digiDations

Cover Block

PUBLIC

Attribute	Value
Name	digiDations
Tagline	AI-powered cybersecurity validation platform using adversarial simulation and continuous testing.
Headquarters	Singapore, Singapore
Founded	2022
Stage	Seed
Business Model	B2B
Industry	Security
Technology	AI / Machine Learning
Geography	Southeast Asia
Growth Profile	Venture Scale
Founding Team	Co-Founders (3+)
Funding Label	Undisclosed

Links

PUBLIC

• Website: https://www.digidations.com
• LinkedIn: https://sg.linkedin.com/company/digidations
• AWS Marketplace: https://aws.amazon.com/marketplace/pp/prodview-bg45gjpqbmbsy

Executive Summary

PUBLIC

DigiDations is a Singapore-based startup applying adversarial AI to the critical problem of continuous security validation, a wedge into the enterprise cybersecurity stack that moves beyond periodic audits to real-time resilience testing. The company's platform, ATLAS, is designed to think and adapt like an attacker, using simulations mapped to the MITRE ATT&CK framework to uncover exploitable weaknesses and validate remediation before a breach occurs [Qinux System, May 2025][AWS Marketplace, 2026]. Founded in 2022 by cybersecurity veterans Tim Nan and Teddy Tian alongside AI researcher Dr. Zhengzi Xu, the company emerged from Nanyang Technological University's research network, positioning its technology at the intersection of academic AI and practical security operations [SGInnovate][Prospeo]. Its core differentiation rests on automating the validation of security controls at machine speed, a capability that addresses the growing gap between perceived compliance and actual defensive readiness in complex enterprise environments [digiDations, 2026].

The company's go-to-market strategy is gaining structure through channel partnerships, most notably an exclusive distribution agreement with Qinux System for the ASEAN region announced in May 2025 [Qinux System, May 2025]. While specific funding amounts and valuation are not publicly disclosed, its association with SGInnovate, a Singaporean deep-tech investor, provides a signal of early-stage institutional support. For investors, the next 12-18 months will be defined by the execution of this regional partnership, the disclosure of initial customer deployments to prove commercial traction, and the potential for a formal funding round to scale the team and technology beyond its current research-backed origins.

Data Accuracy: YELLOW -- Core product claims and founding team are confirmed by multiple sources; funding details and customer traction are not publicly available.

Taxonomy Snapshot

Axis	Value
Stage	Seed
Business Model	B2B
Industry / Vertical	Security
Technology Type	AI / Machine Learning
Geography	Southeast Asia
Growth Profile	Venture Scale
Founding Team	Co-Founders (3+)
Funding	Undisclosed

Company Overview

PUBLIC

digiDations was founded in Singapore in 2022 by a trio of cybersecurity and AI specialists: Tim Nan, Teddy Tian, and Dr. Zhengzi Xu [Prospeo]. The company emerged from the research network of Nanyang Technological University (NTU), a connection that suggests its deep-tech orientation and likely origins in academic AI research [SGInnovate]. As of 2026, the company maintains its headquarters in Singapore and operates with an estimated team size of 11 to 50 employees [LinkedIn, 2026].

The company's primary milestone, beyond its founding, is the establishment of a formal channel for regional distribution. In May 2025, cybersecurity distributor Qinux System announced its appointment as the exclusive distributor for digiDations' products across the ASEAN region [Qinux System, May 2025]. This partnership represents a concrete step toward commercial scaling, positioning the company's AI-powered security validation platform for sale through an established regional channel. The company also lists its ATLAS platform on the AWS Marketplace, indicating a cloud-based delivery model and a degree of technical validation from a major cloud provider [AWS Marketplace, 2026].

A review of public records shows no formal announcements of seed or venture funding rounds. The company's association with SGInnovate, a government-backed deep-tech investor, is documented, but the nature and scale of that support are not publicly detailed [SGInnovate]. The absence of disclosed funding specifics makes the company's financial runway and capitalization structure a point for direct inquiry.

Data Accuracy: YELLOW -- Foundational details (founding year, team, HQ) are corroborated by multiple sources, but specific financial and legal entity details are not publicly available.

