ReversingLabs

Security for AI Application SecurityThreat Intelligence

Market readinessHow well the company can compete in its security market, scored across eight dimensions against public evidence. Established: Market readiness of 25 to 30, the typical band where most analyzed companies land.
DefensibilityHow well the company holds its position if competitors catch up on features, scored across seven dimensions against public evidence. Defensible: Defensibility of 15 or above. A position that stays hard for rivals to replicate.
Founded 2009
Funding $120M
Last updated 2026-09-23

All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.

Executive Summary

ReversingLabs, founded in 2009, sells software supply chain security and file threat intelligence to software makers, software buyers and security teams. Its Spectra Assure product scans compiled software for malware, tampering and exposed secrets, and three others analyze files for malware. Its customers include Forescout, ExtraHop and SolarWinds, which runs Spectra Assure as a final check before release. It had raised $81 million by its 2021 Series B, which Crosspoint Capital Partners led, and sold another $38,649,446 in equity in 2024. Tracxn puts total funding at $120 million and headcount at 325. Its products check files against a private repository of more than 422 billion files that ReversingLabs says it has collected for more than 15 years. A rival would need years to approach it.

Sourced Details

Description Spectra Assure analyzes software packages for supply chain risks such as malware, tampering, and exposed secrets, giving software producers and buyers feedback before software is released or deployed. [f1]
Founded 2009 [f2]
HQ Cambridge, Massachusetts, United States [f3]
Funding $120M total [f4]
Latest funding Equity offering (38.6 million dollars sold, first sale April 2024, SEC Form D) [f5]
Deployment SaaS [f6]

Products

Product What it does
Spectra Assure Spectra Assure: Scans AI and ML model files for malicious code as part of software supply chain analysis and lists detected models in an ML-BOM.
Spectra Intelligence Spectra Intelligence supplies file and network reputation data and goodware and malware verdicts through a REST API, feeds, and integrations.
Spectra Analyze Spectra Analyze is a malware analysis workbench that performs automated static and dynamic analysis and supports threat hunting.
Spectra Detect Spectra Detect analyzes high volumes of files from web traffic, email, endpoints, file shares, and cloud storage for malware.

Matrix Coverage

AI Defense Matrix

GovernIdentifyProtectDetectRespondRecover
AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain.
AI Coding and Orchestration Tools AI coding tools and agentic orchestration tools on user devices, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients.
AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD.
AI Traffic Paths to external and self-hosted AI services, MCP tool channels, agent-to-agent calls, model-registry downloads, and egress to unapproved AI services. AI gateways, LLM routers, and MCP gateways steer traffic along those paths. The steering decisions and their inputs belong here too: routing policies, MCP server registries, and agent naming and discovery services.
AI Model Model weights, fine-tuning checkpoints, model cards, registries, an AI bill of materials (AIBOM), and the third-party LLMs your enterprise consumes.
Training Data Datasets used for training, fine-tuning, and continued learning.
Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history.
AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools.

Spectra Assure scans AI and ML model files for malicious code as part of software supply chain analysis and lists detected models in an ML-BOM. It is mapped to the AI Defense Matrix. [f7]

Cyber Defense Matrix

IdentifyProtectDetectRespondRecover
Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware.
Applications Software, interactions, and application flows on the devices.
Networks Connections and traffic flowing among devices and apps, plus communication paths.
Data Content at rest, in transit, or in use across devices, apps, and networks.
Users The people using the devices, apps, networks, and data.

Spectra Assure analyzes software packages for malware, tampering, and exposed secrets, and Spectra Intelligence, Spectra Analyze, and Spectra Detect classify files as goodware or malware. These capabilities are mapped to the Cyber Defense Matrix. [f8]

Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

Established 27 /40 Established: Market readiness of 25 to 30, the typical band where most analyzed companies land.
Dimension Score Rationale
Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. 3/5 ReversingLabs names clear buyers: software producers checking their own releases, enterprises vetting software before use, and security analysts buried in routine threat triage. SecurityWeek tied the need for software-integrity checks to the Codecov, Kaseya and SolarWinds incidents, Gartner calls software supply chain security an emerging market, and the EU Cyber Resilience Act mandates manufacturer security. None of them measures the buyer’s burden. The quantified pain, such as a Canadian city cutting a multi-day analysis workflow to 15 minutes, comes from ReversingLabs’ customer stories. [s2, s4, s13, s19, s21, s6]
Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. 3/5 Spectra Assure’s product page and documentation describe analysis of compiled software without source code, 16 proprietary malware detection engines, and AI model detection that lists models in an ML-BOM. Spectra Detect processes millions of files per day from web, email, endpoint and cloud sources. SolarWinds’ CISO describes Spectra Assure as a final check in its CI/CD pipeline, in a ReversingLabs case study. Gartner and SecurityWeek describe the products without testing them, and the SOREL-20M dataset from Sophos and ReversingLabs is a malware benchmark, not a test of these engines. [s2, s3, s12, s7, s19, s13, s15]
Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. 4/5 Two independent buyer-side signals of different kinds fall within the past twelve months. In an analyst category note published 17 June 2026, Gartner’s Magic Quadrant for software supply chain security describes the market as emerging into a stand-alone capability set. As a regulatory driver, the European Commission states that Cyber Resilience Act reporting obligations for manufacturers apply from 11 September 2026, and software manufacturers are the producers Spectra Assure sells to. [s19, s21, s2]
Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. 3/5 Co-founders Mario Vuksan and Tomislav Peričin hold the CEO and chief software architect roles at a company SecurityWeek dates to 2009, verifiable senior experience in malware analysis built through one company. Its leadership page also lists Doug Levin, a former Black Duck Software CEO. The reviewed sources name no earlier founder company, exit, or independently recognized founder publication record, which a higher score would need. [s5, s13]
GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. 4/5 ReversingLabs publishes named customer stories for SolarWinds, Wirespeed, AdriaScan and Crogl and testimonials credited to Forescout and ExtraHop, and SolarWinds’ CISO describes using Spectra Assure to check releases and generate SBOMs. Gartner independently lists ReversingLabs among the vendors in its June 2026 Magic Quadrant. The customer names and the bank and defense claims are the company’s own publications, which keeps the score below independently reported scale. [s6, s2, s7, s19, s9]
Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. 3/5 SecurityWeek reported that ReversingLabs had raised $81 million by its 2021 Series B, which Crosspoint Capital Partners led. A 2024 SEC Form D records a further $38,649,446 in equity sold, and Tracxn puts total funding at $120 million. The company ships four Spectra products with 325 employees by Tracxn’s count and discloses no revenue or margin, so efficiency is unconfirmed. [s13, s27, s26, s1]
Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. 4/5 Gartner’s June 2026 Magic Quadrant treats software supply chain security as a market and lists ReversingLabs among its vendors. SecurityWeek described the company’s products in 2021 as tools against software supply chain attacks, so outside parties place it without the company’s framing. ReversingLabs announced its Visionary placement itself, and no captured source names it the category’s leader or definer. [s19, s13, s17, s26]
Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. 3/5 Spectra Assure checks software against a threat repository ReversingLabs says covers 400 billion files, curated from more than 15 years of its own research, software vendors and malware sources. SolarWinds runs Spectra Assure in its CI/CD pipeline as a final check before release, which adds replacement work for a customer. That corpus and integration raise the cost of absorption, but the corpus figures and the depth of lock-in are the company’s own claims. The public SOREL-20M dataset shows ReversingLabs builds large malware collections, not that its private corpus is hard to replicate. [s2, s4, s7, s15]
Business Risks Splx develops the SPLX report behind Spectra Assure’s AI model safety scores…
  • Splx develops the SPLX report behind Spectra Assure’s AI model safety scores. If that partnership ended, Spectra Assure’s AI coverage would narrow to model discovery and malware scanning.
  • Gartner lists GitHub and JFrog alongside ReversingLabs in its 2026 software supply chain security research. Either could add malware and tampering checks to products its customers already use, reducing demand for a separate Spectra Assure purchase.
  • ReversingLabs describes the size and curation of its threat repository in its own materials, so an independent test showing comparable malware detection from rival data would weaken its main technical differentiator.
Problem & Market ReversingLabs sells to organizations that must decide whether software is safe to ship or to buy…

ReversingLabs sells to organizations that must decide whether software is safe to ship or to buy. Spectra Assure gives software producers feedback on malware, tampering and exposed secrets before release, and it gives buyers more confidence in the software they acquire. Because it inspects compiled binaries without source code, it can evaluate third-party and commercial software directly.

