Brinqa has announced the acquisition of PlexTrac, a strategic move to enhance its capabilities in exposure management for enterprise security teams.
This purchase integrates PlexTrac's established platform for offensive security validation and reporting, enabling Brinqa to effectively verify the success of remediation efforts. This positions Brinqa uniquely in the market by closing the Continuous Threat Exposure Management (CTEM) loop, concentrating on identifying, prioritizing, and confirming the resolution of security exposures.
Advancing Exposure Management Capabilities
With this acquisition, Brinqa becomes a prominent standalone vendor in Unified Exposure Management, extending its services to over 3,000 customers across 57 countries and including more than a quarter of the Fortune 500 companies. Dan Pagel, CEO of Brinqa, commented, "We've spent over a decade building the platform enterprise security teams trust to prioritize what to fix first. PlexTrac brings real offensive security depth from practitioners who have spent years proving exactly how attackers get in."
Brinqa has long been dedicated to tackling complex exposure management challenges for global leaders like Nestlé, PhonePe, Cambia Health Solutions, Guidewire, and SAP. This dedication led to significant growth in recent years, including a 164% increase in new bookings and a 32% rise in new-logo average selling prices in 2025.
Building a Robust Data Foundation
Dan DeCloss, PlexTrac's founder, joins Brinqa's executive team to lead the offensive security practice
The acquisition of PlexTrac builds on Brinqa's momentum, providing a robust data foundation that ensures verified fixes. Thomas Krane from Insight Partners remarked, "Exposure management only matters if teams can prove the fix worked, and that's the gap Brinqa now closes."
By integrating validated exposure data into existing AI models and tools, Brinqa offers a strengthened Cyber Risk Graph, improving both its AI agents and those utilized through its Bring Your Own AI program.
Strategic Highlights of the Acquisition
The integration of PlexTrac gives offensive security communities expanded access to Brinqa's resources and allows for a comprehensive closure of the CTEM loop—from discovery to validated remediation. The collaboration of these two organizations, both recognized in the Gartner® Magic Quadrant™ for Exposure Assessment Platforms, marks a significant expansion of service capabilities.
Dan DeCloss, PlexTrac's founder, joins Brinqa's executive team to lead the offensive security practice. This strategic addition enables faster confirmation that solutions work and provides verifiable evidence for audits, insurance assessments, and board reports.
Pre- and Post-Remediation Testing
This acquisition saw Brinqa represented by Covington & Burling during the transaction process
Brinqa customers benefit from expedited confirmation of successful fixes, with vulnerabilities confirmed as closed post-remediation. PlexTrac's customers, meanwhile, find pentest workflows directly integrated into CTEM programs, using Brinqa’s prioritization engine to focus on critical exposures. This comprehensive approach ensures coordinated efforts across security, IT, and offensive security teams.
PlexTrac will continue to operate its solutions independently, ensuring continuity for current customers while offering the potential to integrate into Brinqa's broader platform. "PlexTrac was built by offensive security practitioners for offensive security practitioners, and that's not changing," DeCloss emphasized. This acquisition positions Brinqa as an integral operating system for enterprise exposure management, leveraging expertise amidst increasing automation.
This acquisition saw Brinqa represented by Covington & Burling during the transaction process.
Brinqa, the pioneer in exposure management for enterprise security teams, announces it has acquired PlexTrac, the trusted platform for offensive security validation, workflow, and reporting.
The acquisition adds the ability to verify that remediation has actually worked, uniquely positioning Brinqa to identify and prioritise the exposures that matter most, drive remediation, and prove the fix held, closing the CTEM loop. The acquisition also makes Brinqa the largest standalone vendor in Unified Exposure Management, with over 3,000 customers across 57 countries, including more than 25% of the Fortune 500.
Solving exposure management challenges
“We've spent over a decade building the platform enterprise security teams trust to prioritise what to fix first,” said Dan Pagel, CEO at Brinqa. “PlexTrac brings real offensive security depth, from practitioners who have spent years proving exactly how attackers get in. Pairing that expertise with our exposure assessment platform gives customers proof they can defend to a board, an auditor, or any AI system acting on that data.”
Brinqa has spent more than a decade solving exposure management challenges for the world's largest and most complex organizations, including Nestlé, PhonePe, Cambia Health Solutions, Guidewire, and SAP. That focus paid off in 2025 with 164% year-over-year growth in new bookings, a 32% increase in new-logo average selling price, and inclusion in the inaugural Gartner® Magic Quadrant™ for Exposure Assessment Platforms. Momentum accelerated further in 2026, with new logo bookings more than doubling year-over-year and existing customers expanding their deployments as Brinqa shipped new AI capabilities, including new MCP interfaces, the AI Attribution Agent, and the AI Deduplication Agent.
Robust data foundation
The PlexTrac acquisition builds directly on that trajectory, adding the capability enterprise security teams kept asking for: proof that a fix actually worked. Combined with a robust data foundation, MCP, and Bring Your Own AI, customers can connect that same validated exposure data to the AI models and tools they already use, making high-value exposure intelligence available across teams.
"Exposure management only matters if teams can prove the fix worked, and that's the gap Brinqa now closes. We've watched this team build category-defining technology, and this acquisition sharpens their lead at a moment when security organizations are demanding validated, AI-ready data," said Thomas Krane, Managing Director at Insight Partners and member of Brinqa's board of directors.
Acquisition highlights
- Brinqa now serves 3,000+ customers across 57 countries, giving PlexTrac's offensive security community direct access to Brinqa's data foundation and AI agents.
- Brinqa now fully closes the CTEM loop, from discovery and prioritisation through validated proof that a fix worked.
- The combined company is now the largest standalone vendor in Unified Exposure Management, bringing together two companies independently recognized in the Gartner® Magic Quadrant™ for Exposure Assessment Platforms.
- Every confirmed exploit and fix from PlexTrac flows into Brinqa's data layer, strengthening the Cyber Risk Graph and sharpening every AI agent, whether Brinqa's own or one a customer runs via Brinqa’s Bring Your Own AI program.
- Dan DeCloss, founder and Chief Customer Brand Officer of PlexTrac, joins Brinqa's executive leadership team and board of directors to lead the combined offensive security practice.
Pre-remediation testing
For Brinqa's customers, it means faster confirmation that a fix worked, and evidence to back up what security teams report to auditors, insurers, and the board. A vulnerability marked “closed” in a ticketing system is a status update. A vulnerability confirmed closed through validated retesting is proof.
For PlexTrac's customers, it means pentest teams and workflows now plug directly into a CTEM program instead of sitting next to one. Brinqa's prioritisation engine focuses pentest resources on the exposures that matter most to the business, and validation now covers both ends of remediation: pre-remediation testing to confirm an exposure is exploitable, and post-remediation retesting to confirm the fix held. Security, IT, and offensive security teams work from one prioritised list.
Offensive security practitioners
The PlexTrac solutions will continue operating as standalone offerings, giving existing customers the same experience they have today, with the option to extend into Brinqa's broader platform as their programs evolve.
“PlexTrac was built by offensive security practitioners, for offensive security practitioners, and that's not changing. Joining Brinqa gives our team a bigger platform to prove that hands-on offensive security expertise still matters, even as more of this work gets automated,” said DeCloss. With PlexTrac, Brinqa becomes the operating system for enterprise exposure management: the layer where every decision, every fix, and every proof point comes together. Brinqa was represented by Covington & Burling in the transaction.
