/Companies

FortifyData

Kennesaw, US · Founded 2015 · Delaware corporation · 19 employees on LinkedIn · 7 known investors

Find your way into FortifyData

30 people in our graph share verified history with the FortifyData team — schools, employers, funds. One of them is your warm intro.

Scott Lopanounlockedknows Victor Gamra · together at FortifyData (overlapped)
×2knows the team · via FortifyData
×5knows the team · via Cox Enterprises
×3knows the team · via Kennesaw State University
knows the team · via State of Georgia

FortifyData is an AI-powered cyber risk management platform that consolidates attack surface management, third-party/vendor risk management, vulnerability management, and compliance automation into a single system. It targets cybersecurity and compliance teams—CISOs, security directors, and vendor risk managers—at mid-market organizations across financial services, healthcare, higher education, energy, manufacturing, and technology.

Also known as FortifyData

Founders & leadership

FortifyData was founded in 2015 by Victor Gamra.

VGVictor Gamra
Victor GamraFounder · Chief Executive OfficerVictor Gamra is an Executive Officer and Director at FortifyData, which provides cyber risk analysis and monitoring software for organizations seeking to quantify and mitigate security threats.
AO
Adebola OgungbemiExecutive

Board

RC
Robert C. MorrellBoard director

Investors · 7

Also in the syndicate · 1

SoftBank

Reported raises · per SEC filings

Form D private placements

$7.4M disclosed across 3 rounds · 2019–2021

▶$5.4MraisedDec 2021 · 24 investors · Other Technology
Rule 506(b)
Officers, directors & promoters on the filing
  • Justin Wright-EakesDirector
  • Blake PattonDirector
  • Robert C. MorrellDirector
  • Paul BuntingDirector
  • Victor GamraExecutive Officer, Director
  • Adebola OgungbemiExecutive Officer, Director
Offering amount
$5.9M
Amount sold
$5.4M
First sale
Dec 2021
Incorporated
Corporation, Delaware
Federal exemptions
06b
Full filing on SEC EDGAR ↗
▶$725.6KraisedMay 2021 · 5 investors · Other Technology
Rule 506(b)
Officers, directors & promoters on the filing
  • Adebola OgungbemiExecutive Officer, Director
  • Robert C. MorrellDirector
  • Victor GamraExecutive Officer, Director
Offering amount
$1.5M
Amount sold
$725.6K
First sale
May 2021
Incorporated
Corporation, Delaware
Federal exemptions
06b, 04.3
Full filing on SEC EDGAR ↗
▶$1.3MraisedNov 2019 · 17 investors · Other Technology
Rule 506(b)
Officers, directors & promoters on the filing
  • Victor GamraExecutive Officer, Director
  • Robert Craig MorrellExecutive Officer, Director
  • Adebola OgungbemiExecutive Officer, Director
Offering amount
$1.3M
Amount sold
$1.3M
Minimum investment
$50K
First sale
Oct 2019
Incorporated
Corporation, Delaware, 2015
Federal exemptions
06b
Full filing on SEC EDGAR ↗

Source: SEC EDGAR Form D. Amounts as filed; amended filings shown once at their latest values.

Company profile

researched Aug 2026

FortifyData is a Kennesaw, Georgia-based cybersecurity software company that operates a consolidated cyber risk management platform for security and compliance teams. The platform combines external and internal attack surface management, vulnerability management, third-party (vendor) risk management, cloud security posture monitoring, security ratings and compliance automation into a single system, with AI-driven risk prioritization and recommended remediation steps.

The product assesses risk across an organization's external and internal infrastructure, cloud configurations, applications and third parties. It performs automated, continuous asset discovery and non-intrusive vulnerability assessments, ingests data from existing internal scanners (including Microsoft Defender, Tenable, Rapid7 and Qualys) or uses the agentless FortifyData Collector, and monitors dark and deep web sources for leaked credentials, exposed records and confidential documents. Risk findings are mapped to compliance framework controls for continuous reporting, and the company markets an AI audit capability that analyzes vendor-supplied reports such as SOC 2 against relevant principles and controls. Its scoring approach produces a benchmarked cyber risk rating that incorporates threat and vulnerability data.

The company positions its platform against traditional GRC suites and against security-ratings or attack-surface-only vendors, and supports compliance and regulatory frameworks including PCI, HIPAA, SOC 2, ISO 27001, NIST, 23 NYCRR 500, GLBA and HITRUST.

Business model

FortifyData sells access to its cyber risk management software platform to enterprise and mid-market organizations, with go-to-market driven by demo requests and direct sales.

Traction

Reported annual growth of 250 percent every year since its 2018 launch, enterprise customers including Global Payments and Nike, and a headcount of 37 as of January 2022 with plans to add 20 employees over the following 18 months.

Latest developments

The company markets an AI-powered platform including AI-driven risk prioritization, agentic vendor management workflows and an AI audit dashboard that analyzes vendor-supplied SOC 2 and similar reports, alongside an integrations marketplace for internal vulnerability scanners.

▸Full profile — market position, technology, go-to-market, geography, history

Market position

Positions itself as a consolidated alternative to standalone security ratings vendors, attack surface management point tools and large, costly traditional GRC implementations, competing on breadth of internal, external, cloud and third-party risk data in one platform.

Differentiators cited by the company include continuous weekly auto-asset discovery, active and passive data collection instead of historical OSINT, proprietary dark web intelligence, combined internal and external infrastructure assessment, cloud configuration monitoring, and a patented configurable scoring model that customers can weight themselves.

