Market Opportunity
Fragmented purple-team exercises — automate lifecycle with continuous validation targets a $6.0B = 200,000 mid-to-large enterprises x $30K ACV total addressable market with medium saturation and a year-over-year growth rate of 14% CAGR for security testing/validation tooling; purple-team automation growing faster as enterprises prioritize continuous validation.
Key trends driving demand: Shift to continuous-validation -- organizations move from annual pen tests to ongoing security validation and posture management.; Standardization on ATT&CK -- vendors and teams use MITRE ATT&CK as lingua franca, enabling reusable playbooks and benchmarking.; EDR/SIEM telemetry maturity -- richer, exportable telemetry makes automated validation and reproducible detection testing possible.; AI-driven orchestration -- ML/LLMs accelerate generation of realistic adversary scenarios and automate triage and remediation suggestions..
Key competitors include AttackIQ, Cymulate, SafeBreach, MITRE Caldera (open-source), In-house scripts + SIEM/EDR workflows (adjacent workaround).