Boise, Idaho-based PlexTrac has raised $70 million in a Series B funding round led by Insight Partners with participation from existing investors Madrona Venture Group, Noro-Moseley Partners and StageDotO Ventures.
Using a ‘purple teaming’ paradigm, PlexTrac assists consultants, service providers and enterprise teams to track and improve their posture across the security lifecycle. PlexTrac automates much of the effort required in proactive security – such as report writing. It collects data from security tools, such as vulnerability scanners and breach and attack simulators, and automates the workflows necessary for reporting.
“It has never been more crucial to be proactive in defending against increasingly disruptive threats,” said Dan DeCloss, founder and CEO of PlexTrac. “PlexTrac empowers teams to stay focused on the right work, eliminating waste in daily workflows, prioritizing the most critical organizational risks, and providing visibility of security progress.”
The company claims that customers have reported “a 5x ROI in year 1”, and a “30 percent increase in efficiency”. “PlexTrac’s end-to-end workflow automation provides a single source for gauging and evolving program maturity,” says the firm. It does this on a continuous basis.
Founded in 2016 by DeCloss, PlexTrac raised $10 million in a Series A funding round in April 2021. During 2021, it generated 3x growth in recurring revenue and quadrupled its headcount. It has more than 160 customers, with eight in the Fortune 100. “The new investment will be used to accelerate this trajectory by expanding market reach and increasing brand awareness, while doubling headcount and propelling the product roadmap forward,” says the firm.
Related: Proactive Security – Does It Exist?
Related: Growth in Endpoint Threats Calls for A Proactive Mindset
Related: Attack Simulation Firm SafeBreach Doubles Funding With $53.5M Series D

Kevin Townsend is a Senior Contributor at SecurityWeek. He has been writing about high tech issues since before the birth of Microsoft. For the last 15 years he has specialized in information security; and has had many thousands of articles published in dozens of different magazines – from The Times and the Financial Times to current and long-gone computer magazines.
More from Kevin Townsend
- Malicious Prompt Engineering With ChatGPT
- North Korean APT Expands Its Attack Repertoire
- Credential Leakage Fueling Rise in API Breaches
- How Will a Recession Will Affect CISOs?
- The Potential and Pitfalls of a Federal Privacy Law
- Holiday Cybersecurity Staffing Levels a Difficult Balancing Act for Companies
- Attackers Using IPFS for Distributed, Bulletproof Malware Hosting
- Web Scraping – Is It Legal and Can It Be Prevented?
Latest News
- Critical Vulnerability Impacts Over 120 Lexmark Printers
- BIND Updates Patch High-Severity, Remotely Exploitable DoS Flaws
- Industry Reactions to Hive Ransomware Takedown: Feedback Friday
- Microsoft Urges Customers to Patch Exchange Servers
- Iranian APT Leaks Data From Saudi Arabia Government Under New Persona
- US Reiterates $10 Million Reward Offer After Disruption of Hive Ransomware
- Cyberattacks Target Websites of German Airports, Admin
- US Infiltrates Big Ransomware Gang: ‘We Hacked the Hackers’
