Twenty develops enterprise‑grade software that automates and scales offensive cyber operations for U.S. defense agencies and allied partners. The platform encodes elite tradecraft to enable continuous, high‑volume targeting across hundreds of systems, delivering measurable outcomes in real‑world conflict. Revenue is generated through government contracts and service agreements that provide ongoing access to the cyber capabilities and associated support.
Funding
Funding not disclosed
Founders
Product
Problem
Many government and allied cyber operators rely on ad‑hoc scripts and fragmented IT tools that require extensive manual effort, limit scalability, and cannot guarantee reliable performance under real‑world conflict conditions. This results in delayed response times and inconsistent outcomes when defending critical missions against sophisticated adversaries.
Solution
Twenty delivers an industrial‑scale cyber operations platform that embeds elite tradecraft directly into software, turning weeks‑long manual processes into automated, continuous campaigns across hundreds of targets. The solution provides enterprise‑grade reliability, hardened against the harsh environments of active conflict, and integrates with existing command‑and‑control (C2) infrastructures. Built on a cloud‑native, micro‑services architecture, it orchestrates threat‑intelligence ingestion, automated exploit deployment, and real‑time telemetry aggregation. Advanced analytics and machine‑learning models prioritize actions and surface actionable insights, enabling operators to focus on decision‑making rather than routine execution. All data flows are secured with end‑to‑end encryption and comply with DoD security standards, ensuring mission‑critical confidentiality and integrity.
Target Audience
Primary customers are U.S. Department of Defense cyber units, allied nation cyber commands, and intelligence agencies that require automated, large‑scale offensive and defensive cyber capabilities. The platform also serves large defense contractors and systems integrators tasked with delivering mission‑critical cyber operations for government clients.
Features
- Modular micro‑services framework that automates the full kill‑chain—from reconnaissance to post‑exploitation—across distributed target sets
- Built‑in elite tradecraft libraries (credential harvesting, lateral movement, persistence) that are continuously updated to reflect current adversary techniques (MITRE ATT&CK aligned)
- Real‑time telemetry dashboard with high‑resolution metrics, automated alerting, and AI‑driven prioritization of operational tasks
- Secure, FIPS‑validated communication layer with end‑to‑end encryption and role‑based access control for multi‑agency collaboration
- API‑first design enabling seamless integration with existing C2, SIEM, and threat‑intel platforms (STIX/TAXII compatible)
- Cloud‑native deployment on hardened government‑approved infrastructure (FedRAMP, DoD Impact Level 4) with automated scaling and resilience
- Continuous compliance monitoring and audit logging to satisfy stringent government and allied regulatory requirements