Cyberint
Cyberint (now Check Point Exposure Management) provides an external risk management platform combining attack surface management, threat intelligence, dark web monitoring, brand protection, and supply chain intelligence for enterprise security teams across banking, retail, healthcare, and government sectors.
- Company typePrivate
- Founded2010
- HeadquartersPetah Tiqva, Israel
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What Cyberint does
Cyberint, founded in 2010 in Tel Aviv, Israel, is an external risk management (ERM) platform provider that was acquired by Check Point Software Technologies in August 2024 for approximately $200 million and rebranded as Check Point Exposure Management. The platform unifies Attack Surface Management, Threat Intelligence, Deep & Dark Web Monitoring, Digital Brand Protection, Supply Chain Intelligence, Continuous Threat Exposure Management (CTEM), and Cyber Asset Attack Surface Management (CAASM) into a single agentless SaaS architecture. Core technical components include proprietary Agentic Exposure Validation (AEV) that uses AI agents to actively test exploitability through a six-step safe proving loop, Phishing Beacon technology that detects cloned sites within seconds, ThreatScope AI for natural language querying, and Virtual HUMINT operations where military-trained analysts engage threat actors directly using virtual avatars across deep and dark web forums.
The platform processes 55M+ intelligence items monthly and 700M+ new items in 2025, inspects 3.7B websites and files daily, and tracks 62B assets in attack surface management. It delivers documented outcomes of 93% true positive alert rate, 80% reduction in manual triage, 1,200 business days of engineering time saved annually per organization, and ~3.1 days median MTTR for virtual patching of exploitable CVEs. The platform integrates with 150+ pre-built API connectors spanning EDRs (CrowdStrike, SentinelOne, Microsoft Defender, Sophos), SIEM/SOAR (Splunk, QRadar, XSOAR), cloud platforms (AWS, Azure, GCP), ITSM (Jira, ServiceNow), and NGFW (Palo Alto Networks, Fortinet).
The business operates a modular SaaS subscription model with annual billing and quote-based pricing, supplemented by professional/managed services where analysts operate the platform on customer behalf. Go-to-market is enterprise field sales targeting CISOs, SOC managers, and security leaders, augmented post-acquisition by Check Point's global channel partner ecosystem, MSSP program, and Infinity Platform integrations. The company serves enterprise customers across Banking/FSI, Retail, Media/Gaming, Healthcare, Government, and Energy/OT verticals, with named logos including Bank Leumi, BPI, Security Bank, Questrade, WeBull, Phoenix Petroleum, Terex, Ströer, SIGNA Sports United, Upwork, Broadcom, and FICO. Global operations span offices in Israel, USA, Singapore, Philippines, UK, and Japan.
Cyberint firmographics
Firmographics- Name
- Cyberint
- Legal name
- Cyberint Technologies Ltd
- Website
- https://cyberint.com
- Company type
- Private
- Founded year
- 2010
- Operating status
- Acquired
- Headcount range
- 101–250 employees
- Short description
- Cyberint (now Check Point Exposure Management) provides an external risk management platform combining attack surface management, threat intelligence, dark web monitoring, brand protection, and supply chain intelligence for enterprise security teams across banking, retail, healthcare, and government sectors.
- Ownership category
- akta.pro rank
Cyberint industry classification
Industry- Product category
- External Attack Surface Management / Cybersecurity
- NAICS
- Security Systems Services (56162)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Enterprise Risk Management (ERM) (HDADAIAC)
- akta.pro secondary industries
- Attack Surface Management (EASM/CAASM) (HDADAHAC), Threat Intelligence Services (BPAEADAC)
Keywords
Where Cyberint is headquartered
LocationHeadquarters
- HQ city
- Petah Tiqva
- HQ country
- Israel
- HQ region
- Middle East
Offices6 records
Markets served
Cyberint business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure
Revenue model
- SaaS Subscription: Cloud-based subscription model for the External Risk Management platform with modular architecture allowing customers to purchase individual modules (ASM, Threat Intelligence, Supply Chain Intelligence, Brand Protection) separately or as an integrated all-in-one solution. Delivered as agentless SaaS with no on-prem installation required.
- Professional Services: Fully managed Exposure Management service where Check Point analysts run the platform on behalf of customers, handling discovery, prioritization, remediation coordination, and reporting. Custom investigation hours available for dedicated threat reports and deep-dive analysis.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Modular platform with standalone or bundled modules |
Go-to-market motion2 records
Distribution channels5 records
Marketing channels8 records
Cyberint product offering
Product offeringCore offering
Cyberint provides an External Risk Management (ERM) SaaS platform that combines attack surface management, threat intelligence, dark web monitoring, digital brand protection, and supply chain intelligence to help organizations continuously detect, prioritize, and remediate external cyber threats. The platform unifies external visibility across the open, deep, and dark web to surface credential leaks, phishing infrastructure, impersonation, third-party risks, and exploitable assets before they are weaponized.
Product overview
Check Point Exposure Management (formerly Cyberint) is a unified external risk management platform that combines multiple cybersecurity capabilities into an integrated solution. The platform comprises Attack Surface Management, Deep & Dark Web Monitoring, Threat Intelligence, Digital Brand Protection, Supply Chain Intelligence, CTEM, Exposure Prioritization, Safe Remediation, and CAASM modules. These components work together through a unified architecture with a 93% true positive rate, providing organizations with continuous discovery of evolving attack surfaces, automated collection and analysis of intelligence from open, deep and dark web sources, and safe remediation with validation before each fix is implemented. The platform supports modular deployment where capabilities can be activated separately or together, and is designed for clarity, speed, and efficiency with approximately 30 minutes daily operation for maximum visibility.
