Synack Expands CREST Partnership with New Certification Pathways for the Synack Red Team

96% readBuilding on seven years of CREST accreditation, Synack deepens its commitment to independently verified security talent by adding two new CREST certifications to the SRT Pathways program

REDWOOD CITY, Calif.—Synack, the Human + AI penetration testing platform, today announced an expansion of its longstanding partnership with CREST , an international not-for-profit organization that sets the standard for technical security testing.

The expansion adds two new CREST certifications to the Synack Red Team (SRT) Pathways program , giving CREST-certified security researchers a direct route to join the SRT and giving enterprise customers additional assurance that the researchers behind their engagements hold independently verified credentials.

Synack has been a CREST Accredited Member Company for Penetration Testing since 2019, a designation that requires annual renewals and triennial full audits of the company’s methodology, data security handling, and technical operations. This expansion deepens that relationship by extending CREST’s independent standard to the individual researcher layer.

The SRT Pathways program now recognizes two additional CREST certifications:

– CREST Certified Tester Infrastructure (CCT INF) — mapping to host and infrastructure assessment

– CREST Certified Tester Application (CCT APP) — mapping to web application testing

They join the CREST Registered Penetration Tester (CRT), which has been recognized in SRT Pathways since the program launched. Researchers who hold any of these credentials receive expedited onboarding consideration and a reliable path for greater earning potential.

The SRT is one of the most selective communities in offensive security. Fewer than 10% of applicants are accepted, with each researcher passing background checks, technical assessments, skills validation, and ongoing performance review before touching a customer environment. CREST certifications sit alongside that as a second, independent benchmark — one that is increasingly meaningful for organizations operating under frameworks such as DORA, NIS2, and TIBER-EU, where vendor credentialing is becoming part of procurement diligence.

As a multinational company with customers and researchers spanning the globe, Synack recognizes that CREST carries particular weight in EMEA markets, where enterprise security teams and regulated organizations increasingly treat independent credentialing as an important procurement signal.

“A pentest is only as strong as the researchers running it,” said Ryan Rutan, Sr. Director of Community at Synack. “Expanding the CREST certifications recognized on SRT Pathways adds independent validation to the rigor our customers already count on from the Synack Red Team. And for CREST-certified researchers, it creates a clear, structured path to put those credentials to work on real engagements.”

“CREST has been valuable in my career, especially when working in the MEA and EU markets where it is widely expected,” said SRT member Nikhil K. “It makes it easier for recruiters and organizations to identify qualified talent because CREST is recognized and trusted. It is considered a gold standard in pentesting, so having it adds credibility and can help open up better opportunities.”

“Our partnership with Synack gives CREST-Certified penetration testers a direct path into one of the most selective research communities in the world,” said Michael Keen, Senior Product Manager – Workforce Development at CREST. “That’s good for researchers building careers in offensive security, it’s good for maintaining high standards to advance testing methodologies, and it’s good for the organisations that rely on independently credentialed talent to protect their most critical environments.”

CREST-certified researchers interested in joining the Synack Red Team can learn more and apply through the Synack Red Team Pathways program .

Enterprise customers looking to understand how CREST accreditation and independently verified researcher credentials strengthen their penetration testing programs can learn more at Synack or contact Synack to discuss their security testing needs.

Synack Supports Majority of Cabinet-Level Federal Departments as New AI Executive Order Raises the Bar on Federal Security

New White House directive reinforces the need for AI-enabled, continuously validated security across federal networks and critical infrastructure

REDWOOD CITY, Calif.—June 9, 2026—Synack, the AI + human penetration testing platform, today highlighted how its FedRAMP Moderate Authorized PTaaS platform and Sara AI Pentesting align with the cybersecurity priorities outlined in the White House’s new Executive Order, “Promoting Advanced Artificial Intelligence Innovation and Security.” The order introduces a voluntary framework for testing frontier AI models before public release—and separately directs federal agencies to accelerate AI-enabled cyber defense, expand access to advanced cybersecurity tools, and coordinate vulnerability discovery and remediation at scale. Both priorities reflect a broader federal push to ensure AI is deployed securely. Synack already supports that mission for federal customers, including the majority of cabinet-level agencies.