Product and Technology

MIXED

The core of digiDations' offering is ATLAS, a platform that frames security validation as a continuous, adversarial process rather than a periodic audit. The system is designed to automate the simulation of sophisticated attacks, mapping its actions to the MITRE ATT&CK framework and the Cyber Kill Chain to provide a structured assessment of an organization's defensive posture [AWS Marketplace, 2026]. This approach aims to close the gap between compliance checklists and actual resilience by uncovering exploitable weaknesses and validating the effectiveness of remediation efforts in real time [digiDations, 2026].

A second, less detailed system called TARA is also mentioned in company materials, described as providing "instant validated action from a question" [digiDations]. The relationship between ATLAS and TARA is not explicitly defined in public sources, but the overall product direction points toward an automated cyber defense (ACD) architecture. The company's stated goal is for its existing platforms to form the foundation for this fully autonomous future state [digiDations].

Public technical details are sparse, but the platform's capabilities are framed through partner descriptions. Qinux System, appointed as digiDations' exclusive ASEAN distributor, characterizes the technology as delivering real-time, automated security control testing [Qinux System, May 2025]. The platform's AI component is consistently highlighted as the differentiator, enabling it to "think, adapt, and challenge defenses like a real attacker" rather than running static, predefined tests [TIG Cyber Security Group, Jan 2025].

Data Accuracy: YELLOW -- Core product claims are consistent across the company website and partner announcements, but technical architecture and detailed feature sets are not independently verified.

Market Research

PUBLIC

The market for continuous security validation is expanding as enterprises, facing more sophisticated attacks and stricter regulatory mandates, move beyond periodic compliance checks toward real-time resilience measurement.

Total addressable market (TAM) figures specific to AI-powered security validation are not publicly available from third-party reports covering digiDations. However, the broader adjacent market for breach and attack simulation (BAS) and security validation is projected to grow significantly. Analysts at Gartner have previously positioned BAS as a core component of the larger threat exposure management market, which they forecast to exceed $2 billion by 2026 (analogous market, Gartner). The demand is driven by the convergence of several tailwinds: the increasing adoption of complex, multi-cloud environments that expand the attack surface; a rise in advanced persistent threat (APT) campaigns that evade traditional defenses; and a shift in executive focus from compliance checklists to demonstrable security effectiveness.

Key demand drivers cited in industry research include the inadequacy of traditional, point-in-time penetration testing and red teaming exercises against fast-evolving threats [SGInnovate]. This gap creates a wedge for platforms that offer continuous, automated validation mapped to frameworks like MITRE ATT&CK, which digiDations' ATLAS platform emphasizes [Qinux System, May 2025][AWS Marketplace, 2026]. Furthermore, regulatory pressures, particularly in financial services and critical infrastructure sectors prevalent in Singapore and the ASEAN region, are pushing organizations to adopt more rigorous, evidence-based security posturing.

Adjacent and substitute markets include traditional managed security service providers (MSSPs) offering periodic testing, open-source BAS tools, and broader vulnerability management platforms. The competitive differentiation for specialized validation platforms hinges on automation depth, the sophistication of AI-driven attack simulation, and integration with existing security orchestration tools. The exclusive distribution partnership with Qinux System positions digiDations to target the ASEAN region's growing cybersecurity spend, which is itself a tailwind driven by digital transformation initiatives and national cyber strategies across Southeast Asia [Qinux System, May 2025].

Data Accuracy: YELLOW -- Market sizing is based on analogous, dated reports for adjacent categories; specific TAM for the company's niche is not confirmed. Demand drivers are corroborated by partner and investor commentary.

Competitive Landscape

MIXED

DigiDations enters a crowded security validation market defined by large incumbents, well-funded specialists, and a growing number of AI-native challengers.

The competitive analysis proceeds as prose.

