Brinqa Acquires PlexTrac to Close CTEM Loop; Becomes Largest Standalone Unified Exposure Management Vendor

Acquisition brings together two companies independently recognized in the Gartner® Magic Quadrant™ for Exposure Assessment Platforms.

AUSTIN, Texas & BOISE, Idaho, August 19, 2026--Brinqa, the leader in exposure management for enterprise security teams, today announced it has acquired PlexTrac, the trusted platform for offensive security validation, workflow, and reporting. The acquisition adds the ability to verify that remediation has actually worked, uniquely positioning Brinqa to identify and prioritize the exposures that matter most, drive remediation, and prove the fix held, closing the CTEM loop. The acquisition also makes Brinqa the largest standalone vendor in Unified Exposure Management, with over 3,000 customers across 57 countries, including more than 25% of the Fortune 500.

"We've spent over a decade building the platform enterprise security teams trust to prioritize what to fix first," said Dan Pagel, CEO at Brinqa. "PlexTrac brings real offensive security depth, from practitioners who have spent years proving exactly how attackers get in. Pairing that expertise with our exposure assessment platform gives customers proof they can defend to a board, an auditor, or any AI system acting on that data."

A Decade of Momentum in Exposure Management

Brinqa has spent more than a decade solving exposure management challenges for the world's largest and most complex organizations, including Nestlé, PhonePe, Cambia Health Solutions, Guidewire, and SAP. That focus paid off in 2025 with 164% year-over-year growth in new bookings, a 32% increase in new-logo average selling price, and inclusion in the inaugural Gartner® Magic Quadrant™ for Exposure Assessment Platforms. Momentum accelerated further in 2026, with new logo bookings more than doubling year-over-year and existing customers expanding their deployments as Brinqa shipped new AI capabilities, including new MCP interfaces, the AI Attribution Agent, and the AI Deduplication Agent.

The PlexTrac acquisition builds directly on that trajectory, adding the capability enterprise security teams kept asking for: proof that a fix actually worked. Combined with a robust data foundation, MCP, and Bring Your Own AI, customers can connect that same validated exposure data to the AI models and tools they already use, making high-value exposure intelligence available across teams.

"Exposure management only matters if teams can prove the fix worked, and that's the gap Brinqa now closes. We've watched this team build category-defining technology, and this acquisition sharpens their lead at a moment when security organizations are demanding validated, AI-ready data," said Thomas Krane, Managing Director at Insight Partners and member of Brinqa's board of directors.