CISO Tribune

Vendor comparison · 2 companies

Hadrian vs Threat Intelligence

Hadrian is an agentic AI offensive security platform that continuously discovers an organization's external attack surface and tests it for exploitable exposures. Threat Intelligence delivers cyber security products and services. CISO Tribune files both under Breach simulation and automated pen-testing. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Hadrian
  • Threat Intelligence
Hadrian vs Threat Intelligence: Products, Customers and Funding Compared
HadrianHadrian is an agentic AI offensive security platform that continuously discovers an organization's external attack surface and tests it for exploitable exposures.hadrian.ioThreat IntelligenceThreat Intelligence delivers cyber security products and services.threatintelligence.com
What it sells
  • Atlas[1][4][5][6][7]Atlas continuously maps a company's external attack surface and validates exposures. Atlas discovers every domain, DNS record, IP, certificate, cloud service and app a company exposes.
  • Nova[1][4][5][9]Nova is an agentic penetration test powered by AI. Once pointed at an application, Nova's AI hacker agents work through it step by step until they can show real impact.
  • Evolve Security Automation[1][11][12]Evolve built-in security capabilities automatically detect, prioritize, and remediate threats.
  • EvolvePT[5][6]EvolvePT is an automated pen testing solution.
  • EvolveAST[7]EvolveAST helps organizations orchestrate and automate application security testing in DevOps pipelines.
  • EvolveIR[8]EvolveIR is an automated incident response tool.
  • Penetration Testing Services[6][9]Penetration Testing Services proactively identify the most exploitable security vulnerabilities of infrastructure.
  • Governance, Risk and Compliance Services[9]Assessments and consulting services to help identify risk levels and compliance requirements.
  • EvolveMDR[11]EvolveMDR combines security specialists with Evolve Security Automation capabilities to streamline security operations.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
2021[2]Not stated on its pages
Ownership and funding
Privately held[5][6][11][16]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • May 20, 2026Hadrian released OpenHack, a tool for AI-powered source code review.[14]
  • April 2, 2026Hadrian announced that its MCP server is live.[15]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 11, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Hadrian sells an agentic AI offensive security platform to modern security teams. Hadrian describes mapping the external attack surface of every company in a group, including new acquisitions and legacy infrastructure. Hadrian states that role-based access lets each subsidiary or business unit see and act on its own assets while the group security team keeps the full view. Hadrian says many customers use the platform as their continuous baseline and bring in manual testers for targeted deep dives. Hadrian is delivered from the cloud.Not written yet
Last verified
October 30, 2026November 6, 2026

Where they overlap

  • Hadrian and Threat Intelligence are both filed under Breach simulation and automated pen-testing.

Where they differ, field by field

  • Hadrian's primary category is External attack surface management; Threat Intelligence's is Breach simulation and automated pen-testing.
  • Hadrian is also filed under Exposure prioritisation and CTEM. Threat Intelligence is also filed under Incident response and forensics, MDR and managed SOC and Digital risk protection.
  • Hadrian lists Atlas and Nova. Threat Intelligence lists Evolve Security Automation, EvolvePT, EvolveAST, EvolveIR, Penetration Testing Services and 2 more.
  • Hadrian was founded in 2021.
  • Hadrian is privately held.

What it sells: Hadrian

What Atlas does[1][4][5][6][7]
Atlas discovers assets, technologies and service points, then uses agentic AI to confirm which exposures are actually exploitable. Atlas runs passive scans every hour, and event-driven testing starts automatically when a new asset or change is detected. Atlas pricing is based on the total asset count. Atlas offers two add-ons at additional cost: mergers and acquisitions assessment and infostealers credential leak detection.