The competitive map for continuous security validation and breach and attack simulation (BAS) is stratified. At the enterprise incumbent tier, established players like Palo Alto Networks (with its XSIAM platform) and CrowdStrike (Falcon OverWatch) integrate validation capabilities into broader security operations suites, competing on consolidation and existing customer relationships. Pure-play BAS vendors such as AttackIQ and SafeBreach hold significant market share and offer mature, scenario-driven testing libraries. The most direct competitive pressure, however, comes from a newer wave of AI-driven platforms like Horizon3.ai, which emphasizes autonomous penetration testing, and Cymulate, which offers a continuous security validation platform. Adjacent substitutes include traditional penetration testing services and red-team consultancies, which digiDations' marketing explicitly positions as outdated and insufficiently continuous [SGInnovate].

DigiDations' stated edge rests on its academic AI research pedigree and regional channel strategy. The company's emergence from Nanyang Technological University's research network suggests a focus on proprietary simulation and reasoning algorithms, a potential differentiator against vendors using more commoditized AI [SGInnovate]. Its exclusive distribution partnership with Qinux System for the ASEAN region provides an immediate, owned channel into a specific geographic market, a tangible advantage over global vendors with less-focused local presence [Qinux System, May 2025]. The durability of the AI edge is perishable, contingent on continued R&D investment to stay ahead of rapidly evolving large language model integrations from larger rivals. The channel advantage is more durable in the near term, locked in by an exclusive agreement.

The company's exposure is twofold. First, it lacks the brand recognition and enterprise sales footprint of the incumbents, making direct competitive displacement in global accounts a steep challenge. Second, its platform, ATLAS, appears to compete directly in the core feature set of established BAS vendors, without a publicly articulated wedge into a uniquely underserved niche. Its partnership-dependent go-to-market also creates a single point of failure; scaling beyond ASEAN would require replicating the Qinux model in other regions, a non-trivial operational hurdle.

A plausible 18-month scenario hinges on regional execution and technological proof. If digiDations can use its Qinux partnership to secure flagship enterprise deployments in Southeast Asia and publish validated case studies, it becomes an attractive regional acquisition target for a global vendor seeking a beachhead. The loser in this scenario would be a generic BAS vendor without a strong AI narrative or geographic specialization, which could be squeezed out of the ASEAN market. Conversely, if the company fails to convert its channel advantage into marquee customer logos, it risks being relegated to a niche research project, outmaneuvered by better-capitalized competitors with faster product iteration.

Data Accuracy: YELLOW -- Competitive positioning inferred from product claims and market context; no direct competitor citations are available.

Opportunity

PUBLIC The prize for digiDations is the potential to become the primary system for validating enterprise security posture in an era where compliance checklists are no longer sufficient to prove resilience.

The headline opportunity is to define and lead the category of continuous, AI-driven security validation as a core enterprise platform. The company's positioning, as described by SGInnovate, directly addresses a critical gap where traditional, periodic assessments fail against sophisticated threats [SGInnovate]. Its platform, ATLAS, is framed not as another point-in-time testing tool but as a system that continuously perceives, reasons, and validates security at machine speed [digiDations]. This shift from audit to continuous assurance aligns with a broader industry trend toward proactive security operations. The exclusive distribution agreement with Qinux System for the ASEAN region provides a concrete, cited channel to begin scaling this vision with a partner that has established enterprise relationships [Qinux System, May 2025]. The opportunity is reachable because the company is already articulating a platform-level ambition,its materials reference building a foundation for a fully autonomous cyber defense architecture [digiDations],and has secured a strategic partner to initiate market penetration.

Growth scenarios outline distinct paths from a regional deep-tech startup to a category-defining entity. The following table models two concrete, high-scale outcomes.

