Built by practitioners
Rimator is years of real engagements, and the automation built to end their rework, distilled into software. Every campaign is shaped by what works against real environments.
Company
Built by practitioners who kept seeing the same gap.
Rimator started in the field in 2019, with pentests, incident response, and a question that would not go away: why do good teams with good tools keep missing things?
- Founded
- Concept 2019, to market 2026
- Headquarters
- North Royalton, Ohio
- Built by
- Virtus Cybersecurity
- Contact
- hello@rimator.ai
Our mission
Make proof of security continuous.
Organizations invest heavily in security tools and capable teams. What they rarely have is proof that it all works together under a real attack, and that it still works next month.
Breaches take hold in the gaps between teams, tools, and consoles. Rimator exists to find those gaps continuously, prove them with evidence, and close them for good. We do not replace your people or your stack. We show you, with evidence, where they hold and where they need to change.
“Incident response showed me where breaches actually take hold: in the gaps. The organizations I walked into had excellent tools and capable teams. Nobody missed on purpose. There was simply more surface than attention. Rimator is the thing that tests the pile, continuously, kept honest by its own evidence.”
Our story
From port scans to a standing loop.
-
2019
The trenches
Working as penetration testers and security engineers, too much of the job was rework: re-running scans, hand-checking versions, reconciling results. On large projects, things got missed.
-
2020 – 2021
The machine
Machine learning models began creating, analyzing, and acting on scan data. Piece by piece the build took on more of the testing work, until it stopped being a helper and became the searcher.
-
In the field
The gap
Incident response revealed the other half of the problem: capable defenses spread across many teams and consoles, with breaches taking hold in the spaces between them.
-
2026
The loop
Rimator goes to market as a standing loop that carries testing end to end, then validates every attack against the controls you already own.
What we believe
Principles we build by.
Proof over promises
Every claim the platform makes is backed by your own telemetry. We do not ask you to trust us; we show you what fired and what stayed silent.
One discipline
Offense and defense are not rival departments. They are the same discipline read in both directions, and the product refuses to let them drift apart.
The name comes from the Latin rimor: “I probe, I search, I dig into.” The one who searches, not the one who scanned once, filed a report, and moved on.
Trust & compliance
Held to the standards you answer to.
Two claims, kept honest separately: how Rimator itself is assessed, and how the platform’s evidence maps to the frameworks you report against. Every status below says exactly how far along it is.
Platform assurance
SOC 2 Type II
Audit in progressIndependent attestation of the security, availability, and confidentiality controls behind the platform.
ISO/IEC 27001
Certification underwayAn audited information-security management system governing how the platform is built, operated, and improved.
GDPR
Data handling alignedTelemetry stays scoped to your workspace and is processed for one purpose: correlating each attack with its evidence.
Framework alignment
MITRE ATT&CK®Every offensive action mapped to tactics and techniques.
NIST CSF 2.0Verdicts roll up to the six CSF functions.
CIS Controls v8Proves which safeguards hold in practice.
OWASP Top 10Web and API campaigns exercise the top flaw classes.
DORA · TIBER-EUSupports threat-led penetration testing programs.
Operating commitments
Safe by design
Campaigns touch only targets you define, run within budgets, and are reversible. Attacks prove a path exists; they never disrupt the systems they touch.
Accountable
A full audit trail of everything the platform did, when, and against what. Every verdict is traceable to its evidence.
Self-applied
The same loop that validates your environment runs continuously against ours. Workspace access is invitation-based and role-scoped.
SOC 2 and ISO/IEC 27001 engagements are shown at their current stage: in progress, not yet attested. Framework alignment means mapping and coverage, not certification by or endorsement from the framework owners. MITRE ATT&CK® is a registered trademark of The MITRE Corporation; OWASP® is a registered trademark of the OWASP Foundation, Inc.; CIS Controls® is a registered trademark of the Center for Internet Security, Inc.
The search never stops. Neither should the proof.
See what Rimator finds in your environment, and what your defenses have to say about it.