Lorikeet Security Is Raising Its Pre-Seed to Make Penetration Testing Actually Useful

Today we are announcing that Lorikeet Security Corp is raising an $885K pre-seed round at a $5M pre-money valuation via SAFE to build AI-powered penetration testing for the modern day. This funding will accelerate the development of our Lory AI Pentester, expand our expert team, and scale the infrastructure behind a product that makes security findings understandable and actionable for every team, not just security engineers.

We built Lorikeet Security because we saw the same pattern in every engagement we ran: organizations had no idea which of their in-scope assets were actually exploitable, and the pentest reports that were supposed to help them were built for people who already understood the problem. This round lets us fix that at scale.

The Problem: Pentest Reports Are Unintuitive for the People Who Need Them Most

Penetration testing is not a new concept. There are firms and tools on the market that test your systems and produce findings. The problem is that those reports were built by security engineers, for security engineers. The output is a wall of CVEs, severity ratings, and technical jargon that means nothing to the product managers, founders, and non-technical stakeholders who are actually responsible for making decisions about risk.

The reality is that most organizations face three compounding problems:

You cannot secure what you never test. In-scope applications and infrastructure ship changes constantly, and between once-a-year engagements most of those changes are never exercised against a real attacker's playbook. The resulting exposures sit live and exploitable until the next annual pentest finally comes around.

You cannot patch what you do not understand. Findings arrive as isolated line items with no context around criticality or real exposure. Security teams lack an understanding of how those findings chain together into real attack paths.

You cannot reduce risk you cannot measure. Vulnerability data creates noise without business relevance. There is no consistent way to prioritize exposures across the attack surface. Risk decisions end up relying on intuition instead of objective measurement.

The Solution: AI-Powered Penetration Testing That Anyone Can Act On

The Lory AI Pentester is a continuously learning, AI-powered system for offensive security risk control. We built it to solve the three problems above in a way that works for the entire organization, not just the security team.

Test: Autonomously Pentest Your In-Scope Assets

The Lory AI Pentester continuously runs autonomous, AI-driven penetration tests against the assets you declare in scope: your web applications, APIs, and infrastructure. It probes them the way a human attacker would, chaining weaknesses into real attack paths and re-testing as those applications change. The outcome is that teams finally know which of their in-scope assets are actually exploitable, not just which ones have a theoretical finding on paper.

Understand: AI That Translates Findings into Business Risk

This is where Lorikeet Security is fundamentally different. Raw vulnerability data creates noise. Our AI correlates assets and exposures into real attack paths and explains why findings matter and how they could be exploited, in plain language that non-technical founders and product managers can understand. Instead of a list of CVEs with no context, teams get clear risk narratives with contextual remediation steps, without linking out to third-party blogs that busy founders and CISOs do not have time to read. The result is fewer alerts, higher confidence, and faster decisions.

Prioritize: Fix What Truly Matters First

Every exposure gets scored by exploitability and business impact. The platform normalizes noise across vulnerabilities and misconfigurations so teams can objectively compare risks and prioritize. Fixing the top issues measurably reduces the organization's overall risk score. Teams stop guessing and start making data-driven decisions about where to spend their remediation effort.

What the Funding Will Accelerate

The $885K is allocated across three areas designed to scale what we have already built and validated with real users.

Expand the Expert Team

We are hiring core engineers to build and scale the Lory AI Pentester, security domain experts to guide detection and prioritization logic, and early go-to-market support to validate our sales motion and customer fit. Expert hires require competitive salaries, and we need expert hires to stay on the edge of innovation in this space.

Improve the Product

We are expanding autonomous testing coverage, historical tracking, and re-test cadence. We are improving the AI-driven explanations, prioritization, and overall usability. We are hardening the product for real-world customer environments. And we are growing our compliance partnerships, including our Vanta integration and vCISO partnerships, to create additional revenue streams through client upsells.

Scale Infrastructure and Research

We need to scale our testing, data processing, and storage infrastructure to keep up with the testing needs of our users. We are also investing in internal security, reliability, and performance tooling, and funding ongoing research into new offensive techniques and data sources.

The Team

Lorikeet Security Corp was founded by Ryan Wilke (Founder & CEO), and the company has been operating since 2021 with zero debt and no prior outside investment. Everything the company has today was built with consulting revenue and sweat equity.

