VulnCheck, a Lexington, Massachusetts company that sells exploit intelligence to security teams, raised a $25m Series B round, it announced on 17 February 2026.
Sorenson Capital led the round. National Grid Partners joined as a new investor, and existing backers Ten Eleven Ventures and In-Q-Tel (IQT) also took part. The company did not disclose a valuation. The new money brings VulnCheck's total funding to $45m.
SiliconANGLE reported that VulnCheck raised a $12m Series A in March 2025, which is consistent with the $45m total once the Series B is added to earlier funding.
“This funding validates our approach to providing faster, more precise, and continuously updated intelligence, and reinforces our commitment to the organizations that rely on us to outpace attackers when exploit timelines have become more compressed than ever.”Anthony Bettini, Founder and CEO, VulnCheck
What VulnCheck does
VulnCheck says it closes what it calls the exploitation-timing gap: the period between a software vulnerability being disclosed and attackers actually using it. Its platform collects evidence of real-world exploitation and delivers it as data meant for machines to read first, with human review as a secondary step.
According to the company, the dataset scans more than 500 million records on all known vulnerabilities (CVEs) from over 500 sources and refreshes several times a day. SiliconANGLE described customers ingesting the feeds through APIs into security monitoring systems, vulnerability scanners and patch management tools, so that remediation can be ranked by confirmed exploitation rather than severity scores alone.
SiliconANGLE said the company was founded in 2021. The company's products include a Known Exploited Vulnerabilities (KEV) list and a database it calls NVD++.
Growth figures
VulnCheck said its enterprise annual recurring revenue rose 557% over the past 12 months and its government recurring revenue rose 306%. It did not give absolute revenue figures, as SiliconANGLE noted.
The company also reported moving from 143rd to 28th place in the all-time ranking of organisations that assign CVE numbers, with nearly 2,000 assigned, and adding nearly 7,000 users to its community. More than 13,000 vendors, practitioners and vulnerability management teams now have access to its KEV and NVD++ resources.
It added nearly 900 vulnerabilities to its KEV list in 2025, a 25% increase on the year before. VulnCheck research found that 32% of them were exploited on or before the day the vulnerability was disclosed, up 36% on 2024.
Who backed it and why
Ken Elefant, a partner at Sorenson Capital, said VulnCheck's approach has let the company sustain fast growth because older vulnerability management tools were built for manual analyst workflows and cover only part of the known vulnerabilities.
Arun Chetty, a vice president at National Grid Partners, pointed to growing urgency among critical infrastructure operators to modernise how they prioritise software flaws, saying attackers are moving faster than defenders can triage them. Mark Kuhr, co-founder and chief technology officer of the security firm Synack, said in the announcement that Synack pairs VulnCheck's intelligence with its own automated penetration testing and human analysis.
Anthony Bettini, VulnCheck's founder and chief executive, said the round validates the company's approach. The company said it will use the capital to scale growth and expand its intelligence capabilities, including automation and AI-powered detection of emerging threats.
Recognition
VulnCheck was a finalist in the 2024 RSAC Innovation Sandbox competition and, in 2025, was named a SINET16 Innovator and one of four finalists in the Black Hat Asia and Black Hat Europe Startup Spotlight contests. In January 2026 CRN named it a top-10 cybersecurity startup to watch for the year, the company said.
Company website: vulncheck.com