From the blog

Aftra 2025 Review: Building a More Secure Future

Written by Admin | December 22, 2025

As we prepare for the holidays and slide into 2026, it’s time to reflect on a year defined by growth, innovation, and most importantly, our customers' commitment to security. From launching new features to expanding our international team, all of our milestones in 2025 were driven by the single goal of making cybersecurity resilience simple and actionable for every company.

2025 in numbers: Turning insights into impact

It is our job to provide the hard data companies need to move from a "reactive" to a "proactive" cybersecurity strategy. This year, the Aftra solution delivered results that speak for themselves:

  • 133,497 security vulnerabilities found: The Aftra software worked around the clock to ensure no stone was left unturned and found over 133,497 security vulnerabilities for our customers.
  • 60,952 vulnerabilities resolved: Our customers achieved a 45.66% remediation rate, a testament to their dedication to closing the gap between detection and defense.
  • $31 million in potential savings: With the average cost of a data breach reaching $3.86M in 2025, we estimate that by resolving vulnerabilities before they could be exploited, we delivered at least $31 million in value to our customers.

The Aftra Advantage: Proactively fixing a vulnerability costs between $500 and $5,000. Ignoring it can cost a company millions. We’re proud to help our customers choose the smarter path.

We look forward to continuing to support our customers on this journey. 

Our growing team

To support our expanding global footprint, the Aftra team grew significantly this year. We’ve reinforced our customer success and development departments to ensure our solution remains the best cybersecurity solution for executive level insights without sacrificing technical sophistication.

Three key strategic hires this year included Christian Gisklov (Sales Leader, Nordics), Þórður Bjarki Árnason (Director of Development) and Andri Pétur Hafþórsson (Technical Success Manager). Their expertise is already proving critical as we expand further abroad and accelerate our product roadmap for 2026.


We became ISO/IEC 27001 certified through fully remote and asynchronous audits

Security is at the heart of everything we do, which is why we are thrilled to announce that we are now ISO/IEC 27001 certified.

Setting a new standard for efficiency, we completed the entire preparation and audit process 100% remotely. This makes Aftra one of the first Icelandic companies to achieve this certification without on-site visits, proving that a digital-first approach to compliance is not only possible but, in some cases, superior. Read more about our remote audit experience here.

Product innovation: Bridging the gap between management and tech 

As our team grows and matures, so does the Aftra solution. What remains constant is that innovation is at the core of what we do. We strive to deliver the most comprehensive cybersecurity solution for the C-Suite and IT teams alike, offering unparalleled visibility combined with executive insights.

This year, we’ve rolled out some big improvements driven by market demands and invaluable customer feedback. The features that stand out the most are the new Executive Report, Action items right in the Dashboard, a better API scanner, and a handy Slack integration.

Executive Reports: Security for the boardroom

With regulations like NIS2 and DORA moving digital security from a "tech issue" to a "legal responsibility," leadership needs clarity without the noise.

  • The persona: C-Suite and board members.
  • The value: A monthly automated PDF that translates complex cybersecurity risk into digestible metrics and KPIs. It allows executives to track performance against industry benchmarks and take proactive ownership of the company's posture without needing to log into Aftra.


Suggested tasks: Actionable prioritization

Knowing you have vulnerabilities is only part of the security challenge. You also need to know where to start. We launched suggested actions into our dashboard to remove the guesswork from your daily workflow.

  • The persona: IT administrators and security
  • The value: A curated "to-do" list that balances "quick wins" with high-impact architectural changes. With integrated help center guides and a dedicated taskbar, we guide you through the remediation process so you can increase your security score step-by-step. 


API Scanner: Securing modern infrastructure

Shadow APIs and forgotten endpoints are often the "unlocked back doors" of a digital environment. Our new API scanner was built to find what traditional scanners miss.

  • The persona: IT administrators, security, and DevOps
  • The value: Continuous, automated "stress tests" that identify authentication bypasses and malicious inputs. By providing credential-based scanning, we empower teams to harden their API infrastructure before vulnerabilities can be exploited.

Slack and Teams integrations: Real-time remediation

Security shouldn't live in a silo. To help teams respond faster, we brought Aftra alerts directly into the heart of your communication.

  • The persona: IT administrators, security, and DevOps
  • The value: Get instant notifications in dedicated Slack or Teams channels when a vulnerability status changes. This ensures the right people have the right information at the right time. No manual check-ins required.

How to stay vigilant over the holidays

As we head into the break, remember that threat actors don’t take holidays. With reduced staffing and increased digital noise, the end of the year is a high-risk period.

Our quick holiday checklist:

  • Patch early: Update all systems before the office thins out.
  • Prioritize: Use Aftra to tackle critical vulnerabilities today.
  • Verify backups: Ensure your business continuity playbook is accessible and tested.
  • Stay sharp: Remind employees to watch out for seasonal phishing attempts.

Read our full holiday security guide to learn more about staying secure over the holidays.

And that’s a wrap.