Novee launches External Surface Testing to validate exploitable assets
Novee Cyber Security Ltd. has introduced External Surface Testing, an AI-driven feature designed to identify and validate exploitable assets in a company’s internet-facing environment. The tool aims to help security teams prioritize vulnerabilities by simulating real-world attacker behavior, reducing the manual effort required to distinguish between potential and actual threats.
Editor, Lazyfounder
TABLE OF CONTENTS
AI-driven tool for external attack surface testing
Novee Cyber Security Ltd. has launched External Surface Testing, a new feature on its AI-driven penetration testing platform. The tool is designed to help security teams identify and validate exploitable assets in their internet-facing footprint by simulating real-world attacker behavior.
Unlike conventional external attack surface management products, which catalog exposed assets and score them by severity, External Surface Testing validates whether these assets can actually be exploited. This reduces the manual effort required for security teams to prioritize vulnerabilities.
The tool requires only a domain name to initiate testing. It works outward, mirroring the approach of an external attacker, and tracks discovered assets and services to uncover unlogged flaws, including chained attack paths.
How the tool integrates with Novee’s platform
External Surface Testing operates on the same platform as Novee’s Application Pentesting product. Findings from other vendors’ attack surface tools can be imported and validated within Novee’s system, ensuring a consolidated and prioritized list of vulnerabilities backed by evidence.
Novee’s platform is designed to avoid disruptive testing. Exploit attempts use non-destructive payloads, and traffic is capped to prevent load spikes or overwhelming security operations centers with false positives. Testing occurs without agents or customer-supplied credentials, ensuring an outside-in perspective.
Founders and funding
Novee was founded in May 2025 by Ido Geffen, Gon Chalamish, and Omer Ninburg, all former national-level offensive security operators. The company raised $51.5 million in January 2025 from investors including YL Ventures LP, Canaan Partners, and Zeev Ventures LP.
Why this matters for security teams
External Surface Testing addresses a critical gap in vulnerability management by validating which exposed assets are truly exploitable. This shifts security teams from reacting to long lists of potential threats to focusing on confirmed risks, reducing response times for critical vulnerabilities.
The tool also bridges the gap between external attack surface management and application-layer testing. Assets discovered during external testing can be seamlessly promoted into a full gray-box or white-box penetration test, providing a unified workflow for security teams.
What this means
Lazyfounder analysis — our interpretation, not reported fact.
Novee’s launch of External Surface Testing reflects a broader trend in cybersecurity: the shift from detecting vulnerabilities to validating their exploitability. For founders and operators, this tool could reduce the noise in vulnerability management, allowing security teams to focus on actionable threats. The integration of external and application-layer testing on a single platform may also streamline workflows, particularly for organizations juggling multiple security tools.
The $51.5 million funding round earlier this year signals investor confidence in AI-driven cybersecurity solutions. For startups in this space, Novee’s approach—combining automation with real-world attacker simulation—could set a benchmark for how AI is applied to penetration testing and attack surface management.
Related on Lazyfounder
Sources
- SiliconANGLE · 2026-11-03
Novee’s External Surface Testing checks which exposed assets attackers can actually exploit
This story is an original summary drafted with AI by Lazyfounder from the reporting listed above and checked by automated validation. Facts are attributed to their original publishers; sections marked as analysis are Lazyfounder's. Where a source is in another language, facts were machine-translated and quotations are reported, not reproduced. Read the original coverage via the links, and see our AI policy and corrections policy.
About the author
Editor, Lazyfounder
Tarun Mottlia edits LazyFounders, covering Indian startups, funding rounds, AI and product launches. Every story on the site is AI-assisted and checked against its cited sources before publication.
More stories by Tarun MottliaGet the LazyFounder Brief
Startup, funding and AI news in a five-minute read. Join the early-access list.