What it sells: Threat Intelligence

What Evolve Security Automation does[1][11][12]
Evolve automatically generates pre-configured Evolve Virtual Appliances for deployment into corporate networks and on-premise data centers. Evolve Virtual Appliances support VMware or Hyper-V, and third-party cloud providers including AWS and Azure. Evolve maps major security standards and frameworks to ensure the right security controls are in place.
What EvolvePT does[5][6]
Threat Intelligence combines its penetration testing tool, EvolvePT, with a certified, principal-only team of penetration testing consultants. Symbion turned to EvolvePT, an automated pen testing solution.
What EvolveAST does[7]
EvolveAST helps organizations orchestrate and automate the integration of application security testing into DevOps pipelines. Evolve integrates automated application security testing into the standard business as usual processes and technologies of development teams.
What EvolveIR does[8]
EvolveIR is an automated incident response tool that can detect and respond to security threats. Threat Intelligence offers an incident response solution that uses its security team and EvolveIR.
What Penetration Testing Services does[6][9]
Threat Intelligence uses a Purple Team method in which its Principal Consultants collaborate with the internal security team of the customer. Threat Intelligence evaluates web and mobile applications in five phases: reconnaissance, scanning, vulnerability assessment, exploitation, and reporting. Penetration Testers at Threat Intelligence hold qualifications like CEH, OSCP, or GPEN.
What Governance, Risk and Compliance Services does[9]
In its IRAP assessments, Threat Intelligence guides customers through Information Security Registered Assessors Program (IRAP) compliance. Threat Intelligence provides guidance on securing ISO 27001 certification for an Information Security Management System (ISMS).
What EvolveMDR does[11]
Threat Intelligence specialists help customers mitigate threats and create a detection and prevention program. Threat Intelligence describes security and IT teams with limited skills and resources as facing challenges in managing risks and meeting compliance requirements.

Questions about Hadrian and Threat Intelligence

What do Hadrian and Threat Intelligence sell?
Hadrian sells Atlas and Nova. Threat Intelligence sells Evolve Security Automation, EvolvePT, EvolveAST, EvolveIR, Penetration Testing Services and 2 more.
Are Hadrian and Threat Intelligence in the same category?
They share Breach simulation and automated pen-testing. Hadrian's primary category is External attack surface management and Threat Intelligence's is Breach simulation and automated pen-testing.
When were Hadrian and Threat Intelligence founded?
Hadrian was founded in 2021.
Who owns Hadrian and Threat Intelligence?
Hadrian is privately held.
Who are Hadrian and Threat Intelligence sold to?
From its own pages, Hadrian sells an agentic AI offensive security platform to modern security teams.
What have Hadrian and Threat Intelligence announced recently?
May 20, 2026: Hadrian released OpenHack, a tool for AI-powered source code review.

About Hadrian

Hadrian is an agentic AI offensive security platform that continuously discovers an organization's external attack surface and tests it for exploitable exposures. Hadrian's Atlas and Nova products run on one platform, so exposures, pentests and evidence sit in one place. Atlas gives breadth across everything a company exposes, and Nova gives depth in the application that matters. Hadrian runs from the cloud and is ready in minutes.[1][3][4][7]

Atlas continuously maps a company's external attack surface and validates exposures. Atlas discovers assets, technologies and service points, then uses agentic AI to confirm which exposures are actually exploitable. Atlas discovers every domain, DNS record, IP, certificate, cloud service and app a company exposes, then tests all of it the way an attacker would. Atlas maps outward from the organization: subsidiaries and acquisitions, the domains each one registered, then every subdomain, IP, certificate and cloud host under them. Atlas starts from a few apex domains, maps how everything connects, flags what changed and proves which exposures are real. Atlas runs passive scans every hour, and event-driven testing starts automatically when a new asset or change is detected. Atlas matches a new CVE to the assets running the affected version, tests every one of them, and tells the customer which are really exposed.[7]

Hadrian's Orchestrator AI uses machine learning and pattern recognition to scan the internet for exposed assets tied to an organization, including Shadow IT. Hadrian continuously scans the internet to find forgotten subdomains, cloud instances and legacy servers that belong to an organization but are not in its official inventory. Hadrian's platform safely simulates real-world attack techniques to validate if a vulnerability is actually exploitable in the customer's specific environment. Hadrian only flags verified risks that have a confirmed path to compromise. Hadrian's agents safely test what they find and only raise what holds up, with the request, the response and the fix, and they check the fix when a risk is closed.[7][8]

Nova is an agentic penetration test powered by AI that performs the same techniques a skilled human pentester would, including reconnaissance, exploitation and lateral movement. Nova's agents sign in as every role, learn how an app's business logic works and chain small steps into real impact. Nova's testing stays within the scope the customer sets, at the pace the customer chooses, without changing a single record. Nova customers receive access to the Hadrian platform to see results and get a compliance-ready pdf report. Atlas's asset discovery and exposure mapping feeds directly into Nova, so penetration tests are automatically scoped against the real attack surface.[4][9]

