SpecterOps is a cybersecurity company centered on Identity Attack Path Management. As the creator of BloodHound, SpecterOps helps organizations expose how identities, permissions, and trust relationships combine into exploitable attack paths that lead to critical assets across on-premises, cloud, and hybrid environments.
SpecterOps brings together software, advisory services, and practitioner-led training to turn adversary tradecraft into operational security outcomes. Its portfolio spans BloodHound Enterprise, community and open-source BloodHound offerings, attack path assessments, offensive security services, and specialized training designed to help security teams continuously identify, prioritize, and eliminate identity-driven risk.
Offerings, Capabilities, and Integrations
SpecterOps combines a graph-based identity security platform with expert services and hands-on training. Across these offerings, it helps customers continuously map identity relationships, analyze attacker movement, prioritize high-impact choke points, enforce least-privilege boundaries, and convert findings into structured remediation programs. Its coverage extends from Active Directory and Entra ID into broader hybrid estates through OpenGraph-based modeling and analysis.
The company also supports operational integration into existing security workflows. BloodHound Enterprise provides a REST API and officially supported integrations for Splunk and Splunk SOAR, while marketplace availability in AWS Marketplace and Azure Marketplace gives customers additional procurement and deployment paths.
Products and Services
- BloodHound Enterprise: Identity Attack Path Management platform that continuously maps identity relationships and permissions to uncover, prioritize, and remediate attack paths across Active Directory, Entra ID, and hybrid environments.
- Privilege Zones: BloodHound Enterprise capability that lets teams define custom security boundaries and continuously detect least-privilege violations across on-premises, cloud, and hybrid identity environments.
- OpenGraph: BloodHound extension framework that expands attack path analysis beyond traditional Active Directory and Entra ID data by ingesting identities and relationships from additional platforms and custom systems.
- BloodHound Scentry: Advisory offering that combines BloodHound with monthly expert analysis, remediation guidance, privilege zone design, OpenGraph support, and customized reporting to accelerate attack path management maturity.
- BloodHound Community Edition: Open-source edition of BloodHound for attack path discovery and visualization, built for practitioners and researchers and enhanced with OpenGraph support for broader threat modeling.
- AI Cyber Ranges: Enterprise-scale cyber ranges for AI evaluations that provide production-like scenarios, known completion paths, and managed environments for benchmarking model behavior and safety.
- Red Team Exercises: Adversary simulation engagements designed to test detection and response capabilities against realistic attack tradecraft across traditional and AI-enabled systems.
- Penetration Testing: Impact-objective driven testing across network, application, and specialty technology environments to validate defenses around critical assets and viable attack paths.
- Attack Path Assessments: Assessments powered by BloodHound Enterprise that map chains of abusable privileges, identify choke points, and prioritize remediation across identity environments.
- Red Team Operations: Instructor-led training course focused on post-initial-access tradecraft, lateral movement, privilege escalation, persistence, and BloodHound-based attack path visualization in a simulated enterprise environment.
- BloodHound Enterprise On-Premises: Self-hosted deployment option for BloodHound Enterprise for organizations that need attack path management without sending critical identity data across security boundaries.
Target Customers
SpecterOps primarily serves enterprise security teams, identity and access management teams, and risk owners responsible for protecting complex identity estates. Its BloodHound portfolio is aimed at organizations that need continuous visibility into identity attack paths and a repeatable way to prioritize and remediate risk across hybrid environments.
Its broader offerings also fit internal red teams, penetration testers, researchers, and security operations groups that want to validate defenses and sharpen offensive and defensive tradecraft. SpecterOps has clear relevance for public sector organizations, financial institutions, healthcare providers, defense programs, Fortune 500 companies, and other security-conscious enterprises with high-value or regulated environments.
Cloud Integrations and Marketplace
- AWS Marketplace: BloodHound Enterprise is available through AWS Marketplace, giving customers a direct marketplace purchasing path for the platform.
- Azure Marketplace: BloodHound Enterprise is available through Azure Marketplace as a verified Microsoft marketplace listing from SpecterOps.
Key People
- David McGuire: Chief Executive Officer
- Jason Frank: Chief Operations Officer
- Jared Atkinson: Chief Technology Officer
- Tim Bender: Chief Financial Officer
- Justin Kohler: Chief Product Officer
- Pat Sheridan: Chief Revenue Officer
- Bryce Hein: Chief Marketing Officer
- Michael Wright: Chief Security Officer
- Robby Winchester: Chief Global Professional Services Officer
- Kelly Coffman: Chief of Staff
- Andrew Chiles: VP of Tradecraft
- John Hopper: VP of Engineering
Key Facts
- Headquarters: Alexandria, Virginia, United States
- Employees: Approximately 225
- Annual Revenue: $50M-$55M
- Parent Company: None
- Subsidiaries: None
- Publicly Listed: Private
