See the whole surface
Bring applications, APIs, cloud, infrastructure and specialist environments into one clear assurance story.
Explore coverageNetSPI + Synack are now one
Continuous offensive security at AI scale.
A broader attack surface. Deeper expertise. Clearer priorities. NetSPI and Synack bring together elite human judgment and purpose-built agentic AI to help security teams know what is exposed, what is exploitable, and what to fix first.
Merger completeOctober 5, 2026 · Your current engagements continue.
Nothing left
to exploit.
A clearer operating model
Make security
legible.
Modern security teams do not need more noise. They need a sharper view of the surface, proof of what matters, and a path from finding to fix.
Prove what is exploitable
Combine agentic speed with human judgment so teams can separate real risk from vulnerability noise.
See the approachMove with confidence
Connect discovery, prioritization, remediation and retesting in a loop that keeps pace with change.
Follow the flowThe combination at a glance
More signal.
More reach.
Two different delivery models, brought together without losing the depth that makes each one trusted.
offensive security testing
pentesters
researchers
testing types
history Nearly
MODERATE Synack platform
authorized
FedRAMP Moderate authorization applies specifically to the Synack security testing platform and does not extend to NetSPI products or a future combined offering.
Why this matters now
The surface keeps moving.
So should your testing.
Continuous offensive security turns isolated engagements into a living assurance program—one that keeps pace with modern applications, infrastructure, AI systems and everything connected to them.
01
Cover more of the attack surface
Test modern applications, APIs, cloud, infrastructure and AI systems alongside the specialist environments most providers leave alone: mainframe, hardware, automotive, medical devices, IoT, ATMs and OT.
02
Multiply expertise with AI
Purpose-built and agentic AI expands what expert testers can reach. Sara AI Pentesting runs real-world attacks at scale, while human experts validate every finding before it reaches the customer.
03
Prove what is actually exploitable
Scanner output tells you where exposure might be. Human-validated exploitability, security control evidence and remediation context give your team a defensible basis for what to fix first.
04
Connect exposure to action
Asset visibility, prioritization, offensive testing, defensive control validation, remediation and retesting belong in one flow—not six disconnected tools.
From exposure to action
A clearer path
from signal to fix.
01Discover
Map assets, exposures and blind spots.
02Prioritize
Find the risks that deserve attention first.
03Validate
Prove real-world exploitability with experts.
04Remediate
Fix, verify, and keep the loop moving.
What each company brings today
Complementary by design.
Each company continues to deliver its own platform, services and agreements. The combined story is broader coverage—not a combined SKU or a replacement for what you use today.
N
NetSPIIn-house depth.
In-house depth.
Specialist reach.
A programmatic approach to proactive security, with 350+ in-house pentesters positioned as an extension of your team.
Explore NetSPIS
SynackAI scale.
AI scale.
Human proof.
Sara AI Pentesting and a vetted global research community that validates exploitability across the attack surface.
Explore SynackResources
Go deeper
when you’re ready.
Read the official announcement, explore the continuous offensive security perspective and keep the conversation grounded in what is available today.
Continuous Offensive Security at AI Scale
The full briefing on the combination, complementary capabilities and what stays the same for customers.
Download the briefNetSPI & Synack are now one
Read the customer update on the completed merger, existing engagements and the road ahead.
Read the updateWhy continuous matters
See how expert judgment, agentic AI and an evolving attack surface fit into one assurance program.
Explore the modelThe point of the combination
Organizations need validated findings they can trust—backed by security professionals who understand exploitability, context and business risk.
NetSPI and Synack merger announcement · September 2026
Questions, answered
What changes?
What stays the same?
Existing customers and partners should continue working with their current representatives. Confirmed integration plans will be shared as they become available.
Has the merger closed?
Yes. NetSPI and Synack completed their merger on October 5, 2026, following customary closing conditions and regulatory approvals.
Does anything change for my existing contract?
No. At close, your agreement, scope, testing cadence and platform access continue as they are. Keep working with your current team and representative.
Will I use a different platform?
Continue using your current platform and services. A post-close product integration roadmap has not yet been published; confirmed changes will be shared when available.
Will pricing or packaging change?
No combined SKU, pricing or packaging has been announced. Your current commercial terms stand at close.
What happens to the Synack Red Team?
At close, nothing changes for the Synack Red Team. Researchers keep their current access, programs and points of contact, and continue to engage as they do today.
Does this affect Synack’s FedRAMP authorization?
No. Synack’s security testing platform remains FedRAMP Moderate Authorized. The authorization covers the Synack platform and does not extend to NetSPI products.
I am a partner. What changes?
At close, nothing. Continue through your existing agreement and your current NetSPI or Synack contact. No combined partner program has been announced.
Keep the conversation moving
See what the broader
offensive security story means for you.
Talk to your existing NetSPI or Synack representative about your testing needs, coverage gaps and specialist requirements.