iCOUNTER operates in the gap between perimeter defense and actual adversary behavior. Founded in 2020 and based in Dallas, Texas, the company builds cyber risk intelligence that tracks threats targeting not just your own infrastructure but the entire vendor and supply-chain ecosystem - MSPs, SaaS providers, partners, all of it. Their threat model is explicit: attackers don't stop at your firewall, and the digital supply chain is the attack surface most organizations still undercount.
The core product is CTOS (Counter Threat Operating System), which operationalizes ecosystem-level risk in near real-time. It uses AI-enhanced human intelligence to create, collect, and correlate emerging threats against customer profiles, reporting a 94% reduction in alert noise. The team tracks over 340 adversary groups globally and claims an average lead time of 17 days ahead of active threats - enough runway, they argue, to actually shift defensive posture rather than just log the incident.
The leadership carries weight: John Watters, former President of Mandiant (now part of Google Cloud), leads the company. iCOUNTER positions its work as part of what it calls the "Third Wave" of cybersecurity, serving clients that include Fortune 500 companies, financial institutions, and government agencies. The technical domains span threat detection, risk intelligence, and the increasingly contested terrain of third-party risk management.
