Method Security builds autonomous cyber mission systems for the U.S. Government and critical enterprises. Its platform lets security teams and cyber operators map an environment, find and validate exposures, and plan and run offensive cyber operations with AI agents that work inside strict, auditable rules of engagement.
The platform combines offensive and defensive capabilities and serves both commercial and government users. It is designed for settings where an autonomous system must be trusted to act, so every action it takes can be traced and bounded.
At A Glance
| Vendor | Method Security |
|---|---|
| Category | Vulnerability Management (autonomous exposure validation and offensive operations) |
| Deployment | Cloud, on-premises or local compute, including air-gapped and internet-denied networks |
| Agentic AI | Agent swarms and autonomous agents governed by deterministic rules of engagement |
| Customers | U.S. Space Force, Department of Defense |
| Certifications | FedRAMP Class D (High) through Palantir FedStart |
| Market classification | Vulnerability Management |
What Method Does
Large organisations rarely know how an attacker would actually move through their estate, and manual testing cannot keep up with the size and pace of change. Method puts autonomy to work on that problem, so enterprises can pressure test themselves at scale before adversaries do, and federal agencies can test their systems continuously. The platform fuses many data sources into a digital twin of the environment, then uses AI agents and tools to act on it. It combines frontier AI with the customer’s own knowledge of its infrastructure, controls and operational history, and turns tools and tradecraft into autonomous workflows across more targets and missions. The company “built Method as dual-use from day one”, so the same foundations serve defence and offence.
Products
Bastion
Bastion is for enterprise security teams that want to see their exposure the way an attacker would. It deploys an agent swarm to map the estate, investigates exposures and validates which attack paths are real, all with shared context and enforced rules of engagement.
Reaper
Reaper is a workspace for cyber operators who plan, rehearse and execute cyber missions. It orchestrates intelligence, tooling, command and control and autonomous agents, and keeps every step within the customer’s rules of engagement.
Open-Source Tools
Method publishes small, tightly scoped security tools on GitHub that AI systems can call easily. Each covers one problem area:
codeanalyzewraps Semgrep static analysis with opinionated configurationnetworkscanbuilds on naabu from Project Discovery
How It Works
The platform runs on cloud, on-premises or local compute, from legacy enterprise networks to the tactical edge, and can operate air-gapped, deploy on kits and survive degraded communications.
| Component | What it does |
|---|---|
| Digital twin | Data sources are fused into a model of the environment that every operation works from. |
| Ontology | A knowledge graph of typed entities that defines the platform’s addressable world. Tools can act only on entities in this graph. |
| Tools | Predefined, separately authorised capabilities with deterministic behaviour. Operators can bring their own, and new tools are built in a Tool Factory with a human in the loop. |
| Rules of engagement | Rules attach to entities and entity types rather than prompts, are versioned and attributable, and block actions against no-strike entities. |
| Jackal-C2 | A command and control system that coordinates mission-tailored sensors across Linux, Windows, VxWorks and older custom platforms. |
Agentic AI Capabilities
Model Reasons, Tools Act
The core safety design separates thinking from doing. The AI model reasons about the task but “never has access to a shell”, and every external action passes through a deterministic tool. The model cannot change its own rules of engagement, and each action is judged against a specific version of them, so operators can replay what the system perceived and which rules applied at the time. Because Bastion’s swarm and Reaper’s agents share one context and one rule set, many agents can work in parallel without stepping outside agreed boundaries.
Company Background
| Founded | 2023 |
|---|---|
| Headquarters | New York City and Washington, D.C. |
| Leadership | Sam Jones, co-founder and CEO; Sean Hacker, CTO; Daniel Kelly, President |
| Funding | $26 million in combined Seed and Series A funding announced on 19 November 2025, led by Andreessen Horowitz and General Catalyst, with angel investors including Aaron Levie, Frederic Kerrest, Phil Venables and Ryan Noon |
| Government work | Awarded the maximum $30M STRATFI by the U.S. Space Force in September 2026, working with the Defensive Cyber Operations for Space programme |
| Partnership | OpenAI, whose models are integrated into the platform for cyber operators in the Department of Defense and the Intelligence Community |
Note: This overview is compiled from Method Security’s publicly available information as of 4 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.