OnDefend

Cyber security testing and consulting firm

[OnDefend @OnDefend]

Most security programs end up with a remediation list no one can realistically close.

The problem isn't the volume. It's the absence of prioritization.

OnDefend proves the attack paths and identifies the fixes that eliminate the most risk.

https://t.co/fg9Kht6Jg7

[OnDefend @OnDefend]

Persistent technology. Elite red team expertise.

The adversary is moving faster than ever. The answer is a team with the technology to match speed and the instinct to know what matters when they find it.

That's the OnDefend model: https://t.co/s1TGctAaUj

[OnDefend @OnDefend]

It’s official, and now it’s on the shelf. OnDefend landed at No. 686 on the 2026 Inc. 5000, and the award just arrived at HQ.

Thank you to our team for the work behind this growth and to our clients for partnering with us along the way.

Details here: https://t.co/a6QV2ph8mc

[OnDefend @OnDefend]

OnDefend advisor Andy Bonillo stopped by HQ last week. Andy saw our team's work firsthand in his former role as GM of TikTok USDS. Now he's working with us to find blind spots in security programs before an AI-enabled attacker does. Follow the journey: https://t.co/4IB2hLY7nG

[OnDefend @OnDefend]

Technology handles volume. Elite operators handle judgment. The combination means more of your environment tested, attack paths validated faster, and remediation guidance that's prioritized by impact.

That's what greater efficiency looks like in security. https://t.co/Ds5LxSRI9T

[OnDefend @OnDefend]

A vulnerability in isolation is rarely the threat. The threat is the chain: the misconfiguration that connects to the inherited trust that connects to the exposed credential that opens the door to everything. OnDefend finds the chain and helps break it. https://t.co/KQEicamual

[OnDefend @OnDefend]

Risk crosses boundaries. Attackers don't stay in one lane. Your testing shouldn't either. OnDefend tests across every domain because attack paths don't respect the lines on your org chart. Every domain. The full picture. Dive deeper here: https://t.co/vKD1Tr5WJg

[OnDefend @OnDefend]

If you know OnDefend founder Chris Freedman, you know his passion for giving back to students and entrepreneurs. Chris recently returned to his alma mater at UF to speak about seizing opportunities and building in the AI age. Thank you, Chris, for building up future leaders!

[OnDefend @OnDefend]

@OnDefend's proprietary technology, BlindSPOT, leverages AI to map attack paths and accelerate testing so our team can do what AI alone can't: validate what's real, prove the chain, and prioritize the fixes that actually reduce risk.

https://t.co/UAFE1nJCXI

[OnDefend @OnDefend]

Work that used to eat up 60 to 70% of an engagement now takes a fraction of that.

Pen tester Matt Zamat wrote about how this actually works across the offensive workflow here: https://t.co/qai2PnjLoY

[OnDefend @OnDefend]

@OnDefend CTO Ben Finke takes it to the lightboard to show exactly how our elite red teamers chain together weaknesses to discover hidden attack paths that most security teams never find.

Get the full breakdown: https://t.co/CR68LEWicn

[OnDefend @OnDefend]

Great to see some of our Washington D.C.-based crew connect in person decked out in their OnDefend swag. Making the effort to stay connected in person like this is what continues to make OnDefend feel like a team, not just a company.

Check us out: https://t.co/deFSQerNu9

[OnDefend @OnDefend]

Cybersecurity Awareness Month is a good reminder, but awareness alone doesn't stop bad actors. Organizations that hold up under pressure are the ones that test defenses before someone else does. That's the work we do all year, not just in October. https://t.co/u3UgROjlI8

[OnDefend @OnDefend]

File extensions lie. An SVG can be executable code. A PDF can run JavaScript. And most upload validation still isn't checking for either. OnDefender Jeremiah Nji breaks down 3 real attack scenarios hiding behind file uploads. Read it here: https://t.co/b9iZV6fBtZ

[OnDefend @OnDefend]

Known vulnerabilities account for about 1/3 of breaches. The other 2/3 are in gaps like misconfigurations, forgotten settings, etc. OnDefend fixes the smallest number of vulnerabilities that lead to eliminating the highest volume of risk. More here: https://t.co/YUCpFfuvwr

[OnDefend @OnDefend]

Most security tools are built to see only a slice of risk in one domain but not the whole risk picture. What’s enterprise organizations really need is a provider built to connect risk across all of their domains.
More on this here: https://t.co/8h6PG0rsQc

[OnDefend @OnDefend]

"It's now context that matters a lot more than it does the old school method of ‘forget all previous instructions.’" That's OnDefender Erik D., and it's part of the story behind prompt injection's rise to the top of OWASP's AI risk list. For more, read:
https://t.co/3qAS74pnYW

[OnDefend @OnDefend]

Changing your pen test vendor every year is old school thinking. We treat testing as an ongoing relationship and leverage what we learn from prior tests to make our teams smarter and faster with each engagement.

See how we do it: https://t.co/OH4qcE8X8Z

[OnDefend @OnDefend]

"Sure, every founder feels that way. Ups and downs, ebbs and flows. But I have an unyielding belief in what we do. I have an unyielding belief in our team. And we're just getting started." @OnDefend CEO Chris Freedman on ever doubting OnDefend.
https://t.co/LIETeJwdfx

[OnDefend @OnDefend]

Check out OnDefender Shana Williams in her 10 years of OnDefend special edition swag!
Thanks, Shana, for being an integral part of the team.
Take a minute to check out all of the great things happening at @OnDefend: https://t.co/IgTO1j4pph