Thenextweb Empirical Security Secures $25M for AI-Driven Exploit Prediction Tools
Article Content
- •Empirical Security raised $25 million to develop AI-driven exploit prediction tools.
- •The company offers two products: Foundation for global CVE monitoring and Radiant for tailored predictions.
- •The founders previously established Kenna Security, enhancing credibility in the exposure management market.
Empirical Security, a Chicago-based startup, raised $25 million in Series A funding to enhance its predictive models for identifying vulnerabilities likely to be exploited by hackers. The funding round, led by Brightmind Partners, brings the company's total funding to $37 million. The firm offers two products: Foundation, which monitors over 18,000 CVEs globally, and Radiant, a tailored model for individual organizations. The founders, Ed Bellis and Michael Roytman, previously established Kenna Security, known for risk-based vulnerability management. The new models aim to address the growing backlog of vulnerabilities exacerbated by the rapid pace of AI-driven attacks. While the market for exposure management is competitive, Empirical's focus on organization-specific predictions sets it apart. However, independent performance validation is still pending.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Continue Reading
Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…
Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…