Onyxia
Onyxia Cyber is a private SaaS company that provides an AI-powered preemptive cyber resilience platform for enterprise CISOs and security teams. Its platform integrates with 40+ security tools to deliver exposure management, compliance reporting, and predictive security insights.
- Company typePrivate
- Founded2020
- HeadquartersNew York, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Onyxia does
Onyxia Cyber, Inc. (founded 2020, headquartered at 7 World Trade Center, New York; Delaware C-corp) is a private cybersecurity SaaS company that sells an AI-powered preemptive cyber resilience platform to enterprise CISOs, security teams, and MSSPs. The platform ingests telemetry from 40+ third-party security tools (endpoint, identity, vulnerability, cloud, application, email, SIEM, network, MDM, CAASM, ITSM) into a cross-domain security data fabric and applies agentic AI to surface exposure, compliance gaps, tool-coverage redundancies, and program-performance insights, mapped to NIST CSF, MITRE ATT&CK, SOC 2, ISO 27001, and HITRUST frameworks.
The product surface is organized as a platform-plus-modules architecture: the Operational Cyber Resilience Platform is augmented by Security Stack Map (gap/overlap analysis), Continuous Threat Exposure Management, Security Program Assessment (industry benchmarking), ROI Cost Optimization, Business Reporting with Quarterly Executive Presentations, Asset Coverage Analyzer, verticalized solutions (Healthcare, Critical Infrastructure, Retail & Hospitality), a Mobile App, and the Nexa AI Security Agent (Nexa Assist for natural-language queries, Nexa Mobilize for AI-driven remediation workflows, Nexa Predict for 30-day forecasting). The architecture is SOC 2 Type II and ISO 27001 certified, AICPA-audited, and listed on AWS Marketplace and Jamf Marketplace.
Monetization is enterprise SaaS subscription with consultative, quote-based pricing accessed via a "Book a Demo" CTA; GTM is sales-led targeting Fortune 500 CISOs, augmented by marketplace listings, an advisor network of named Fortune 500 security leaders (Robinhood, Alteryx, CWT, Wellstar, Silverstein Properties, Astera Labs), bespoke CISO events across NYC/Boston/Chicago/Palo Alto, conference presence (RSA, Black Hat, Infosec World), and masterclass/webinar content. The company has raised $5M in seed funding (Sept 2022, led by World Trade Ventures with Silvertech Ventures and angel investors) and operates with 11-50 employees; revenue, headcount, and follow-on financing figures are not publicly disclosed.
Onyxia firmographics
Firmographics- Name
- Onyxia
- Legal name
- Onyxia Cyber, Inc.
- Website
- https://onyxia.io
- Company type
- Private
- Founded year
- 2020
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Onyxia Cyber is a private SaaS company that provides an AI-powered preemptive cyber resilience platform for enterprise CISOs and security teams. Its platform integrates with 40+ security tools to deliver exposure management, compliance reporting, and predictive security insights.
- Ownership category
- akta.pro rank
Onyxia industry classification
Industry- Product category
- Cybersecurity / Cyber Resilience Platform
- NAICS
- Software Publishers (5132), Computer Systems Design Services (541512)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX) (BPAKADAC)
- akta.pro secondary industry
- Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG)
Keywords
Where Onyxia is headquartered
LocationHeadquarters
- HQ city
- New York
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Onyxia business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure
Revenue model
- SaaS Platform Subscription: The company operates as a SaaS platform offering subscription-based access to its Preemptive Cyber Resilience Platform. Customers pay subscription fees for platform access, support, and ongoing updates.
Go-to-market motion2 records
Distribution channels2 records
Marketing channels11 records
Onyxia product offering
Product offeringCore offering
Onyxia Cyber is a preemptive cyber resilience platform for enterprise CISOs and security teams. It leverages agentic AI, asset intelligence, and a cross-domain security data fabric that integrates with 40+ leading security tools to transform asset visibility into actionable, context-aware insights for preemptive threat exposure mitigation, security program management, compliance reporting, and board-level communication.