Independent sources document the problem at scale. SecurityWeek linked the need for software-integrity checks to the Codecov, Kaseya and SolarWinds incidents in 2021. In February 2026 The Hacker News reported Lazarus-linked malicious npm and PyPI packages, quoting a ReversingLabs researcher, and one package passed 10,000 downloads before its malicious version appeared.

The AI angle extends the same problem to models inside software. Spectra Assure detects AI models by signature, lists them in an ML-BOM, and combines malware scanning with red-teaming data from a partner to assess which models are safe to use. [s2, s13, s16, s3]

Product Capabilities ReversingLabs sells four products built on its binary analysis…

ReversingLabs sells four products built on its binary analysis. Spectra Assure scans software packages for supply chain risks, and Spectra Intelligence supplies file and network reputation data. Spectra Analyze is a malware analysis workbench for security operations teams, and Spectra Detect inspects millions of files per day from web, email, endpoints and storage.

Spectra Assure’s documentation describes the analysis in detail. It inspects compiled binaries without source code, applies 16 proprietary malware detection engines, and produces a SAFE report containing a software component inventory and risk assessment.

The AI model coverage has two layers. Spectra Assure detects models by signature and lists them in the ML-BOM, while the safety and red-teaming scores come from the SPLX report, which Splx develops. That partner data appears for a listed set of Hugging Face models, and customers can ask ReversingLabs Support to request testing of others. [s1, s2, s3, s12]

Competitive Positioning Gartner’s June 2026 Magic Quadrant for software supply chain security lists ReversingLabs among its vendors, alongside Checkmarx, Cycode, Endor Labs, JFrog, Sonatype and Black Duck…

Gartner’s June 2026 Magic Quadrant for software supply chain security lists ReversingLabs among its vendors, alongside Checkmarx, Cycode, Endor Labs, JFrog, Sonatype and Black Duck. ReversingLabs announced that it was placed there as a Visionary, one of 18 vendors in the research.

Its stated differentiator is analysis of the shipped artifact. ReversingLabs says Spectra Assure analyzes software in the form it ships, whether binary, package, container or model, so producers and buyers can manage third-party software risk. SolarWinds’ CISO describes it as a final check that compares new builds with known-good builds, run alongside the application security testing tools SolarWinds kept.

In threat intelligence, ReversingLabs markets Spectra Intelligence as an alternative to VirusTotal, backed by its repository of more than 422 billion files. That comparison is the company’s own marketing claim. [s19, s17, s7, s1, s4]

Go-to-Market & Traction ReversingLabs publishes named customers across its product lines…

ReversingLabs publishes named customers across its product lines. Its customer stories name SolarWinds, Wirespeed, AdriaScan and Crogl, and the Spectra Assure page credits testimonials to Forescout and ExtraHop. Anonymized stories cover a Fortune 500 European bank, a Fortune 500 insurer, and two city governments.

Its pricing page lists a free Community tier and a $500-a-month Community+ tier, with Essentials and Enterprise plans priced on inquiry. ReversingLabs also announced joining the Microsoft Security Store partner ecosystem and public-sector partnerships with Norseman Defense Technologies, Carahsoft, Mission First Cyber and Vibrint.

Independent sources add analyst coverage. Gartner lists ReversingLabs among the vendors in its June 2026 software supply chain security Magic Quadrant. The customer names and the company’s statement that it serves two of the top three banks are its own publications, and the company does not disclose revenue or a customer count. [s6, s2, s8, s10, s19, s9]

Team & Credibility Co-founders lead the company SecurityWeek dates to 2009…

Co-founders lead the company SecurityWeek dates to 2009. Mario Vuksan is CEO and co-founder, Tomislav Peričin is chief software architect and co-founder, and Vuksan signed the company’s 2024 Form D as chief executive officer.

