About Defendermate

A vulnerability and exposure management platform for the AI era

We join research-backed intelligence on every vulnerability with the facts of your own environment, so your teams and their agents act on what’s actually exploitable, and prove it.

Who we build for

  • Security leadersA program that keeps up, with evidence the board and auditors accept.
  • Security and VM engineersWhat’s exploitable here, not just present, and the proof.
  • Cloud, SRE and platformThe change that closes the path, and when the patch is safe to ship.
  • Developers and ITFewer tickets, each one with the reason it matters.
  • Your AI agentsThe same intelligence, over MCP, inside your workflow.
Ashish Popli

Ashish PopliFounder and CEO

Red teamer, security engineering at Microsoft, machine learning systems at Google, then CISO three times. Investor and advisor to 10+ security startups.

Connect on LinkedIn

Why we exist

  1. I broke into systems for a living.

    Red teaming taught me that exploitability depends on conditions, not just on a vulnerable version being present.

  2. Then I became the buyer.

    Three CISO roles, at companies growing from early revenue through IPO. The gap between what tools report and what’s actually exploitable never closed. Log4j made it visceral: a war room, five teams asking at once, and conditions checked by hand across hundreds of resources.

  3. So we built the product.

    Machine learning, generative AI and graph modeling finally caught up with the problem. Vulnerability management isn’t an operations problem; it’s a product problem. Defendermate is that product.

Read the full story →

The team

Practitioners who have lived the problem on both sides of the attack, and build like it. Small, senior and biased for action.

Backed by

Investors from North America, Europe and Asia.

Work with us

Join the team, or talk to us about your program.