CISO Tribune

Vendor comparison · 2 companies

Dreadnode vs UltraViolet Cyber

Dreadnode sells an infrastructure platform that gives security teams the means to own, operationalize, and improve agentic cyber capabilities. UltraViolet Cyber sells security services that run offensive and defensive operations as one integrated team. CISO Tribune files both under Penetration testing and red team services. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Dreadnode
  • UltraViolet Cyber
Dreadnode vs UltraViolet Cyber: Products, Customers and Funding Compared
DreadnodeDreadnode sells an infrastructure platform that gives security teams the means to own, operationalize, and improve agentic cyber capabilities.dreadnode.ioUltraViolet CyberUltraViolet Cyber sells security services that run offensive and defensive operations as one integrated team.uvcyber.com
What it sells
  • AI Red Teaming[2][3][5]AI red teaming across AI systems in production, from traditional machine learning models to multi-agent systems.
  • Dreadnode Platform[3][4]Infrastructure for security teams to own, operationalize, and improve agentic cyber capabilities.
  • Managed SOC[1][4][11]Named analysts monitor customer environments, investigate threats and take pre-authorized response actions.
  • UltraViolet Lens[7]A platform with an open architecture that ingests Digital Exhaust from telemetry devices.
Categories
Headquarters
Not stated on its pagesMcLean, United States[2]
Founded
Not stated on its pages2023[3][11]
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Dreadnode sells to organizations that require scaled agentic workloads and custom capabilities. Dreadnode describes a cyber eval engagement for a frontier model provider. Organizations that need to run inside their own boundary can deploy Dreadnode on a Kubernetes cluster or in air-gapped environments, and on-prem deployment is available with the Enterprise plan.UltraViolet Cyber describes delivery models that work with a customer's existing investments, team and stage of maturity. Engagements can be co-managed, fully outsourced or embedded with the customer team. UltraViolet Cyber's SIEM migration work includes a global provider of digital banking and lending solutions that decided to replace its legacy SIEM.
Last verified
November 6, 2026November 9, 2026

Where they overlap

  • Dreadnode and UltraViolet Cyber are both filed under Penetration testing and red team services.

Where they differ, field by field

  • Dreadnode's primary category is AI model and agent security; UltraViolet Cyber's is MDR and managed SOC.
  • Dreadnode is also filed under Breach simulation and automated pen-testing.
  • Dreadnode lists AI Red Teaming and Dreadnode Platform. UltraViolet Cyber lists Managed SOC and UltraViolet Lens.
  • UltraViolet Cyber is headquartered in McLean, United States.
  • UltraViolet Cyber was founded in 2023.

What it sells: Dreadnode

What AI Red Teaming does[2][3][5]
Dreadnode applies AI red teaming across the full range of AI systems in production today, from traditional machine learning models to multi-agent systems. Dreadnode Platform evaluations probe models, applications, and deployed agents with adversarial attacks across supported languages and modalities.
What Dreadnode Platform does[3][4]
The Dreadnode Platform equips defenders with ready-to-run capabilities and shared operational knowledge. Dreadnode can be deployed on an existing Kubernetes cluster or an embedded cluster on a dedicated VM, with offline installation bundles for air-gapped deployments.

What it sells: UltraViolet Cyber

What Managed SOC does[1][4][11]
UltraViolet Cyber assigns named analysts who monitor the customer environment, investigate threats, and take pre-authorized response actions. UltraViolet Cyber operates the customer security stack or provides a managed SIEM and SOAR platform.
What UltraViolet Lens does[7]
The UltraViolet Lens Platform has an open architecture that ingests terabytes of Digital Exhaust from various telemetry devices each day. UltraViolet Cyber provides 24/7/365 alert monitoring, triage and escalation by certified security engineers.

Questions about Dreadnode and UltraViolet Cyber

What do Dreadnode and UltraViolet Cyber sell?
Dreadnode sells AI Red Teaming and Dreadnode Platform. UltraViolet Cyber sells Managed SOC and UltraViolet Lens.
Are Dreadnode and UltraViolet Cyber in the same category?
They share Penetration testing and red team services. Dreadnode's primary category is AI model and agent security and UltraViolet Cyber's is MDR and managed SOC.
Where are Dreadnode and UltraViolet Cyber headquartered?
UltraViolet Cyber is headquartered in McLean, United States.
When were Dreadnode and UltraViolet Cyber founded?
UltraViolet Cyber was founded in 2023.
Who are Dreadnode and UltraViolet Cyber sold to?
Dreadnode sells to organizations that require scaled agentic workloads and custom capabilities. UltraViolet Cyber describes delivery models that work with a customer's existing investments, team and stage of maturity.

