PlexTrac

PlexTrac is a cybersecurity software company focused on pentest reporting and exposure assessment. Its platform brings together findings from penetration tests, vulnerability scanners, and other security tools so teams can centralize security data, automate report creation, prioritize risk, and coordinate remediation from one system.

The company positions its offering as an exposure assessment platform that supports organizations moving from point-in-time testing to more continuous exposure management. PlexTrac serves both enterprise security teams and service providers, helping them streamline offensive security workflows, improve collaboration between technical and stakeholder groups, and demonstrate risk reduction with more dynamic reporting and analytics.

Offerings, Capabilities, and Integrations

PlexTrac’s capabilities span data consolidation, report automation, contextual risk prioritization, remediation orchestration, and progress tracking. It supports workflows across the pentest and exposure management lifecycle, including engagement scheduling, findings capture, reusable content, analytics, and runbook-driven testing. Its platform is also used to support Continuous Threat Exposure Management initiatives by helping teams connect discovery, prioritization, validation, and remediation activities.

Integration is a core part of the offering. PlexTrac supports file-based imports, API-based integrations, webhooks, and SSO, and it connects with commonly used security and workflow systems such as Jira, ServiceNow, Microsoft Entra ID, Azure DevOps, Microsoft Defender for Cloud, Qualys, Rapid7, CrowdStrike, and other scanner and vulnerability management tools. These integrations help teams unify security data and push remediation work into operational systems.

Products and Services

• PlexTrac Exposure Assessment Platform: Flagship platform for centralizing pentest and vulnerability data, automating reporting, prioritizing exposures, and streamlining remediation workflows.
• Plex AI: AI-assisted reporting capability that helps users generate finding descriptions, remediation guidance, and report content faster within the PlexTrac platform.
• Scheduler: Scheduling capability for managing engagement requests, tester capacity, resource allocation, and inbound scheduling workflows from internal teams or clients.
• Reports: Reporting module for creating structured, customizable security reports tied to client data, findings, classifications, and remediation status.
• Assessments: Questionnaire-based assessment module used for framework-driven reviews, scoping, evidence collection, collaboration, and automatic report generation from submitted assessments.
• Priorities: Risk prioritization module that uses configurable scoring and workflow controls to help teams focus remediation on the exposures with the greatest business impact.
• Content Library: Reusable repository for narratives, writeups, and runbooks that helps standardize content, improve consistency, and accelerate report creation.
• Analytics: Analytics module that provides dashboards, filters, and trend views for findings, assets, runbooks, and remediation progress across published reports.
• Runbooks: Module for creating and executing detailed red team and penetration testing procedures, with reusable methodologies and support for documenting outcomes and recommendations.
• Client Portal: Web-based portal for delivering findings and reports, enabling client collaboration, status tracking, remediation updates, and engagement requests.
• Real-Time Collaboration: Collaborative editing capability that allows multiple users to work in reports and findings simultaneously to speed QA and handoff workflows.
• Workflow Automation Engine: Rules-based automation capability for standardizing workflows across pentest findings delivery and the broader vulnerability lifecycle.

Target Customers

PlexTrac targets enterprise cybersecurity teams that need to manage pentest reporting, exposure prioritization, remediation tracking, and ongoing validation in a single environment. This includes offensive security teams, internal pentesters, vulnerability management teams, cyber risk management functions, blue teams, and security leaders that need clearer visibility into risk and progress.

PlexTrac also targets managed security service providers, consulting firms, and other security service organizations that deliver pentesting, PTaaS, adversary emulation, exposure management, and related advisory services. Its white-labeled portal, reusable content, scheduling, and collaboration features are designed to help these providers scale delivery, improve client experience, and expand recurring service offerings.

Cloud Integrations and Marketplace

• Microsoft Azure: PlexTrac has verified Microsoft cloud integrations, including Microsoft Entra ID for SSO, Azure DevOps for remediation work item synchronization, and Microsoft Defender for Cloud Virtual Machines for ingesting cloud security posture and vulnerability findings.
• Google Cloud: Plex AI is hosted in Google Cloud and built using Google Cloud Vertex AI, establishing a verified Google Cloud integration tied to PlexTrac’s AI-assisted reporting capabilities.

Key People

• Andy Langsam: Chief Executive Officer
• Dan DeCloss: Founder & Chief Customer Brand Officer
• Alex Thomson: Chief Operating Officer
• Rohit Unnikrishnan: Chief Product & Technology Officer
• Oleg Antonyuk: Chief Financial Officer
• Patricia Tantow: Chief Marketing Officer
• Sara Foley: VP of Product
• Ayelet Germanski: VP of Revenue Operations
• Michelle Letourneau: VP of Human Resources
• Charlotte Fleming: Head of Legal

Key Facts

• Headquarters: Boise, Idaho, United States
• Employees: Approximately 85-90
• Annual Revenue: Approximately $22M
• Parent Company: None
• Subsidiaries: None
• Publicly Listed: Private

Analyst Recognitions

• Gartner: 2026 Gartner Midmarket Context: Magic Quadrant for Exposure Assessment Platforms – Notable Vendor. 2025 Gartner Magic Quadrant for Exposure Assessment Platforms – Niche Player.