SnapAttack

SnapAttack is a cloud-based software solution that focuses on threat hunting, detection engineering, and threat intelligence. The platform combines red teaming (offensive) and blue teaming (defensive) tradecraft to find security defects and refine behavioral detections. It provides an extensive library of labeled attacks to help security teams deploy validated analytics based on hacker tradecraft. SnapAttack's platform concentrates on attack emulation, detection, and behavioral analytics to help organizations implement proactive security measures and prevent attacks before they occur.

The company's technology enables community collaboration around threat intelligence, attack emulation, and detection analytics. This approach allows organizations to identify potential vulnerabilities and risks, and strengthen their systems before threat actors attempt similar techniques on their IT infrastructure. SnapAttack's platform is vendor-agnostic and can be integrated with various security information and event management (SIEM), endpoint detection and response (EDR/XDR), and cloud solutions.

In April 2022, SnapAttack was awarded a patent (US 11,316,875 B2) for its novel approach to threat hunting and detection. The platform features built-in MITRE ATT&CK mapping that updates with coverage, providing organizations with a clear understanding of their security posture and guidance on next steps. SnapAttack's library of validated, high-confidence detection content is tailored to specific deployment needs, offering tools, context, and workflow for precise threat hunting.

SnapAttack was initially developed by Booz Allen Hamilton's Dark Labs, an elite team of security researchers and cyber experts. In November 2021, it was spun out as an independent company to focus on rapidly evolving its platform capabilities. The spin-off was accompanied by an USD 8 million funding round led by Volition Capital, with participation from Booz Allen Hamilton and Strategic Cyber Ventures.