Scaling Defenses to Match AI-Era Threats

The Executive Order directs the Cybersecurity and Infrastructure Security Agency (CISA) to establish or expand federal programs that enhance AI-enabled defensive cybersecurity tools to match the speed and scale of evolving threats. Sara AI Pentesting automates reconnaissance, attack surface mapping, and initial exploits at machine speed, while the Synack Red Team (SRT)—a globally vetted community of elite ethical hackers—validates what is real, exploitable, and relevant to the mission. This combination of agentic AI and human expertise enables federal agencies to test more frequently and cover more attack surface than either approach can achieve alone. AI finds more. Humans prove what matters.

“This Executive Order sends a clear signal: periodic testing and automated scanning alone are no longer enough to keep pace with AI-era threats,” said Jay Kaplan, CEO and Co-founder, Synack. “Federal security teams need continuous validation, AI-enabled scale, and human expertise to determine what is actually exploitable. That is exactly the model we have been building toward for 13 years, and what we deliver to federal customers today through our FedRAMP Moderate Authorized PTaaS platform.”

Securing Critical Infrastructure

As part of this order, CISA will facilitate access to cybersecurity services for operators of critical infrastructure—including rural hospitals, community banks, and local utilities. Synack has spent 13 years securing some of the most sensitive assets in these sectors, from the F-15’s Trusted Aircraft Information Download Station (TADS) to remote elections technology for Democracy Live. Synack’s continuous testing model ensures findings are validated and actionable.

Continuous Vulnerability Discovery for Federal Compliance

The Executive Order establishes a new AI cybersecurity clearinghouse to coordinate vulnerability scanning, validate findings, and prioritize remediation across federal networks and critical infrastructure—and directs the Office of Management and Budget (OMB) to identify grant funding for advanced AI vulnerability detection. Synack delivers precisely this model of continuous security validation. As documented in the 2026 State of Vulnerabilities Report, Synack tested for React2Shell across customer assessments—surfacing zero-day exposure at a frequency and scale that periodic testing cannot match.

As the Executive Order’s 30- and 60-day implementation timelines begin, federal agencies and critical infrastructure operators face real urgency to modernize their security testing programs and remediation process. Synack is ready to help them meet these mandates today. Schedule a readiness assessment at synack.com.

Minds by Animoca Brands and HKSTP launch ‘Build East’ demo day to unveil Hong Kong’s top agentic AI builders

On 7 July 2026, eight local teams will pitch for access to the up to US$10M Minds Investment Programme in front of global delegates

HONG KONG — 8 June 2026 — Animoca Brands and Hong Kong Science and Technology Parks Corporation (HKSTP) today announced Build East, a premier demo day they are co-hosting on 7 July 2026 to showcase local talent focused on agentic AI. The initiative will see eight standout Hong Kong-based teams pitch their projects for potential access to the Minds Investment Programme.

The Minds Investment Programme was created to support early-stage builders integrating Minds by Animoca Brands (“Minds”) as their core product layer. Teams which are successfully accepted into the investment programme, subject to assessment from time to time, will receive an individually tailored mix of benefits, such as Cognition Credits, developer relations support, high-value ecosystem introductions across Animoca Brands’ portfolio of over 600 companies, and, where appropriate and subject to due diligence, capital investment from an aggregate pool of up to US$10M.

Building the agentic era

Minds by Animoca Brands is a persistent AI agent platform that removes complexity while preserving full control and customization for users of any knowledge or skill level. It enables anyone to quickly deploy and manage sovereign, always-on AI agents, called Minds, without having to operate local servers or manage any hardware or software.

Build East seeks to identify and support promising Hong Kong-based projects building with Minds, by evaluating them for eligibility for the Minds Investment Programme. 

