CybelAngel
CybelAngel is a Paris-based external threat intelligence platform that scans over 4.3 billion IPs and 6 billion data points daily to help large enterprises detect shadow assets, leaked credentials, dark web threats, and brand impersonation across their extended digital footprint.
- Company typePrivate
- Founded2013
- HeadquartersParis, France
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What CybelAngel does
CybelAngel is a Paris-based external threat intelligence platform founded in 2013 that helps enterprises discover and remediate cybersecurity exposures beyond their perimeter. The platform unifies six core modules — Attack Surface Management, Data Breach Prevention, Brand Protection, Credential Intelligence, Dark Web Monitoring, and Cyber Threat Intelligence — supported by professional services including M&A cyber due diligence, expert takedown remediation, and the REACT team's special threat investigations. Daily operations include scanning over 4.3 billion IPs and processing 6 billion data points, with dark web coverage spanning 10 million new posts monthly across more than 200 languages. The company serves CISOs and security operations teams at large multinationals, with named customers including Safran, Louis Vuitton, Sanofi, Amadeus, Signify, and Lagardere spanning aerospace, luxury, pharmaceuticals, travel technology, lighting, and media.
The platform is built on a dual AI-plus-human architecture: a proprietary AI model performs continuous scanning, anomaly detection, prioritization, and predictive active testing (including DAST against OWASP Top 10 risks), while the REACT analyst team verifies findings to produce contextualized incident reports with near-zero false positives. A documented RESTful API and the CybelAngel Connect no-code automation layer enable integration with SIEM, SOAR, and SOC workflows. CybelAngel holds ISO 27001 and SOC 2 Type 2 certifications and maps its offering to DORA, NIS 2, and NIST CSF 2.0 compliance frameworks.
The company operates a SaaS subscription model with annual or multi-year contracts priced on a quote basis, distributing through a direct enterprise field sales motion augmented by a channel program covering MSSPs, Value Added Resellers, and Technology Partners. The website is localized in six languages (English, French, German, Japanese, Arabic, Spanish) supporting a claimed global footprint. As of the available data, CybelAngel has raised approximately $51.7M across four funding rounds, with the most recent — a $36M round in February 2020 — led by Prime Ventures with participation from Bpifrance, Open CNP, and TempoCap. The company employs 101-250 people and is recognized in Gartner's Digital Risk Protection 2021 competitive landscape and validated by a Forrester Total Economic Impact study showing 359% ROI over three years.
CybelAngel firmographics
Firmographics- Name
- CybelAngel
- Legal name
- CybelAngel
- Website
- https://cybelangel.com
- Company type
- Private
- Founded year
- 2013
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- CybelAngel is a Paris-based external threat intelligence platform that scans over 4.3 billion IPs and 6 billion data points daily to help large enterprises detect shadow assets, leaked credentials, dark web threats, and brand impersonation across their extended digital footprint.
- Ownership category
- akta.pro rank
CybelAngel industry classification
Industry- Product category
- External Threat Intelligence
- NAICS
- Software Publishers (5132)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ)
- akta.pro secondary industries
- Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK), Extended Detection & Response (XDR) (HDADAEAB)
Keywords
Where CybelAngel is headquartered
LocationHeadquarters
- HQ city
- Paris
- HQ country
- France
- HQ region
- Europe
Markets served
CybelAngel business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- SaaS Subscription Platform: CybelAngel operates as a SaaS platform providing external threat intelligence services through annual or multi-year subscription contracts. Customers access the platform for continuous monitoring, detection, and remediation services.
- Professional Services - Threat Investigations: Premium white-glove services delivered by the REACT Team for complex threat investigations, cyber due diligence, and on-demand intelligence analysis.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise subscription with tailored pricing based on organization size and needs |
Go-to-market motion2 records
Distribution channels4 records
Marketing channels6 records
CybelAngel product offering
Product offeringCore offering
CybelAngel provides an external threat intelligence SaaS platform that scans the open internet, connected storage, cloud storage, databases, code repositories, and the dark web daily to detect exposed enterprise data, shadow assets, leaked credentials, brand impersonation, and third-party risks. The platform combines AI-driven scanning of 6 billion data points per day with dedicated human analyst triage to deliver contextualized incident reports for enterprise security teams. Premium white-glove services including remediation takedowns, M&A cyber due diligence, and special threat investigations are delivered by the REACT Team.
