Tonic Security builds an exposure management platform for security teams that are buried in vulnerability findings and cannot tell which ones matter to the business. It follows the continuous threat exposure management (CTEM) model, using AI agents to move each exposure from discovery to a verified fix.
Most vulnerability programmes struggle less with finding issues than with knowing which asset is exposed, who owns it and what it would cost the business if it were exploited. Tonic treats that as a data and context problem.
At A Glance
| Vendor | Tonic Security |
|---|---|
| Category | Vulnerability management (exposure management, CTEM) |
| Identities covered | Identities and permissions modelled in the Security Knowledge Graph |
| Deployment | Available on AWS Marketplace |
| Agentic AI | Stage agents, API and MCP access for agents, approval gates |
| Funding | Seed round led by Hetz Ventures |
| Market classification | Vulnerability Management |
What Tonic Does
Tonic reconciles records from security, IT, OT and business systems into one continuously updated view of assets, owners and exposures, so analysts and agents work from the same picture. On top of that view it ranks risk by business impact rather than by raw severity, then runs the remediation work and checks that each fix actually removed the risk. The programme becomes a continuous loop rather than a quarterly exercise, with people approving the decisions that carry the most risk.
Products
Agentic CTEM Platform
The core platform, sold as Agentic CTEM, turns raw findings into a ranked, explainable list of risks and follows each one through to a fix. Risk scores adapt as conditions change, and attack path and blast radius analysis show how far an exposure could spread. Remediation campaigns are tracked to completion, with validation that the fix worked. Teams can record risk acceptance and compensating controls, set policy-driven SLAs and escalation, and align the programme with SOC 2, ISO 27001, GDPR and CCPA.
AI Data Fabric
The AI Data Fabric is the data layer underneath, built for organisations whose asset and ownership information is scattered and inconsistent. It normalises schemas across assets, vulnerabilities, identities and controls, and correlates and deduplicates entities, resolving conflicts between sources. AI extraction pulls business criticality, ownership, dependencies and risk exceptions out of tickets, documents and chat. The output is the Security Knowledge Graph that the rest of the platform reads.
Managed CTEM
For teams without the staff to run CTEM themselves, Tonic offers a managed service delivered with Sygnia, so the same platform is operated by an outside team.
How It Works
Data flows one way through four stages, with a governance layer over all of them.
| Component | What it does |
|---|---|
| Collect | Structured and unstructured sources are ingested continuously into the Security Knowledge Graph. |
| Contextualize | Assets are placed in six context dimensions: business, organisational, geographical, operational, temporal and adversarial. |
| Prioritize | Findings are re-ranked as business impact, adversarial signals and asset resilience change. |
| Act | Work is routed to owners through campaigns, and results are fed back into the graph. |
| Governance | Each decision carries its evidence, confidence and provenance, with role-based access, scoped permissions and audit trails. |
Identities And Systems Covered
| Identities | Identities and permissions, held in the Security Knowledge Graph next to assets, exposures, controls and business dependencies |
|---|---|
| Identity systems | Identity and access management systems as an ingestion source |
| Other structured sources | Security platforms, IT and asset management systems, cloud infrastructure platforms and custom enterprise applications |
| Unstructured sources | Tickets, documentation, chat conversations, operational notes and knowledge bases, drawn from tools such as Microsoft Teams, SharePoint, Confluence and Jira |
Agentic AI Capabilities
Stage Agents
Each stage has its own agent: Tonic Data Engineer (Collect), Tonic Navigator (Contextualize), Tonic Exposure Analyst (Prioritize) and Tonic Mobilization Coordinator (Act). The Mobilization Coordinator runs remediation campaigns from start to finish, routing work to the right owners and then confirming through rescans and configuration checks that the risk is gone.
Agent Access Through APIs And MCP
Customers can give their own internal agents structured access to asset, exposure, ownership and risk context through APIs and MCP, so Tonic agents and third-party agents work side by side.
Approval Gates
An agentic control plane decides what each agent may see and run, through context access rules and execution policies. High-risk actions go through approval workflows before they run.
Company Background
| Founders | Sharon Isaaci (Co-founder and CEO), David Warshavski (Co-founder and CPO), Greg Ainbinder (Co-founder and CTO) |
|---|---|
| Locations | Tel Aviv, Israel, with remote staff in the United States |
| Funding | $7M seed round in July 2025 led by Hetz Ventures, with Vesey Ventures, Bullet Ventures and cybersecurity angel investors |
Note: This overview is compiled from Tonic’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.