Product overview
Onyxia Cyber is a preemptive cyber resilience platform that operates as a platform-plus-modules architecture. The core Operational Cyber Resilience Platform provides the foundational capabilities, enhanced by the AI-powered Nexa Security Agent which includes Nexa Assist, Nexa Mobilize, and Nexa Predict. The platform integrates with 40+ leading security tools across endpoint, identity, vulnerability, cloud, application, email, and network security. Additional modules include Security Stack Map for tool optimization, Exposure Management for threat mitigation, Security Program Assessment for benchmarking, ROI Cost Optimization, Business Reporting with Quarterly Executive Presentations, and Asset Coverage Analyzer. Industry-specific solutions are offered for Healthcare (with HITRUST Custom Framework), Critical Infrastructure, and Retail & Hospitality. The Onyxia Mobile App provides on-the-go access. The platform is SOC 2 Type II and ISO 27001 certified, aligned to NIST CSF and MITRE ATT&CK frameworks, and available on AWS Marketplace.
Differentiator
Problem solved
Functional benefit
Brands
- Nexa: AI Security Agent for preemptive cyber resilience that provides context-aware insights and actionable recommendations for security teams.
Products and services
- Operational Cyber Resilience Platform The core Onyxia platform that bridges day-to-day security operations to measurable business outcomes using agentic AI, asset intelligence, and a cross-domain security data fabric integrating 40+ security tools. Designed for enterprise CISOs and security teams to manage threat exposure, security programs, compliance, and board reporting.
- Nexa AI Security Agent An AI agent for CISOs and security teams that analyzes security data within the context of each organization's unique environment to provide trustworthy, actionable insights and recommended actions for preemptive exposure mitigation. Includes Nexa Assist (natural language interface), Nexa Mobilize (AI-powered exposure mitigation plans), and Nexa Predict (predictive analytics).
- Onyxia Mobile App Mobile application enabling CISOs and security teams to access the Onyxia platform and manage cyber resilience on-the-go.
- Onyxia Cyber for Healthcare Industry-specific solution with a pre-built HITRUST Custom Framework for healthcare organizations to achieve data-driven cyber resilience and meet healthcare-specific compliance requirements.
- Onyxia Cyber for Critical Infrastructure Industry-specific solution for critical infrastructure sectors with tailored security controls and compliance frameworks addressing OT/IT convergence and regulatory requirements.
- Onyxia Cyber for Retail & Hospitality Industry-specific solution for retail and hospitality sectors addressing unique cybersecurity challenges including PCI-DSS compliance, customer data protection, and point-of-sale security.
Quantifiable outcome
- 100+ team hours saved per month on manual data collection and reporting
- +3 more outcomes
Companies that use Onyxia
Customer profileNamed customers8 records
Segments6 records
Ideal customer profiles5 records
Onyxia technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration46 records
AI capability9 records
Feature8 records
Onyxia partnerships and signals
Strategic signalPartnerships
Seven partnerships are on record, tiered flagship and core.
- AnthropicflagshipAccepted into Anthropic's Cyber Verification Program (CVP), a designation reserved for security organizations using advanced AI capabilities strictly for defensive purposes. Validates Onyxia's AI-first approach to cybersecurity.
- JamfcoreOfficial integration partnership launched in January 2026, live on the Jamf Marketplace. Combines Jamf's Apple device management and security with Onyxia's preemptive cyber resilience platform. Onyxia ingests data from Jamf, transforming raw device metrics into contextualized executive-ready insights.
- AWS MarketplacecoreOnyxia's AI-powered Preemptive Cyber Defense Platform is available for immediate purchase and deployment on AWS Marketplace, simplifying enterprise procurement.
- ArmiscoreStrategic integration partnership bringing ground-truth asset and exposure intelligence from Armis to Onyxia's preemptive cyber defense platform for dynamic exposure management.
- QualyscoreIntegration partnership transforming vulnerability management by combining Qualys's vulnerability assessment capabilities with Onyxia's platform for enhanced vulnerability management and security performance visibility.
- MimecastcoreOfficial tech partnership enhancing email security by integrating Mimecast's email security data with Onyxia's platform for data-driven insights and AI-powered recommendations.
