About SpartanX
SpartanX makes an autonomous security platform that acts as an attacker against a customer's own systems. More than 500 AI-powered agents work at the same time. They cover web applications, APIs and source code, networks, cloud infrastructure, identity and access, and AI systems. Each finding is checked with a real exploit. More than 100 other agents handle triage, code fixes and compliance mapping. The platform serves enterprises and managed security service providers.
SpartanX Technologies, Inc. is based in Boston and has a commercial office in Orlando, Florida. Erik Hardy is chief executive officer, and co-founder Diego Spahn is chief technology and product officer. The company closed a seed round led by Venture Guides on April 21, 2026. It has a SOC 2 Type 1 audit from Sensiba.
Funding Rounds (SEC Form D)
| First sale | Filed with SEC | Amount sold | Investors | Avg. check | Terms | Filing |
|---|---|---|---|---|---|---|
| Oct 7, 2026 | Oct 22, 2026 | $4,999,998fully sold | 3 | $1.6M | EquityRule 506(b) | Form D ↗ |
First sale is the date the first investor in the offering committed to invest. Companies must file Form D within 15 days of that date, so filing dates run later.
Rounds announced by SpartanX
What the company said publicly about its funding. Announced amounts can differ from Form D figures: an announcement can combine several closings, and some money is raised without a Form D.
| Announced | Round | Amount | Investors | Source |
|---|---|---|---|---|
| Apr 21, 2026 | Seed | Undisclosed | Venture Guides (lead), Additional angel and corporate investors | SpartanX press release ↗ PR Newswire ↗ |
Why Investors Backed SpartanX
SpartanX sells an AI-driven attack platform that tests a customer's own systems the way an intruder would. The Boston company closed a seed round led by Venture Guides in April 2026. In October 2026 it named Erik Hardy chief executive officer. The same release launched Vendor Management, which extends its testing to a customer's vendors.
The problem it targets
SpartanX's view is that attackers now use AI and work at machine speed. Its case is that an annual manual penetration test cannot keep up. It wants testing to run as one loop of attack, validation, fixing and retesting. On vendor risk, SpartanX's case is that most programs still rely on self-reported questionnaires and point-in-time audits. In its view, that makes third-party breaches hard to measure.
What the product does
NodeX, launched in June 2026, lets the attacker work from inside a network as well as outside. Fix pull requests land directly in GitHub. The platform has five enforcement layers and a dial that lets the customer set the guardrail level. It also has a deterministic egress gateway called Aegis that does not use an LLM. Vendor Management lets an organization invite its vendors onto SpartanX. Each vendor works in its own workspace and chooses which assets to share. The customer sees the vendor's validated risk posture, while the vendor's findings stay private.
Progress so far
SpartanX closed its seed round on April 21, 2026 and set up its Boston headquarters. It was then taking early access requests. The June 2026 NodeX launch added internal attacks. On October 16, 2026, it released Olympus, which carries Vendor Management. Olympus also added hundreds of new specialized AI agents and retesting that confirms whether code and mobile findings were fixed. On the same day, Hardy moved from president and chief operating officer to chief executive officer. The October release mentions enterprise customers but names none.
Who backs it
Venture Guides led the April 2026 seed round, with angel and corporate investors joining. Venture Guides is a Boston firm that invests in early-stage security, AI, cloud infrastructure and data companies. Its partner Anton Simunovic sits on SpartanX's board of directors. He said the founding team's record of building and exiting security companies gives it a rare mix of understanding customers' pain and solving it. SpartanX also names Volition Capital as a backer. Co-founder Diego Spahn co-founded Neuralys, a penetration-testing management platform that Coalfire acquired in 2021.
How the market is moving
SpartanX's blog points to testing rules. PCI DSS v4.x requires internal and external penetration tests annually and after every significant change. NYDFS Part 500 requires annual penetration testing. The GLBA Safeguards Rule lets US financial institutions choose continuous monitoring or an annual penetration test plus semiannual vulnerability assessments. SpartanX's view is that on-demand penetration-testing services deliver only point-in-time tests. Its blog compares SpartanX with Cobalt, Pentera, XBOW, Horizon3.ai and Synack.
We wrote this summary from public statements by SpartanX and its investors. It is not investment advice.
SpartanX in the News
Leadership Team
Executive officers and directors listed on SpartanX's Form D filed Oct 22, 2026.
