AvalonX Emerges From Stealth With $10M for AI Security Agents

AvalonX has emerged from 18 months in stealth with a continuous, AI-powered penetration testing platform built for small and midsize businesses, according to a company announcement reported by PR Newswire on October 30, 2026. The Alpharetta, Georgia startup pairs autonomous security agents with human expertise, aiming to give smaller organizations the kind of offensive security testing that large enterprises have long taken for granted.

The launch comes with backing of up to $10 million from Ridown Capital, the investment arm of Ridown Group. AvalonX says its platform is available now, and businesses can run a free initial test through its website.

AvalonX enters a market where the gap between attackers and defenders is measured in months rather than days. Many smaller firms still rely on periodic penetration tests, leaving long stretches between assessments while their systems, software, and the threats facing them keep changing. AvalonX argues that continuous testing, delivered as a monthly subscription, is the practical answer for organizations that cannot staff a full red team.

Why continuous testing matters for smaller firms

Smaller organizations face many of the same attack vectors as large ones, but they typically work with smaller teams, tighter budgets, and fewer chances to check whether their defenses will hold. That mismatch is the core problem AvalonX was built to solve, according to the announcement.

The company points to research from Verizon, whose 2025 Data Breach Investigations Report found ransomware in 88 percent of breaches involving small and midsize companies, compared with 39 percent at larger organizations. The contrast underlines why a once-a-year test can leave a business exposed for most of the year.

Craig Goodwin, chief executive and co-founder of AvalonX, framed the issue in plain terms in the announcement. He noted that large enterprises test constantly with red teams, consultants, and budgets to match, while a 50-person accounting firm or a regional manufacturer faces the same threats with far fewer resources. Most such organizations test once a year, if they can afford it at all, he said, and attackers do not wait eleven months to strike.

Goodwin previously served as chief information security officer at Fujitsu, Monster, and CDK Global, according to the announcement. That enterprise background shapes the pitch: AvalonX is meant to deliver the same quality of testing he relied on as an enterprise security chief, at a price smaller businesses can afford.

How Artemis and Aether work together

At the center of the AvalonX platform is Artemis, which uses autonomous agents to test a company's defenses the way a malicious actor would. The agents search for ways in and determine how far an attacker could move once inside, according to the company. The approach mirrors a broader shift across the agent economy, where autonomous systems are increasingly trusted with multi-step work inside real business systems — a trend also visible in agentic trading platforms and AI agents built for financial operations.

Artemis is powered by Aether, AvalonX's proprietary security AI, described as a 400-billion-parameter model trained on nine years of real-world offensive-security data and backed by 60 billion dark-web records. The scale of that training data is central to the company's claim that its agents can find realistic breach paths rather than simply scanning for known vulnerabilities.

Autonomous testing provides speed and scale, but AvalonX does not leave the final judgment to machines alone. Potential vulnerabilities that require expert analysis are evaluated by human penetration testers, ensuring customers receive findings that are meaningful and actionable rather than a flood of automated alerts. That combination of autonomous agents and human verification is the company's answer to one of the oldest complaints about automated security tools: too much noise, too little signal.

The customer experience is intentionally straightforward, according to the announcement. A business enters its domain, defines what AvalonX is authorized to test, and receives results the same day. External testing requires no software installation, and results are written in plain language with clear next steps. Findings also map to compliance frameworks including SOC 2, ISO/IEC 27001, PCI DSS v4.0, and HIPAA, which matters for smaller firms that need audit-ready evidence without hiring compliance specialists.

Backing from Ridown and what comes next

Ridown Capital is the investment firm of Onecom co-founders Aaron Brown and Darren Ridge. Onecom serves more than 65,000 small and midsize businesses, giving its founders a close view of the technology and security challenges those companies face, according to the announcement.

Brown said that at Onecom the team hears the same message repeatedly: smaller businesses are targeted like enterprises but resourced like startups. AvalonX is built for them from the ground up, he said, and that is why Ridown backed it. Ridge added that he and Brown have spent their careers giving smaller businesses enterprise capability at a price that makes sense, and that AvalonX does the same for cybersecurity.

Ridown Group's portfolio spans telecommunications, cybersecurity, and e-commerce, with revenues of more than $500 million in the United Kingdom alone, according to the announcement. That distribution footprint could matter for AvalonX, since Onecom's customer base overlaps closely with the smaller businesses the platform targets.

AvalonX is led by cybersecurity veterans Goodwin, Ricardo Valdes, and Ben O'Nion, who together bring more than 50 years of combined information security experience to the company, according to the announcement. The test now is whether continuous, agent-driven testing can win trust with buyers who have historically been priced out of this level of security. If it does, AvalonX will have shown that autonomous agents can do more than assist human defenders — they can carry the first line of offensive testing, with humans stepping in where judgment matters most.

Sources: PR Newswire via Morningstar and AvalonX.