NetSPI to merge with Synack

The combined company creates the world's largest bench of elite security researchers, paired with the most sophisticated agentic AI pentesting platform in the industry.

Two Complementary Approaches to Offensive Security

NetSPI and Synack have agreed to combine their complementary expertise, technology and approaches to offensive security.

Penetration Testing as a Service, at depth

NetSPI pioneered Penetration Testing as a Service and has built a deep team of offensive security professionals.

Its capabilities span more than 50 penetration testing types, attack surface management, vulnerability prioritization and specialized security services.

Agentic AI with a vetted researcher community

Synack combines Sara AI Pentesting with the Synack Red Team, a rigorously vetted global community of security researchers.

This model brings together agentic AI, diverse adversarial expertise and a platform designed to provide visibility and control across point-in-time and continuous penetration testing.

Both companies were built around a common principle: organizations need validated findings they can trust , backed by security professionals who understand exploitability, context and business risk.

Why NetSPI and Synack Are Combining

Enterprise attack surfaces are expanding while software and infrastructure change continuously. At the same time, AI is increasing the speed and scale at which attackers can operate.

Keeping pace requires more than increasing the volume of automated findings. Organizations need broader testing coverage, greater access to offensive security expertise and faster answers the vulnerabilities that pose material risk.

The combination unites two of the industry's deepest benches of security talent with AI-enabled capabilities designed to extend the reach and impact of that expertise.

Figures as stated in the merger announcement. Read the press release .

AI and Expert Judgment

AI is changing what penetration testing teams can accomplish. Expert judgment decides what the results mean.

AI can operate continuously, expand coverage and accelerate the discovery and analysis of potential vulnerabilities.

Expert judgment remains essential to validating exploitability, understanding business logic and identifying the complex paths an unpredictable attacker might pursue.

Why the two belong together

The shared vision behind this combination is grounded in both capabilities: agentic AI operating at scale and experienced security professionals determining what matters.

That points at a single ambition, easy to state and hard to reach: nothing left to exploit .

What Customers Need to Know

Nothing how existing customers work with NetSPI or Synack changes today.

During the pre-close period

Both companies remain focused on supporting their customers, partners and employees throughout the pre-close period.

Customers should continue working with their existing teams, services and platforms.

The transaction is expected to close in October 2026. Additional information will be communicated as appropriate following the close.

Frequently Asked Questions

Three Perspectives on the Combination

Published this week by Synack's CEO, CTO and CMO.

Autonomy Was Never the Goal

Jay Kaplan, CEO and Co-Founder. The published evidence on what AI agents can and cannot do in offensive security, and why the combination is a bet on expert judgment at AI scale.

The Hard Part Isn't More Experts. It's Routing the Work.

Mark Kuhr, PhD, CTO and Co-Founder. Why scaling offensive security depends on how agents and experts context, evidence and decisions.

Offensive Security Is Becoming a Program, Not a Purchase

Angela Heindl-Schober, CMO of Synack. Why offensive security is shifting from point-in-time testing to an ongoing program built around coverage, remediation and accountability.

Read the Official Announcement

Full details the proposed merger, the timeline and what it means for customers and partners.