-remittance-table?lang=en)
- [Lembar kerja keluhan IC3](/ic3-complaint-worksheet?lang=en) (kanggo Pusat Keluhan Kadurjanan Internet FBI AS)
- [Dokumen Mithril](https://mithril.fund/docs)
Laporake menyang bank utawa panyedhiya pembayaran, platform ing ngendi kedadeyan kuwi, lan polisi utawa layanan pelaporan nasional sampeyan. Ing AS kuwi nyakup [IC3](https://www.ic3.gov) lan FTC ing [ReportFraud.ftc.gov](https://reportfraud.ftc.gov) (dipriksa 2026-10-06).
## Ringkesan sak kaca
[[figure:summary]]
## Sumber
- FBI IC3, [Pawarta Kadurjanan Internet 2025](https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf) (PDF)
- FBI, [wara-wara, April 6, 2026](https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions)
- FTC, [wara-wara kesaksian, Maret 25, 2026](https://www.ftc.gov/news-events/news/press-releases/2026/03/ftc-testifies-joint-economic-committee-agencys-efforts-combat-fraud)
- FTC, [wara-wara apus-apus media sosial, April 27, 2026](https://www.ftc.gov/news-events/news/press-releases/2026/04/new-ftc-data-show-people-have-lost-billions-social-media-scams)
- National Police Agency (Jepang), [kaca tanggal 2026-06-05](https://www.npa.go.jp/bureau/safetylife/sos47/new-topics/260605/01.html) lan [statistik apusan 2025](https://www.npa.go.jp/bureau/criminal/souni/tokusyusagi/sagi_keihatsu2025.pdf) (PDF)
- Gartner, [wara-wara, Juli 29, 2025](https://www.gartner.com/en/newsroom/press-releases/2025-07-29-gartner-forecasts-worldwide-end-user-spending-on-information-security-to-total-213-billion-us-dollars-in-2025)
- Deloitte, [Risiko apusan bank deepfake saya munggah, Mei 29, 2024](https://www.deloitte.com/us/en/insights/industry/financial-services/deepfake-banking-fraud-risk-on-the-rise.html)
- ISC2, [rilis studi tenaga 2024](https://www.prnewswire.com/news-releases/growth-of-cybersecurity-workforce-slows-in-2024-as-economic-uncertainty-persists-302244585.html) lan [studi tenaga 2025](https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study)
- MarketsandMarkets: [tes penetrasi](https://www.marketsandmarkets.com/PressReleases/penetration-testing.asp), [manajemen paparan](https://www.prnewswire.com/news-releases/exposure-management-market-worth-7-6-billion-by-2029---exclusive-report-by-marketsandmarkets-302090329.html), [forensik digital](https://www.marketsandmarkets.com/PressReleases/digital-forensics.asp), [pangreksan aplikasi](https://www.prnewswire.com/news-releases/application-security-market-worth-66-03-billion-by-2031--marketsandmarkets-302713211.html); Grand View Research: [pasinaon pangreksan siber](https://www.grandviewresearch.com/press-release/global-cyber-security-training-market)
- Alphabet, [Formulir 8-K babagan sarujuk Wiz, Maret 18, 2025](https://www.sec.gov/Archives/edgar/data/1652044/000165204425000027/goog-20250318.htm) lan [Google ngrampungake akuisisi Wiz](https://abc.xyz/investor/news/news-details/2026/Google-Completes-Acquisition-of-Wiz-2026-ta7OaU2uA0/default.aspx); Check Point, [akuisisi Lakera](https://www.checkpoint.com/press-releases/check-point-acquires-lakera-to-deliver-end-to-end-ai-security-for-enterprises/); NetSPI, [pengumuman gabungan](https://www.netspi.com/newsroom/press-release/netspi-and-synack-to-merge-forming-a-leading-offensive-cybersecurity-platform/); Darktrace, [pengumuman Cado Security](https://www.darktrace.com/news/darktrace-announces-proposed-acquisition-of-cado-security-a-cloud-investigation-and-response-specialist)
- Dana: pengumuman sing disambungake ing saben baris tabel. Katrangan perusahaan: situs resmi saben organisasi, dipriksa ing Oktober 2026.
Ing Jepang: Bagean sing nyakup teks saka National Police Agency (Jepang) diringkes lan ditata maneh dening editor (digawe kanthi nyunting lan ngolah). Sumber: situs web National Police Agency (Jepang) "[令和７年における特殊詐欺及びＳＮＳ型投資・ロマンス詐欺の認知・検挙状況等について（確定値）](https://www.npa.go.jp/bureau/safetylife/sos47/new-topics/260605/01.html)" lan [ringkesan PDF](https://www.npa.go.jp/bureau/criminal/souni/tokusyusagi/sagi_keihatsu2025.pdf) (loro-lorone dipriksa 2026-10-06). Syarat panggunaan nuruti [Syarat panggunaan](https://www.npa.go.jp/rules/index.html) National Police Agency (Jepang) (Public Data License (Version 1.0) (PDL1.0), dipriksa 2026-10-06). Teks sing diolah ora ditampilake kaya-kaya National Police Agency (Jepang) sing nggawe.
## Koreksi
Katrangan lan penempatan perusahaan adhedhasar kaca umum lan bisa wis lawas. Yen ana sing salah ing kene, ubungi awake dhewe liwat [mithril.fund](https://mithril.fund) lan awake dhewe bakal mbenerake.