Ti korban panipuan ka white hat pausahaan: peta lanskap kaamanan siber (2026)
Tilu belas kategori, ti pitulung korban panipuan nepi ka tés kaamanan pausahaan, kalayan karugian anu dilaporkeun, pangdanaan anu diumumkeun, ramalan pasar dumasar pamedal, jeung status jujur ngeunaan di mana Mithril nangtung.
Artikel ieu ditarjamahkeun ku mesin.
## Pikeun pamingpin: tilu poko
- **Panipuan mangrupa résiko bisnis sarta résiko konsumen.** Karugian anu dilaporkeun ka IC3 FBI ngahontal $20.877 billion dina 2025, sarta loba karugian anu teu kungsi dilaporkeun ([FBI](https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions)).
- **Tés kaamanan nuju ka alat anu didorong AI bari vendor anu mapan ngahiji.** Google ngaréngsékeun akuisisi Wiz dina Maret 2026, sarta NetSPI jeung Synack geus satuju pikeun ngahiji ([Alphabet](https://abc.xyz/investor/news/news-details/2026/Google-Completes-Acquisition-of-Wiz-2026-ta7OaU2uA0/default.aspx); [NetSPI](https://www.netspi.com/newsroom/press-release/netspi-and-synack-to-merge-forming-a-leading-offensive-cybersecurity-platform/)). Harepkeun peta jalan jeung kontrak robah, sarta taroskeun unggal panyadia kumaha éta mastikeun yén anjeunna ngan nguji sistem anu dipiboga atawa diidinan ku anjeun pikeun diuji.
- **Kaahlian tetep jadi wates.** ISC2 ngéstimasi celah tanaga gawé global 4.8 million jalma dina 2024, sarta 59% réspondén studi 2025 na ngalaporkeun kabutuh kaahlian anu kritis atawa signifikan ([ISC2 2024](https://www.prnewswire.com/news-releases/growth-of-cybersecurity-workforce-slows-in-2024-as-economic-uncertainty-persists-302244585.html); [ISC2 2025](https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study)). Rencanakeun latihan bareng jeung alat.
## Lanskap sakilas
Tulisan ieu ngapetakeun pausahaan jeung ladenan publik dina dua pita. Sisi korban ngawengku pitulung saméméh jeung sanggeus panipuan online jeung pangambilalihan akun. Sisi pausahaan ngawengku naon anu mindeng dijual minangka “white hat as a service”: tés kaamanan sistem anu dipiboga pausahaan. Unggal organisasi dikelompokeun dumasar naon anu disebutkeun ku éta sorangan dina loka resmina, dipariksa dina Oktober 2026.
Angka karugian di handap nyaéta karugian anu dilaporkeun: naon anu dicaritakeun ku korban ka FBI, FTC, atawa pulisi. Éta sanés total ruksak, sarta sanés data Mithril.
[[figure:chaos-map]]
Sisi korban, tujuh golongan:
- **Pencegahan panipuan jeung tipu:** Sardine, Alloy, Charm Security, Resistant AI, Hawk, Pindrop, Whoscall (Gogolook), ScamAdviser.
- **Pitulung jeung pamulihan korban:** Mithril Your records (Hirup), Aura, LifeLock (Gen Digital), Identity Theft Resource Center, IdentityTheft.gov (FTC), IC3 (FBI), AARP Fraud Watch Network.
- **Verifikasi idéntitas:** Persona, Socure, Veriff, Incode, TRUSTDOCK, Liquid.
- **OSINT, intel ancaman jeung panyidikan blockchain:** Mithril pamilarian bukti publik (Hirup), Recorded Future, Flashpoint, Silent Push, BforeAI, Netcraft, TRM Labs, Chainalysis, Elliptic.
- **Kapercayaan jeung kaamanan, résiko digital jeung deepfake:** Doppel, Outtake, Bolster AI, Blackbird.AI, Reality Defender, GetReal Security, Adaptive Security, Alice (baheulana ActiveFence; [alice.io](https://alice.io/)).
- **Kaamanan AI jeung AI pamekar:** HiddenLayer, Lakera (ayeuna bagéan ti [Check Point](https://www.checkpoint.com/press-releases/check-point-acquires-lakera-to-deliver-end-to-end-ai-security-for-enterprises/)), Noma Security, Protect AI (ayeuna bagéan ti Palo Alto Networks, [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs)), GMO Flatt Security, Mithril System One Coding (Hirup, cobaan).
- **Pangawétan bukti:** Mithril Your records kalayan sidik SHA-256 (Hirup), Hunchly, Page Vault, Axon.
Sisi pausahaan, genep golongan:
- **Pangujian penetrasi AI jeung kaamanan ofensif:** Mithril Whitehat as a Service (Direncanakeun), XBOW, Horizon3.ai, Pentera, RunSybil, Terra Security, Wiz Red Agent (Google).
- **Pentest minangka jasa (PTaaS) jeung tés anu dikumpulkeun ti balaréa:** HackerOne, Bugcrowd, Synack, NetSPI, Cobalt.
- **Kaamanan aplikasi (SAST jeung DAST):** Mithril DAST jeung SAST (Keur diwangun), Snyk, Semgrep, Checkmarx, Veracode, StackHawk, Invicti.
- **Graf serangan jeung ngatur paparan:** Mithril jalur serangan jeung graf ontologi (Keur diwangun), XM Cyber, Wiz (Google), JupiterOne.
- **Latihan kaamanan jeung rentang siber:** Mithril Dojo (Hirup), Hack The Box, TryHackMe, Immersive, SANS Institute.
- **Forensik digital jeung réspon insiden (DFIR):** Mithril impor laporan forensik (Keur diwangun), Cado Security (Darktrace), Binalyze, Magnet Forensics, Cellebrite.
