Fortress

Fortress Information Security (Fortress) provides a platform to address cybersecurity threats emanating from vendors, assets, and software across the entire IT/OT ecosystem and the extended supply chain of US critical infrastructure such as energy, utilities, government, aerospace and defense, critical manufacturing, industrial automation, automotive, and healthcare. The company’s flagship product—the Fortress Platform has been co-developed with electric utilities and leverages technologies such as AI and ML to provide supply chain management including real-time risk intelligence, automated remediation and response, risk assessments, continuous monitoring, and automated compliance. The platform prioritizes cybersecurity risks and stores technical information in a centralized database. To evaluate an application’s security posture, the platform scans software products to identify applications containing open-source code with a known vulnerability or application components requiring an update. The platform also assesses the cybersecurity posture of software suppliers to identify any data breaches or compromise.

The company’s Asset-to-Vendor (A2V) network, which is a central repository comprising cybersecurity information about data products from over 40,000 suppliers facilitates secure exchange of asset information and security intelligence to remediate potential vulnerabilities. The service is used by customers to receive notifications on vulnerabilities or threats in software products they use and software suppliers use this service to share cybersecurity risk assessments with users. In March 2022, Fortress made its A2V Library free to all power utilities and served 40% of the US power grid as of April 2022.

In April 2022, the company raised USD 125 million in funding from Goldman Sachs Asset Management. The funds were expected to be utilized to expand its A2V Network to include software and hardware bill of materials by accepting vendor attestations to products and offering an in-house auditing service to form a third-party bill of materials; accelerate the expansion of its platform to include workflow orchestration, additional analytics, and reporting capabilities; and double its employee headcount of 200 by 2022.