CyCraft
CyCraft Technology Corporation (TWSE: 7823) is a Taiwan-based AI-native cybersecurity company offering the XCockpit threat exposure management platform (EASM, IASM, Endpoint), AI/LLM security products (XecGuard, XecART), and threat intelligence tooling, serving government agencies, financial institutions, and semiconductor manufacturers across Asia-Pacific.
- Company typePublic
- Founded2017
- HeadquartersTaipei, Taiwan
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What CyCraft does
CyCraft Technology Corporation (TWSE: 7823) is a Taiwan-headquartered, AI-native cybersecurity company founded in 2017 by veterans of Taiwan's Ministry of Justice Investigation Bureau. It listed on the Taiwan Stock Exchange Innovation Board on February 10, 2026, and operates subsidiaries in Japan and Singapore with distribution partners in India and Eastern Europe. The company employs 51-100 people and sells to government agencies, financial institutions, semiconductor and high-tech manufacturers, and selective enterprise accounts across Asia-Pacific.
The core product is the XCockpit AI Platform, an autonomous threat exposure management system following Gartner's CTEM framework that integrates External Attack Surface Management (EASM), Internal Attack Surface Management (IASM), and Endpoint Security Posture Management. Supporting the platform are CyberTotal (global threat intelligence aggregation with STIX 2.0/TAXII support), ThreatWall (threat intelligence gateway with DNS RPZ compatibility), and the SEMI E187 Assessment Tool for semiconductor compliance. For AI-era threats, CyCraft offers XecGuard (an LLM firewall/guardrail built on LoRA Adapter technology), XecART (AI red teaming security assessment covering 12 risk categories), and CyCraftGPT (a proprietary cybersecurity language model). The platform operates over 600,000 sensors across the region.
CyCraft generates revenue primarily through subscription-based software licensing for XCockpit modules and supporting products (sold in IP bundles with 1-3 year terms), professional services for incident response and red team engagements, and government procurement contracts (共同供應契約) in Taiwan. Go-to-market combines enterprise field sales for large accounts with an 11-partner channel network in Japan (including NTT Security Japan, Hitachi Systems, ITFOR) plus regional distributors in India and Eastern Europe. The company reported Q1 2026 revenue of NT$9,095萬 (~US$2.8M, +26.6% YoY) at an 86.3% gross margin, and stated a public goal of surpassing 50% overseas revenue by 2030.
CyCraft firmographics
Firmographics- Name
- CyCraft
- Legal name
- CyCraft Technology Corporation
- Website
- https://cycraft.com
- Company type
- Public
- Founded year
- 2017
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- CyCraft Technology Corporation (TWSE: 7823) is a Taiwan-based AI-native cybersecurity company offering the XCockpit threat exposure management platform (EASM, IASM, Endpoint), AI/LLM security products (XecGuard, XecART), and threat intelligence tooling, serving government agencies, financial institutions, and semiconductor manufacturers across Asia-Pacific.
- Ownership category
- akta.pro rank
CyCraft industry classification
Industry- Product category
- Cybersecurity Software
- NAICS
- Software Publishers (5132), Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Identity Threat Detection & Response (ITDR) (HDAEAJAH)
- akta.pro secondary industries
- Model Transparency, Explainability & Interpretability (XAI) (HDAAAMAB), OT Threat Detection & Monitoring (NDR/IDS for ICS) (HDADAJAF)
Keywords
Where CyCraft is headquartered
LocationHeadquarters
- HQ city
- Taipei
- HQ country
- Taiwan
- HQ region
- Asia
Offices4 records
Markets served
CyCraft business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Software Subscriptions: Subscription-based licensing for XCockpit platform modules (EASM, IASM, Endpoint), XecGuard LLM Firewall, and CyberTotal threat intelligence. Products are sold in IP bundles (e.g., 25 IP licenses) with 1-3 year terms. The company reports 86.3% gross margin in Q1 2026.
- Professional Services: Incident response services (1-day turnaround), compromise assessments, and red team/blue team exercises. Also includes consulting and implementation services delivered through channel partners and system integrators.
