Company
watchTowr exists because the gap between AI-driven exploitation speed and human-paced patching is now untenable. We close that gap with the watchTowr Platform, the Preemptive Exposure Management capability trusted by Fortune 500s and critical infrastructure providers worldwide.
Backed by expertise
We have spent years simulating some of the world’s most sophisticated cyber adversaries and helped secure some of the world’s largest organizations. Accredited by global industry bodies, we hold world-class offensive security knowledge and capability.
US
United States
122 East 42nd Street, 18th Floor, New York, 10168, USA
UK
United Kingdom
45 Fitzroy Street, London, W1T 6EB, UK
SG
Singapore
135 Cecil Street #10-01, 069536, Singapore
AU
Australia
Sydney, NSW, Australia
Milestones
Incorporation, funding, offices and platform releases — the record of how watchTowr got to a continuous, four-region watch.
2021
Founded
watchTowr incorporated
2022
Platform
The Platform Ships
Offices
Singapore & London open
2023
Funding
Peak XV, Prosus, Wavemaker
Labs
Labs goes public
2024
Offices
New York opens
2025
Platform
Active Defense launches
2026
Offices
Australia opens
Investors
We’re backed by some of the world’s leading venture capital investors who believe in our vision for continuous security.
Zero install. No infrastructure changes. Uplift your security posture within hours of onboarding the watchTowr Platform.
Point us at a domain. We reconstruct your real external estate and come back with validated exposure, not a theoretical CVE list.
The watchTowr Platform validates your exposure to an emerging threat and mitigates it at the edge while the vendor patch is still in testing.
watchTowr Labs publishes what is being exploited right now and whether it touches your estate, not vendor summaries written a week late.
Continuous, fully external validation of what an attacker can actually exploit against your estate, at a 0.01% false-positive rate.
Subsidiaries, forgotten infrastructure, shadow IT. We rebuild your external surface from a single domain, then validate what is exposed.
