Detectify AB Due Diligence

Run due diligence on Detectify AB: check compliance and get alerts when suppliers change.

Sweden · detectify.com · 7 vendors

Detectify AB is a cybersecurity company that provides an external attack surface management (EASM) platform and dynamic application security testing (DAST) solutions. The platform automates continuous, real-world, payload-based attacks, crowdsourced through a global community of ethical hackers, to identify and remediate security vulnerabilities across internet-facing assets. It helps organizations discover, classify, and scan all assets to expose critical security weaknesses.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 7 sub-vendors.

Insights

Last updated 2026-04-29 · revision 2

7 direct vendors, 81 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

4 in-scope frameworks identified; showing 3.

SOC 2 (source) — No public evidence

GDPR (source) — No public evidence

ISO 27001 (source) — No public evidence

Financials

Three-year financials

Financial Resilience Score: 5/10

Detectify AB operates a recurring SaaS revenue model with estimated gross margins of 70–80%, which is characteristic of high-quality software businesses and provides a strong foundation for financial resilience. The company benefits from a differentiated product offering through its crowdsourced ethical hacker community, a growing EASM market, and backing from a reputable global growth-equity investor (Insight Partners), all of which support its ability to continue operating and raising capital. However, the company has historically operated at a sustained operating loss, with estimated annual losses in the range of SEK 50–150M, funded by equity raises totalling approximately USD 30–35M. In the post-2022 tighter funding environment, this creates meaningful refinancing risk if growth decelerates or investor appetite for unprofitable growth-stage companies diminishes further. No new funding round has been publicly announced since 2021. Competitive dynamics pose an additional structural risk. The EASM market has attracted well-capitalised incumbents including Microsoft, Google/Mandiant, and Rapid7, all of which have significant distribution advantages over a mid-market-focused independent vendor of Detectify's scale. The company's relatively modest total funding (~USD 30–35M) limits its ability to compete aggressively on sales and marketing against these larger players. Overall, the resilience score reflects a business with solid unit economics and a defensible niche, but meaningful execution and financing risk given sustained losses, a competitive market, and limited disclosed financial transparency. The score would improve materially if audited Bolagsverket filings confirmed a path toward profitability or a new capital raise.

Key strengths: Recurring SaaS subscription revenue model with high predictability, Estimated gross margins of 70–80%, typical of SaaS businesses, Crowdsourced ethical hacker community creates proprietary vulnerability intelligence moat, Backed by Insight Partners, a major global growth-equity firm, Growing EASM market with strong enterprise demand, GDPR-compliant EU positioning is a competitive advantage for European customers, Established customer base including Spotify, King, and Atlassian (Trello)

Risk factors: Sustained operating losses estimated at SEK 50–150M annually, creating cash burn risk, No new funding round publicly announced since 2021 Series C extension, Intense competition from well-funded players including Microsoft, Google/Mandiant, Rapid7, and CyCognito, Refinancing risk in tighter post-2022 venture capital environment, Concentration in SME/mid-market segment; upmarket enterprise expansion requires significant investment, FX exposure between international customer revenues (EUR/USD) and SEK-denominated costs, High personnel costs in competitive Stockholm tech talent market, No disclosed IPO or M&A exit path, limiting future capital-raising optionality, Limited public financial transparency makes independent credit/investment assessment difficult

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report