Scenario	What happens	Catalyst	Why it's plausible
Platform Standard in Regulated ASEAN	digiDations becomes the mandated or de facto validation tool for financial institutions and critical infrastructure providers across Southeast Asia, driven by regional cybersecurity directives.	A major financial regulator or a consortium like the ASEAN Cybersecurity Coordinating Committee endorses continuous validation methodologies, with digiDations' technology referenced in guidelines.	The company is already featured in materials from Singapore's Cyber Security Agency (CSA) via the TIG Cyber platform, indicating alignment with national cyber innovation priorities [TIG Cyber Security Group, Jan 2025]. Its exclusive distributor, Qinux, focuses on the ASEAN enterprise and government sector [Qinux System, May 2025].
Acquisition by a Global Cloud or Security Vendor	A major cloud provider (AWS, Google Cloud) or broad-platform cybersecurity vendor (Palo Alto Networks, CrowdStrike) acquires digiDations to integrate its AI validation engine as a native service.	digiDations demonstrates technical differentiation through patented AI reasoning models and logs a series of successful enterprise deployments via its partner channel, proving product-market fit.	The company's listing on the AWS Marketplace provides a direct commercial and technical integration point with a major cloud ecosystem, a common precursor to acquisition [AWS Marketplace, 2026]. Its focus on MITRE ATT&CK-based simulation speaks directly to the language of enterprise security operations centers where large vendors compete.

What compounding looks like centers on a data and methodology flywheel. Each security validation run generates proprietary data on attack path success, control failures, and remediation effectiveness. This dataset, unique to the company's simulation engine, can be used to train more sophisticated and context-aware AI models, improving the platform's accuracy and reducing false positives. A more accurate platform attracts larger, more complex enterprise deployments, which in turn generate richer, more diverse attack simulation data. Early signs of this flywheel are suggested in the company's claim that its AI-powered platform "thinks, adapts, and challenges defenses like a real attacker" [TIG Cyber Security Group, Jan 2025], implying a learning component. Furthermore, distribution partnerships like the one with Terrabyte Group across Southeast Asia create a lock-in effect, as channel partners build practices and revenue streams around the platform, incentivizing them to deepen integration and customer commitment [Terrabyte Group, 2026].

The size of the win can be framed by looking at a comparable category. Breach and Attack Simulation (BAS) and Continuous Threat Exposure Management (CTEM) are adjacent markets. A publicly traded peer in the broader security validation space, Qualys, provides a reference point. Qualys, which offers a broad suite of vulnerability management and compliance tools, had a market capitalization of approximately $5.5 billion as of early 2026. A more focused, AI-native platform that successfully becomes the standard for continuous validation could command a significant premium within that market segment. If the "Platform Standard in Regulated ASEAN" scenario plays out, capturing a leading share of a rapidly digitizing regional market, the company could plausibly reach a valuation in the high hundreds of millions to low billions of dollars (scenario, not a forecast). This outcome is underpinned by the accelerating regulatory focus on cybersecurity resilience in Southeast Asia and the lack of a dominant, regionally-rooted player in this specific niche.

Data Accuracy: YELLOW -- The core product claims and partnership announcements are well-cited. The growth scenarios and market outcome are extrapolations based on these cited strategic positions and comparable market valuations, not on disclosed financials or customer logos.

Sources

PUBLIC

1. [Qinux System, May 2025] Qinux System Appointed as DigiDations Distributor in ASEAN | https://www.qinux.co/index.php/component/content/article/qinux-system-appointed-as-exclusive-digidations-distributor-in-asean?catid=9&Itemid=101

2. [AWS Marketplace, 2026] AWS Marketplace: digiDations ATLAS Security Validation Platform | https://aws.amazon.com/marketplace/pp/prodview-bg45gjpqbmbsy

3. [SGInnovate] digiDations profile | https://www.sginnovate.com/node/14724

4. [Prospeo] digiDations page | https://www.prospeo.com/

5. [digiDations, 2026] digiDations | AI- Powered Security Validation | CTEM | ACD | https://www.digidations.com/

6. [LinkedIn, 2026] digiDations LinkedIn page | https://sg.linkedin.com/company/digidations

7. [TIG Cyber Security Group, Jan 2025] AI-Powered Cybersecurity Validation - ATLAS | https://tig.cybersg.sg/wp-content/uploads/2025/01/AAG_FINAL.pdf

8. [digiDations] digiDations company website | https://www.digidations.com/

9. [Terrabyte Group, 2026] Terrabyte Group Partners with digiDations to Deliver AI-Powered Security Validation Across Southeast Asia | https://www.terrabytegroup.com/terrabyte-group-partners-with-digidations-to-deliver-ai-powered-security-validation-across-southeast-asia/