Alon Noy has spent more than 15 years working across offensive and defensive cybersecurity, including more than a decade in Israeli national security. Today, as CEO and Co-Founder of Astelia, he is focused on a problem security teams know well: deciding which vulnerabilities deserve attention first.
Astelia is an AI-native cybersecurity company focused on exposure and vulnerability management. Its platform uses AI and network-specific analysis to determine which vulnerabilities are genuinely exploitable, helping security teams move beyond a long list of alerts and focus on exposures that could be reached and exploited.
From National Security to Exposure Management
Noy previously served in Israel’s Unit 8200 and led the Israeli National Cybersecurity Red Team. His work included stress-testing critical infrastructure and collaborating with security teams to identify and address real-world attack paths.
That experience shaped the way he views vulnerability management. A vulnerability does not exist in isolation; its importance depends on the conditions around it and whether an attacker can move through the environment to reach it. Astelia’s approach centers on that question.
Noy has also managed large research and development organizations, giving him experience across both security operations and technology development. He is a graduate of Israel’s Talpiot program and holds an M.Sc. in Computer Science from Tel Aviv University.
His background combines practical security work with research and development leadership. At Astelia, that combination supports a platform designed to connect vulnerability analysis with the network environment where those vulnerabilities exist.
Mapping the Paths to Reachable Vulnerabilities
Astelia’s platform maps an organization’s environment through read-only integrations. It then analyzes exploit requirements against network topology, creating a view of how vulnerabilities relate to the systems and paths around them.
The goal is not to treat every vulnerability as equal. Astelia helps security teams prioritize vulnerabilities that are demonstrably reachable, which gives them a clearer basis for deciding where remediation work should begin.
That remediation can take different forms. Astelia identifies options such as patching, configuration changes, segmentation, or compensating controls, allowing teams to address an exposure through the measure that fits the environment.
The company’s broader goal is to help enterprises reduce the volume of vulnerability alerts they investigate and focus on exposures that could be exploited. This places the emphasis on practical risk: which paths exist, which vulnerabilities can be reached, and what action can close or interrupt those paths.
Noy describes the connection between access paths and exploitation in direct terms: “Once you know where the paths are, exploiting them is almost the easy part.”
Why Network Context Matters
Astelia’s focus on network-specific analysis reflects a central idea in its platform: vulnerability data becomes more useful when it is tied to the environment around it. The platform examines exploit requirements against network topology rather than treating a vulnerability as a standalone item.
That approach gives security teams a way to separate exposures that are demonstrably reachable from vulnerabilities that lack the same path through the network. It also connects prioritization with remediation, so teams can consider patching, configuration changes, segmentation, or compensating controls as part of the same process.
Astelia was founded by veterans and former leaders of Israel’s National Red Team. Their experience includes identifying real-world attack paths, stress-testing critical infrastructure, and working with security teams to address those paths.
For Noy, that experience informs a company built around a focused question: which vulnerabilities can actually be exploited in an organization’s environment? Astelia uses AI and read-only network integrations to help answer it, with the aim of making vulnerability management more targeted and useful for enterprise security teams.
