Exposure management company Brinqa Inc. today announced it has acquired offensive security validation and reporting platform company PlexTrac Inc. for an undisclosed sum.

The purchase adds a step Brinqa’s platform did not have. Brinqa collects findings from scanners, cloud accounts and application security tools, then ranks the exposures an organization should deal with first.

Verifying that a remediation worked has been someone else’s job. PlexTrac sells the software penetration testers use to run that check and write it up, and Brinqa said it can now cover continuous threat exposure management from discovery through confirmed remediation.

Brinqa said the combined companies serve more than 3,000 customers in 57 countries, among them more than 25% of the Fortune 500. That makes it the largest standalone vendor in unified exposure management, according to the company. Gartner Inc. named both companies in its inaugural Magic Quadrant for Exposure Assessment Platforms last year.

Validation now sits at both ends of the remediation cycle. Testers can establish that an exposure is genuinely exploitable before an engineer is assigned to it. A retest afterward shows whether the problem is actually gone. Every confirmed exploit and remediation from PlexTrac feeds Brinqa’s Cyber Risk Graph, the data layer its artificial intelligence agents draw on.

Brinqa Chief Executive Dan Pagel said PlexTrac “brings real offensive security depth, from practitioners who have spent years proving exactly how attackers get in.” Pairing that with Brinqa’s assessment platform gives customers evidence they can put in front of a board, an auditor or an AI system acting on the data, he said.

Dan DeCloss founded PlexTrac in 2018 and is its chief customer brand officer. He joins Brinqa’s executive leadership team and its board of directors and will run the combined offensive security practice. PlexTrac’s products will keep selling as standalone offerings, the companies said, with the option to extend into Brinqa’s broader platform later.

The two also share an investor. Insight Partners led Brinqa’s $110 million growth round in June 2021. PlexTrac’s $70 million Series B, announced in February 2022, was an Insight deal as well. Brinqa was founded in Austin in 2009. PlexTrac operates out of Boise, Idaho.

Brinqa reported 164% year-over-year growth in new bookings for 2025 and said new logo bookings have more than doubled year-over-year in 2026. The company has been shipping AI features over that stretch, including Model Context Protocol interfaces and agents that handle attribution and deduplication of findings. Nestlé SA and SAP SE are among its customers. PlexTrac counts Expedia Group Inc. and Deloitte on its roster.

Image: PlexTrac