## Sisi korban: karugian anu dilaporkeun terus naék
[[figure:reported-losses]]
Puseur Keluhan Kajahatan Internét FBI (IC3) nampa 1,008,597 keluhan dina 2025, naék ti 859,532 dina 2024. Karugian anu dilaporkeun $20.877 billion, 26% leuwih loba tibatan taun saméméhna ([laporan IC3 2025](https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf); [rilis FBI, 6 April 2026](https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions)).
Keluhan cryptocurrency nyumbang leuwih ti $11 billion tina karugian anu dilaporkeun, sarta keluhan anu nyebut AI meh $893 million. Jalma umur 60 taun ka luhur ngalaporkeun sakitar $7.7 billion, naék 37% ([FBI](https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions)).
FTC nampa sakitar 3 million laporan panipuan pikeun 2025, kalayan $15.9 billion karugian anu dilaporkeun, naék ti leuwih ti $12 billion dina 2024. Panipuan investasi $7.9 billion sarta panipuan panyamar leuwih ti $3.5 billion ([FTC, 25 Maret 2026](https://www.ftc.gov/news-events/news/press-releases/2026/03/ftc-testifies-joint-economic-committee-agencys-efforts-combat-fraud)). Panipuan média sosial $2.1 billion ([FTC, 27 April 2026](https://www.ftc.gov/news-events/news/press-releases/2026/04/new-ftc-data-show-people-have-lost-billions-social-media-scams)).
Di Jepang: Badan Kapulisian Nasional ngitung ¥325.74 billion (3,257.4億円) karugian tina panipuan husus sarta panipuan investasi jeung roman média sosial dina 2025, naék 63.6% ([NPA, PDF](https://www.npa.go.jp/bureau/criminal/souni/tokusyusagi/sagi_keihatsu2025.pdf)). Panipuan husus nyalira 27,832 kasus jeung sakitar ¥142.31 billion ([NPA](https://www.npa.go.jp/bureau/safetylife/sos47/new-topics/260605/01.html)).
## Sisi korban: pikeun saha produk dijieun
[[figure:positioning]]
Kalolobaan produk di dieu dijual ka organisasi: bank, platform, pausahaan, jeung panyidik. Leuwih saeutik anu dijieun pikeun jalma saurang, sarta leuwih saeutik deui pikeun mangsa sanggeus karugian.
## Sisi korban: pangdanaan anu diumumkeun dina kategori anu paparengan
[[figure:adjacent-funding]]
Tabel ngadaptar babak panganyarna anu diumumkeun sacara publik anu tiasa urang sumberkeun pikeun 22 pausahaan di deukeut rohangan ieu, nepi ka Oktober 2026.
Jumlah anu diumumkeun ngahontal sakitar $1.50 billion. Éta jumlah jumlah anu diumumkeun (itungan urang) sakuliah 22 babak dina tabel, sanés angka pasar. Babak-babak éta sanés babak ékuitas anu bisa dibandingkeun: $100 million Pindrop mangrupa injeuman (utang), babak Aura nyampur ékuitas jeung utang, Netcraft ngumumkeun “leuwih ti $100 million” sarta diitung $100 million, sarta babak Alice (baheulana ActiveFence) jeung Chainalysis asalna ti 2021 jeung 2022.
| Pausahaan | Jumlah anu diumumkeun | Jenis | Diumumkeun | Kategori |
| --- | --- | --- | --- | --- |
| Persona | [$200M](https://www.prnewswire.com/news-releases/persona-raises-200m-at-2b-valuation-to-build-the-verified-identity-layer-for-an-agentic-ai-world-302442649.html) | Series D (ékuitas) | 2025-04-30 | Idéntitas |
| Chainalysis | [$170M](https://www.chainalysis.com/blog/series-f/) | Series F (ékuitas) | 2022-05-12 | OSINT / intel ancaman |
| Aura | [$140M](https://www.aura.com/press/release/aura-completes-series-g-funding-round-raises-140-million-in-equity-and-debt) | Series G (ékuitas jeung utang) | 2025-03-24 | Pitulung korban |
| Netcraft | [leuwih ti $100M (diitung $100M)](https://www.spectrumequity.com/news/netcraft-secures-first-funding-with-over-100m-from-spectrum-equity-names-experienced-technology-executive-ryan-woodley-as-new-ceo/) | Pangdanaan luar munggaran | Juli 2023 | OSINT / intel ancaman |
| Noma Security | [$100M](https://noma.security/blog/noma-security-raises-100m-to-drive-adoption-of-ai-agent-security/) | Series B (ékuitas) | 2025-07-31 | Kaamanan AI |
| Pindrop | [$100M](https://techcrunch.com/2024/07/17/deepfake-detecting-firm-pindrop-lands-100m-loan-to-grow-its-offerings/) | Injeuman (utang), sanés ékuitas | 2024-07-17 | Panipuan / rékayasa sosial |
| Alice (baheulana ActiveFence) | [$100M](https://techcrunch.com/2021/07/26/activefence-comes-out-of-the-shadows-with-100m-in-funding-and-tech-that-detects-online-harm/) | Series A jeung B digabung (ékuitas) | 2021-07-26 | Kapercayaan & kaamanan / deepfake |
| Adaptive Security | [$81M](https://www.prnewswire.com/news-releases/adaptive-security-raises-81-million-series-b-to-stop-ai-powered-cyber-threats-302643174.html) | Series B (ékuitas) | 2025-12-16 | Panipuan / rékayasa sosial |
