XM Cyber
XM Cyber provides a Continuous Exposure Management platform that maps viable attack paths across hybrid-cloud, identity, and on-premises environments for enterprise security teams, delivered via subscription and anchored by proprietary Attack Graph Analysis. The Israel-based firm operates as a subsidiary of Schwarz Group.
- Company typePrivate
- Founded2016
- HeadquartersHerzliya, Israel
- Headcount251–500
- GTM typeB2B
- OfferingSoftware
What XM Cyber does
XM Cyber, founded in 2016 and headquartered in Herzliya, Israel, provides a Continuous Exposure Management (CEM/CTEM) platform that continuously discovers, prioritizes, and validates exposures across hybrid-cloud, identity, and on-premises environments for enterprise security teams. The platform is anchored by its proprietary Attack Graph Analysis technology, which correlates vulnerabilities, credentials, misconfigurations, and access exposures into contextualized attack-path visualizations, and is delivered as a set of modular capabilities including AI Exposures, Cloud Exposures, External Attack Surface Management (EASM), Identity and Access Exposures, Security Controls Monitoring, Vulnerability Risk Management, and Exposed Credentials Management (with CIEM capabilities added in 2026). XM Cyber runs on AWS infrastructure spanning 22 regions and integrates with hyperscaler and enterprise ecosystems including Google Cloud, SAP, and the Schwarz Group's STACKIT sovereign cloud.
XM Cyber monetizes the platform primarily through annual or multi-year subscription licenses priced by endpoint and network asset scope, supplemented by optional professional services (installation, integration, customization) sold under separate statements of work. The company sells primarily via direct enterprise field sales with a "Book a Demo" motion, complemented by channel resellers, distributors, an MSSP partner track, and listings on Google Cloud Marketplace. The customer base skews enterprise across banking, healthcare, manufacturing, and critical infrastructure verticals, and the company maintains certifications including SOC 2 Type 2, ISO 27001/27017/27018, GDPR, BSI C5, and CCPA. XM Cyber has been a wholly owned subsidiary of Schwarz Group since 2023 and has previously acquired Cyber Observer (2022) and Confluera (February 2023) to extend its cloud security capabilities.
XM Cyber firmographics
Firmographics- Name
- XM Cyber
- Legal name
- XM Cyber Ltd.
- Website
- https://xmcyber.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 251–500 employees
- Short description
- XM Cyber provides a Continuous Exposure Management platform that maps viable attack paths across hybrid-cloud, identity, and on-premises environments for enterprise security teams, delivered via subscription and anchored by proprietary Attack Graph Analysis. The Israel-based firm operates as a subsidiary of Schwarz Group.
- Ownership category
- akta.pro rank
XM Cyber industry classification
Industry- Product category
- Continuous Exposure Management Platform
- NAICS
- Computer Systems Design and Related Services (5415), Security Systems Services (56162)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Attack Surface Management (EASM/CAASM) (HDADAHAC)
- akta.pro secondary industry
- Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ)
Keywords
Where XM Cyber is headquartered
LocationHeadquarters
- HQ city
- Herzliya
- HQ country
- Israel
- HQ region
- Middle East
Offices1 record
Markets served
XM Cyber business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- SaaS Subscription (XM Solution): Annual or multi-year subscription licenses for the XM Cyber platform, with automatic renewal terms and subscription fees charged at the beginning of each period. Subscription scope includes specific limitations on permitted endpoints and network assets.
- Professional Services: Optional installation, integration, customization, and supplementary services available for purchase under separate Statement of Work at additional cost.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise subscription with customizable scope |
| Other | Multi-year contract | Professional Services |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels5 records
XM Cyber product offering
Product offeringCore offering
XM Cyber provides a Continuous Exposure Management platform that continuously discovers, prioritizes, and validates exposures across hybrid-cloud environments, mapping viable attack paths to critical assets using its proprietary Attack Graph Analysis technology. The platform integrates cloud, identity, on-premises, and AI exposure management into a single unified view, enabling enterprise security teams to focus remediation on exposures that actually form exploitable attack chains rather than endless vulnerability lists. Sold as annual or multi-year SaaS subscriptions with optional professional services for installation, integration, and customization.