Technology

The platform performs continuous, active and passive assessments rather than relying solely on historical OSINT data, with weekly auto-asset discovery to reduce asset misattribution. It runs non-intrusive infrastructure vulnerability scans of internal and external networks, monitors cloud misconfigurations, and integrates hourly-updated threat intelligence feeds that adjust threat likelihood and risk prioritization. A patented configurable scoring model lets clients weight cybersecurity risk categories to reflect asset classification, threat scenario likelihood and business impact. Integrations allow third-party scanner data to be ingested and orchestrated from within FortifyData, and proprietary dark/deep web intelligence feeds detect compromised credentials and leaked data.

Go-to-market

Direct sales supported by demo requests, platform overview videos, peer reviews and gated content such as whitepapers and compliance guides; post-seed capital was directed toward expanding sales and marketing headcount.

Cybersecurity, IT risk and compliance teams at enterprises and organizations of all sizes; reported customers have included Global Payments and Nike, and materials address sectors such as financial services, education (GLBA) and healthcare (HITRUST).

Geography

Headquartered in Kennesaw, Georgia, United States, serving clients internationally.

History

The company launched in 2018 and by January 2022 employed 37 people, having reported annual growth of 250 percent each year since launch and raised a $5 million seed extension round led by Tech Square Ventures, bringing total reported funding at that time to $6.7 million.

Compiled by commissioned research from 7 cited public sources — announcements, filings, and press listed under research sources below.

Key figures

latest reported
Annual growth rateJan 2022250% every year since 2018 launch
EmployeesJan 202237 people
Total funding to dateJan 2022$6.7M

Company-reported or press-reported figures, each dated to when it was claimed — not independently audited.

Related companies · 10

UpguardUpGuard provides a platform for managing cybersecurity risk, including third-party vendor and supply chain risk assessment. It is aimed at organizations seeking to evaluate and monitor the security posture of their vendors.
Sentinel OneSentinelOne provides an AI-powered cybersecurity platform for enterprises that integrates endpoint protection, threat detection, and incident response capabilities. The company serves large enterprises, including many Fortune 500 organizations, to protect against cyber threats at scale.
BitSight TechnologiesBitsight provides a cyber risk intelligence platform that monitors entities across the internet to identify vulnerabilities and emerging threats in real time. The platform serves security, risk, and governance teams with threat context, vulnerability prioritization, and compromised credential detection to help organizations remediate exposures before attacks occur.
CrowdStrikeCrowdStrike provides an AI-native cybersecurity platform that unifies endpoint, identity, cloud, SaaS, and AI protection to detect and stop breaches for enterprise organizations. It combines automated response with human-led security operations including managed detection and response, threat hunting, and security services.
CyberSaint SecurityCyberSaint offers CyberStrong, an AI-native platform that automates cybersecurity control assessments and quantifies cyber risk in financial terms for enterprises. It serves CISOs, executives, and boards by harmonizing compliance frameworks (NIST, CIS, ISO), monitoring controls, and modeling risk using methods like FAIR and NIST 800-30.
Security ScorecardSecurityScorecard provides third-party risk management (TPRM) software using AI to help organizations identify, monitor, and mitigate cybersecurity risks across their supply chain and vendor networks. The platform serves enterprises managing extended supply chain security risks.
Safe SecuritySAFE Security provides a cyber risk management platform tailored to retailers, offering continuous visibility into cyber and third-party risk across e-commerce, physical stores, cloud environments, and vendors. Its offering for retail includes autonomous third-party risk management to help protect revenue, customer data, and brand reputation.
Palo Alto NetworksPalo Alto Networks provides cybersecurity platforms and services to protect organizations' digital infrastructure across cloud, network, and security operations. The company serves enterprise organizations, governments, financial institutions, utilities, and healthcare providers globally.
Check Point SoftwareCheck Point Software Technologies is a cybersecurity company providing security products and solutions. This page is its investor relations section, containing annual reports, SEC filings, financial results, and corporate governance information.
CynomiCynomi offers an AI-driven security program management platform that lets managed service providers and security consultancies run assessments, generate risk registers, remediation roadmaps, policies, and compliance mappings, and manage the full security program lifecycle across their client portfolios. Its "CISO Intelligence" embeds senior security judgment into guided workflows so junior teams can deliver CISO-level program management without a dedicated CISO on each account.

Companies working in the same space as FortifyData.

Timeline · 1

launches, deals, and filings
Jan 2022
FortifyData raises $5M seed extension led by Tech Square Ventures

FortifyData raised $5 million in a seed extension round led by Tech Square Ventures with participation from Panoramic Ventures, SoftBank and Oval Park Capital, bringing total funding to $6.7 million. Proceeds were earmarked for new product integrations and hiring about 20 employees over 18 months, focused on sales and marketing.

$5M source ↗

Dated company events from announcements, filings, and press; legal rows summarize public dockets and regulator releases.

Legal entities · 1

corporate structure
FortifyDataDelaware

▸Research sources · 7

primary sources listed

7 public sources were cited for this profile; the first-party ones are listed here.

Frequently asked questions

What does FortifyData do?
FortifyData offers a consolidated cyber risk management platform spanning attack surface, third-party risk and compliance automation.
Who founded FortifyData?
FortifyData was founded by Victor Gamra in 2015.
Who are FortifyData's investors?
FortifyData's investors include BIP Ventures, Open Opportunity Fund, Oval Park Capital, Service Provider Capital, Tech Square Ventures, Panoramic Ventures.
How much funding has FortifyData raised?
FortifyData has disclosed $7.4M raised across 3 rounds.
Where is FortifyData headquartered?
FortifyData is headquartered in Kennesaw, US.