Detectify

Detectify builds a SaaS application security platform that fuses two disciplines usually sold separately: Dynamic Application Security Testing (DAST) and Attack Surface Management. The threat model is external and concrete - the exploitable risk a security team can actually see from the outside, not a checklist score. Customers map their external attack surface, find vulnerabilities, and prioritize what to fix. More than 2,100 organizations use the platform globally; the company employs 60+ people and was founded in 2013 in Stockholm.

The research pipeline is the differentiator. Detectify was started by a group of security-interested friends and ethical hackers, and it runs a crowdsource community: ethical hackers submit vulnerability findings, and Detectify researchers convert those findings into automated tests that run for customers. It is knowledge transfer turned into product - a bug found by one researcher becomes a test applied across the fleet.

The technical surface covers application security, DAST, attack surface management, asset discovery, vulnerability research, and vulnerability assessment, with artificial intelligence applied to asset discovery, vulnerability assessment, and autonomous testing. Automation is the through-line: the aim is testing that runs continuously and scales without adding headcount on the customer side.

For security engineers and researchers, the work sits at the intersection of hands-on hacking and production-grade automation - turning real exploit techniques into detection logic that stays accurate as customer assets and attack surfaces change.