ReversingLabs has added outside leadership around the founders. It announced Matt Gyde as chief revenue officer, and its board includes Greg Clark, a managing partner at Crosspoint Capital. Its leadership page also lists Doug Levin, a former CEO of Black Duck Software.

ReversingLabs describes its data corpus as the product of more than 15 years of in-house development and research, and the reviewed sources name no earlier founder company or exit. [s5, s13, s27, s10, s4]

Trust Readiness ReversingLabs states a SOC 2 Type II attestation…

ReversingLabs states a SOC 2 Type II attestation. Its about page lists AICPA SOC 2 Type II certification, and its pricing page lists SOC2 Type II compliance for the Spectra Assure platform.

Customers use the product’s output as evidence in their own reviews. SolarWinds’ CISO says ReversingLabs generates the SBOMs SolarWinds’ customers request, and he calls running ReversingLabs on software before purchase the ideal case. Spectra Intelligence keeps queries and file submissions private in a datastore that is not publicly searchable.

The AI model safety scores rely on a partner. Splx develops the SPLX report that supplies those scores, so a buyer evaluating Spectra Assure for AI model security relies on Splx’s testing for the listed Hugging Face models. [s9, s8, s7, s4, s3]

Competitors Checkmarx, Cycode, Sonatype, JFrog, Black Duck, Endor Labs, Snyk, Semgrep, VirusTotal, SPLX…
Company Relationship Note Compare
Checkmarx competes with Listed with ReversingLabs among the vendors in Gartner’s 2026 Magic Quadrant for software supply chain security.
Cycode competes with Listed with ReversingLabs among the vendors in Gartner’s 2026 Magic Quadrant for software supply chain security.
Sonatype competes with Listed with ReversingLabs among the vendors in Gartner’s 2026 Magic Quadrant for software supply chain security. N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable.
JFrog competes with Listed with ReversingLabs in Gartner’s 2026 software supply chain security research, and Spectra Assure also integrates with JFrog Artifactory. N/AWe scored these companies at different scopes, so the totals measure different things.
Black Duck competes with Listed with ReversingLabs among the vendors in Gartner’s 2026 Magic Quadrant for software supply chain security.
Endor Labs competes with Listed with ReversingLabs among the vendors in Gartner’s 2026 Magic Quadrant for software supply chain security.
Snyk competes with Competes for the software supply chain security budget of the application security teams Spectra Assure sells to. N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable.
Semgrep competes with Competes for the attention and budget of the application security teams Spectra Assure sells to.
VirusTotal competes with ReversingLabs markets Spectra Intelligence as an alternative to it for file reputation lookups.
SPLX adjacent Develops the SPLX report that supplies AI model safety scores in Spectra Assure, a partner on AI model security. N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable.

Add analyzed competitors to compare them side by side with ReversingLabs.

Strategy Deep Dive

A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.

Defensibility

Defensible 16 /21 Defensible: Defensibility of 15 or above. A position that stays hard for rivals to replicate. press the advantage

ReversingLabs holds a private repository of more than 422 billion goodware and malware files. It says it built the repository over more than 15 years from its own research, software vendors and malware sources. Its products analyze compiled software and files against that repository, so a new entrant would have to repeat years of collection to approach it. Customers run the products themselves, and ReversingLabs analysts review some malware detections. Its compliance credential is a SOC 2 Type II attestation, which a rival can also earn. Leaving means rewiring pipeline and security-tool integrations. A partner, Splx, supplies the AI model safety scores in Spectra Assure reports.

