It’s official, and now it’s on the shelf. OnDefend landed at No. 686 on the 2026 Inc. 5000, and the award just arrived at HQ.
Thank you to our team for the work behind this growth and to our clients for partnering with us along the way.
Details here: hubs.la/Q04B9rZf0
OnDefend advisor Andy Bonillo stopped by HQ last week. Andy saw our team's work firsthand in his former role as GM of TikTok USDS. Now he's working with us to find blind spots in security programs before an AI-enabled attacker does. Follow the journey: hubs.la/Q04B9j0p0
Technology handles volume. Elite operators handle judgment. The combination means more of your environment tested, attack paths validated faster, and remediation guidance that's prioritized by impact.
That's what greater efficiency looks like in security. hubs.la/Q04zlvp80
A vulnerability in isolation is rarely the threat. The threat is the chain: the misconfiguration that connects to the inherited trust that connects to the exposed credential that opens the door to everything. OnDefend finds the chain and helps break it. hubs.la/Q04zlskx0
Risk crosses boundaries. Attackers don't stay in one lane. Your testing shouldn't either. OnDefend tests across every domain because attack paths don't respect the lines on your org chart. Every domain. The full picture. Dive deeper here: hubs.la/Q04zkK7W0
If you know OnDefend founder Chris Freedman, you know his passion for giving back to students and entrepreneurs. Chris recently returned to his alma mater at UF to speak about seizing opportunities and building in the AI age. Thank you, Chris, for building up future leaders!
@OnDefend's proprietary technology, BlindSPOT, leverages AI to map attack paths and accelerate testing so our team can do what AI alone can't: validate what's real, prove the chain, and prioritize the fixes that actually reduce risk.
hubs.la/Q04yWtt10
Work that used to eat up 60 to 70% of an engagement now takes a fraction of that.
Pen tester Matt Zamat wrote about how this actually works across the offensive workflow here: hubs.la/Q04yQybK0
@OnDefend CTO Ben Finke takes it to the lightboard to show exactly how our elite red teamers chain together weaknesses to discover hidden attack paths that most security teams never find.
Get the full breakdown: hubs.la/Q04yWrJl0
Great to see some of our Washington D.C.-based crew connect in person decked out in their OnDefend swag. Making the effort to stay connected in person like this is what continues to make OnDefend feel like a team, not just a company.
Check us out: hubs.la/Q04y9FMy0
Cybersecurity Awareness Month is a good reminder, but awareness alone doesn't stop bad actors. Organizations that hold up under pressure are the ones that test defenses before someone else does. That's the work we do all year, not just in October. hubs.la/Q04y9BB90
File extensions lie. An SVG can be executable code. A PDF can run JavaScript. And most upload validation still isn't checking for either. OnDefender Jeremiah Nji breaks down 3 real attack scenarios hiding behind file uploads. Read it here: hubs.la/Q04y9z5X0
Known vulnerabilities account for about 1/3 of breaches. The other 2/3 are in gaps like misconfigurations, forgotten settings, etc. OnDefend fixes the smallest number of vulnerabilities that lead to eliminating the highest volume of risk. More here: hubs.la/Q04y9x1s0
Most security tools are built to see only a slice of risk in one domain but not the whole risk picture. What’s enterprise organizations really need is a provider built to connect risk across all of their domains.
More on this here: hubs.la/Q04xN8mQ0
"It's now context that matters a lot more than it does the old school method of ‘forget all previous instructions.’" That's OnDefender Erik D., and it's part of the story behind prompt injection's rise to the top of OWASP's AI risk list. For more, read:
hubs.la/Q04xN2b70
Changing your pen test vendor every year is old school thinking. We treat testing as an ongoing relationship and leverage what we learn from prior tests to make our teams smarter and faster with each engagement.
See how we do it: hubs.la/Q04xN01-0
"Sure, every founder feels that way. Ups and downs, ebbs and flows. But I have an unyielding belief in what we do. I have an unyielding belief in our team. And we're just getting started." @OnDefend CEO Chris Freedman on ever doubting OnDefend.
hubs.la/Q04xnDR20
Check out OnDefender Shana Williams in her 10 years of OnDefend special edition swag!
Thanks, Shana, for being an integral part of the team.
Take a minute to check out all of the great things happening at @OnDefend: hubs.la/Q04xnM750
Ten years. A decade of results. But none of that happens without the team behind it. "The hard work that our team has put in is the only reason these (awards) are sitting on this table." - Chris Freedman, OnDefend CEO. Read the full story: hubs.la/Q04xNbvV0
The problem with source code review has always been it’s speed…or lack thereof.
But that has changed. By adding AI into source code review, clients don’t have to trade depth for speed.
@OnDefender Matt Zamat walks through the change and why it matters: hubs.la/Q04xnMJD0



















