Sweepatic

Based in Leuven, Belgium, Sweepatic operates as a cybersecurity entity specializing in External Attack Surface Management (EASM). The company was established in 2016 by co-founders Stijn Vande Casteele and Martin Carnogursky. Stijn Vande Casteele, who also served as CEO, brought approximately two decades of hands-on cybersecurity experience and a Master's degree in Information Security to the venture. The firm was founded to address the expanding digital footprints of organizations, which create numerous, often unmonitored, internet-facing assets that can be exploited by attackers.

In June 2023, Sweepatic was acquired by Outpost24, a Swedish cybersecurity risk management platform provider, for an undisclosed amount. The acquisition was a strategic move to integrate Sweepatic's EASM capabilities into Outpost24's broader Continuous Threat Exposure Management (CTEM) platform, providing a more holistic view of both internal and external security risks. Before the acquisition, Sweepatic had secured $4.39 million in funding over two rounds from investors, including eCAPITAL, TIIN Capital, and the Flemish investment company PMV.

Sweepatic's core offering is a cloud-native EASM platform that automates the discovery, analysis, and continuous monitoring of an organization's internet-connected assets. The platform operates 24/7 from an outside-in perspective, identifying known and unknown assets such as websites, cloud services, and infrastructure to uncover vulnerabilities and misconfigurations. Key features include non-intrusive asset discovery, detection of shadow IT and look-a-like domains, monitoring of encryption certificates, and port scanning. The system utilizes AI to analyze the collected data and provides actionable findings through a simplified dashboard, designed to be accessible even to non-security experts. The business model is SaaS-based, serving enterprise clients directly and through partnerships with MSSPs and resellers. The platform aims to reduce the Mean Time To Detection (MTTD) and helps organizations prioritize risk mitigation efforts.

Keywords: External Attack Surface Management, EASM, cyber resilience, asset discovery, vulnerability assessment, shadow IT, brand protection, attack surface monitoring, cybersecurity, Outpost24, Stijn Vande Casteele, digital footprint mapping, threat intelligence, risk mitigation, cloud security, reconnaissance, continuous monitoring, domain discovery, certificate monitoring, port scanning