- Government Procurement Contracts: CyCraft products are listed on Taiwan government procurement contracts (共同供應契約), enabling direct purchase by government agencies. Products include AIR endpoint detection, XCockpit, Xensor, ThreatWall, and various security assessment tools.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Standard and Advanced tiers available for AIR endpoint detection products |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels7 records
CyCraft product offering
Product offeringCore offering
CyCraft develops and sells AI-native cybersecurity software platforms including the XCockpit autonomous threat exposure management platform integrating EASM, IASM, and Endpoint Security modules. The company also provides threat intelligence products (CyberTotal, ThreatWall), LLM/AI security products (XecGuard firewall, XecART red teaming), and the SEMI E187 Assessment Tool for semiconductor compliance, primarily serving government agencies, financial institutions, and high-tech manufacturers across Asia-Pacific.
Product overview
CyCraft is an AI-native cybersecurity company offering a comprehensive product portfolio centered on the XCockpit AI Platform, which integrates three core modules: EASM (External Attack Surface Management), IASM (Internal Attack Surface Management), and Endpoint Security Posture Management. The platform follows the Gartner CTEM framework to provide preemptive, real-time defense-in-depth. Supporting products include CyberTotal (global threat intelligence), ThreatWall (threat intelligence gateway), and the SEMI E187 Assessment Tool for semiconductor compliance. For AI/LLM security, CyCraft offers XecGuard (LLM Firewall/Guardrail API) and XecART (AI Red Teaming Security Assessment). The company serves government agencies, financial institutions, semiconductor companies, and enterprises across Asia-Pacific, operating its platform across over 600,000 sensors.
Differentiator
Problem solved
Functional benefit
Products and services
- XCockpit Platform
Quantifiable outcome
- 86.3% gross margin in Q1 2026, exceeding CrowdStrike and SentinelOne
- +5 more outcomes
Companies that use CyCraft
Customer profileNamed customers8 records
Segments5 records
Ideal customer profiles4 records
CyCraft technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration3 records
AI capability10 records
Feature7 records
CyCraft partnerships and signals
Strategic signalPartnerships
Ten partnerships are on record, tiered core, strategic, regional and academic.
- NTT Security JapancoreCyCraft Japan signed strategic partnership agreement with NTT Security (Japan) K.K., Japan's cybersecurity leader. This partnership strengthens CyCraft's presence in the Japanese enterprise market and enables broader distribution of XCockpit AI platform and XecGuard LLM security products.
- Apacer (宇瞻科技)strategicApacer deepened collaboration with CyCraft to incorporate AI-driven automated defense mechanisms into its governance system, strengthening AI supply chain operational resilience.
- Sectonics Private LimitedregionalStrategic distribution partnership to make CyCraft's AI-driven pre-emptive security platform available to enterprises and public sector organizations across India.
- Kyushu UniversityacademicProfessor Koji Okamura (CISO of Kyushu University) adopted XCockpit EASM solution for research purposes at the Advanced Network and Cybersecurity Laboratory. Initiative aims to apply professional security tools within academic setting, bridging gap between theoretical research and practical campus defense.
- DARSOCregionalSerbia-based managed security service provider partnered with CyCraft to deploy XCockpit Endpoint security platform. Within one month of deployment, the AI-powered autonomous EDR platform increased protected endpoint devices by 15 times and enabled ticket creation within 3 minutes and case investigation within 15 minutes. This is CyCraft's first Endpoint MSSP collaboration in Eastern Europe.
- NTT Advanced Technology CorporationregionalSales agent in Japan distributing CyCraft products including XCockpit platform and security solutions.
- ITFOR Inc.regionalSales agent in Japan distributing CyCraft products.
- Hitachi Systems, Ltd.regionalSales agent in Japan distributing CyCraft products.
- Future Secure Wave, Inc.regionalSales agent in Japan and co-presenter at CyCraft Day Japan 2026 conference.
- Mitsubishi Research InstituteregionalSales agent in Japan distributing CyCraft products.
Scale indicators8 records
Recent moves7 records
Expansion highlights6 records
CyCraft competitors and assessment
Company assessmentBroad incumbents
- CrowdStrike: Largest AI-native cybersecurity platform with the Falcon EDR/XDR suite that competes directly with CyCraft's XCockpit Endpoint and exposure-management modules. CyCraft's 86.3% gross margin is explicitly benchmarked against CrowdStrike, making it the most-cited direct comparable.
- Trend Micro: Established APAC-rooted (Japan/Taiwan-headquartered) cybersecurity platform with broad EDR, network, and cloud security products. Highly comparable given overlapping regional customer base and government/enterprise focus across APAC.