Product overview
XM Cyber offers a Continuous Exposure Management Platform as its core product, which operates as an integrated platform combining multiple security modules. The platform centers on Attack Graph Analysis technology that correlates exposures across domains to map viable attack paths. Key modules include AI Exposures, Cloud Exposures, External Attack Surface Management (EASM), Identity and Access Exposures, Security Controls Monitoring, Vulnerability Risk Management, and Exposed Credentials Management. The company has expanded through acquisitions of Confluera (2023) for real-time cloud attack detection and Cyber Observer (2022) for cloud security capabilities. The platform validates exposures by simulating attacks and provides actionable remediation guidance through an automated purple team approach.
Differentiator
Problem solved
Functional benefit
Brands
- Continuous Exposure Management Platform: XM Cyber's primary platform that continuously discovers, prioritizes, and validates exposures across hybrid-cloud environments to prevent attacks.
Products and services
- Continuous Exposure Management Platform The primary platform that continuously discovers, prioritizes, and validates every exposure forming real attack paths before exploitation. Protects business critical assets across any attack surface using Attack Graph Analysis technology. Integrates cloud, identity, on-premises, and AI exposure management into a single unified view, with modules spanning AI Exposures, Cloud Exposures, External Attack Surface Management (EASM), Identity and Access Exposures, Security Controls Monitoring, Vulnerability Risk Management, and Exposed Credentials Management. Targeted at enterprise security teams managing hybrid-cloud environments.
- Professional Services Optional installation, integration, customization, and supplementary services purchased under separate Statement of Work to support deployment and ongoing operation of the Continuous Exposure Management Platform.
Quantifiable outcome
- 394% ROI with payback in under 6 months
- +4 more outcomes
Companies that use XM Cyber
Customer profileNamed customers6 records
Segments2 records
Ideal customer profiles2 records
XM Cyber technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration5 records
AI capability4 records
Feature7 records
XM Cyber partnerships and signals
Strategic signalPartnerships
Four partnerships are on record, tiered core.
- Google CloudcoreDeepened partnership with Google Cloud through three initiatives: availability on Google Cloud Marketplace, full integration with Google Security Operations adding the XM Attack Graph dimension, and a sovereign cloud offering for European regulated industries via Schwarz Digits' Cloud STACKIT. The integration correlates Google Cloud-generated logs and alerts with XM Cyber's exposure management data to prioritize SOC alerts, reduce alert fatigue, and accelerate threat investigation.
- SAP SEcoreIn May 2023, XM Cyber formed a strategic partnership with SAP SE to strengthen security within hybrid environments using XM Cyber's Exposure Management Platform. SAP is a German enterprise software company.
- AWS (Amazon Web Services)coreAWS official partner evaluated by AWS's Foundational Technical Review (FTR) framework. XM Cyber runs on AWS infrastructure, implementing AWS Cloud WAN to manage global network spanning 22 AWS Regions with 470 VPC attachments. DPAs available for AWS hosting environment.
- STACKIT (Schwarz Digits Cloud)coreSovereign cloud offering for European regulated industries via Schwarz Digits' Cloud STACKIT, part of the Google Cloud partnership. DPA available for STACKIT hosting environment.
Scale indicators4 records
Recent moves6 records
Expansion highlights5 records
XM Cyber competitors and assessment
Company assessmentDirect peers
- Tenable: Tenable is the largest pure-play vulnerability management vendor, offering Tenable One as an exposure management platform with VM, ASM, identity, and cloud security modules. It is XM Cyber's closest direct competitor in the new Gartner Exposure Assessment Platforms MQ.
- Rapid7: Rapid7 sells InsightVM (vulnerability management) and InsightCloudSec (cloud security posture), positioning itself around exposure management and risk prioritization across hybrid environments — overlapping directly with XM Cyber's CEM thesis.