The cohort structure for Build East is evenly split: four demo slots are reserved for premier HKSTP Park companies, and four demo slots are open to the wider community.  On demo day, the eight teams will pitch their projects to an audience of investors, ecosystem leaders, and global delegates, including a delegation from Saudi Arabia. Selected teams will be eligible for acceptance into the Minds Investment Programme, subject to further evaluation. Visit the Minds Builder Hub webpage for more details.

Build East will take place on 7 July 2026 from 1 to 6 p.m. at Hong Kong Science Park. HKSTP is the exclusive “Tech Ecosystem Partner” of LEAP East 2026, which begins the following day. 

HKSTP has built a thriving innovation and technology ecosystem, supporting 13 unicorns and bringing together approximately 2,500 technology companies from 26 countries and regions, and over 17,000 research professionals.

Leadership perspectives

Yat Siu, co-founder and executive chairman of Animoca Brands, said: “As a global company headquartered in Hong Kong, we are absolutely thrilled to work with HKSTP to help accelerate the development of agentic AI in this vibrant and forward-looking city. Hong Kong’s combination of builder density, capital depth, and global connectivity render it uniquely well-suited to establish itself as a leading economic and development hub for the agentic era. Build East provides a timely platform enabling agentic AI builders in Hong Kong to connect with global investors as the city’s role in technology, entrepreneurship, and innovation continues to evolve.”

Eric Or, chief ecosystem development officer of HKSTP, said: “HKSTP is proud to co-host Build East alongside Animoca Brands and Minds. This event reflects our REIMAGINE AI+ commitment and our role as Hong Kong’s home for the founders building the next generation of intelligent agents.” 

How to apply

Applications to Build East are now open. Hong Kong-based developers, founders, and early-stage teams who are leveraging Minds by Animoca Brands are encouraged to submit their projects to secure a demo slot at Build East. The deadline for applications is 22 June 2026. Teams can apply directly via the Minds Builder Hub at http://build.hellominds.ai/program/build-east. 

Vodia Networks Announces External Presence Sharing with Version 70 of the Vodia PBX

BOSTON: June 9, 2026 – Vodia Networks, Inc., a provider of unified cloud communications solutions to enterprises, contact centers, and service providers, is pleased to announce the newest version of the industry-standard Vodia PBX, V70, enables presence information sharing externally between tenants and across individual PBX systems, helping teams stay connected across distributed communication environments. 

V70 introduces the ability to share presence information between two tenants on the same PBX, or across different PBX servers in separate locations. The PBX systems must be able to reach each other through the internet for the exchange of presence information across environments. Once configured, the external account can be monitored through multiple interfaces. 

This feature extends BLF visibility beyond a single tenant or PBX system, creating new possibilities for organizations operating across multiple locations or managing distributed PBX deployments. V70 also creates a path for external applications to push presence information through the REST API, enabling additional flexibility for custom integrations and communication workflows. 

External Presence Sharing is extremely useful for organizations operating across multiple offices, separate PBX systems, or multi-tenant deployments: 

●      businesses with users distributed across multiple locations

●      organizations operating separate PBX systems by department or office

●      service providers managing multiple tenants

●      teams that require visibility into extension availability across environments

 By extending presence visibility beyond a single PBX environment, V70 helps organizations maintain clearer communication visibility across users and locations.

V70 improvements for modern PBX deployments

Version 70 of the Vodia PBX introduces major architectural and usability improvements designed for modern business communication environments. In addition to External Presence Sharing, V70 also: 

●      introduces a completely refreshed admin interface built on new technology

●      uses multiple CPU cores for media processing, enabling more than a thousand calls on a single server

●      provides snapshot creation and restoration using a file system approach for rollback and recovery

●      enables centralized remote provisioning

●      supports cross-tenant BLF status sharing 

For businesses and service providers managing larger deployments, these improvements provide greater operational flexibility, scalability, and visibility across multiple environments. 

Documentation is available on the Vodia documentation website. For further information, sales@vodia.com, +1 (617) 861-3490.