Avertium is a privately owned company headquartered in the US, founded in 2019 and employing approximately 230 individuals. The company operates as a cybersecurity provider, with its main product focus on computer and network security.
On March 31, 2026, Avertium published insights on "AI Application Testing: Securing the New Attack Surface," examining how companies traditionally identify attack surfaces within their infrastructure—from servers to people—and how this informs security policy creation. Previously, on March 30, Avertium detailed CVE-2026-21284, a stored Cross-Site Scripting (XSS) vulnerability in Adobe Commerce that enables high-privileged attackers to inject malicious scripts for session hijacking and unauthorized data access. Earlier in the month, on March 29, the firm's CISO offered advice on adopting AI securely and responsibly, stressing the need to ensure safe and business-aligned scaling of AI to mitigate inherent risks. On March 19, Avertium also highlighted CVE-2026-21536, a critical unauthenticated remote code execution (RCE) vulnerability in the Microsoft Devices Pricing Program (DPP) that allows attackers to upload and execute malicious files without authentication or user interaction. This followed a March 16 assessment of "The Iran Conflict - Global Cyber Operations Risk," which identified a sustained elevation in global cyber risk and accelerated Iranian state-aligned cyber operations.
Subscribe for full access to Avertium's products in full detail
Subscribe for full access to Avertium's revenue in full detail
Subscribe for full access to Avertium's products in full detail 
