Sorenson Capital Leads Funding Round to Accelerate Adoption of Company’s Industry-Leading Exploitation-Anchored Intelligence Offering

LEXINGTON, Mass.–(BUSINESS WIRE)–VulnCheck, the exploit intelligence company, today announced a $25 million Series B funding round led by Sorenson Capital, with participation from National Grid Partners and existing investors, including Ten Eleven Ventures and In-Q-Tel (IQT).

VulnCheck, the exploit intelligence company, today announced a $25 million Series B funding round led by Sorenson Capital, with participation from National Grid Partners and existing investors, including Ten Eleven Ventures and In-Q-Tel (IQT).Share

The latest investment brings the company’s total funding to $45 million. VulnCheck will use the fresh capital to scale growth and expand its intelligence capabilities, helping global organizations close the exploitation-timing gap and strengthen transformative automation and AI-powered emerging threat detection. This enables VulnCheck to meet the surging demand for its industry-leading threat intelligence solutions that power cybersecurity products and critical response workflows used to protect the global economy, critical infrastructure and sovereign nations.

“VulnCheck’s fundamentally different approach has allowed the company to sustain its hypergrowth trajectory,” said Ken Elefant, Partner, Sorenson Capital. “Legacy vulnerability management solutions were built for manual analyst workflows and cover only a fraction of known vulnerabilities. VulnCheck combines the largest breadth of public and first-party exploit intelligence and delivers it first for machine-to-machine consumption, with human review as a secondary outcome, to drastically close the exploitation-timing gap. This approach has it well-positioned in the market for years to come.”

The funding round comes on the heels of another record-setting year for VulnCheck. Key milestones from the past 12 months include:

• Increasing year-over-year enterprise Annual Recurring Revenue (ARR) by 557% and government ARR by 306%
• Climbing from No. 143 to No. 28 in less than one year, for the all-time common vulnerabilities and exposures (CVE) assignment with nearly 2,000 CVEs assigned
• Adding nearly 7,000 new users to VulnCheck Community and bringing the total number of cybersecurity vendors, practitioners and vulnerability management teams with access to VulnCheck KEV and VulnCheck NVD++ to more than 13,000
• Adding nearly 900 software and hardware vulnerabilities to its Known Exploited Vulnerabilities (KEV) list throughout 2025, representing a 25% year-over-year expansion. According to VulnCheck research, 32% of these vulnerabilities were exploited on or before the day of CVE disclosure, an increase of 36% compared to 2024

“Modern threats require more than just scans,” said Mark Kuhr, co-founder and CTO of Synack. “We’ve paired VulnCheck’s intelligence with our automated AI penetration testing and elite human analysis to deliver a continuous defense that doesn’t just find vulnerabilities—it identifies the ones that are truly exploitable. This combination empowers our customers to prioritize the risks that actually matter and close the gap on exploited CVEs.”

VulnCheck delivers a fully autonomous, machine-consumable dataset that analyzes first-party evidence of exploitation and scans more than 500 million records maintained on all CVEs from over 500 sources to identify the information that truly matters for defenders. This removes long-standing bottlenecks and allows security teams to act at machine speed. The platform refreshes its data sources multiple times per day, allowing teams to counter emerging cyber threats with unprecedented velocity and context into threat actor activity, ransomware associations and existing exploit POCs in the wild.

“The weaponization and exploitation of software vulnerabilities is happening at a much faster rate than remediation, and this is particularly concerning for security teams as the number of CVEs increases exponentially year-over-year,” said Anthony Bettini, founder and CEO, VulnCheck. “This funding validates our approach to providing faster, more precise, and continuously updated intelligence, and reinforces our commitment to the organizations that rely on us to outpace attackers when exploit timelines have become more compressed than ever.”

The funding underscores continued market validation. In 2025, VulnCheck was recognized among the most prestigious and coveted cybersecurity industry startup competitions in the market. The company’s achievements included being selected as a SINET16 Innovator for 2025, which is an honor reserved for emerging companies that are identified from a panel of 112 judges as the most innovative and compelling technologies in their fields, addressing cybersecurity threats and vulnerabilities.

“There is growing urgency within the critical infrastructure segment to modernize how we prioritize and address potential software vulnerabilities,” said Arun Chetty, Vice President at National Grid Partners. “It’s clear that attackers are moving faster than defenders can triage flaws, and VulnCheck provides continuously updated intelligence at machine speed and with more precision than any other organization we’ve seen. We’re looking forward to supporting the company as an investor as it enters its next stage of growth.”

VulnCheck’s trajectory has surged from its 2024 finalist participation in the RSAC Innovation Sandbox competition. In 2025, the company was chosen as one of four finalists for the 2025 Black Hat Asia Startup Spotlight and 2025 Black Hat Europe Startup Spotlight competitions. Last month VulnCheck was named a Top-10 Cybersecurity Startup to Watch in 2026 by CRN.

To learn more about VulnCheck and its exploit intelligence solutions, visit https://www.vulncheck.com/.

About VulnCheck

VulnCheck closes the exploitation-timing gap by enabling security teams to operate on attacker timelines instead of disclosure timelines. By delivering machine-consumable, evidence-driven intelligence on when vulnerabilities become exploitable and how attackers actually use them, VulnCheck helps organizations prepare earlier, respond decisively, and verify exploitation without relying on scores or delayed consensus. Follow the company on LinkedIn or X. To learn more about VulnCheck, visit https://vulncheck.com.

Contacts

Geoff Lopes
Marketbridge for VulnCheck
vulncheck@marketbridge.com

(c)2026 Business Wire, Inc., All rights reserved.