Built to Validate Security, Not Just Document It
Pentriarch is an AI security validation platform. We continuously simulate real attack paths across your infrastructure to identify which vulnerabilities attackers can actually exploit.
We exist because passing a security audit and being genuinely secure are not the same thing. We built Pentriarch to close that gap - permanently.
The Origin
Why Pentriarch Exists
Organizations spend heavily on compliance tooling, vulnerability scanners, and annual penetration tests. Yet security incidents keep happening to organizations that have all three. The problem is not that the tools fail to find issues - it is that they cannot confirm which issues actually lead to real breach paths.
Compliance tools verify documentation. Scanners list potential weaknesses. Annual pentests capture a single moment in time. None continuously validate whether your infrastructure is genuinely exploitable right now - under real attacker techniques.
Pentriarch was built to answer one specific question: “Can an attacker break into our systems right now, using real techniques?”
What We Stand For
Mission & Principles
Mission
Make continuous, authorized security validation accessible to every organization operating critical infrastructure - not just those with dedicated red teams.
Approach
Controlled, non-destructive, and evidence-backed. We validate exploitability at sufficient depth to prove real risk - without causing damage, exfiltrating data, or disrupting services.
Technology
Reasoning where judgement is needed, determinism where reproducibility is. Industry-standard security tools orchestrated under one policy layer. We do not just list CVEs - we map how they chain together to reach critical assets.
Accountability
Every validation action is logged, scoped, and customer-authorized. The AI is autonomous in analysis - it is never autonomous in authority. You remain in full control at all times.
Market Category
Security Validation & Exposure Management
Pentriarch operates in the Security Validation and Automated Exposure Management category, one of the fastest growing areas in enterprise cybersecurity. The category has drawn hundreds of millions in venture funding, which tells you the problem is real. Almost all of that capital has gone to platforms priced for enterprise security teams with dedicated red teams.
We built for the organisations underneath that line, and we split the work deliberately. Reasoning handles reconnaissance, correlation and validation, where judgement is genuinely required. Attack-path construction, drift detection and scheduling are deterministic, so the same environment produces the same result twice. A certificate is only worth issuing if the run behind it is reproducible.
Category
Security Validation / Exposure Management
Stage
Early Access - Design Partners
Differentiator
Closed loop, signed evidence
The Team
Built by Practitioners
We have spent our careers on the delivering side of security testing, handing organisations reports that described a moment rather than a state. Pentriarch is the tool we wanted then.
Collin Ambani Anjeo
Founder & CEO
Architected and built the platform, including the specialist agent pipeline, the governed execution layer and the evidence chain. CREST-certified penetration tester. MSc Cybersecurity and MSc Data Science. Formerly Senior Security Architect for Managed Security Services and Analytics at Safaricom, across banking, healthcare and cooperative financial services.
Mark Kiarie Mahugu
Co-founder & CTO
Owns the platform: application, integrations and the containerised execution layer. Completed the Digital Product Development Masterclass at Digital Product School, UnternehmerTUM.
Zadock Kigen
Lead Security Researcher
Leads offensive testing and attack-path research. Maintains the platform automated test suite and Linux security-hardening baselines, both public on GitHub. Previously at Techno Brain. Maseno University.
Lucas Mwaka
Delivery & Onboarding
Runs pilot delivery and customer onboarding, the step between an assessment and a working engagement.
Advisors
Collins Waweru, commercial strategy and partnerships
Safety First
How We Keep Testing Safe
Security testing carries inherent risk. Our operating principles are non-negotiable.
Work With Us
We are onboarding a small number of security leaders as design partners.
Apply for Early Access