About Dreadnode

Dreadnode sells an infrastructure platform that gives security teams the means to own, operationalize, and improve agentic cyber capabilities. The Dreadnode Platform equips defenders with ready-to-run capabilities, shared operational knowledge, and the ability to run agents. Dreadnode describes the path to operationalize agents as fragmented and opaque. Dreadnode's capabilities are operator-authored agents for security testing, research, and operations, connected to the tools a team already uses.[3][5]

Ready-to-run cyber capabilities on the Dreadnode Platform put agents to work on security testing, research, and operations. The Dreadnode Platform supports persistent sessions across web and terminal, with search of past work and sharing with a team. Dreadnode Platform workflows coordinate agents by sequencing tasks, running work in parallel, and branching or combining results. The Dreadnode Platform connects existing command-line tools, MCP servers, and custom integrations. Versioned capabilities on the Dreadnode Platform can be shared with their instructions, tools, and dependency setup.[4]

Dreadnode Platform agents carry saved project context into new sessions and retrieve findings from earlier work. Dreadnode Platform users can review structured findings and assets with supporting evidence and relationships. The Dreadnode Platform versions and reuses datasets across evaluations, optimization, and training. Dreadnode Platform users can post-train models with demonstrations or rewards and retain the resulting model artifacts.[4]

Dreadnode combines task evaluations, LLM judges, and AI red teaming so a team can set the criteria for greater responsibility. Dreadnode Platform evaluations benchmark agents against published security tasks and a team's own tasks and environments. Dreadnode uses LLM judges to assess correctness, scope adherence, and signs of cheating against a team's criteria. The Dreadnode Platform probes models, applications, and deployed agents with adversarial attacks across supported languages and modalities. The Dreadnode Platform compares models, prompts, and capability versions with per-sample results and judge reasoning.[3][4]

Dreadnode Platform observability follows active agent sessions with live progress, metrics, and logs. The Dreadnode Platform inspects nested model and tool calls with their arguments and results. Dreadnode Platform traces connect findings back to the execution that produced them. Dreadnode Platform users can query traces to investigate failures and compare latency, token usage, and cost. Runtime policies in the Dreadnode Platform restrict tool access and check proposed actions against scope, and they allow, block, or request approval.[4]

Dreadnode offers AI red teaming across AI systems in production today, from traditional machine learning models to multi-agent systems. Dreadnode offers web application penetration testing with 83 attack technique playbooks. Dreadnode describes an autonomous pentester with a built-in headless browser and 84 skills. Dreadnode agents run network discovery and Active Directory assessments, connected to attack-path analysis and C2 tools. Dreadnode's authored capabilities cover web, AI, network, reverse engineering, and forensics.[2][3][4]

Dreadnode can be deployed on a customer's infrastructure, with application records, execution evidence, and capability artifacts in data stores the customer controls. Dreadnode runs on an existing Kubernetes cluster or on an embedded cluster on a dedicated VM, and offline installation bundles support air-gapped deployments. Dreadnode routes inference to approved providers or to models a customer hosts itself. Dreadnode offers on-prem deployment with the Enterprise plan. Dreadnode states that all evaluation, training, Worlds, and AI red teaming data stays within a customer's organization environment. Dreadnode SaaS meters workloads against a shared organization credit balance. Dreadnode stores secret values without returning them in normal API reads and injects them only into the remote runtimes and evaluations a user selects.[3][4][5][6][7]

Dreadnode treats organizations as an ownership boundary, and workspaces as the main collaboration boundary inside an organization. In SaaS mode, creating or updating workspaces on Dreadnode requires a Pro plan or higher. Dreadnode is SOC 2, ISO 27001:2022, and ISO 27701 compliant. Dreadnode charges a one-time annual fee that varies based on deployment requirements, SLAs, and custom work. Dreadnode built an initial suite of ER-Spatial security tasks during a cyber eval engagement for a tier 1 frontier model provider.[3][4][5][8][9][10][11]

