Mitigant
Mitigant is an EU-based, Germany-built cybersecurity company that helps organizations prove whether their cloud and AI security controls work before attackers do. Its platform safely emulates real adversary techniques across AWS, Azure, Google Cloud and Kubernetes to validate exploitability, expose blind spots and prioritize remediation.
At a Glance
- Enterprise security teams and CISOs
- Security Operations Centers, including Blue Teams and Red Teams
- Mid-stage and early-stage startups
- SMEs and large companies/scale-ups
- +2 more
AI Tools by Mitigant
(1)
Mitigant
Multi Cloud Attack Emulation Platform
Discussions
No discussions yet
Be the first to start a discussion about Mitigant
Latest News
Google for Startups published Mitigant case study: validating cloud security gaps up to 5X faster with Gemini
Mitigant connected with European cybersecurity leaders at ITSA 2025
Mitigant and Syself partnered to enhance security for managed Kubernetes services
Mitigant and Fogbyte partnered to proactively secure cloud-native infrastructure in Switzerland
Products & Services
Agentless SaaS platform for continuous adversarial validation, cloud attack emulation, cloud and Kubernetes security posture management, compliance monitoring, exposure management, reporting and remediation prioritization.
Safely runs real-world attack scenarios and cloud penetration tests across AWS, Azure and GCP, with 500+ plug-and-play attacks, MITRE ATT&CK/ATLAS mapping, attack evidence, attack graphs, CTI integration and custom attacks through Attack Builder.
Continuously inventories and assesses cloud resources for misconfigurations, vulnerabilities, compliance violations and drift across AWS, Azure and Google Cloud.
Azure-focused cloud security posture management and attack validation.
Market Position
Mitigant positions itself in Gartner's Adversarial Exposure Validation category, combining cloud-native posture management with safe, continuous attack emulation and exploitability evidence. It differentiates from configuration-centric CSPM by showing which findings attackers can actually exploit, and from broader Breach and Attack Simulation vendors such as SafeBreach, AttackIQ, Cymulate, Picus and Pentera through its cloud/Kubernetes focus, multi-cloud attack validation, compliance monitoring and AI-driven recommendations.
Leadership
Founders
Nils Karn
Design-thinking researcher and practitioner at the Hasso Plattner Institute; Mitigant CEO and co-founder.
Kennedy Torkura
Cloud-security researcher and Hasso Plattner Institute alumnus originally from Nigeria; has more than a decade of cybersecurity experience, more than 20 academic papers and co-authored an O'Reilly book on Security Chaos Engineering; Mitigant CTO and co-founder.
Dr. Muhammad Ihsan Haikal Sukmana
Hasso Plattner Institute researcher whose master's and PhD work focused on cloud management and security, including multi-cloud organizations; Mitigant CPO and co-founder.
Dr. Thomas Fricke
German cloud-security and Kubernetes expert who joined the Hasso Plattner Institute founding team with industry expertise and German cybersecurity/startup connections; Mitigant advisor and co-founder.
Executive Team
Nils Karn
CEO and Co-Founder
Design-thinking researcher/practitioner from the Hasso Plattner Institute and member of the founding team.
Kennedy Torkura
CTO and Co-Founder
Cloud-security researcher, cybersecurity practitioner and author with more than a decade of experience.
Board of Directors
Founding Story
In 2020, Kennedy Torkura, Nils Karn and Muhammad Sukmana met at the Hasso Plattner Institute and decided to create an enterprise cloud-security solution after failing to find a product that addressed rapidly evolving cloud attacks. Thomas Fricke subsequently joined, and Resility GmbH (renamed Mitigant GmbH) was founded in June 2021 to make enterprise cloud infrastructure secure and resilient against attacks.
Business Model
Revenue Model
B2B SaaS subscription model for enterprise and startup security teams, sold through free trials and demo-led plans; the platform also offers enterprise capabilities and API access.
Pricing Tiers
For early-stage startups; includes 50 attacks, 10 cloud pentests, up to 1,000 cloud assets, three compliance standards and up to 50 Kubernetes nodes; 30-day free trial available.
For mid-stage startups and SMEs; includes Basic features plus 100 attacks, custom scenarios, scheduling, detection rules, 20 cloud pentests, up to 10,000 cloud assets, six compliance standards and up to 70 Kubernetes nodes; 30-day free trial available.
For large companies and scale-ups; includes Standard features plus 200 attacks, AI-based recommendations, multi-cloud attacks, Attack API, AI Red Teaming, 50 cloud pentests, more than 10,000 cloud assets, multiple report formats and API access; 30-day free trial available.
Target Markets
- Enterprise security teams and CISOs
- Security Operations Centers, including Blue Teams and Red Teams
- Mid-stage and early-stage startups
- SMEs and large companies/scale-ups
- Organizations running AWS, Azure, Google Cloud, Kubernetes and multi-cloud environments
- Industries with cloud, compliance and operational-resilience requirements
- AI red teaming and validation of AI workloads
- Cloud penetration testing
- Detection validation for SIEM, CDR and cloud detection controls
- SOC team optimization and continuous security operations
- Continuous cloud and Kubernetes compliance
- Incident-readiness exercises and recovery-control validation
- Nooxit
- Notch
- KM.ON Asia Ltd
- Mitto