- WizcoreOfficial integration partnership enhancing vulnerability management and cloud security data analysis by integrating Wiz's cloud security capabilities with Onyxia's AI-powered platform.
Scale indicators7 records
Recent moves6 records
Expansion highlights7 records
Onyxia competitors and assessment
Company assessmentDirect peers
- Balbix: AI-driven cyber risk and exposure management platform that uses asset intelligence and predictive analytics to quantify cyber risk—directly comparable to Onyxia's preemptive cyber resilience value proposition.
- Cymulate: Continuous security validation and exposure management platform offering breach and attack simulation plus automated control assessment; competes with Onyxia in continuous threat exposure management for CISOs.
- SafeBreach: Breach and attack simulation platform that validates security controls against real-world threats, directly overlapping Onyxia's continuous control monitoring and exposure validation capabilities.
- AttackIQ: Continuous security validation platform built on the MITRE ATT&CK framework, providing automated control assessment and exposure insights—closely aligned to Onyxia's framework-aligned exposure management approach.
- Axonius: Cyber asset attack surface management platform that unifies asset data from hundreds of security and management tools—functionally adjacent to Onyxia's data fabric and an existing Onyxia integration partner.
Broad incumbents
- CrowdStrike: Falcon platform provides endpoint, identity, cloud, and increasingly exposure management and SIEM capabilities; a broad incumbent whose many tools Onyxia ingests but whose Charlotte AI competes directly with Nexa.
- Microsoft Security: Defender, Sentinel, Entra, and Security Copilot span endpoint, SIEM, identity, and exposure management; a broad incumbent bundling overlapping capabilities and serving as both a data source and competitor for Onyxia.
- Palo Alto Networks: Cortex XSIAM and Prisma Cloud platforms consolidate SIEM, XDR, and exposure management; represents a broad incumbent alternative for CISOs evaluating Onyxia's program management capabilities.
- Tenable: Vulnerability management and exposure platform (Nessus, Tenable One) with continuous assessment and AI analytics; competes with Onyxia in vulnerability-driven exposure management and is also an Onyxia integration partner.
Emerging players
- Wiz: Cloud-native security platform expanding from CNAPP into broader exposure management and security posture; an existing Onyxia integration partner whose analytics capabilities increasingly overlap with Onyxia's.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Onyxia social profiles
Digital presenceOnyxia compliance and trust
Trust signalCompliance3 records
Onyxia financial estimates
Financial estimateRevenue estimate
Valuation estimate
Onyxia leadership team
Management profileNumber of profiles
Profiles2 records
Onyxia funding detail
Funding detailFunding overview
Funding rounds3 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Onyxia M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Onyxia
What does Onyxia do?
Onyxia Cyber is a preemptive cyber resilience platform for enterprise CISOs and security teams. It leverages agentic AI, asset intelligence, and a cross-domain security data fabric that integrates with 40+ leading security tools to transform asset visibility into actionable, context-aware insights for preemptive threat exposure mitigation, security program management, compliance reporting, and board-level communication.
Is Onyxia a public or private company?
Onyxia is a private company. It is classified as venture growth investor backed and is currently operating.
When was Onyxia founded?
Onyxia was founded in 2020. It employs 11 to 50 people.
Where is Onyxia based?
Onyxia is headquartered in New York, United States, in the North America region.
How does Onyxia make money?
One revenue line is on record: saaS Platform Subscription.
Who are Onyxia's main competitors?
Direct peers on record are Balbix, Cymulate, SafeBreach, AttackIQ and Axonius. Broad incumbents are CrowdStrike, Microsoft Security, Palo Alto Networks and Tenable. Wiz is listed as an emerging player.
Does Onyxia have an API?
No public API is recorded for Onyxia.
What industry is Onyxia in?
Onyxia's product category is Cybersecurity / Cyber Resilience Platform. Its primary akta.pro industry code is BPAKADAC, Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX), with a secondary code of HDAEANAG, Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII). Its NAICS code is 5132 and its SIC code is 7372.