Dimension Score Rationale
Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. 2/3 Customers run Spectra Assure and the other Spectra products themselves, and ReversingLabs adds human analysis to the software’s output. Its plans list analyst-vetted malware detections and malware confirmation by a human expert, and its June 2026 release says its malware analysts confirm automated detections when needed, so code and expertise blend.
Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. 2/3 Spectra Assure connects to build pipelines through APIs and CLIs, and Spectra Intelligence feeds SIEM, SOAR, EDR and gateway tools. Leaving means rewiring those integrations and replacing the reputation data they consume, and the cited record documents that dependence without sizing the migration.
Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. 1/3 ReversingLabs states a SOC 2 Type II attestation on its about and pricing pages, an entry requirement a funded rival can also obtain. The captured pages name no authorization or retained liability tied to its products that a replacement would have to match.
Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. 3/3 Spectra Assure analyzes compiled software without source code using 16 proprietary malware detection engines, and Spectra Analyze unpacks more than 400 file formats. ReversingLabs classifies files as goodware or malware across a repository of more than 422 billion files, built from more than 15 years of in-house development and research.
Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. 3/3 ReversingLabs names regulated and public-sector buyers across its lines. A Fortune 500 European bank and a Fortune 500 insurer use Spectra Analyze, and two city governments use its file analysis and Spectra Assure. The company says it serves two of the top three banks and two of the top five defense and aerospace companies, a sector claim SecurityWeek relayed in 2021.
Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. 2/3 ReversingLabs sells platforms with application features. Spectra Assure scans software packages in build and procurement workflows. Spectra Intelligence supplies reputation data that firewalls, gateways and EDR tools consume for filtering and blocking, a feed into tools customers already run.
Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. 3/3 ReversingLabs retains a private repository of more than 422 billion goodware and malware files in a datastore that is not publicly searchable. It says it built the repository from more than 15 years of in-house research, software vendors and malware sources. The repository accrues to ReversingLabs, grows by millions of samples daily, and feeds Spectra Assure’s detection, so a new entrant would have to repeat years of collection to approach it.
Strategic Market Segmentation ReversingLabs sells to software producers securing their releases, to enterprises vetting software they buy, and to security operations teams that analyze files…

ReversingLabs sells to software producers securing their releases, to enterprises vetting software they buy, and to security operations teams that analyze files. Spectra Assure serves producers and software buyers. Spectra Intelligence, Spectra Analyze and Spectra Detect serve analysts, incident responders and threat hunters.

ReversingLabs names regulated and public-sector accounts among its customers. Its customer stories include a Fortune 500 European bank, a Fortune 500 insurer and two city governments. The company also says it serves two of the top three banks and two of the top five defense and aerospace companies. SecurityWeek relayed the company’s claim in 2021 of large-enterprise customers in financial services, defense, software, retail and insurance.

AI model security is part of the Spectra Assure purchase. The scan that inventories software components also lists the AI models it detects in an ML-BOM, and the Enterprise plan adds native scanning of LLMs, VMs and container images.

Product Capabilities & AI Advantages ReversingLabs’ core capability is analysis of compiled software and files without source code…

ReversingLabs’ core capability is analysis of compiled software and files without source code. Spectra Assure applies 16 proprietary malware detection engines and a threat database the company says covers 400 billion files. Spectra Analyze unpacks more than 400 file formats for analysts.

ReversingLabs classifies files against a retained data asset. Spectra Intelligence labels files as goodware or malware with the company’s binary analysis and multi-factor classification algorithm. It draws on a repository of more than 422 billion files that grows by millions of samples daily. ReversingLabs says its malware analysts confirm automated detections when needed, adding human review to the software’s verdicts.

The AI model coverage combines native discovery with partner testing. Spectra Assure detects AI models by signature and lists them in the ML-BOM. It combines malware scanning with red-teaming data from the SPLX report, which Splx develops, to assess which models are safe to use. The partner scores appear for a listed set of Hugging Face models.

Sales Engagement & Go-to-Market ReversingLabs publishes named customers on its own pages…

ReversingLabs publishes named customers on its own pages. In a customer story, SolarWinds’ CISO Tim Brown says SolarWinds added Spectra Assure to its development and deployment pipeline as a final check, and that ReversingLabs generates the SBOMs its customers request. Wirespeed, AdriaScan and Crogl also have customer stories, and the Spectra Assure page credits testimonials to Forescout and ExtraHop.

The pricing page lists a free Community tier and a $500-a-month Community+ tier, with Essentials and Enterprise priced on inquiry. ReversingLabs announced joining the Microsoft Security Store partner ecosystem and public-sector partnerships with Norseman Defense Technologies, Carahsoft, Mission First Cyber and Vibrint.

