Is Knownsec profitable in 2026?

No audited financial disclosure exists. Knownsec is privately held with no confirmed 2024 to 2026 funding round, valuation, or IPO filing found in public records as of July 2026, per PitchBook's private-company profile. Profitability cannot be independently verified.

Knownsec is privately held and Beijing-based. Tencent-affiliated entities hold roughly 20% ownership, per a WireScreen report dated February 4, 2026, which also links Knownsec's subsidiary Beijing KnownFuture to PLA Cyberspace Force units.

Could AI replace Knownsec's core products?

Yes, significant pressure exists. Knownsec's scanning and vulnerability-discovery business is the exact function automated by rival Qihoo 360's Tulongfeng AI tool, unveiled June 24, 2026 at ISC.AI, explicitly built to match Anthropic's Mythos model.

What happened in the Knownsec data leak?

On November 11, 2025, over 12,000 internal Knownsec documents surfaced on GitHub, revealing tools like GhostX and Un-Mail plus a breach-data lake containing telecom and national ID records, per DomainTools research published January 14, 2026.

Who is Knownsec's biggest competitor?

Qihoo 360, a dominant Chinese cybersecurity incumbent, is the most direct threat. It shipped Tulongfeng, an AI vulnerability-discovery tool competing with Knownsec's scanning products, at the ISC.AI 2026 conference on June 24, 2026.

Has Knownsec been sanctioned by Western governments?

Not confirmed as of mid-2026, but pressure is building. F5 recommended blocking Knownsec's email domains on January 12, 2026, following the same leak pattern that preceded prior Entity List sanctions on i-Soon and Qihoo 360-linked entities.

Cybersecurity companies · subsidiary of Tencent (strategic investor holding ~20%; Knownsec operates as independent commercial entity with state-contractor operations) · China

Knownsec

knownsec.com ↗

Chinese offensive security firm selling scanning tools and hacking services to state agencies.

Little protection left

Assessed 26 July 2026 · Evidence as of 26 July 2026

Not much stands between this business and its pressures.

On the recordSince 26 July 2026 · Checkable from Q3 2026 · Every call on the record Checkpoint: Possible Western Entity List action following F5's January blocklist recommendation

The call

A state-linked hacking contractor now exposed by a mass document leak, facing both an AI-powered domestic rival and the sanctions pattern that hit i-Soon and Qihoo 360 before it.

Knownsec sells hacking tools and vulnerability-scanning software, mainly to Chinese government and police agencies. The company's core products are now being replaced by cheaper AI-powered alternatives from bigger rival Qihoo 360 and possibly by advanced frontier AI systems, while a massive internal document leak in late 2025 exposed its government contracts to foreign intelligence and triggered major customers like F5 to stop doing business with it. The company's future depends on whether Western governments formally block it from international commerce in the next year, which would likely follow the pattern already set for similar Chinese firms.

Why

AI pressure: Qihoo 360's Tulongfeng AI vulnerability-discovery agent. A domestic AI agent that finds and exploits bugs automatically threatens to replace the manual scanning work Knownsec sells. Could AI do the core job? Yes, likely.

Bigger players: Qihoo 360. Bigger, better funded, and already running a live AI substitute for Knownsec's core ZoomEye scanning business. Could a giant copy it? Yes, easily.

What protects it. Entrenched ties to Public Security Bureaus, State Grid, and China Mobile give it captive government buyers other vendors cannot easily reach.

What would change this call

Western government adds Knownsec to an Entity List or sanctions roster within 6-12 months. Would confirm the leak triggered the same sanctions path as i-Soon and Qihoo 360.
More vendors (beyond F5) publicly blocklist Knownsec-linked IPs/domains in 2026. Would show international customers actively cutting ZoomEye/WAF access post-leak.
Qihoo 360 publishes verified CVE discoveries attributed to Tulongfeng in 2026. Would confirm AI substitution of Knownsec's core vulnerability-scanning business.