| Doppel | [$70M](https://www.prnewswire.com/news-releases/doppel-raises-70m-series-c-to-meet-rising-demand-for-ai-driven-social-engineering-defense-302619463.html) | Series C (ékuitas) | 2025-11-19 | Panipuan / rékayasa sosial |
| Sardine | [$70M](https://www.sardine.ai/press/pr/fraud-and-compliance-productivity) | Series C (ékuitas) | 2025-02-11 | Panipuan / rékayasa sosial |
| TRM Labs | [$70M](https://www.trmlabs.com/resources/blog/trm-labs-announces-70m-series-c-to-scale-ai-solutions-to-disrupt-criminal-networks-and-counter-national-security-threats) | Series C (ékuitas) | 2026-02-04 | OSINT / intel ancaman |
| Protect AI (ayeuna bagéan ti Palo Alto Networks) | [$60M](https://www.geekwire.com/2024/samsung-salesforce-invest-in-60m-round-for-seattle-cybersecurity-startup-protect-ai/) | Series B (ékuitas) | 2024-08-01 | Kaamanan AI |
| HiddenLayer | [$50M](https://www.hiddenlayer.com/news/hiddenlayer-raises-50m-in-series-a-funding-to-safeguard-ai) | Series A (ékuitas) | 2023-09-19 | Kaamanan AI |
| Outtake | [$40M](https://techcrunch.com/2026/01/28/ai-security-startup-outtake-raises-40m-from-iconiq-satya-nadella-bill-ackman-and-other-big-names/) | Series B (ékuitas) | 2026-01-28 | Panipuan / rékayasa sosial |
| Reality Defender | [$33M](https://www.prnewswire.com/news-releases/reality-defender-expands-series-a-to-33-million-to-enhance-ai-detection-capabilities-302283098.html) | Series A, total anu dilegaan (ékuitas) | 2024-10-22 | Kapercayaan & kaamanan / deepfake |
| Resistant AI | [$25M](https://resistant.ai/blog/resistant-ai-raises-25-million-in-series-b-funding-to-empower-ai-agents-to-fight-fraud-and-fincrime) | Series B (ékuitas) | 2025-10-13 | Panipuan / rékayasa sosial |
| Blackbird.AI | [$20M](https://www.prnewswire.com/news-releases/blackbirdai-raises-20m-in-series-b-funding-to-empower-organizations-with-narrative-and-perception-risk-intelligence-301851388.html) | Series B (ékuitas) | 2023-06-15 | Kapercayaan & kaamanan / deepfake |
| Lakera | [$20M](https://www.prnewswire.com/news-releases/lakera-raises-20m-series-a-to-secure-generative-ai-applications-302204874.html) | Series A (ékuitas) | 2024-07-24 | Kaamanan AI |
| GetReal Security | [$17.5M](https://forgepointcap.com/perspectives/getreal-security-raises-17-5m-series-a-led-by-forgepoint-capital-to-address-rapidly-growing-threats-associated-with-generative-ai-and-malicious-digital-media/) | Series A (ékuitas) | 2025-03-26 | Kapercayaan & kaamanan / deepfake |
| BforeAI | [$15M](https://www.prnewswire.com/news-releases/bforeai-announces-15-million-in-series-a-funding-led-by-syn-ventures-302125023.html) | Series A (ékuitas) | 2024-04-24 | OSINT / intel ancaman |
| Silent Push | [$10M](https://www.silentpush.com/press-releases/series-b-funding-announcement/) | Series B (ékuitas) | 2025-09-12 | OSINT / intel ancaman |
| Charm Security | [$8M](https://www.prnewswire.com/news-releases/charm-security-emerges-from-stealth-to-combat-scams-and-social-engineering-exploiting-human-vulnerabilities-securing-8m-in-seed-funding-from-team8s-venture-creation-fund-302409642.html) | Seed (ékuitas) | 2025-03-25 | Panipuan / rékayasa sosial |
Numutkeun kategori, itungan anu sarua (jumlah jumlah anu diumumkeun, itungan urang) nyaéta: pertahanan panipuan jeung rékayasa sosial $394M (Sardine, Charm Security, Resistant AI, Pindrop, Doppel, Adaptive Security, Outtake); OSINT jeung intel ancaman $365M (Chainalysis, Netcraft, TRM Labs, BforeAI, Silent Push); kaamanan AI $230M (Noma Security, Protect AI, HiddenLayer, Lakera); idéntitas $200M (Persona); kapercayaan jeung kaamanan sarta deepfake $170.5M (Alice, baheulana ActiveFence; Reality Defender, Blackbird.AI, GetReal Security); pitulung korban $140M (Aura).
Ditinggalkeun: Socure, ChillStack, jeung TRUSTDOCK, sabab urang teu tiasa ngonfirmasi jumlah anu diumumkeun anu bisa dibandingkeun dina dolar AS.
## Sisi pausahaan: white hat minangka jasa
[[figure:positioning-enterprise]]
Di sisi pausahaan, “white hat as a service” ngawengku sababaraha rupa pagawéan anu dibeuli ku pausahaan pikeun nguji sistem sorangan: tés penetrasi otonom atawa dibantuan AI, jasa pentest jeung program bug bounty anu dijalankeun ku panalungtik manusa anu geus disaring, pindai kode jeung aplikasi anu jalan (SAST jeung DAST), analisis jalur serangan, latihan, jeung forensik sanggeus insiden. Sadayana dimaksudkeun pikeun sistem anu dipiboga palanggan atawa anu diidinan pikeun diuji.