Independent sources add analyst coverage and funding records. Gartner lists ReversingLabs among the vendors in its June 2026 software supply chain security Magic Quadrant, and Tracxn counts 325 employees. SecurityWeek reported that ReversingLabs had raised $81 million by its 2021 Series B. A 2024 SEC Form D records a further $38,649,446 in equity sold. The company does not disclose revenue or a customer count.

Pricing Model ReversingLabs posts prices for Spectra Assure’s developer tiers and quotes its team plans…

ReversingLabs posts prices for Spectra Assure’s developer tiers and quotes its team plans. Community is free with 100k lookups a month, Community+ costs $500 a month for 1M lookups, and the Essentials and Enterprise plans are priced on inquiry. A 14-day free trial of Spectra Assure is also offered.

The tiers split by buyer. The Community tiers are for individual developers checking open-source packages, while Essentials covers security and development teams scanning proprietary, commercial and open-source software for malware and tampering. Enterprise adds company-wide use and native scanning of LLMs, VMs and container images.

Spectra Intelligence is sold as reputation lookups and threat feeds delivered through a REST API and pre-built integrations.

Product Delivery & Operations Customers operate ReversingLabs software in their own workflows…

Customers operate ReversingLabs software in their own workflows. SolarWinds runs Spectra Assure in its CI/CD pipeline as the final check before software release. Spectra Intelligence feeds reputation data into SIEM, SOAR, EDR and gateway tools through an API and pre-built integrations.

ReversingLabs adds human analysis to the automated output. Its Spectra Assure plans list analyst-vetted malware detections and malware confirmation by a human expert, and the company says its malware analysts confirm automated detections when needed.

The AI model testing depends on Splx. Splx develops the SPLX report that supplies Spectra Assure’s AI model safety scores, and the report covers a listed set of Hugging Face models. Customers can request testing through ReversingLabs Support for Hugging Face models with a pkg:huggingface identifier and no SPLX data.

Earning Customers' Trust ReversingLabs states a SOC 2 Type II attestation on its about and pricing pages…

ReversingLabs states a SOC 2 Type II attestation on its about and pricing pages. Spectra Intelligence keeps queries and file submissions private in a datastore that is not publicly searchable.

Customers use Spectra Assure output as evidence in their own reviews. SolarWinds’ CISO says ReversingLabs generates the SBOMs SolarWinds’ customers request, and he calls running ReversingLabs on software before purchase the ideal case.

A security review of the AI model features covers a second party. The safety and red-teaming scores in Spectra Assure reports come from the SPLX report, which Splx develops.

Platform Strategy & Ecosystem Positioning ReversingLabs runs its products on shared binary analysis and one threat repository…

ReversingLabs runs its products on shared binary analysis and one threat repository. Spectra Assure checks software against the repository, Spectra Analyze and Spectra Detect apply the company’s binary analysis to files, and Spectra Intelligence sells access to the repository through an API.

ReversingLabs describes where the repository comes from. The company says it harvests and curates file and network indicators from more than 15 years of its own development and research, from software vendors, and from malware and network sources. It says it does not depend on crowdsourced collection.

Integrations extend the platform into tools customers already run. The pricing page lists a JFrog Artifactory integration that blocks unsafe open-source imports, and Spectra Intelligence integrates with SIEM, SOAR, TIP and EDR tools. ReversingLabs also announced joining the Microsoft Security Store partner ecosystem.

Team & Execution Capability Co-founders Mario Vuksan and Tomislav Peričin lead ReversingLabs as CEO and chief software architect, and SecurityWeek dates the company to 2009…

Co-founders Mario Vuksan and Tomislav Peričin lead ReversingLabs as CEO and chief software architect, and SecurityWeek dates the company to 2009.

ReversingLabs has added outside leadership around the founders. It announced Matt Gyde as chief revenue officer. Its board includes Greg Clark of Crosspoint Capital, the firm SecurityWeek reported led the 2021 Series B. Its leadership page also lists Doug Levin, a former CEO of Black Duck Software.

The reviewed sources mention no earlier founder company or exit. The SOREL-20M malware research dataset, whose name credits Sophos and ReversingLabs, contains nearly 20 million files.