Dreadnode on the record

Sources

Dreadnode full record

  1. [1]Dreadnode v2 security agent infrastructure platformDreadnode · dreadnode.io · published March 24, 2026 · Tier A
  2. [2]dreadnode.ioDreadnode · dreadnode.io · undated page, accessed November 6, 2026 · Tier A
  3. [3]Dreadnode — AI Infrastructure for CybersecurityDreadnode · undated page, accessed November 10, 2026 · Tier A
  4. [4]The Dreadnode PlatformDreadnode · undated page, accessed November 10, 2026 · Tier A
  5. [5]Pricing | DreadnodeDreadnode · undated page, accessed November 10, 2026 · Tier A
  6. [6]Credits | DreadnodeDreadnode · undated page, accessed November 10, 2026 · Tier A
  7. [7]Secrets | DreadnodeDreadnode · undated page, accessed November 10, 2026 · Tier A
  8. [8]Organizations | DreadnodeDreadnode · undated page, accessed November 10, 2026 · Tier A
  9. [9]Workspaces | DreadnodeDreadnode · undated page, accessed November 10, 2026 · Tier A
  10. [10]Projects | DreadnodeDreadnode · undated page, accessed November 10, 2026 · Tier A
  11. [11]Beyond the Terminal: Offensive Security Evals for Embodied Reasoning | DreadnodeDreadnode · undated page, accessed November 10, 2026 · Tier A

UltraViolet Cyber full record

  1. [1]uvcyber.comUltraViolet Cyber · uvcyber.com · published September 25, 2026 · Tier A
  2. [2]Ultraviolet cyber launches to help organizations worldwide accelerate readiness and resilience against cybersecurity threats 301796166UltraViolet Cyber via PR Newswire · prnewswire.com · published April 13, 2023 · Tier A
  3. [3]Frequently asked questionsUltraViolet Cyber · uvcyber.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]Managed SOC Services | 24/7 Managed SOC | UltraViolet CyberUltraViolet Cyber · undated page, accessed October 30, 2026 · Tier A
  5. [5]Unified Offensive and Defensive Security Solutions | UltraViolet CyberUltraViolet Cyber · undated page, accessed October 30, 2026 · Tier A
  6. [6]Application Security Testing Services | Web, API & Cloud App Security | UltraViolet CyberUltraViolet Cyber · undated page, accessed October 30, 2026 · Tier A
  7. [7]UltraViolet Lens Security Platform | Security Analytics & Detection Engineering | UltraViolet CyberUltraViolet Cyber · undated page, accessed October 30, 2026 · Tier A
  8. [8]Equinox: Detection Engineering Tool | UltraViolet CyberUltraViolet Cyber · undated page, accessed October 30, 2026 · Tier A
  9. [9]Red Team Engagements | Adversary Simulation & Advanced Threat Emulation | UltraViolet CyberUltraViolet Cyber · undated page, accessed October 30, 2026 · Tier A
  10. [10]VooDoo Red Team Toolkit | Cross-Platform Offensive Security Platform | UltraViolet CyberUltraViolet Cyber · undated page, accessed October 30, 2026 · Tier A
  11. [11]Cybersecurity Solutions | Managed SOC, MDR, Red Team & Pen Testing | UltraViolet CyberUltraViolet Cyber · undated page, accessed November 10, 2026 · Tier A
  12. [12]Managed Detection and Response (MDR) Services | Threat Detection & Response | UltraViolet CyberUltraViolet Cyber · undated page, accessed November 10, 2026 · Tier A
  13. [13]Purple Team Security Services | Offensive & Defensive Security Testing | UltraViolet CyberUltraViolet Cyber · undated page, accessed November 10, 2026 · Tier A
  14. [14]Solstice: AI-Augmented Penetration Testing | UltraViolet CyberUltraViolet Cyber · undated page, accessed November 10, 2026 · Tier A
  15. [15]SIEM Migration Services | Maintain Detection & Visibility | UltraViolet CyberUltraViolet Cyber · undated page, accessed November 10, 2026 · Tier A
  16. [16]Continuous Threat Exposure Management (CTEM) | Attack Surface Risk Monitoring | UltraViolet CyberUltraViolet Cyber · undated page, accessed November 10, 2026 · Tier A
  17. [17]Embedded Security Operations Experts & Support | Cybersecurity Staff AugmentationUltraViolet Cyber · undated page, accessed November 10, 2026 · Tier A
  18. [18]AI Security Services | AI Threat Monitoring & Red Teaming | UltraViolet CyberUltraViolet Cyber · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.