## Sisi pausahaan: ka mana babak 2025–2026 indit
[[figure:enterprise-funding]]
Dina sét pausahaan anu disurvei, babak venture 2025–2026 indit ka tés ofensif anu didorong AI: XBOW ngumumkeun Series C $120 million dina Maret 2026 jeung pembiayaan Series C tambahan $35 million dina Méi 2026 ([XBOW, 18 Maret 2026](https://xbow.com/news/xbow-raises-120m-to-scale); [XBOW, 6 Méi 2026](https://xbow.com/news/xbow-secures-additional-35m-from-strategic-investors)); Horizon3.ai Series D $100 million dina Juni 2025 ([Horizon3.ai](https://horizon3.ai/news/press-release/horizon3-ai-raises-100m-to-cement-leadership-in-autonomous-security/)); Pentera Series D $60 million dina Maret 2025 ([Pentera](https://pentera.io/press-release/pentera-60m-funding-security-validation-growth/)); RunSybil $40 million pangdanaan total dina Maret 2026 ([RunSybil](https://www.runsybil.com/blog/runsybil-raises-40m-to-build-the-ai-native-platform-for-offensive-security)); sarta Terra Security Series A $30 million dina Séptémber 2025 ([Terra Security](https://www.terra.security/blog/terra-security-raises-30m-series-a-to-redefine-penetration-testing-with-agentic-ai)). Babarengan éta $385 million, jumlah jumlah anu diumumkeun (itungan urang), kalayan dua béwara XBOW diitung misah. Dina kaamanan aplikasi, Semgrep ngumumkeun Series D $100 million dina Pébruari 2025 ([Semgrep](https://www.prnewswire.com/news-releases/semgrep-announces-100m-series-d-funding-to-advance-ai-powered-code-security-302367780.html)). Ieu sampel urang, sanés sakabéh pasar.
Kategori anu leuwih heubeul ningali konsolidasi gaganti babak anyar. Google satuju dina Maret 2025 pikeun ngakuisisi Wiz kalayan $32 billion, kana panaluyuan panutupan ([Formulir 8-K Alphabet, 18 Maret 2025](https://www.sec.gov/Archives/edgar/data/1652044/000165204425000027/goog-20250318.htm)), sarta ngaréngsékeun akuisisi dina 11 Maret 2026 ([Alphabet](https://abc.xyz/investor/news/news-details/2026/Google-Completes-Acquisition-of-Wiz-2026-ta7OaU2uA0/default.aspx)). NetSPI jeung Synack ngumumkeun kasapukan pasti pikeun ngahiji dina 2 Séptémber 2026, dirojong ku KKR; merger dipiharep ditutup dina Oktober 2026, sarta urang can ningali éta dikonfirmasi geus ditutup ([NetSPI](https://www.netspi.com/newsroom/press-release/netspi-and-synack-to-merge-forming-a-leading-offensive-cybersecurity-platform/)). Darktrace ngumumkeun usulan akuisisi Cado Security dina 9 Januari 2025 ([Darktrace](https://www.darktrace.com/news/darktrace-announces-proposed-acquisition-of-cado-security-a-cloud-investigation-and-response-specialist)).
## Ramalan pasar, pamedal per pamedal
[[figure:market-size]]
Gartner ngaramalkeun waragad pamaké ahir sakuliah dunya pikeun kaamanan inpormasi $213 billion dina 2025 jeung $240 billion dina 2026, naék 12.5%, ti $193 billion dina 2024 ([rilis pers Gartner, 29 Juli 2025](https://www.gartner.com/en/newsroom/press-releases/2025-07-29-gartner-forecasts-worldwide-end-user-spending-on-information-security-to-total-213-billion-us-dollars-in-2025)). Ieu ramalan Gartner.
Puseur Jasa Kauangan Deloitte ngaramalkeun yén karugian panipuan anu dimungkinkeun ku AI generatif di AS tiasa ngahontal $40 billion dina 2027, ti $12.3 billion dina 2023, laju tumuwuh taunan majemuk 32% ([Deloitte, 29 Méi 2024](https://www.deloitte.com/us/en/insights/industry/financial-services/deepfake-banking-fraud-risk-on-the-rise.html)). Ieu ramalan.
## Ramalan ségmén pausahaan jeung celah kaahlian
[[figure:segment-forecasts]]
Ramalan ségmén pausahaan asalna ti pamedal anu béda, kalayan définisi, taun dasar, jeung cakrawala anu béda. Éta didaptarkeun sajajar sarta henteu dijumlahkeun.
| Ségmén | Éstimasi dasar | Ramalan | CAGR | Pamedal, tanggal |
| --- | --- | --- | --- | --- |
| Tés penetrasi | $1.98B (2025) | $4.39B (2031) | 14.2% | [MarketsandMarkets, Maret 2026](https://www.marketsandmarkets.com/PressReleases/penetration-testing.asp) |
| Ngatur paparan | $2.2B (2024) | $7.6B (2029) | 28.3% | [MarketsandMarkets, Maret 2024](https://www.prnewswire.com/news-releases/exposure-management-market-worth-7-6-billion-by-2029---exclusive-report-by-marketsandmarkets-302090329.html) |
| Forensik digital | $12.94B (2025) | $22.81B (2030) | 12.0% | [MarketsandMarkets, Méi 2025](https://www.marketsandmarkets.com/PressReleases/digital-forensics.asp) |
| Latihan kaamanan siber | henteu disebut dina rilis | $13.70B (2030) | 17.4% (2024–2030) | [Grand View Research, Maret 2024](https://www.grandviewresearch.com/press-release/global-cyber-security-training-market) |
| Kaamanan aplikasi | $41.16B (2026) | $66.03B (2031) | 9.9% | [MarketsandMarkets, Maret 2026](https://www.prnewswire.com/news-releases/application-security-market-worth-66-03-billion-by-2031--marketsandmarkets-302713211.html) |
Kalima éta éstimasi pasar global anu dipedalkeun dina rilis pers. Lingkup pamedal tumpang tindih (contona, tés penetrasi jeung kaamanan aplikasi), anu jadi alesan deui pikeun henteu nambahan éta.
