The combined company creates the world's largest bench of elite security researchers, paired with the most sophisticated agentic AI pentesting platform in the industry.
Published September 2, 2026Enterprise attack surfaces expand while software and infrastructure change continuously. Testing an environment once a year describes the environment as it was on the day the scope was agreed, not as it is now.
Continuous offensive security keeps a defined attack surface under expert-led test, validates which findings are genuinely exploitable in the environment as deployed, and tracks how exposure changes over time.
The method is not what changes. What changes is cadence, coverage and what happens between engagements, which is where most of the exposure sits.
Specialist assessments, red team exercises and prescribed compliance testing all continue to have a place, and several are specifically required. The question is not whether to keep them, but whether they are the whole of what is needed.
NetSPI and Synack have agreed to combine their complementary expertise, technology and approaches to offensive security.
NetSPI pioneered Penetration Testing as a Service and has built a deep team of offensive security professionals.
Its capabilities span more than 50 penetration testing types, attack surface management, vulnerability prioritization and specialized security services.
Synack combines Sara AI Pentesting with the Synack Red Team, a rigorously vetted global community of security researchers.
This model brings together agentic AI, diverse adversarial expertise and a platform designed to provide visibility and control across point-in-time and continuous penetration testing.
Both companies were built around a common principle: organizations need validated findings they can trust, backed by security professionals who understand exploitability, context and business risk.
Enterprise attack surfaces are expanding while software and infrastructure change continuously. At the same time, AI is increasing the speed and scale at which attackers can operate.
Keeping pace requires more than increasing the volume of automated findings. Organizations need broader testing coverage, greater access to offensive security expertise and faster answers about the vulnerabilities that pose material risk.
The combination unites two of the industry's deepest benches of security talent with AI-enabled capabilities designed to extend the reach and impact of that expertise.
Figures as stated in the merger announcement. Read the press release.
AI is changing what penetration testing teams can accomplish. Expert judgment decides what the results mean.
AI can operate continuously, expand coverage and accelerate the discovery and analysis of potential vulnerabilities.
Expert judgment remains essential to validating exploitability, understanding business logic and identifying the complex paths an unpredictable attacker might pursue.
The shared vision behind this combination is grounded in both capabilities: agentic AI operating at scale and experienced security professionals determining what matters.
That points at a single ambition, easy to state and hard to reach: nothing left to exploit.
Nothing about how existing customers work with NetSPI or Synack changes today.
During the pre-close period
Published this week by Synack's CEO, CTO and CMO.
Jay Kaplan, CEO and Co-Founder. The published evidence on what AI agents can and cannot do in offensive security, and why the combination is a bet on expert judgment at AI scale.
Read Jay Kaplan's articleMark Kuhr, PhD, CTO and Co-Founder. Why scaling offensive security depends on how agents and experts share context, evidence and decisions.
Read Mark Kuhr's articleFull details about the proposed merger, the timeline and what it means for customers and partners.
Explore the Synack Platform
