Chinese cybersecurity company ThreatBook acquired CyberStrikeAI, an open-source AI penetration-testing platform. The company said it would maintain the OSS version while offering an enterprise edition.
ThreatBook announced that it had acquired the publicly available open-source platform CyberStrikeAI. The acquisition is notable for its plan to continue offering the OSS version while adding enterprise features.
The enterprise version is expected to support on-premises deployment, local data storage, audit logging of AI agent operations, and access controls. Security measures to prevent misuse are also planned for the OSS version. ThreatBook explicitly stated that it would maintain CyberStrikeAI's OSS version while rolling out a commercial edition.
The deal has been compared with previous examples and is viewed as part of a trend toward building commercial products on open-source foundations, as Rapid7 did with Metasploit. Further disclosures are awaited on the scope of the intellectual property transfer, the extent of the acquisition's impact, and the extent of developer participation.
The move serves as a reminder of the commercialization of OSS and the dual-use concerns in the cybersecurity market, and attention is likely to focus on future product development and the implementation of security measures.