Loading organizations...
§ Private Profile · 9220 SW Barbur Blvd #119-59 Portland, Oregon 97219, USA
Risk-based vulnerability management platform automating analysis and prioritization for enterprise cybersecurity teams.
Based in Portland, Oregon, DeepSurface Security Inc develops a risk-based vulnerability management SaaS platform that automates the analysis and prioritization of enterprise cybersecurity threats. The software evaluates over 50 environmental attributes to predict adversary impact and assess exploitability chains across complex corporate networks. Operating with fewer than 25 employees and generating under $5 million in annual revenue, the company reported a 300% revenue growth rate leading into its most recent financing. DeepSurface Security has raised $5.5 million in total seed funding across two rounds, backed by institutional investors including Differential Ventures, Osage Venture Partners, Cascade Seed Fund, and Voyager Capital. The platform primarily serves enterprise cybersecurity teams across the financial services, healthcare, higher education, legal services, and public utility sectors. The organization was originally founded in 2017 by co-founders James Dirksen and Tim Morgan.
DeepSurface Security Inc has raised $6.0M across 2 funding rounds.
DeepSurface Security Inc has raised $6.0M in total across 2 funding rounds.
DeepSurface Security Inc has raised $6.0M across 2 funding rounds. Most recently, it raised $5.0M Seed in February 2022.
| Date | Round | Lead Investors | Other Investors | Status |
|---|---|---|---|---|
| Feb 1, 2022 | $5M Seed | — | Celesta, Differential Ventures, Xstarpartners | Announced |
| Sep 29, 2020 | $1M Seed | Robert Pease | SeaChange Fund, Diane Fraiman | Announced |
DeepSurface Security Inc has raised $6.0M in total across 2 funding rounds.
DeepSurface Security Inc's investors include Celesta, Differential Ventures, XStarPartners, Robert Pease, SeaChange Fund, Diane Fraiman.
DeepSurface Security Inc. was a Portland, Oregon-based cybersecurity startup that developed an automated Predictive Vulnerability Management suite to help enterprise cybersecurity teams analyze, prioritize, and remediate vulnerabilities on their networks.[1][2][6] The company served highly regulated industries like banks, hospitals, and law firms by providing a "hacker roadmap" for contextual risk assessment, enabling quick identification and communication of threats to technical and non-technical stakeholders.[1][5][6] It raised $5.5 million across funding rounds from investors including Cascade Seed Fund, SeaChange Fund, Voyager Capital, and Ideaship, achieving initial revenues before its acquisition by AttackIQ in 2025.[2][5][6]
DeepSurface Security originated from frustrations in 2007 when co-founders James Dirksen (CEO, former RuleSpace executive sold to Symantec) and Tim Morgan (CTO, longtime security consultant) sought better tools for vulnerability management amid ineffective security scanners, policy tools, and compliance software.[1][6] The idea evolved into the DeepSurface Risk Analyzer, with its first public version launching in 2020 after the company formally incorporated around 2017.[1][2][6] Early traction came via a $1 million seed round in September 2020 led by Cascade Seed Fund, followed by additional investments, building momentum in predictive risk analysis for enterprises.[5][6]
DeepSurface rode the surge in cybersecurity demands amid rising enterprise attacks and regulatory pressures, addressing the gap in vulnerability tools that failed to prioritize real threats.[1][7] Its timing aligned with the shift toward automated, predictive security in a market flooded with noisy scanners, helping organizations in compliance-heavy sectors like finance and healthcare focus resources effectively.[5][6] By influencing how teams map "hacker roadmaps," it contributed to the ecosystem's evolution toward integrated risk validation, amplified by its 2025 acquisition by AttackIQ, which extends simulation with contextual prioritization.[3][4][6]
Post-acquisition by AttackIQ, DeepSurface's technology will likely power enhanced security control validation, combining vulnerability prioritization with real-world attack emulation for a more robust defense suite.[6] Trends like AI-driven threat prediction and zero-trust architectures will shape its embedded role, potentially scaling its impact across AttackIQ's customer base amid escalating cyber risks.[6] This merger positions it to evolve from standalone innovator to core component in enterprise security stacks, amplifying its original mission to safeguard organizations through smarter risk management.[1][6]