Key numbers

12,000+ internal documents leaked on GitHub (2025-11-11)
Tencent affiliates hold about 20% ownership stake (2026-02-04)
Qihoo 360's Tulongfeng AI tool shipped in market (2026-06)

Named risks

Escalation from vendor blocklisting to formal Western sanctions or Entity List action. Severity: high
Core scanning and vulnerability-discovery product line facing direct AI automation from domestic rival tools. Severity: high
Personal and legal exposure for employees tied to exposed military/public-security business line. Severity: high
No confirmed liquidity path, private ownership with unaudited financials. Severity: medium
Reputational damage from ongoing leak disclosures reducing international client trust. Severity: medium

Rivals, as read in July 2026

Rival	Direction	Evidence
Qihoo 360	gaining on	Shipped Tulongfeng AI vulnerability-discovery tool June 24, 2026, direct substitute for Knownsec scanning products
Qi An Xin	contesting	Competes for same domestic state and enterprise security contracts as Knownsec
Chaitin Tech	contesting	Peer offensive-security firm named alongside Knownsec in 2023 market landscape analysis
Anthropic (Mythos model)	gaining on	Frontier vulnerability-discovery model triggered domestic Chinese AI response by June 2026
NSFOCUS	contesting	Named as broader China cybersecurity market peer in 2025 to 2030 market report

Questions people ask

Is Knownsec profitable in 2026?: No audited financial disclosure exists. Knownsec is privately held with no confirmed 2024 to 2026 funding round, valuation, or IPO filing found in public records as of July 2026, per PitchBook's private-company profile. Profitability cannot be independently verified.
Who owns Knownsec?: Knownsec is privately held and Beijing-based. Tencent-affiliated entities hold roughly 20% ownership, per a WireScreen report dated February 4, 2026, which also links Knownsec's subsidiary Beijing KnownFuture to PLA Cyberspace Force units.
Could AI replace Knownsec's core products?: Yes, significant pressure exists. Knownsec's scanning and vulnerability-discovery business is the exact function automated by rival Qihoo 360's Tulongfeng AI tool, unveiled June 24, 2026 at ISC.AI, explicitly built to match Anthropic's Mythos model.
What happened in the Knownsec data leak?: On November 11, 2025, over 12,000 internal Knownsec documents surfaced on GitHub, revealing tools like GhostX and Un-Mail plus a breach-data lake containing telecom and national ID records, per DomainTools research published January 14, 2026.
Who is Knownsec's biggest competitor?: Qihoo 360, a dominant Chinese cybersecurity incumbent, is the most direct threat. It shipped Tulongfeng, an AI vulnerability-discovery tool competing with Knownsec's scanning products, at the ISC.AI 2026 conference on June 24, 2026.
Has Knownsec been sanctioned by Western governments?: Not confirmed as of mid-2026, but pressure is building. F5 recommended blocking Knownsec's email domains on January 12, 2026, following the same leak pattern that preceded prior Entity List sanctions on i-Soon and Qihoo 360-linked entities.

Timeline

2026-07-07Analysis published comparing Qihoo 360 Tulongfeng to Anthropic Mythos in vulnerability discovery race
2026-06-24Qihoo 360 unveils Tulongfeng AI vulnerability-discovery tool at ISC.AI 2026, directly rivaling Knownsec
2026-02-04WireScreen report details Tencent ~20% stake and PLA ties via Beijing KnownFuture subsidiary
2026-01-14DomainTools analysis reveals '404 Security Lab' and Military Products Division inside Knownsec
2026-01-12F5 threat report recommends blocking Knownsec email domains after leak analysis
2025-12-30Resecurity publishes detailed analysis of leaked espionage tradecraft
2025-11-11Over 12,000 internal Knownsec documents leaked on GitHub
2007-08Knownsec founded in Beijing, China

Revision history

26 July 2026

First assessed. Little protection left. The text above is fixed as of this date and is not edited afterwards.

In the same band

Rising (Beijing Rising Information Technology)CyFirma Alert Logic