Hadrian's hacker agents test the external attack surface continuously, chain what they find into attack paths, and report only the paths they can prove. Hadrian does not replace a scoped red team exercise, and internal networks, social engineering and physical access stay with the customer's human red team.[10]

Hadrian maps the external attack surface of every company in a group, including new acquisitions and legacy infrastructure, and starts testing it as soon as the deal closes. Hadrian uses ownership signals from DNS, certificates and registration records, and a customer's team can confirm or correct attribution in the platform. Role-based access lets each subsidiary or business unit see and act on its own assets, while the group security team keeps the full view. Hadrian connects to multiple cloud environments with a few clicks, providing a centralized view of exposed assets. Hadrian identifies exposed cloud assets and misconfigurations that could enable lateral movement and privilege escalation. Hadrian's ML algorithms prioritize risks based on business relevance, asset attractiveness, discoverability, impact and exploitation ease.[12]

Hadrian allows teams to assign leads, share risk details with third parties, track remediation progress and collaborate in a shared space. Hadrian's risk details include severity, impact, proof of concept and remediation steps.[1][3][9][13]

Hadrian on the record

Sources

Hadrian full record

  1. [1]hadrian.ioHadrian · hadrian.io · undated page, accessed October 30, 2026 · Tier A
  2. [2]CompanyHadrian · hadrian.io · undated page, accessed October 30, 2026 · Tier A
  3. [3]Agentic Penetration Testing | HadrianHadrian · undated page, accessed November 10, 2026 · Tier A
  4. [4]Offensive Security Platform: Atlas + Nova | HadrianHadrian · undated page, accessed November 10, 2026 · Tier A
  5. [5]Know your attack surface, pentest it continuously | HadrianHadrian · undated page, accessed November 10, 2026 · Tier A
  6. [6]Atlas: Continuous Attack Surface Management | HadrianHadrian · undated page, accessed November 10, 2026 · Tier A
  7. [7]Continuous Attack Surface Management | HadrianHadrian · undated page, accessed November 10, 2026 · Tier A
  8. [8]Adversarial Exposure Validation (AEV) | HadrianHadrian · undated page, accessed November 10, 2026 · Tier A
  9. [9]Nova: On-Demand Agentic Pentesting | HadrianHadrian · undated page, accessed November 10, 2026 · Tier A
  10. [10]Automated Red Teaming for Your Attack Surface | HadrianHadrian · undated page, accessed November 10, 2026 · Tier A
  11. [11]Acquisition and Subsidiary Attack Surface | HadrianHadrian · undated page, accessed November 10, 2026 · Tier A
  12. [12]Cloud Exposure Visibility & Control | HadrianHadrian · undated page, accessed November 10, 2026 · Tier A
  13. [13]Threat Exposure Management (CTEM) | HadrianHadrian · undated page, accessed November 10, 2026 · Tier A
  14. [14]Hadrian releases OpenHack for AI vulnerability discoveryHadrian · published May 20, 2026 · Tier A
  15. [15]Hadrian's MCP server is liveHadrian · published April 2, 2026 · Tier A
  16. [16]Hadrian Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Threat Intelligence full record

  1. [1]threatintelligence.comThreat Intelligence · threatintelligence.com · undated page, accessed November 6, 2026 · Tier A
  2. [2]We are Threat IntelligenceThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  3. [3]Cybersecurity Solutions| Pentesting | IR | MSSP | AUSThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  4. [4]Evolve Cybersecurity PlatformThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  5. [5]Automated Penetration Testing Case Study | EvolvePTThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  6. [6]Penetration Testing Services | Red Team | AustraliaThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  7. [7]EvolveAST Application Security TestingThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  8. [8]Incident Response and Digital Forensic InvestigationsThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  9. [9]Cyber Security Professional ServicesThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  10. [10]Governance, Risk and Compliance ServicesThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  11. [11]Managed Security Services AustraliaThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  12. [12]Security Automation Case Study - Evolve and GTLawThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  13. [13]SOCRadar Extended Threat Intelligence Reviews 2026G2 · undated page, accessed November 11, 2026 · Tier C

Spot a factual error? Request a correction.