CYE

What CYE does

CYE (Cyesec Ltd.) is an AI-native cybersecurity exposure management platform company founded in 2012 in Herzliya, Israel, by Reuven Aronashvili. The company's platform — formerly branded Hyver and now referred to simply as the Cye Platform — continuously maps real attack paths across on-premise, cloud, and hybrid environments, quantifies the financial impact of cyber exposure using ML models (linear regression, decision trees, random forests) trained on large-scale breach data with Monte Carlo–based likelihood-of-breach calculations, and generates prioritized mitigation plans aligned to business outcomes. CYE reports having quantified more than $20 billion in exposure and analyzed more than one million attack paths across 500+ customers globally. The platform integrates with Microsoft Defender, Qualys, CrowdStrike, and ServiceNow, holds ISO 27001, SOC 2 Type II, GDPR, and CREST certifications, and supports a full Continuous Threat Exposure Management (CTEM) lifecycle spanning scoping, discovery, prioritization, validation, and mobilization.

The company monetizes through a hybrid revenue model combining annual SaaS subscriptions across three tiers (Maturity, Advanced, and Premium) with embedded expert services — Organizational Assessment, Strategic & Advisory, and Emergency & Operations — delivered by 500+ cyber experts as long-term partnerships rather than add-ons. Distribution is anchored on direct enterprise field sales targeting CISOs, Group Security Leaders, Risk Officers, Security Operations, and Board/Executive Leadership (a "Book a Demo" motion), supplemented by channel partners (notably ALSO Holding AG) and MSSPs who resell or white-label the platform. CYE serves organizations in financial services, critical infrastructure, healthcare, technology, and retail, with named enterprise customers including Schindler Group, Philips, AmeriCo Group, Hoffmann Group, Jeeves, SHL Medical, AutoStore, Migros, First Citizens, and private equity firms EQT and Francisco Partners. Legal entities operate in Israel (HQ), the United States (Cye USA Inc., Delaware), and the United Kingdom (Cyesec UK Limited), and the company is privately held, having raised a $120 million growth round in February 2021 led by EQT with participation from 83North.

Name

CYE

Legal name

Cyesec Ltd.

Website

https://cyesec.com

Company type

Private

Founded year

2012

Operating status

Operating

Headcount range

101–250 employees

Short description

CYE is an AI-native cybersecurity exposure management platform that maps real attack paths, quantifies financial cyber risk via ML-trained models, and prioritizes mitigation for 500+ enterprises across financial services, healthcare, technology, and critical infrastructure.

Ownership category

akta.pro rank

Product category

Cyber Exposure Management Software

NAICS

Software Publishers (5132), Custom Computer Programming Services (541511)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming Services (7371)

akta.pro industry

PRIMARYHDADAJAE

OT Asset Discovery, Inventory & Vulnerability Management

Hardware, Technology & Telecom/Cybersecurity/OT/ICS & Critical Infrastructure Security

Keywords

• Cyber exposure management
• Cyber risk quantification
• Attack path analysis
• Cybersecurity maturity assessment
• Managed security services

Headquarters

HQ city

Herzliya

HQ country

Israel

HQ region

Middle East

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. SaaS Platform Subscription: Cye provides cybersecurity solutions through a SaaS platform with subscription-based pricing. The company offers tiered packages (Maturity, Advanced, Premium) that include platform access, AI-native exposure management capabilities, and varying levels of features and support. Pricing is quote-based, tailored to organizational size and selected package tier.
2. Expert Services: Embedded human experts work as long-term partners alongside the platform, providing Organizational Assessment, Strategic & Advisory, and Emergency & Operations services. These professional services are delivered as an integrated component of the customer engagement model.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels8 records

Core offering

CYE sells an AI-native continuous cyber exposure management platform (Cye Platform, formerly Hyver) that maps real attack paths across on-premise, cloud, and hybrid environments, translates cyber exposure into financial dollar-value impact, and generates prioritized mitigation plans. The platform is sold on tiered annual subscriptions (Maturity, Advanced, Premium) and is bundled with embedded expert services (Organizational Assessment, Strategic & Advisory, Emergency & Operations) delivered as long-term engagements.

Product overview

Cye offers a unified AI-native exposure management platform (formerly called Hyver) that combines continuous cyber exposure assessment, financial cyber risk quantification, prioritized mitigation planning, and cybersecurity maturity benchmarking into a single integrated system. The core Cye Platform serves as the central hub, with add-on modules including Group Management (for multi-subsidiary visibility), AI Risk Management (including AI Security Posture Management and AI Governance Visibility), and three pricing tiers: Maturity, Advanced, and Premium. The platform also integrates with a family of AI-powered tools including Cye AI (natural language querying, agentic analysis, and board-report generation), Attack Route Visualization, Cyber Risk Quantification, Mitigation Planning, Cybersecurity Maturity Assessment, Cloud Security Posture (Solvo), and the Cost of Breach Estimator. Expert Services (Organizational Assessment, Strategic & Advisory, and Emergency & Operations) are embedded as a long-term partnership alongside the platform, not sold as add-ons. Together, the platform delivers continuous threat exposure management (CTEM) across the full lifecycle: scoping, discovery, prioritization, validation, and mobilization.

Differentiator

Problem solved

Functional benefit

Brands

• Hyver: Previous name for the Cye platform (also referred to as Cye Platform). The platform was previously named Hyver but current naming is simply Cye Platform.