Sources

Company Detail Sources (8)
Id Source Tier Accessed
f1 ReversingLabs: Spectra Assure Software Supply Chain Security official 2026-09-23
f2 SecurityWeek on ReversingLabs (founded 2009) press 2026-09-23
f3 SEC EDGAR: ReversingLabs, Inc. filer record (CIK 0001724209) regulatory 2026-09-23
f4 Tracxn: ReversingLabs company profile other 2026-09-23
f5 SEC EDGAR: ReversingLabs, Inc. Form D notice of exempt offering (2024) regulatory 2026-09-23
f6 AI Defense Matrix Catalog entry other 2026-06-10
f7 AI Defense Matrix Catalog mapping other 2026-06-23
f8 ReversingLabs: homepage official 2026-09-23
Profile Analysis Sources (19)
Id Source Tier Accessed
s1 ReversingLabs: homepage official 2026-09-23
s2 ReversingLabs: Spectra Assure product page official 2026-09-23
s3 ReversingLabs: How Spectra Assure scans AI models (documentation) official 2026-09-23
s4 ReversingLabs: Spectra Intelligence product page official 2026-09-23
s5 ReversingLabs: leadership page official 2026-09-23
s6 ReversingLabs: customer stories official 2026-09-23
s7 ReversingLabs: SolarWinds customer story official 2026-09-23
s8 ReversingLabs: Spectra Assure plans and pricing official 2026-09-23
s9 ReversingLabs: About us official 2026-09-23
s10 ReversingLabs: press releases index official 2026-09-23
s12 ReversingLabs: Spectra Detect product page official 2026-09-23
s13 SecurityWeek: Threat Detection Provider ReversingLabs Raises $56 Million (August 6, 2021) press 2026-09-23
s15 arXiv: SOREL-20M, A Large Scale Benchmark Dataset for Malicious PE Detection (preprint, December 2020) research 2026-09-23
s16 The Hacker News: Lazarus Campaign Plants Malicious Packages in npm and PyPI Ecosystems (February 12, 2026) press 2026-09-23
s17 ReversingLabs: press release on the 2026 Gartner Magic Quadrant for Software Supply Chain Security (June 18, 2026) official 2026-09-23
s19 Gartner: Magic Quadrant for Software Supply Chain Security (abstract page) research 2026-09-23
s21 European Commission: Cyber Resilience Act policy page regulatory 2026-09-23
s26 Tracxn: ReversingLabs company profile other 2026-09-23
s27 SEC EDGAR: ReversingLabs, Inc. Form D notice of exempt offering (2024) regulatory 2026-09-23
Deep-Dive Sources (18)
Id Source Tier Accessed
s1 ReversingLabs: homepage official 2026-09-23
s2 ReversingLabs: Spectra Assure product page official 2026-09-23
s3 ReversingLabs: How Spectra Assure scans AI models (documentation) official 2026-09-23
s4 ReversingLabs: Spectra Intelligence product page official 2026-09-23
s5 ReversingLabs: leadership page official 2026-09-23
s6 ReversingLabs: customer stories official 2026-09-23
s7 ReversingLabs: SolarWinds customer story official 2026-09-23
s8 ReversingLabs: Spectra Assure plans and pricing official 2026-09-23
s9 ReversingLabs: About us official 2026-09-23
s10 ReversingLabs: press releases index official 2026-09-23
s11 ReversingLabs: Spectra Analyze product page official 2026-09-23
s12 ReversingLabs: Spectra Detect product page official 2026-09-23
s13 SecurityWeek: Threat Detection Provider ReversingLabs Raises $56 Million (August 6, 2021) press 2026-09-23
s15 arXiv: SOREL-20M, A Large Scale Benchmark Dataset for Malicious PE Detection (preprint, December 2020) research 2026-09-23
s17 ReversingLabs: press release on the 2026 Gartner Magic Quadrant for Software Supply Chain Security (June 18, 2026) official 2026-09-23
s19 Gartner: Magic Quadrant for Software Supply Chain Security (abstract page) research 2026-09-23
s26 Tracxn: ReversingLabs company profile other 2026-09-23
s27 SEC EDGAR: ReversingLabs, Inc. Form D notice of exempt offering (2024) regulatory 2026-09-23

Disclaimer

This content is provided "as is" with no warranties.

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.