Brinqa buys PlexTrac to broaden exposure management

Brinqa has acquired PlexTrac, expanding its position in exposure management.

The deal brings together two US cybersecurity software providers recognised in Gartner's Magic Quadrant for Exposure Assessment Platforms.

The transaction adds PlexTrac's offensive security validation, workflow and reporting products to Brinqa's exposure management offering. Brinqa said this will let customers verify whether remediation has been effective after an issue is fixed.

The combined business now serves more than 3,000 customers in 57 countries, according to Brinqa, including more than a quarter of the Fortune 500.

Portfolio expansion

Exposure management has become a growing category in cybersecurity as companies try to identify, rank and remediate weaknesses across their IT environments. Brinqa helps security teams assess and prioritise exposures, while PlexTrac is known for tools used in offensive security testing and reporting.

By adding PlexTrac, Brinqa is aiming to cover more of that process, including validation that a vulnerability has been properly addressed. PlexTrac's products will continue to operate as standalone offerings for existing customers.

Dan DeCloss, Founder and Chief Customer Brand Officer of PlexTrac, will join Brinqa's executive leadership team and board of directors to lead the combined offensive security practice.

Brinqa described the acquisition as a step towards closing what security teams call the CTEM loop, or continuous threat exposure management. In practice, that means linking exposure discovery and prioritisation with confirmation that a fix has held after remediation.

Brinqa CEO Dan Pagel outlined the rationale for the deal.

"We've spent over a decade building the platform enterprise security teams trust to prioritize what to fix first. PlexTrac brings real offensive security depth, from practitioners who have spent years proving exactly how attackers get in. Pairing that expertise with our exposure assessment platform gives customers proof they can defend to a board, an auditor, or any AI system acting on that data," Pagel said.

Growth backdrop

The acquisition follows a period of strong reported growth for Brinqa. The company said it recorded 164% year-on-year growth in new bookings in 2025, alongside a 32% increase in new-logo average selling price.

Momentum continued in 2026, it said, with new-logo bookings more than doubling from a year earlier and existing customers expanding their deployments. Brinqa attributed part of that activity to new AI-related product releases, including MCP interfaces and software agents for attribution and deduplication.

Every confirmed exploit and fix from PlexTrac will feed into Brinqa's data layer, according to the company. It said this should improve the quality of security information used by its own AI tools and by customer-selected AI models under its Bring Your Own AI programme.

For Brinqa customers, the intended effect is faster confirmation that remediation has worked, alongside evidence for reporting to auditors, insurers and boards. For PlexTrac customers, the deal will connect penetration testing teams and workflows more directly to exposure management programmes, Brinqa said.

That could give security, IT and offensive security teams a single prioritised list of issues rather than separate sets of findings and follow-up actions. Brinqa said the approach would cover both pre-remediation testing to confirm an issue is exploitable and post-remediation retesting to confirm that a fix remains in place.

Thomas Krane, Managing Director at Insight Partners and a member of Brinqa's board, commented on the strategic case for the transaction.

"Exposure management only matters if teams can prove the fix worked, and that's the gap Brinqa now closes. We've watched this team build category-defining technology, and this acquisition sharpens their lead at a moment when security organizations are demanding validated, AI-ready data," Krane said.

PlexTrac role

PlexTrac has built its business around software for penetration testing reporting and threat exposure management. Its customers include large companies and security service providers, according to the companies.

Brinqa said PlexTrac users will keep the same product experience they have today, while gaining the option to extend into Brinqa's broader platform over time. That approach could help Brinqa retain existing users while creating opportunities to cross-sell additional products.

DeCloss said the company's focus on offensive security practitioners would remain intact under its new ownership.

"PlexTrac was built by offensive security practitioners, for offensive security practitioners, and that's not changing. Joining Brinqa gives our team a bigger platform to prove that hands-on offensive security expertise still matters, even as more of this work gets automated," DeCloss said.