Product overview
CybelAngel is a unified external threat intelligence platform that combines multiple cybersecurity capabilities into an integrated ecosystem. The platform is built around six core modules: Attack Surface Management, Data Breach Prevention, Brand Protection, Credential Intelligence, Dark Web Monitoring, and Cyber Threat Intelligence, supported by premium services including Cybersecurity Remediation, M&A Cyber Due Diligence, Special Threat Investigation, and Regulatory Compliance. The platform processes 6 billion data points daily to detect exposed enterprise data, corporate assets, and cyber threats, providing organizations with end-to-end protection through AI-powered detection combined with human analyst expertise. The platform supports compliance with DORA, NIS 2, and NIST CSF 2.0 frameworks.
Differentiator
Problem solved
Functional benefit
Brands
- REACT Team: Elite group of cybersecurity analysts specializing in uncovering exposures and delivering actionable intelligence for rapid remediation
Products and services
- Attack Surface Management Detects vulnerable APIs and internet-facing assets before attackers do, extending security perimeter beyond organizational architecture to encompass partners and suppliers. Discovers shadow assets, attributes assets for expedited remediation, and prioritizes cybersecurity efforts through a risk-driven approach. For enterprise security teams needing external visibility.
- Data Breach Prevention Proactively detects data leaks to safeguard confidential assets from potential exploitation by cybercriminals by scanning for leaked data accessible outside the external IT perimeter including connected storage devices, cloud storage (AWS S3, Azure Blob Storage, Google Cloud Storage), cloud applications, and databases. For enterprise security teams.
- Brand Protection Detects and takes down malicious domains, fake social media accounts, and fraudulent mobile apps to protect brand reputation from impersonation threats. Monitors social media platforms, domain abuse, and dark web activities. For brand, marketing, and security teams at luxury, retail, and brand-led enterprises.
- Cyber Threat Intelligence Enhances security posture with top-tier threat intelligence providing actionable insights to mitigate risks through on-demand intelligence, curated intelligence reports, supply chain intelligence, and IOC feeds. For enterprise security and SOC teams.
- Credential Intelligence Proactively detects and manages critical credential leaks before they are compromised by monitoring data breaches, paste sites, and dark web forums for compromised login details and sensitive data. For enterprise security teams.
- Dark Web Monitoring Provides visibility into emerging cyber threats by infiltrating closed hacker communities and analyzing millions of posts in over 200 languages to detect compromised credentials and identify risks such as data breaches and phishing attacks. For enterprise security and threat intelligence teams.
- Cybersecurity Remediation Expert-led takedown services that significantly reduce mean time to remediation (MTTR) for critical alerts, reducing time-to-containment from 77 to 11 days. Includes dedicated analyst support for incident response. For enterprise security teams requiring rapid takedown of external exposures.
- M&A Cyber Due Diligence Uncovers hidden cybersecurity risks that could impact the success and valuation of mergers and acquisitions by providing a comprehensive assessment of a target company's external digital footprint. For corporate development, M&A, and private equity deal teams.
- Special Threat Investigation In-depth, on-demand cybersecurity analysis delivered by the REACT Team for complex and high-priority threats including cyber fraud analysis, threat actor profiling, phishing campaign analysis, and TIBER investigations. For enterprise security teams requiring bespoke intelligence.
- Regulatory Compliance Assists organizations in navigating cybersecurity regulations ensuring alignment with DORA, NIS 2, and NIST CSF 2.0 frameworks through proactive threat detection and vulnerability management. For enterprise compliance and security teams in regulated industries.
Quantifiable outcome
- 359% ROI over 3 years
- +3 more outcomes
Companies that use CybelAngel
Customer profileNamed customers4 records
Segments8 records
Ideal customer profiles6 records
CybelAngel technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability7 records
Feature6 records
CybelAngel partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Managed Security Service Providers (MSSPs)coreMSSP partners can offer CybelAngel's External Threat Intelligence as a managed service, generating new revenue streams with flexible consumption options including annual services, short-term engagements, or security audits. Partners receive comprehensive onboarding and training programs to upskill analysts.
Scale indicators7 records
Recent moves6 records
Expansion highlights6 records
CybelAngel competitors and assessment
Company assessmentDirect peers
- BrandShield: BrandShield is a Digital Risk Protection vendor explicitly named alongside CybelAngel as a leading DRP tool. It focuses on brand protection, counterfeit detection, and takedown services — directly comparable to CybelAngel's Brand Protection product.
- Flashpoint: Flashpoint is a threat intelligence and data breach intelligence company specializing in dark web monitoring, illicit communities, and compromised credentials — directly overlapping with CybelAngel's Dark Web Monitoring and Credential Intelligence modules.