- Palo Alto Networks: Largest cybersecurity platform with Cortex XSIAM/XDR and Prisma offerings competing across endpoint, exposure management, and AI security. Relevant incumbent comparable for buyer evaluation cycles and consolidation pressure on mid-sized specialists like CyCraft.
- Trellix: Broad cybersecurity platform formed from FireEye/McAfee Enterprise, offering EDR, exposure management, and managed detection services. Comparable as a larger incumbent providing the integrated cyber-defense stack that CyCraft targets with XCockpit.
- Microsoft Defender / Security Copilot: Bundled endpoint, identity, cloud, and AI security inside the Microsoft ecosystem with Security Copilot for AI-assisted SOC workflows. Represents the platform-consolidation threat CyCraft faces, especially for enterprise and government buyers standardizing on Microsoft.
- Mandiant (Google Cloud): Incident response, threat intelligence, and managed defense services now part of Google Cloud. Overlaps with CyCraft's incident response, threat intelligence (CyberTotal), and CTEM-aligned exposure management capabilities, particularly for government and financial clients.
Direct peers
- SentinelOne: AI-driven endpoint security and Singularity platform targeting enterprise and government buyers, directly comparable to CyCraft's autonomous EDR and CTEM-aligned exposure management offering. Also the second peer against which CyCraft benchmarks its gross margin.
- Darktrace: AI-driven threat detection and autonomous response platform (Darktrace PREVENT/RESPOND) competing in the same preemptive exposure-management and AI-cybersecurity category where CyCraft has Gartner Sample Vendor recognition.
- Vectra AI: AI-driven network detection and response (NDR) and identity threat detection platform focused on attacker behavior analytics, overlapping with CyCraft's IASM and AI-powered attack-path analysis capabilities.
Regional players
- AhnLab: Korean cybersecurity incumbent with endpoint, network, and threat-intelligence products, led by a former executive (Sangwook Kang) now running CyCraft Japan/Korea. Comparable APAC competitor with regional overlap in Korea and Japan enterprise/government markets.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
CyCraft social profiles
Digital presenceCyCraft compliance and trust
Trust signalCompliance2 records
CyCraft financial estimates
Financial estimateRevenue estimate
Valuation estimate
CyCraft leadership team
Management profileNumber of profiles
Profiles4 records
CyCraft subsidiaries and ownership
Company hierarchySubsidiaries2 records
CyCraft funding detail
Funding detailFunding overview
Funding rounds4 records
Investors8 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
CyCraft M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about CyCraft
What does CyCraft do?
CyCraft develops and sells AI-native cybersecurity software platforms including the XCockpit autonomous threat exposure management platform integrating EASM, IASM, and Endpoint Security modules. The company also provides threat intelligence products (CyberTotal, ThreatWall), LLM/AI security products (XecGuard firewall, XecART red teaming), and the SEMI E187 Assessment Tool for semiconductor compliance, primarily serving government agencies, financial institutions, and high-tech manufacturers across Asia-Pacific.
Is CyCraft a public or private company?
CyCraft is a public company. It is classified as public and is currently operating.
When was CyCraft founded?
CyCraft was founded in 2017. It employs 51 to 100 people.
Where is CyCraft based?
CyCraft is headquartered in Taipei, Taiwan, in the Asia region.
How does CyCraft make money?
Three revenue lines are on record. Software Subscriptions are the primary driver. The others are professional Services and government Procurement Contracts.
Who are CyCraft's main competitors?
Broad incumbents on record are CrowdStrike, Trend Micro, Palo Alto Networks, Trellix, Microsoft Defender / Security Copilot and Mandiant (Google Cloud). Direct peers are SentinelOne, Darktrace and Vectra AI. AhnLab is listed as a regional player.
Does CyCraft have an API?
Yes. CyberTotal provides API integration interface for quick integration with threat hunting and security systems. CyberTotal provides STIX 2.0 reporting and supports TAXII to receive and push ISAC exchange information.
What industry is CyCraft in?
CyCraft's product category is Cybersecurity Software. Its primary akta.pro industry code is HDAEAJAH, Identity Threat Detection & Response (ITDR), with a secondary code of HDAAAMAB, Model Transparency, Explainability & Interpretability (XAI). Its NAICS code is 5132 and its SIC code is 7373.