Ryan is the founder of Parrot CTFs Events, a global offensive security training and pentesting platform, with 7+ years of industry experience. He has built large-scale pentesting, red team, and SOCaaS infrastructures, has deep hands-on expertise across web, API, cloud, and adversary simulation, and has designed 50+ real-world attack labs and security certification programs. He leads the company's technical methodology and product direction from the perspective of someone who has spent years breaking into systems and knows exactly what findings matter and what is noise.

Ryan has delivered security work for organizations including Citi, Nasdaq, Fortinet, Motorola Solutions, and Cointelegraph, among others.

Current Traction

We are early-stage, but the signals are strong and the momentum is real:

• MVP shipped and iterating with real user feedback. Multiple product iterations shipped in the first three weeks of the fundraise
• $10K committed from an offensive security industry leader (Director of Innovation)
• 5-person advisory board spanning offensive security, enterprise sales, product, and GTM
• VC pitch invitations and warm introductions in progress
• 300+ market research conversations completed with angel investors, validating the problem and approach
• Built on 7+ years of offensive security infrastructure and training platform experience through Parrot CTFs Events, Cointelegraph, and Prescient Security
• Strategic compliance partnerships with Anchorpoint Partners and our licensed CPA audit partner network for SOC 2, ISO 27001, and PCI-DSS audits, plus Vanta MSP Partner status for compliance automation

The Market

The global market for penetration testing and continuous security testing sits in the multi-billion-dollar range and is growing quickly, driven by widespread cloud adoption, SaaS sprawl, and increasing external exposure. Our serviceable addressable market is $1.5-2B, focused on mid-sized, cloud-first organizations with complex application and infrastructure footprints that require continuous, in-depth security testing. Our serviceable obtainable market targets $100-150M/year in ARR over four years through targeted enterprise adoption, representing roughly 1-2% market share.

The adjacent attack surface management market alone is projected to reach $12.69 billion by 2033 (Straits Research), and continuous penetration testing is on the same trajectory. Cybercrime is projected to cost the world $1 trillion USD per month by 2031 (Cybersecurity Ventures). Continuous security testing is becoming table stakes for SOC 2 compliance and enterprise deals. This is not a nice-to-have anymore. It is a requirement.

Why Now

Two macro shifts make this the right moment to build an AI-native penetration testing platform.

AI has shifted from a feature to a force multiplier. AI now makes large, noisy attack surfaces measurable and actionable at scale. What security teams could not process manually is now automated and continuous. The technology is finally good enough to deliver real risk narratives, not just more alerts.

Security spend is moving from tools to outcomes. Security buyers care about risk reduction and outcomes, not more dashboards. CISOs and boards want defensible, business-aligned decisions. Platforms that reduce noise and prioritize action are replacing point solutions. Continuous penetration testing is becoming mandatory for SOC 2, ISO 27001, and enterprise vendor assessments.

The Vision

We built an AI-Powered Penetration Tester that helps non-technical founders and teams understand their security exposure and fix what matters before attackers do. That is the one-line version.

The longer version is that we believe every organization, regardless of whether they have a dedicated security team, deserves to know which of their in-scope systems are actually exploitable, what the real risk is, and exactly what to do about it. Not in the language of CVE scores and CVSS vectors, but in the language of business impact and clear next steps.

The Lory AI Pentester sits alongside our existing consulting services: penetration testing, secure code review, red team operations, compliance testing, and managed security. It is the recurring-revenue product layer that complements the project-based services business. Consulting pentest clients become Lory AI subscribers. Lory AI subscribers need compliance testing. Each revenue stream reinforces the others.

Our pre-seed round is open. If you are a CISO, offensive security operator, MSSP/MDR operator, or cybersecurity-focused angel investor, we want to hear from you. Not just for capital. For conviction.

Get Involved

If you are a company that needs penetration testing, continuous security testing, or compliance support, we would love to talk. You can explore our full range of services, check out our pricing, sign up for the platform, or book a consultation directly.

Lorikeet Security Team

Penetration Testing & Cybersecurity Consulting

Lorikeet Security helps modern engineering teams ship safer software. Our work spans web applications, APIs, cloud infrastructure, and AI-generated codebases — and everything we publish here comes from patterns we see in real client engagements.

Practical security, written by practitioners.