PlexTrac

PlexTrac is a privately held American cybersecurity software company whose platform is built around the reporting and remediation side of offensive security work. Security consultancies, internal red teams and vulnerability-management groups generate large volumes of findings from penetration tests, red-team exercises, bug-bounty programs and continuous scanning. PlexTrac's product collects those findings into a single workspace, normalizes and de-duplicates them, and turns them into client-ready reports, dashboards and tracked remediation tasks so that the same issue is not re-described by hand in every engagement. The company positions itself as a 'purple teaming' and security-reporting platform rather than as a scanner. It sits downstream of tools such as vulnerability scanners, exploitation frameworks and ticketing systems, ingesting their output and providing analytics, write-ups, executive summaries and workflow for assigning and closing findings. Its main customer groups are managed security service providers, penetration-testing consultancies and enterprise security teams that need consistent reporting across many engagements and auditors. PlexTrac was founded in the late 2010s and grew with the broader expansion of the offensive-security services market, raising venture funding to build out its reporting automation and, later, remediation and exposure-management capabilities. The company is headquartered in Boise, Idaho, and sells primarily on a subscription (SaaS) basis to customers in the United States and internationally. It remains a private, venture-backed company and is not listed on any stock exchange. Because the brand is a business-to-business software platform, its public profile is concentrated in the security industry — analyst coverage of vulnerability-management and security-reporting tooling, conference presence and partner integrations with scanner and ticketing vendors — rather than in consumer media.

PlexTrac emerged in the late 2010s to address a narrow but painful problem in the security services industry: the reporting burden of penetration testing. Consultancies and internal teams were producing findings in disparate scanner exports, spreadsheets and documents, then rewriting the same issues for every client engagement. PlexTrac was built as a centralized workspace where findings could be imported, normalized, de-duplicated and reused across reports, giving testers a single source of truth and giving clients consistent, comparable deliverables. As the platform gained traction with managed security service providers and penetration-testing firms, the company expanded its scope from report generation toward the full lifecycle of a finding — tracking remediation, assigning ownership, and providing dashboards that let executives and auditors see risk trends over time. This moved PlexTrac into the adjacent categories of vulnerability and exposure management, where it competes and integrates with scanner vendors and ticketing platforms rather than replacing them. The company raised venture capital to fund product development and go-to-market expansion, and it established its headquarters in Boise, Idaho, while selling to customers across the United States and internationally. Its growth has tracked the broader expansion of offensive-security spending, driven by regulatory pressure, cyber-insurance requirements and the mainstreaming of continuous penetration testing and bug-bounty programs. PlexTrac remains a private, venture-backed software company. Its public presence is concentrated in the security industry — integrations with scanning and ticketing tools, presence at security conferences, and coverage by analysts who track vulnerability-management and security-reporting software — rather than in consumer or general business media.

• PlexTrac founded as a security reporting and findings-management platform.

• Platform expanded from report automation into remediation tracking and exposure-management workflows.

• Company established headquarters in Boise, Idaho, and expanded sales internationally.

Business-to-business SaaS for offensive-security reporting, purple teaming and remediation management, sold to MSSPs, pentest consultancies and enterprise security teams.

• PlexTrac platform

  SaaS workspace that aggregates security findings from scanners and testing tools, normalizes and de-duplicates them, generates client-ready reports and dashboards, and tracks remediation to closure.

• 2026.08.19

  Reported2026.08.19

  Brinqa acquires PlexTrac to close CTEM loop[2]Brinqa收购PlexTrac以闭合CTEM循环finanznachrichten.de

  Brinqa announced it has acquired PlexTrac, the offensive security validation, workflow and reporting platform, adding remediation verification capabilities and making Brinqa the largest standalone vendor in Unified Exposure Management with over 3,000 customers across 57 countries. PlexTrac solutions will continue operating as standalone offerings, and PlexTrac founder Dan DeCloss joins Brinqa's executive leadership team and board of directors.

Read more

1. 1PlexTrac official websiteplextrac.com
2. 2Brinqa收购PlexTrac以闭合CTEM循环finanznachrichten.de