NetSPI & Synack Are Now One

Together, we’re redefining offensive security as continuous, pairing one of the industry’s deepest benches of elite researchers with purpose-built agentic AI, so you always know where you’re exposed and what to fix first

Read the Original Merger Announcement, issued September 2, 2026
Status

The Merger Is Complete. Your Current Engagements Continue.

NetSPI and Synack completed their merger on October 5, 2026. At close, your testing scope and cadence, your platform access and your points of contact all continue as they are, and customers and partners should keep working with their current representatives.

Oct 5, 2026
Merger completed
13M+ hours
Of real-world offensive security testing
Nearly 40 years
Combined operating history
350+
NetSPI in-house pentesters
1,500+
Vetted Synack Red Team researchers
The Combination

What the Combination Means for Security Teams

Enterprise attack surfaces keep expanding while software and infrastructure change continuously, and AI is increasing the speed and scale at which attackers operate. Continuous offensive security means a defined attack surface under expert-led test on an ongoing basis, rather than a set of isolated annual engagements.

Broader coverage

Testing across modern applications, APIs, cloud and infrastructure, alongside the specialist environments most providers leave alone.

Deeper expertise

Complementary in-house pentesters and a vetted global researcher community, rather than one larger pool of the same skills.

Clearer priorities

AI-assisted discovery, human validation of what is genuinely exploitable, and the evidence your team needs to support remediation.

Each company continues to deliver its own platform, services and agreements. A combined platform, contract or purchasing process is not available today, and integration plans will be shared as they are confirmed.

Capabilities Today

What Each Company Brings

NetSPI

In-house expertise, continuous pentesting and specialist coverage

  • 350+ in-house pentesters working as an extension of your team
  • AI-enabled and continuous penetration testing
  • 50+ penetration testing types
  • Specialist environments including mainframe, hardware, automotive, medical devices, IoT, ATMs and OT
  • Attack surface management across internal and external assets
  • Breach and attack simulation to validate defensive controls
Synack

AI + human pentesting and a global researcher community

Sara AI Pentesting expands coverage, while Synack Red Team researchers validate exploitability and investigate complex attack paths.

  • Sara AI Pentesting
  • 1,500+ vetted researchers in the Synack Red Team
  • Point-in-time and continuous penetration testing
  • Human validation of exploitability
  • Asset discovery, patch verification and reporting on the Synack Platform
For Customers

What This Means for You

Your engagements

At close, scope, cadence, platform access and points of contact are unchanged. There is nothing you need to do.

Your commercial terms

Your current agreement stands at close. No combined SKU, pricing or packaging has been announced.

Your federal work

Synack’s security testing platform is FedRAMP Moderate Authorized. That authorization covers the Synack platform, is unchanged by the merger, and does not extend to NetSPI products.

FAQ

Frequently Asked Questions

Has the merger closed?
Yes. NetSPI and Synack completed their merger on October 5, 2026, following customary closing conditions and regulatory approvals.
Does anything change for my existing contract?
At close, no. Your agreement, scope, testing cadence and platform access continue as they are, and you keep working with your current team.
Will I use a different platform?
Continue using your current platform and services. We will share confirmed integration plans and any changes relevant to your engagement as they become available.
Will my pricing or packaging change?
No combined SKU, pricing or packaging has been announced.
What happens to the Synack Red Team?
At close, nothing changes for the SRT. Researchers keep their current access, programs and points of contact, and continue to engage as they do today.
Does this affect Synack’s FedRAMP authorization?
No. Synack’s security testing platform remains FedRAMP Moderate Authorized. The authorization covers the Synack platform and does not extend to NetSPI products.
I am a partner. What changes?
At close, nothing. Continue through your existing agreement and your current NetSPI or Synack contact. No combined partner program has been announced.
Who should I contact with questions?
Your existing Synack or NetSPI representative. They can answer questions about your specific program and arrange time with a tester.
Perspectives

Perspectives on the Combination

Perspective

Jay Kaplan

Chief Executive Officer and Co-Founder at Synack

Why combining agentic AI with expert judgment expands what offensive security teams can achieve.

Read the article
Perspective

Mark Kuhr, PhD

Chief Technology Officer and Co-Founder at Synack

How the work gets routed between AI and human expertise, and why that coordination is the hard part.

Read the article
Perspective

Angela Heindl-Schober

Chief Marketing Officer at Synack

What continuous offensive security means for customer outcomes, and why it is a program rather than a purchase.

Read the article

Explore What the Combination Means for Your Security Program

Connect with our team to discuss your testing needs, coverage gaps and the capabilities of NetSPI and Synack. Existing customers should continue working with their current representatives.