Celah kaahlian nyaéta satengah séjén tina carita. ISC2 ngéstimasi celah tanaga gawé kaamanan siber global 4.8 million jalma dina 2024, naék 19% taun ka taun, dibanding tanaga gawé sakitar 5.5 million. Celah kaahlian pangluhurna anu disebut réspondén nyaéta AI (34%), kaamanan cloud (30%), zero trust (27%), forensik digital jeung réspon insiden (25%) sarta kaamanan aplikasi (24%) ([ISC2, Séptémber 2024](https://www.prnewswire.com/news-releases/growth-of-cybersecurity-workforce-slows-in-2024-as-economic-uncertainty-persists-302244585.html)). Dina studi ISC2 2025 anu ngawengku 16,029 réspondén, 59% ngalaporkeun kabutuh kaahlian anu kritis atawa signifikan, sarta 88% geus ngalaman sahenteuna hiji akibat signifikan tina kakurangan kaahlian ([ISC2, Désémber 2025](https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study)).
## Tabel babandingan
### Kamampuh, tina sumber publik
Éntri pausahaan dumasar kaca atawa béwara unggal pausahaan sorangan. Pausahaan anu leungit tina hiji baris hartina urang teu manggihan éta dina sumber anu dipariksa, sanés yén éta teu boga kamampuh. Kolom Mithril ngagunakeun tilu status: **Hirup** (ditawarkeun sarta jalan), **Keur diwangun** (diwangun dina kode, henteu ditawarkeun) jeung **Direncanakeun**.
| Kamampuh | Status Mithril | Dijelaskeun sacara publik ku (conto) |
| --- | --- | --- |
| Ladenan white-hat manusa (pentest, bug bounty) | Direncanakeun: Whitehat as a Service | [HackerOne](https://www.hackerone.com/product/bug-bounty-platform) (komunitas bug bounty), [Bugcrowd](https://www.bugcrowd.com/press-release/bugcrowd-secures-102-million-in-strategic-growth-funding-to-scale-ai-powered-crowdsourced-security-platform/), Synack jeung NetSPI (merger disatujuan Séptémber 2026, [béwara](https://www.netspi.com/newsroom/press-release/netspi-and-synack-to-merge-forming-a-leading-offensive-cybersecurity-platform/)), [Cobalt](https://www.globenewswire.com/news-release/2020/08/20/2081369/0/en/Cobalt-io-raises-29-million-to-expand-its-Pentest-as-a-Service-platform-and-transform-software-security-testing.html) |
| Tés ofensif agén AI atawa otonom | Keur diwangun: runtime agén jeung modél panalungtikan anu diwatesan; henteu ditawarkeun | [XBOW](https://xbow.com/news/xbow-raises-120m-to-scale), [Horizon3.ai NodeZero](https://horizon3.ai/nodezero/), [Pentera](https://www.securityweek.com/security-validation-firm-pentera-banks-60m-series-d/) (validasi), [HackerOne Agentic PTaaS](https://www.hackerone.com/press-release/hackerone-introduces-agentic-ptaas-deliver-continuous-expert-verified-pentesting), [Wiz Red Agent](https://www.wiz.io/blog/wiz-red-agent-is-ga) |
| Tés aplikasi anu jalan (jenis DAST) | Keur diwangun: diuji sacara lokal wungkul; taya ladenan anu di-host | [XBOW](https://xbow.com/news/xbow-raises-120m-to-scale), [Snyk API & Web](https://snyk.io/product/dast-api-web/), [Wiz Red Agent](https://www.wiz.io/blog/wiz-red-agent-is-ga) |
| Analisis kode (SAST) | Keur diwangun: Python wungkul, diuji sacara lokal; taya ladenan anu di-host | [HackerOne Code](https://www.hackerone.com/product/code), [Snyk Code](https://snyk.io/product/snyk-code/), [Wiz SAST](https://www.wiz.io/blog/introducing-wiz-sast-where-code-risk-meets-cloud-context) |
| Analisis jalur serangan atawa graf serangan | Keur diwangun: jalur serangan cloud; taya ladenan anu di-host | [Horizon3.ai](https://horizon3.ai/nodezero/), [Pentera](https://www.securityweek.com/security-validation-firm-pentera-banks-60m-series-d/), [Wiz](https://www.wiz.io/lp/wiz-security-graph), [XM Cyber](https://xmcyber.com/platform/attack-graph-analysis/) |
| Graf kaamanan atawa modél data | Keur diwangun: graf ontologi | [Wiz Security Graph](https://www.wiz.io/lp/wiz-security-graph) |
| Ékosistem integrasi | Keur diwangun: adaptor pikeun 17 produk jeung format, tés data sampel wungkul; tujuanna 100+, sanés itungan ayeuna | [Wiz](https://www.wiz.io/blog/wiz-integration-network-reaches-300) (300 integrasi mitra, Juli 2026), [XM Cyber](https://xmcyber.com/platform/attack-graph-analysis/) (taya jumlah anu disebut) |
| Latihan jeung rentang siber | Hirup: Dojo, latihan dina bahan sintétik, sanés sértifikasi | [Hack The Box](https://www.hackthebox.com/) (lab jeung rentang), [Immersive](https://www.businesswire.com/news/home/20221007005544/en/Immersive-Labs-Secures-%2466-Million-in-New-Capital-and-Expands-its-Leadership-Team-to-Accelerate-Growth), [TryHackMe](https://tryhackme.com/about) |
| Forensik jeung réspon insiden | Keur diwangun: impor laporan alat anu geus aya kalayan provenans SHA-256 | Cado Security ([Darktrace](https://www.darktrace.com/news/darktrace-announces-proposed-acquisition-of-cado-security-a-cloud-investigation-and-response-specialist)), [Binalyze](https://www.moltenventures.com/news/molten-leads-19-million-series-a-in-binalyze) |
| Pitulung sisi korban | Hirup: Your records | Aura, LifeLock (Gen Digital), IdentityTheft.gov (FTC), Identity Theft Resource Center |
### Pausahaan sakilas
| Pausahaan | Naon anu disebutkeun ku éta | Pangdanaan publik panganyarna atawa kajadian |
| --- | --- | --- |
