Bendings closes $55 million acquisition of Scopertos

Bendings has completed its $55 million purchase of vulnerability research company Scopertos, bringing Scopertos' entire team and unpublished research library into Bendings Labs. The deal strengthens Bendings' red-team and AI-driven testing capabilities and sets up the first coordinated disclosures from the library in 2027.

Why it matters: - The acquisition gives Bendings first-party vulnerability research that can feed its red-team work and Bendings Gauge, the firm's AI model. - Bendings gains unpublished findings on vulnerabilities in widely deployed enterprise, network and embedded software. - The deal also expands the research base behind The Seam Report 2026, Bendings' study of 78 publicly documented intrusions in the United States and the Gulf.

What happened: - Bendings completed its acquisition of Scopertos for $55 million. - The deal began in 2025 and closed in stages, with the final closing in October 2026. - Bendings and Scopertos negotiated directly, with no outside advisors. - Bendings financed the transaction from its own resources and took no outside investment. - The transaction includes Scopertos' team, its founder and its unpublished research library.

The details: - Scopertos started in engineering tooling for software delivery before moving into security research. - The company sells original vulnerability research to a small number of clients under exclusive, multi-year agreements. - Those client agreements continue under Bendings. - The acquired research library has never been published. - The library contains original vulnerabilities in widely deployed enterprise, network and embedded software. - Bendings also acquired the rights attached to the client agreements. - Specific vulnerabilities, client identities and contract terms remain confidential under the transferred agreements. - The entire Scopertos team has joined Bendings and now forms the core of Bendings Labs, the firm's vulnerability research division. - Scopertos' isolated research lab now operates as part of Bendings Labs. - Bendings said the value of Scopertos lies in the team and the library. - Bendings said the team found vulnerabilities that had not been published.

Between the lines: - The deal shifts Bendings from relying on public techniques toward proprietary research that can uncover issues defenders may not already know about. - For clients, that can mean testing against techniques that have not yet entered the public record. - The acquisition also suggests Bendings is building a deeper in-house research stack rather than buying only access to a catalog of findings.

What's next: - The first coordinated disclosures from the Scopertos library are set to begin in 2027. - Bendings Labs will publish those disclosures under its own name. - Bendings will use the expanded research base to support its red teams and client testing.

The bottom line: - Bendings has turned a quiet vulnerability shop into a core part of its security operations, with unpublished research now set to power future disclosures and client testing.