Siemba

Siemba Launches Global Partner Program With Tiered Margins, White-Label Delivery

Atlanta – September 22, 2026 -- Siemba, a continuous offensive security provider, has launched Siemba Pride, a formal global partner program offering deal registration, co-sell support, tiered margins, and white-label delivery on its AI-driven continuous threat exposure management (CTEM) platform.

Three partner pillars target distinct channel roles

Siemba Pride organizes partners into three categories. Enablers are systems integrators that deploy and operationalize the platform inside enterprise environments. Amplifiers cover MSSPs, agencies, resellers, and procurement networks that bring Siemba to new customers through their own channels. Enhancers are ISVs and technology platforms that integrate with Siemba via APIs and co-engineered workflows.

Siemba Launches MCP Server to Run Pentests via AI Chat

Atlanta – September 22, 2026 -- Siemba has launched general availability of Siemba MCP, a Model Context Protocol server that lets security and engineering teams run penetration tests and generate finished security analysis by chatting directly with AI assistants, eliminating the need for a separate dashboard login.

Six packaged skills replace manual dashboard analysis

Siemba MCP ships as a single plugin containing a connector and six named skills: Test Analysis, Kill Chain, Critical Briefing, Remediation Plan, Attack Surface, and CISO Report. Test Analysis reads login screenshots to diagnose failed authenticated test runs caused by bad credentials or unexpected multi-factor prompts. Kill Chain maps individual findings into full attack paths, rating each chain by its weakest link rather than raw severity and naming the single fix that breaks the most chains at once.

Siemba Automates IDOR Testing Across Full API Collections

Atlanta – September 20, 2026 -- Siemba has launched automated testing for insecure direct object reference (IDOR) flaws, cutting the time to scan a 200-endpoint API collection to under an hour, a task the company says has typically taken human testers days or weeks.

IDOR ranks first among OWASP's API Security Top 10 risks

IDOR, classified by OWASP as broken object level authorization, occurs when an endpoint fails to verify that a caller-supplied identifier belongs to them, allowing a single changed number in a request to expose another user's data. Siemba's Chief Security Officer Sandhya Prashanth said the flaw "drives a huge share of real-world breaches" and requires little more than systematic testing across every endpoint to detect.

Siemba Named in Three Gartner Hype Cycle Reports for Third Straight Year

Atlanta – September 20, 2026 -- Siemba, an offensive security provider, has been named a Sample Vendor for Penetration Testing as a Service (PTaaS) in three separate 2026 Gartner Hype Cycle reports, marking the third consecutive year the company has secured this recognition across all three publications.

Siemba earns placement across security operations, application security and XaaS research

The company was cited in the 2026 Hype Cycle for Security Operations, the Hype Cycle for Application Security, and the Hype Cycle for XaaS. The Security Operations report examines the growth of Continuous Threat Exposure Management (CTEM) as a priority for enterprise security teams, while the Application Security report covers how AI transformation and agentic applications are reshaping enterprise risk. The XaaS report addresses the shift toward platform-driven, everything-as-a-service consumption models in IT.