- Recorded Future: Recorded Future is a leading threat intelligence platform that combines external data collection, dark web monitoring, and machine learning analytics — closely paralleling CybelAngel's external threat intelligence offering but at much larger scale following its Mastercard acquisition.
- ZeroFox: ZeroFox is a direct competitor in Digital Risk Protection and external threat intelligence, offering brand protection, attack surface management, and dark web monitoring to enterprises. Both are recognized as leading DRP vendors by analysts.
Broad incumbents
- Tenable: Tenable's external attack surface management capabilities (Tenable.asm) compete with CybelAngel's Attack Surface Management product. Tenable is a much larger, public vulnerability management incumbent expanding into adjacent external risk visibility.
- Rapid7: Rapid7 offers vulnerability management, threat intelligence, and managed detection services through InsightConnect and Metasploit. It overlaps with CybelAngel's threat intelligence and exposure management capabilities as part of a broader security operations platform.
- Microsoft Defender External Attack Surface Management: Microsoft Defender EASM provides external attack surface discovery as part of Microsoft Defender suite, leveraging Microsoft's massive cloud telemetry. It is a 'good enough' bundled alternative that competes on price and integration rather than depth.
- Mandiant: Mandiant (now part of Google Cloud) provides threat intelligence, incident response, and managed detection services. It overlaps with CybelAngel's Cyber Threat Intelligence and Special Threat Investigation modules, but as a much broader incident response and consulting firm.
- CrowdStrike: CrowdStrike's Falcon Surface module provides external attack surface management as part of its broader XDR platform, competing with CybelAngel's Attack Surface Management offering. As a $70B+ public cybersecurity incumbent, CrowdStrike represents the most significant platform consolidation threat.
- Proofpoint: Proofpoint is recognized alongside CybelAngel as a leading DRP vendor and offers brand protection, email security, and threat intelligence. It is a much larger incumbent with overlapping brand protection and dark web monitoring capabilities.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
CybelAngel social profiles
Digital presenceCybelAngel compliance and trust
Trust signalCompliance2 records
CybelAngel financial estimates
Financial estimateRevenue estimate
Valuation estimate
CybelAngel leadership team
Management profileNumber of profiles
Profiles10 records
CybelAngel funding detail
Funding detailFunding overview
Funding rounds4 records
Investors5 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
CybelAngel M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about CybelAngel
What does CybelAngel do?
CybelAngel provides an external threat intelligence SaaS platform that scans the open internet, connected storage, cloud storage, databases, code repositories, and the dark web daily to detect exposed enterprise data, shadow assets, leaked credentials, brand impersonation, and third-party risks. The platform combines AI-driven scanning of 6 billion data points per day with dedicated human analyst triage to deliver contextualized incident reports for enterprise security teams. Premium white-glove services including remediation takedowns, M&A cyber due diligence, and special threat investigations are delivered by the REACT Team.
Is CybelAngel a public or private company?
CybelAngel is a private company. It is classified as venture growth investor backed and is currently operating.
When was CybelAngel founded?
CybelAngel was founded in 2013. It employs 101 to 250 people.
Where is CybelAngel based?
CybelAngel is headquartered in Paris, France, in the Europe region.
How does CybelAngel make money?
Two revenue lines are on record. SaaS Subscription Platform is the primary driver. The others are professional Services - Threat Investigations.
Who are CybelAngel's main competitors?
Direct peers on record are BrandShield, Flashpoint, Recorded Future and ZeroFox. Broad incumbents are Tenable, Rapid7, Microsoft Defender External Attack Surface Management, Mandiant, CrowdStrike and Proofpoint.
Does CybelAngel have an API?
Yes. CybelAngel offers a fully-documented RESTful API for building robust and scalable asset discovery workflows. The platform also provides CybelAngel Connect, a no-code automation feature that enables users to create connections to their business and cybersecurity toolstack in less than 15 minutes. The API enables integration with Security Operations Centers (SOC), allowing actionable alerts through the platform or via API to existing tools like SIEMs or SOARs. Developer documentation is at Not specified.
What industry is CybelAngel in?
CybelAngel's product category is External Threat Intelligence. Its primary akta.pro industry code is HDADAGAJ, Attack Detection & Response for Cloud/SaaS (SOC for Cloud), with a secondary code of HDABAHAK, Data Security & Privacy for Cloud (DLP, DSPM, Tokenization). Its NAICS code is 5132 and its SIC code is 7372.