| XBOW | Tés ofensif otonom aplikasi | [$120M Series C](https://xbow.com/news/xbow-raises-120m-to-scale) (Maret 2026) jeung [$35M Series C tambahan](https://xbow.com/news/xbow-secures-additional-35m-from-strategic-investors) (Méi 2026) |
| Horizon3.ai | Pentest otonom NodeZero | [$100M Series D](https://horizon3.ai/news/press-release/horizon3-ai-raises-100m-to-cement-leadership-in-autonomous-security/) (Juni 2025) |
| Pentera | Validasi kaamanan otomatis | [$60M Series D](https://pentera.io/press-release/pentera-60m-funding-security-validation-growth/) (Maret 2025) |
| RunSybil | Platform kaamanan ofensif anu asli AI | [$40M pangdanaan total](https://www.runsybil.com/blog/runsybil-raises-40m-to-build-the-ai-native-platform-for-offensive-security) (Maret 2026) |
| Terra Security | Pentest agéntik kalayan manusa dina loop | [$30M Series A](https://www.terra.security/blog/terra-security-raises-30m-series-a-to-redefine-penetration-testing-with-agentic-ai) (Séptémber 2025) |
| HackerOne | Komunitas bug bounty; Agentic PTaaS (Januari 2026) | [$49M Series E](https://www.hackerone.com/press-release/hackerone-caps-growth-year-49-million-investment) (Januari 2022) |
| Bugcrowd | Kaamanan anu dikumpulkeun ti balaréa | [$102M pangdanaan tumuwuh strategis](https://www.bugcrowd.com/press-release/bugcrowd-secures-102-million-in-strategic-growth-funding-to-scale-ai-powered-crowdsourced-security-platform/) (Pébruari 2024) |
| Synack | Tés kaamanan ku panalungtik anu disaring | [$52M Series D](https://www.businesswire.com/news/home/20200528005407/en/Synacks-%2452-Million-Investment-Fuels-Future-of-Remote-Security-Testing-from-Worlds-Elite-Hackers) (Méi 2020); [kasapukan merger jeung NetSPI](https://www.netspi.com/newsroom/press-release/netspi-and-synack-to-merge-forming-a-leading-offensive-cybersecurity-platform/) (diumumkeun Séptémber 2026; dipiharep ditutup Oktober 2026) |
| Cobalt | Pentest minangka jasa | [$29M Series B](https://www.globenewswire.com/news-release/2020/08/20/2081369/0/en/Cobalt-io-raises-29-million-to-expand-its-Pentest-as-a-Service-platform-and-transform-software-security-testing.html) (Agustus 2020) |
| Snyk | Kaamanan pamekar, kaasup SAST jeung DAST | [$196.5M Series G](https://snyk.io/news/snyk-closes-196-5-million-series-g-funding-at-7-4-billion-valuation/) (Désémber 2022) |
| Semgrep | Kaamanan kode anu didorong AI | [$100M Series D](https://www.prnewswire.com/news-releases/semgrep-announces-100m-series-d-funding-to-advance-ai-powered-code-security-302367780.html) (Pébruari 2025) |
| StackHawk | DAST anu ngutamakeun pamekar | [$20.7M Series B](https://www.prnewswire.com/news-releases/stackhawk-raises-20-7-million-in-series-b-funding-for-developer-first-application-and-api-security-testing-as-market-demand-soars-for-better-security-301545922.html) (Méi 2022) |
| Wiz (Google) | Kaamanan cloud, Security Graph, Red Agent, SAST | [Diakuisisi ku Google kalayan $32B](https://www.sec.gov/Archives/edgar/data/1652044/000165204425000027/goog-20250318.htm) (disatujuan Maret 2025, kana panaluyuan panutupan); [réngsé](https://abc.xyz/investor/news/news-details/2026/Google-Completes-Acquisition-of-Wiz-2026-ta7OaU2uA0/default.aspx) (Maret 2026) |
| XM Cyber | Analisis graf serangan | [Diakuisisi ku Schwarz Group](https://gruppe.schwarz/en/press/archive/2021/schwarz-group-acquires-israeli-hybrid-cloud-cybersecurity-innovator-xm-cyber) (Nopémber 2021) |
| JupiterOne | Graf aset siber | [$70M Series C](https://www.prnewswire.com/news-releases/jupiterone-achieves-valuation-of-over-1b-with-70m-series-c-funding-to-fuel-innovation-in-cybersecurity-and-democratize-access-for-all-301559956.html) (Juni 2022) |
| Hack The Box | Lab jeung rentang hacking | [$55M Series B](https://www.carlyle.com/media-room/news-release-archive/carlyle-leads-55m-series-b-investment-round-in-hack-the-box) (Januari 2023) |
| Immersive | Latihan tanaga gawé siber | [$66M](https://www.businesswire.com/news/home/20221007005544/en/Immersive-Labs-Secures-%2466-Million-in-New-Capital-and-Expands-its-Leadership-Team-to-Accelerate-Growth) (Oktober 2022) |
| TryHackMe | Lab anu ramah pikeun pemula | [Taya investasi luar](https://tryhackme.com/about) (loka pausahaan) |
| Cado Security | Forensik cloud | [Darktrace ngumumkeun akuisisi](https://www.darktrace.com/news/darktrace-announces-proposed-acquisition-of-cado-security-a-cloud-investigation-and-response-specialist) (Januari 2025) |
| Binalyze | Platform DFIR | [$19M Series A](https://www.moltenventures.com/news/molten-leads-19-million-series-a-in-binalyze) (Séptémber 2023) |
## Di mana Mithril nangtung
Mithril, ti Kotoba Labs Inc., keur ngawangun hiji platform white-hat anu dimimitian ti korban sarta dimaksudkeun pikeun ngalegaan ka pausahaan. Ayeuna alat anu hirup aya di sisi korban jeung diajar. Tés pausahaan na keur diwangun, sarta Whitehat as a Service pikeun pausahaan direncanakeun: ladenan kitu can ditawarkeun, sarta can aya hasil palanggan publik. Dokuméntasi Mithril tetep ngajelaskeun loka anyar minangka implementasi calon, jadi pariksa unggal kaca saméméh ngandelkeunana.
