Pentera Extends from Validation to Remediation with DevOcean Acquisition

Pentera has acquired DevOcean, an AI-driven remediation platform that helps security teams close the gap between identifying and fixing real cyber risks. The move expands Pentera’s security validation platform into remediation operations, connecting adversarial testing directly to the workflows that resolve what those tests uncover.

Security teams are often buried under thousands of findings, many of which don’t reflect actual exposure. DevOcean brings automation and context to that process - triaging alerts, deduplicating noise, and assigning ownership to the right teams. Its integrations and SecOps workflows fold neatly into Pentera’s existing platform, giving customers a single environment to validate, prioritize, and act on proven risks.

This shift matters because validation alone isn’t enough. Organizations need to show progress, not just in discovering vulnerabilities, but in closing them. The combined platform tracks remediation performance, enforces SLA-driven accountability, and delivers audit-ready proof of closure across compliance and security teams. It’s a more connected way to manage both the technical and operational sides of cyber risk.

DevOcean’s founders, both CyberArk veterans, built their platform to make remediation smarter and more measurable. As part of Pentera, that vision scales, turning validation into action and helping enterprises move faster from knowing their risks to actually reducing them.