Tenzai

What the company sells

Tenzai sells an AI agentic penetration testing platform that hacks, exploits and fixes vulnerabilities across enterprise software. Tenzai discovers attack surfaces, chains weaknesses and produces reproducible exploits. Tenzai is an Israeli AI security startup founded in 2025.

Tenzai was founded in 2025 by cybersecurity veterans Pavel Gurvich, Ariel Zeitlin, Ofri Ziv, Itamar Tal and Aner Mazur. Greylock Partners, Battery Ventures and Lux Capital back Tenzai, with Asheem Chandna of Greylock and Scott Tobin of Battery on the board. Tenzai has $75 million in seed funding.

Tenzai's agents are engineered to learn the business purpose and workflows of applications. Tenzai starts autonomous tests in black, gray or white box modes. Tenzai tailors each test to the customer's goals, guidelines and organizational context. Tenzai shows the reasoning, assumptions and evidence gathered at every step of a test. Tenzai applies layered guardrails that enforce scope at the network level and check every action, following the customer's rules of engagement. Tenzai learns the customer's environment and the team's input from past runs. Tenzai finds business logic vulnerabilities and complex attack chains.

Tenzai discovers exploitable attack chains across web app, mobile, AI, external and internal network attack surfaces. For web apps, Tenzai traces attack paths from the browser through server-side logic to the database. For mobile apps, Tenzai tests Android apps on emulated devices to find runtime vulnerabilities. Tenzai applies static analysis to Android and iOS apps to uncover mobile attack surface. Tenzai tests MCP tools for poisoning, unauthorized access and exploitable inputs.

Tenzai looks for exploitable gaps in how APIs handle identities, permissions and multi-step workflows. For external networks, Tenzai continuously tracks internet-facing assets, starting from domains and public IP ranges.

Tenzai blocks exploitation with a hardened WAF rule that is validated for the customer's environment, ahead of a permanent fix. Tenzai offers step-by-step guidance, coding-assistant prompts and ticket creation for remediation. Tenzai guides the permanent fix and re-tests it. Tenzai deploys WAF rule mitigations and guides permanent remediation through security platforms including Akamai Technologies. Tenzai has made a formal expansion into network security.

Tenzai checks every update in an app, and only what has changed, with incremental runs. Tenzai makes scanner and bug-bounty findings actionable by verifying exploitability and gathering evidence for follow-up. Tenzai curates and benchmarks sets of frontier and open-weight models that security teams can match to each test type or application risk level.^[1]

Categories

• Breach simulation and automated pen-testing (primary category)
• Penetration testing and red team services
• Compare Tenzai with companies in the same categoryside by side

Headquarters

Not established from our sources

Founded

2025^[2][4][5]

Ownership

Privately held^[3]

CISO on record

Not yet on our record. Send a verified source

Website

tenzai.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Tenzai^[1][3][4][5]

  An AI agentic penetration testing platform for enterprise software. It discovers exploitable attack chains across web app, mobile, AI, external and internal network attack surfaces.

  Tenzai's agents are engineered to learn the business purpose and workflows of applications. Tenzai starts autonomous tests in black, gray or white box modes. Tenzai blocks exploitation with a hardened WAF rule that is validated for the customer's environment, ahead of a permanent fix. Tenzai offers step-by-step guidance, coding-assistant prompts and ticket creation for remediation.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Tenzai's categories, then alphabetical. A list from the record, never a ranking.

• On breach simulation and automated pen-testing, Tenzai competes with Fleuret AI, Armadin, Assail, Cymulate, Horizon3.ai, Pentera, Picus Security, Reflex Security, SafeBreach, Terra Security and 16 more.

• On penetration testing and red team services, Tenzai competes with ABIR Networks, BreachLock, NetSPI, Red Sentry, Vonahi Security, Astra Security, Bishop Fox, Cobalt, Halo Security, Millennium Corporation and 36 more.

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]Ahead partners with tenzai to strengthen cyber resilience with ai enabled penetration testingTenzai · tenzai.com · published July 23, 2026 · Tier A: the company, a regulator or a filing
2. [2]tenzai.comTenzai · tenzai.com · undated page, accessed November 8, 2026 · Tier A: the company, a regulator or a filing
3. [3]Tenzai: Your ultimate AI hacker teammateTenzai · undated page, accessed November 8, 2026 · Tier A: the company, a regulator or a filing
4. [4]About Tenzai | AI Hacker for Autonomous PentestingTenzai · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
5. [5]Tenzai | AI Hacker for EnterpriseTenzai · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing

Last verified November 8, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded November 8, 2026, expanded November 10, 2026 from the references above.

Work for Tenzai? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.