| Kamampuh | Status | Naon hartina ayeuna |
| --- | --- | --- |
| Your records | Hirup | Sanggeus asup, hiji jalma nyimpen catetan anu boga tanggal, téks wungkul; unggal catetan anu disimpen némbongkeun waktu simpen jeung sidik SHA-256, sarta ngan jalma éta anu tiasa maca. Jalma ngajukeun laporan sorangan; Mithril henteu nalungtik, ngaidentipikasi saha waé, mulangkeun artos, atawa ngajukeun naon waé pikeun saha waé ([mithril.fund](https://mithril.fund/)). |
| Pamariksaan phishing jeung pamilarian bukti publik | Hirup | Pamariksaan domain publik (teu kapanggih sanés putusan aman) jeung pamilarian baca-wungkul kana snapshot kaamanan publik anu boga tanggal, bisa dipaké tanpa asup ([rujukan endpoint](https://docs.mithril.fund/reference/endpoints)). |
| System One Coding | Hirup (cobaan) | Pilot gratis anu kadaptar tina harness coding bertahap; dokumén nyebut éta sanés jaminan kasadiaan ([dokumén](https://docs.mithril.fund/system-one-coding)). |
| Dojo | Hirup | Jalur diajar white-hat agén AI jeung palajaran vidéo pondok, ngagunakeun téks fiksi jeung data sintétik, ditambah pakét latihan tim anu ditawarkeun per palanggan. Ieu henteu nguji sistem pihak katilu anu sabenerna, sarta catetan parantosan sanés sértifikasi ([Dojo](https://app.mithril.fund/dojo)). |
| Suit kaamanan (DAST, SAST, jalur serangan cloud jeung pamariksaan séjén) | Keur diwangun | Diwangun dina kode sarta diuji sacara lokal; henteu ditawarkeun minangka ladenan sarta henteu di-host. Dokumén ngadaptar ieu minangka kamampuh anu dimaksud anu peryogi lingkup anu diidinan, data input anu sabenerna, isolasi tenant jeung bukti éksekusi saméméh bisa diémbarkeun sayogi ([ladenan kaamanan](https://docs.mithril.fund/reference/security-services)). |
| Impor laporan forensik | Keur diwangun | Impor laporan ti alat forensik anu geus aya kana gudang bukti kalayan provenans SHA-256; daptar produk publik nandaan unggal format "can diverifikasi" ([daptar](https://api.mithril.fund/v1/forensics/products)). |
| Graf ontologi | Keur diwangun | Panyusud publik mangrupa calon; graf tenant can nyambung ([dokumén graf](https://docs.mithril.fund/graph)). |
| Modél anu dikokolakeun, kaasup jalur panalungtikan kaamanan | Keur diwangun | Jalur panalungtikan merlukeun déklarasi lingkup panalungtikan sarta gagal katutup nepi ka jalurna nyambung ([modél](https://docs.mithril.fund/reference/models)). Inferensi anu dijaga kalayan moderasi eusi jeung audit panolakan direncanakeun sarta peryogi verifikasi anu diukur, boga tanggal, heula ([pagar](https://docs.mithril.fund/reference/guardrails-firewall)). |
| Integrasi pihak katilu | Keur diwangun | Tempo di handap. |
| Whitehat as a Service pikeun pausahaan | Direncanakeun | Can aya ladenan. |
| Forensik anu didorong modél anu dikokolakeun | Direncanakeun | Can diwangun. |
| Peringkat hacker étis | Direncanakeun | Kaca Dojo nyebut peringkat keur disiapkeun. |
| Énrolmén idéntitas panalungtik | Direncanakeun | Can ditawarkeun ([kaayaan pendaptaran](https://mithril.fund/ekyc.md)). |
Mithril geus ngawangun adaptor pikeun 17 produk kaamanan jeung format laporan forensik. Can aya anu diverifikasi kana akun anu hirup: tés nepi ka ayeuna ngagunakeun data sampel wungkul, sarta opat format forensik disimpen minangka file lain di-parse. Tujuanna 100+; éta tujuan, sanés itungan ayeuna.
Unggal pindai, gaya DAST atawa gaya SAST, ngan pikeun sistem anu dipiboga palanggan atawa anu diidinan pikeun diuji. Mithril henteu nawiskeun tés sistem batur.
## Naon hartina ieu pikeun korban
Upami anjeun kaleungitan artos atawa akun, mimitian catetan anu boga tanggal ayeuna sarta simpen anu asli. FBI ménta ngaran panipu, kumaha maranéhna ngahubungi anjeun, tanggal, kumaha anjeun mayar, ka mana artosna indit, jeung déskripsi interaksi anjeun ([FBI](https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions)).