Differentiator
Problem solved
Functional benefit
Brands
- Argos: The company's core threat intelligence and exposure management platform.
- Argos Edge
- Phishing Beacon
Products and services
- Attack Surface Management
- Threat Intelligence
- Deep & Dark Web Monitoring
- Digital Brand Protection
- Supply Chain Intelligence
- Continuous Threat Exposure Management (CTEM)
- Cyber Asset Attack Surface Management (CAASM)
Quantifiable outcome
- 93% true positive alert rate reducing analyst fatigue
- +9 more outcomes
Companies that use Cyberint
Customer profileNamed customers11 records
Segments9 records
Ideal customer profiles6 records
Cyberint technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration18 records
AI capability7 records
Feature7 records
Cyberint partnerships and signals
Strategic signalScale indicators22 records
Recent moves5 records
Expansion highlights5 records
Cyberint competitors and assessment
Company assessmentDirect peers
- Recorded Future: Recorded Future is a leading threat intelligence platform that, like Cyberint, aggregates intelligence from the open, deep, and dark web to deliver actionable insights to enterprise security teams. Both compete in external threat intelligence with analyst-augmented capabilities.
- Mandiant Intelligence (Google Cloud): Mandiant (now part of Google Cloud) provides threat intelligence and cyber risk management built on frontline incident response expertise, directly comparable to Cyberint's threat intelligence and external risk management offerings for large enterprises.
- Tenable Exposure Management: Tenable has expanded from vulnerability management into external attack surface management (ASM) and exposure management platforms, directly competing with Cyberint's EASM and CAASM capabilities, especially for CISOs seeking consolidated exposure visibility.
- ZeroFox: ZeroFox is a leading external cybersecurity specialist focused on digital brand protection, phishing takedown, and surface, deep, and dark web intelligence — overlapping heavily with Cyberint's Digital Brand Protection and Deep/Dark Web Monitoring modules.
- BitSight: BitSight provides external attack surface monitoring and security ratings, comparable to Cyberint's supply chain intelligence and attack surface management offerings used by CISOs and third-party risk teams.
- Digital Shadows (ReliaQuest): Digital Shadows (acquired by ReliaQuest) was a direct competitor in external threat intelligence and digital risk protection before consolidation, offering comparable dark web monitoring, brand protection, and supply chain intelligence capabilities.
Broad incumbents
- CrowdStrike Falcon Surface: CrowdStrike now offers external attack surface management as part of its Falcon platform, competing as a broader EDR/XDR incumbent that bundles ASM capabilities into a single endpoint-centric security suite that overlaps with Cyberint's EASM offering.
- Rapid7 Exposure Command: Rapid7's Exposure Command unifies ASM with traditional vulnerability management, serving a similar CISO buyer to Cyberint with bundled threat intelligence and exposure validation features.
- Microsoft Defender External Attack Surface Management: Microsoft Defender EASM (built on the RiskIQ acquisition) competes with Cyberint's ASM offerings through deep Azure/M365 ecosystem integration and bundled pricing for enterprise customers already standardized on the Microsoft security stack.
Emerging players
- Silk Security: Silk Security focuses on exposure prioritization and remediation validation, overlapping with Cyberint's Safe Remediation and Exposure Prioritization modules for organizations consolidating vulnerability and exposure workflows.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
Cyberint social profiles
Digital presenceCyberint financial estimates
Financial estimateRevenue estimate
Valuation estimate
Cyberint leadership team
Management profileNumber of profiles
Profiles3 records
Cyberint funding detail
Funding detailFunding overview
Funding rounds4 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Cyberint M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Cyberint
What does Cyberint do?
Cyberint provides an External Risk Management (ERM) SaaS platform that combines attack surface management, threat intelligence, dark web monitoring, digital brand protection, and supply chain intelligence to help organizations continuously detect, prioritize, and remediate external cyber threats. The platform unifies external visibility across the open, deep, and dark web to surface credential leaks, phishing infrastructure, impersonation, third-party risks, and exploitable assets before they are weaponized.
Is Cyberint a public or private company?
Cyberint is a private company. It is classified as corporate owned and is currently acquired.
When was Cyberint founded?
Cyberint was founded in 2010. It employs 101 to 250 people.
Where is Cyberint based?
Cyberint is headquartered in Petah Tiqva, Israel, in the Middle East region.
How does Cyberint make money?
Two revenue lines are on record. SaaS Subscription is the primary driver. The others are professional Services.
Who are Cyberint's main competitors?
Direct peers on record are Recorded Future, Mandiant Intelligence (Google Cloud), Tenable Exposure Management, ZeroFox, BitSight and Digital Shadows (ReliaQuest). Broad incumbents are CrowdStrike Falcon Surface, Rapid7 Exposure Command and Microsoft Defender External Attack Surface Management. Silk Security is listed as an emerging player.
Does Cyberint have an API?
Yes. RESTful API for custom integrations; all alerts can be automatically sent to SIEM/SOAR platforms to trigger automated playbooks. API can integrate information into existing SIEM/SOAR solutions and correlate with information from other intelligence platforms. IOC data accessible via daily IOC feeds or RESTful APIs for custom integrations, with each IOC enriched with threat type, description, date of observation, confidence level, region, and more. Developer documentation is at cyberint.com.
What industry is Cyberint in?
Cyberint's product category is External Attack Surface Management / Cybersecurity. Its primary akta.pro industry code is HDADAIAC, Enterprise Risk Management (ERM), with a secondary code of HDADAHAC, Attack Surface Management (EASM/CAASM). Its NAICS code is 56162 and its SIC code is 7373.