- Wiz: Wiz is a leading cloud security posture management (CSPM) and CNAPP vendor with attack-path analysis at the core of its platform. It competes head-on with XM Cyber's Cloud Exposures and identity/CIEM modules in cloud-first enterprise accounts.
- Qualys: Qualys provides VMDR (Vulnerability Management, Detection, and Response) plus cloud security and EASM in its TruRisk platform. It is a longstanding direct competitor in the vulnerability and exposure management category where XM Cyber competes.
- Orca Security: Orca Security provides agentless cloud security with attack-path analysis across cloud workloads, identities, and configurations. It is a direct competitor to XM Cyber's cloud exposure and CIEM capabilities with a differentiated agentless architecture.
- Cymulate: Cymulate offers a Breach and Attack Simulation (BAS) platform for continuous security validation — directly comparable to XM Cyber's automated attack simulation and continuous exposure validation engine.
- SafeBreach: SafeBreach provides a BAS platform that simulates adversary techniques to validate security controls, overlapping directly with XM Cyber's automated attack-path simulation and security controls monitoring capabilities.
- AttackIQ: AttackIQ delivers a security optimization platform built on adversary emulation and continuous purple-teaming, which is highly comparable to XM Cyber's automated purple-team positioning and exposure validation methodology.
Broad incumbents
- CrowdStrike: CrowdStrike Falcon is a broad endpoint/cloud security platform that has expanded into exposure management via Falcon Surface (EASM) and Spotlight (VM). As an established platform incumbent, it bundles exposure features that XM Cyber sells as discrete modules.
- Palo Alto Networks: Palo Alto Networks' Cortex XSIAM/XDR plus Prisma Cloud platform competes with XM Cyber's exposure and cloud security modules as part of a much broader security platform, frequently winning enterprise deals on the basis of single-vendor consolidation.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat4 records
Key risks7 records
Key highlights7 records
Customer concentration
XM Cyber social profiles
Digital presenceXM Cyber compliance and trust
Trust signalCompliance7 records
XM Cyber financial estimates
Financial estimateRevenue estimate
Valuation estimate
XM Cyber leadership team
Management profileNumber of profiles
Profiles7 records
XM Cyber subsidiaries and ownership
Company hierarchySubsidiaries2 records
XM Cyber funding detail
Funding detailFunding overview
Funding rounds4 records
Investors5 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
XM Cyber M&A and investment
M&A and investmentM&A2 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about XM Cyber
What does XM Cyber do?
XM Cyber provides a Continuous Exposure Management platform that continuously discovers, prioritizes, and validates exposures across hybrid-cloud environments, mapping viable attack paths to critical assets using its proprietary Attack Graph Analysis technology. The platform integrates cloud, identity, on-premises, and AI exposure management into a single unified view, enabling enterprise security teams to focus remediation on exposures that actually form exploitable attack chains rather than endless vulnerability lists. Sold as annual or multi-year SaaS subscriptions with optional professional services for installation, integration, and customization.
Is XM Cyber a public or private company?
XM Cyber is a private company. It is classified as corporate owned and is currently operating.
When was XM Cyber founded?
XM Cyber was founded in 2016. It employs 251 to 500 people.
Where is XM Cyber based?
XM Cyber is headquartered in Herzliya, Israel, in the Middle East region.
How does XM Cyber make money?
Two revenue lines are on record. SaaS Subscription (XM Solution) is the primary driver. The others are professional Services.
Who are XM Cyber's main competitors?
Direct peers on record are Tenable, Rapid7, Wiz, Qualys, Orca Security, Cymulate, SafeBreach and AttackIQ. Broad incumbents are CrowdStrike and Palo Alto Networks.
Does XM Cyber have an API?
No public API is recorded for XM Cyber.
What industry is XM Cyber in?
XM Cyber's product category is Continuous Exposure Management Platform. Its primary akta.pro industry code is HDADAHAC, Attack Surface Management (EASM/CAASM), with a secondary code of HDADAGAJ, Attack Detection & Response for Cloud/SaaS (SOC for Cloud). Its NAICS code is 5415 and its SIC code is 7372.