- [Pangambilalihan akun: garis waktu jeung daptar bukti](/account-takeover-timeline-evidence-list?lang=en)
- [Panipuan kripto: tabel kiriman](/crypto-fraud-remittance-table?lang=en)
- [Lembar gawé keluhan IC3](/ic3-complaint-worksheet?lang=en) (pikeun Puseur Keluhan Kajahatan Internét FBI AS)
- [Dokumén Mithril](https://mithril.fund/docs)
Laporkeun ka bank atawa panyadia pamayaran anjeun, platform tempat kajadianna, jeung pulisi atawa ladenan laporan nasional anjeun. Di AS éta kaasup [IC3](https://www.ic3.gov) jeung FTC di [ReportFraud.ftc.gov](https://reportfraud.ftc.gov) (dipariksa 2026-10-06).
## Ringkesan sakaca
[[figure:summary]]
## Sumber
- FBI IC3, [Laporan Kajahatan Internét 2025](https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf) (PDF)
- FBI, [rilis pers, 6 April 2026](https://www.fbi.gov/news/press-releases/cryptocurrency-and-ai-scams-bilk-americans-of-billions)
- FTC, [rilis kasaksian, 25 Maret 2026](https://www.ftc.gov/news-events/news/press-releases/2026/03/ftc-testifies-joint-economic-committee-agencys-efforts-combat-fraud)
- FTC, [rilis panipuan média sosial, 27 April 2026](https://www.ftc.gov/news-events/news/press-releases/2026/04/new-ftc-data-show-people-have-lost-billions-social-media-scams)
- Badan Kapulisian Nasional (Jepang), [kaca tanggal 2026-06-05](https://www.npa.go.jp/bureau/safetylife/sos47/new-topics/260605/01.html) jeung [statistik panipuan 2025](https://www.npa.go.jp/bureau/criminal/souni/tokusyusagi/sagi_keihatsu2025.pdf) (PDF)
- Gartner, [rilis pers, 29 Juli 2025](https://www.gartner.com/en/newsroom/press-releases/2025-07-29-gartner-forecasts-worldwide-end-user-spending-on-information-security-to-total-213-billion-us-dollars-in-2025)
- Deloitte, [Résiko panipuan perbankan deepfake naék, 29 Méi 2024](https://www.deloitte.com/us/en/insights/industry/financial-services/deepfake-banking-fraud-risk-on-the-rise.html)
- ISC2, [rilis studi tanaga gawé 2024](https://www.prnewswire.com/news-releases/growth-of-cybersecurity-workforce-slows-in-2024-as-economic-uncertainty-persists-302244585.html) jeung [studi tanaga gawé 2025](https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study)
- MarketsandMarkets: [tés penetrasi](https://www.marketsandmarkets.com/PressReleases/penetration-testing.asp), [ngatur paparan](https://www.prnewswire.com/news-releases/exposure-management-market-worth-7-6-billion-by-2029---exclusive-report-by-marketsandmarkets-302090329.html), [forensik digital](https://www.marketsandmarkets.com/PressReleases/digital-forensics.asp), [kaamanan aplikasi](https://www.prnewswire.com/news-releases/application-security-market-worth-66-03-billion-by-2031--marketsandmarkets-302713211.html); Grand View Research: [latihan kaamanan siber](https://www.grandviewresearch.com/press-release/global-cyber-security-training-market)
- Alphabet, [Formulir 8-K ngeunaan kasapukan Wiz, 18 Maret 2025](https://www.sec.gov/Archives/edgar/data/1652044/000165204425000027/goog-20250318.htm) jeung [Google ngaréngsékeun akuisisi Wiz](https://abc.xyz/investor/news/news-details/2026/Google-Completes-Acquisition-of-Wiz-2026-ta7OaU2uA0/default.aspx); Check Point, [akuisisi Lakera](https://www.checkpoint.com/press-releases/check-point-acquires-lakera-to-deliver-end-to-end-ai-security-for-enterprises/); NetSPI, [béwara merger](https://www.netspi.com/newsroom/press-release/netspi-and-synack-to-merge-forming-a-leading-offensive-cybersecurity-platform/); Darktrace, [béwara Cado Security](https://www.darktrace.com/news/darktrace-announces-proposed-acquisition-of-cado-security-a-cloud-investigation-and-response-specialist)
- Pangdanaan: béwara anu numbu dina unggal baris tabel. Déskripsi pausahaan: loka resmi unggal organisasi, dipariksa dina Oktober 2026.
Di Jepang: Bagéan anu ngawengku téks ti Badan Kapulisian Nasional (Jepang) diringkeskeun jeung disusun deui ku éditor (dijieun ku cara ngédit jeung ngolah). Sumber: loka wéb Badan Kapulisian Nasional (Jepang) "[令和７年における特殊詐欺及びＳＮＳ型投資・ロマンス詐欺の認知・検挙状況等について（確定値）](https://www.npa.go.jp/bureau/safetylife/sos47/new-topics/260605/01.html)" jeung [ringkesan PDF](https://www.npa.go.jp/bureau/criminal/souni/tokusyusagi/sagi_keihatsu2025.pdf) na (duanana dipariksa 2026-10-06). Katangtuan pamakéan nuturkeun Badan Kapulisian Nasional (Jepang) [Katangtuan pamakéan](https://www.npa.go.jp/rules/index.html) (Public Data License (Version 1.0) (PDL1.0), dipariksa 2026-10-06). Téks anu diolah henteu ditepikeun saolah-olah Badan Kapulisian Nasional (Jepang) anu nyieunna.
## Koréksi
Déskripsi jeung penempatan pausahaan dumasar kaca publik sarta bisa geus kolot. Upami aya anu lepat di dieu, hubungi urang ngaliwatan [mithril.fund](https://mithril.fund) sarta urang bakal ngalereskeunana.