Products and services

• Cye Platform (formerly Hyver) AI-native continuous cyber exposure management platform that maps real attack paths across on-premise, cloud, and hybrid environments, quantifies financial impact of cyber exposure using ML and Monte Carlo simulations, and generates prioritized mitigation plans aligned to business outcomes.
• Cloud Security Posture (Solvo) Proactive cloud security posture product (acquired via the Solvo acquisition) that identifies and prioritizes cloud risks across security, DevOps, and engineering teams.
• Group Management Add-on module that provides AI-native multi-company exposure management for large enterprises and MSSPs, including standardized metrics, comparative analysis, maturity scoring, risk assessment, exploitability data, and financial impact analysis across subsidiaries.
• AI Risk Management Add-on module that scores AI risk maturity against NIST AI RMF 1.0, detects Shadow AI exposure across the organization, and identifies where AI governance is policy-only vs. operationally enforced, mapped to ISO/IEC 42001 and NIST CSF.
• Cost of Breach Estimator Standalone self-service online tool that estimates the potential financial cost of a data breach for an organization based on various risk factors.
• Organizational Assessment (Expert Service) Expert service that uncovers vulnerabilities and misconfigurations through comprehensive security control assessments, delivered as a long-term partnership alongside the platform.
• Strategic & Advisory (Expert Service) Expert service providing tailored security strategies and regulatory compliance guidance for enterprise organizations, delivered as long-term embedded advisory.
• Emergency & Operations (Expert Service) Expert service for rapid investigation, containment, and recovery from cyberattacks, including incident response, delivered as embedded operational support.

Quantifiable outcome

• 61% of customers' business-critical attack routes are blocked within six months
• +4 more outcomes

Named customers10 records

Segments11 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability9 records

Feature9 records

Partnerships

Eight partnerships are on record, tiered core and strategic.

• MicrosoftcoreTechnology or IntegrationPlatform integration with Microsoft Defender for unified endpoint security visibility and data correlation. Customers can register through Microsoft login for platform access.
• QualyscoreTechnology or IntegrationIntegration with Qualys vulnerability scanning to ingest vulnerability data into the Cye exposure management platform for correlated risk analysis.
• CrowdStrikecoreTechnology or IntegrationIntegration with CrowdStrike endpoint protection to correlate endpoint telemetry with attack path analysis and risk quantification.
• ServiceNowcoreTechnology or IntegrationIntegration with ServiceNow for workflow automation, ticketing, and remediation tracking within enterprise IT service management workflows.
• ALSO Holding AGcoreChannel Partner/ Reseller/ DistributorChannel partner distributing and implementing Cye's solutions. Partner enhances cybersecurity ecosystem and democratizes advanced cybersecurity solutions, enabling protection for organizations of all sizes.
• EQTstrategicStrategic or Co-development PartnerPrivate equity firm using Cye to drive portfolio company security posture improvement. Cye provides fast, data-driven security posture enhancement with targeted risk reduction activities.
• Anthropic PBCcoreTechnology or IntegrationAI infrastructure provider powering Cye's chat feature. Chat functionality is built on technology offered by Anthropic PBC as well as Cye's proprietary technology. User Content submitted through chat is shared with Anthropic PBC.
• AWScoreTechnology or IntegrationCye AI runs on AWS Bedrock with strict guardrails to prevent cross-tenant leakage. Secured LLM infrastructure uses AWS for agent separation, RAG implementation, and AI governance requirements.

Scale indicators11 records

Recent moves8 records

Expansion highlights6 records

Broad incumbents

• Qualys: Qualys is a cloud-based security and compliance platform with deep vulnerability management capabilities. CYE integrates with Qualys as a data source but competes at the higher exposure-management and CRQ layer above Qualys' core VM offering.
• Tenable: Tenable is a publicly traded vulnerability management and exposure platform (Nessus, Tenable One) serving large enterprises. Overlaps with CYE's exposure-management scope but operates at much larger scale and breadth, including broader VM and cloud security.
• Rapid7: Rapid7 provides security analytics, vulnerability management (InsightVM), and exposure management. Comparable enterprise security buyer base and adjacent attack-path and exposure prioritization capabilities to CYE's platform.
• CrowdStrike: CrowdStrike's Falcon platform bundles endpoint protection with exposure management and risk quantification features. CYE integrates with CrowdStrike as a data source, but CrowdStrike represents a broad incumbent threat at the platform level.
• Bitsight: Bitsight provides external cyber risk rating and continuous monitoring used by enterprises, insurers, and investors. Comparable to CYE's CRQ positioning from a board-level financial-impact lens, though Bitsight's emphasis is on external attack-surface scoring.

Direct peers

• Safe Security: Safe Security (SAFE) is a direct peer offering a cyber risk quantification and exposure management platform (SAFE One) that maps breach likelihood to financial impact using AI/ML. Closely comparable to CYE's CRQ-and-attack-graph approach and serves similar CISO buyer personas.
• Balbix: Balbix provides an AI-driven exposure management platform that prioritizes vulnerabilities and quantifies cyber risk for enterprise security teams. Direct competitor to CYE in attack-path analysis, risk quantification, and AI-native prioritization.
• Axio: Axio is a cyber risk quantification and management platform focused on financial-impact analysis for security leaders and insurers. Highly comparable to CYE's CRQ capabilities and similar enterprise target buyer (CISOs, risk officers, boards).

Emerging players

• Wiz: Wiz is a leading cloud security posture management (CSPM) platform. CYE acquired Solvo in January 2025 to enter CSPM, making Wiz a direct competitor in that acquired line of business and a broader emerging incumbent in exposure management.
• Orca Security: Orca Security provides agentless cloud security and exposure management. Overlaps with the cloud security posture capabilities CYE acquired via Solvo and competes more broadly in cloud-centric exposure management use cases.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/CyesecLtd
• YouTubeyoutube.com/c/CYE_Security
• LinkedInlinkedin.com/company/cyesec

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Subsidiaries2 records

Funding overview

Funding rounds2 records

Investors3 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CYE