AvalonX, an AI security start-up based in Alpharetta, Georgia, emerged from 18 months in stealth on October 28, 2026, with the launch of its Artemis platform for continuous, AI-powered penetration testing and up to $10 million in backing from Ridown Capital. The platform is designed to give small and midsize businesses the kind of offensive security testing long used by large enterprises, without requiring an enterprise security team or budget, by combining autonomous attack simulation with human expertise.
The Problem AvalonX Is Targeting
Smaller organisations face many of the same attack vectors as large ones, but they typically have smaller teams, less money and fewer chances to test whether their defences will hold. Many rely on periodic penetration tests, leaving long stretches between assessments while systems, software and threats continue to evolve. That gap, AvalonX argues, is where attackers operate.
The company cites Verizon’s 2025 Data Breach Investigations Report, which found ransomware in 88% of breaches involving small and midsize companies, compared with 39% at larger organisations. The figure is used in the company’s announcement to illustrate why infrequent testing is risky for smaller firms, not as a promise about what Artemis itself will prevent. No testing platform can guarantee that a customer will not be breached, and AvalonX does not claim otherwise in its launch material.
Chief executive and co-founder Craig Goodwin, a former chief information security officer at Fujitsu, Monster and CDK Global, put the pitch in plain terms: large enterprises test constantly, with red teams, consultants and budgets to match, while a 50-person accounting firm or a regional manufacturer faces the same threats with none of those resources. Most such organisations test once a year, if they can afford it, he said, and attackers do not wait eleven months to strike.
How Artemis Works
Artemis uses autonomous agents to test a company’s defences the way a malicious actor would, searching for ways in and determining how far attackers can move once inside. It is powered by Aether, AvalonX’s proprietary 400-billion-parameter security AI, trained on nine years of real-world offensive-security data and backed by 60 billion dark-web records, according to the company. Those figures are AvalonX’s own claims about its model and data, not independently verified benchmarks, and they should be read that way.
Autonomous testing provides speed and scale, while AvalonX’s penetration testers add human judgment when it is needed. Potential vulnerabilities that require expert analysis are evaluated by a tester, the company says, ensuring customers receive meaningful, actionable findings rather than a flood of automated alerts. That human step is important, because automated scanners are notorious for producing long lists of low-priority findings that small teams cannot act on.
The customer experience is deliberately straightforward. A business enters its domain, defines what AvalonX is authorised to test, and receives results the same day. External testing requires no software installation, and results are written in plain language with clear next steps. Findings also map to SOC 2, ISO/IEC 27001, PCI DSS v4.0 and HIPAA, frameworks that matter to firms handling customer data, payments or health information. Testing is offered through a monthly subscription, and businesses can run a free initial test.
Who Is Behind It
AvalonX is led by cybersecurity veterans Craig Goodwin, Ricardo Valdes and Ben O’Nion, who bring more than 50 years of combined information security experience to the company. Ridown Capital, the investment firm of Onecom co-founders Aaron Brown and Darren Ridge, has invested up to $10 million in AvalonX. Onecom serves more than 65,000 small and midsize businesses, giving Brown and Ridge a close view of the technology and security challenges those companies face, according to the announcement.
Brown said Onecom has spent two decades serving small and midsize businesses and hears the same thing repeatedly: they are targeted like enterprises but resourced like start-ups. AvalonX, he said, is built for them from the ground up, which is why Ridown backed it. Ridown Group’s portfolio spans telecommunications, cybersecurity and e-commerce, with revenues of more than $500 million in the United Kingdom alone, according to the company.
Note the wording: Ridown has invested “up to” $10 million, not necessarily $10 million already drawn, and the announcement discloses no valuation, revenue or customer numbers.
Why It Matters
This matters because continuous testing is moving from a luxury to a necessity as attacks become faster and more automated, and small firms are the least equipped to keep up. If autonomous testing can genuinely deliver enterprise-grade assessments at a subscription price, with human review filtering the noise, it could close a real gap in the market. If it produces too many false positives, or if customers treat a same-day report as a substitute for fixing the problems it finds, it will not. The same tension between automation and human judgment runs through safe places for AI agents to run code, identity and kill switches for AI agents and verified identities for AI agents: the tools are getting autonomous, and the controls around them matter as much as the tools themselves.
Background
AvalonX spent 18 months in stealth before launching publicly in October 2026. Its Artemis platform, powered by the proprietary Aether security AI, offers continuous, on-demand penetration testing for small and midsize businesses, backed by up to $10 million from Ridown Capital.
Source: company announcement
0 Comments