CyGlass
CyGlass provides a cloud-delivered Network Detection and Response platform that uses over 100 proprietary machine learning models to detect and correlate threats across on-premises networks, remote workers, and cloud environments, targeting mid-market and small organizations. Now a WatchGuard Technologies subsidiary.
- Company typePrivate
- Founded2016
- HeadquartersLittleton, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What CyGlass does
CyGlass, founded in 2016 and headquartered in Littleton, Massachusetts, provides a cloud-delivered Network Detection and Response (NDR) platform branded as CyGlass Hybrid Network Defense. The platform delivers AI-driven threat detection and response across on-premises networks, remote workers, and cloud environments, with particular focus on Microsoft 365, Azure Active Directory, and on-premises Active Directory identity telemetry. Its technical core is a library of over 100 unsupervised and semi-supervised machine learning models that detect anomalous authentication, access, communications, and file events, correlate them, and assign risk scores to drive remediation. The system produces plain-language threat explanations and prebuilt compliance controls mapped to frameworks such as CSF and NIST, targeting organizations that lack dedicated security expertise.
The company operates on a subscription-based SaaS model with quote-based annual billing and no publicly disclosed price points. Its go-to-market blends direct sales (via a Request a Demo flow), channel partners through the WatchGuardONE reseller and distributor network, and a self-service online portal limited to renewals. CyGlass serves a horizontal mid-market and small-organization segment that needs enterprise-grade visibility without dedicated hardware, on-premise software, or large security teams.
In a strategic transaction whose specific date is not disclosed, CyGlass was acquired by WatchGuard Technologies, Inc. and now operates as a wholly-owned subsidiary. Its technology has been rebranded as WatchGuard NDR and embedded in the WatchGuard Unified Security Platform, alongside firewalls, EDR, MFA, ZTNA, and managed detection and response offerings. Existing CyGlass customers continue to be supported on the original solution, while new distribution flows through WatchGuard's global channel and managed service provider ecosystem.
CyGlass firmographics
Firmographics- Name
- CyGlass
- Legal name
- CyGlass (as a WatchGuard company, legal entity details not explicitly stated on this page)
- Website
- https://cyglass.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- CyGlass provides a cloud-delivered Network Detection and Response platform that uses over 100 proprietary machine learning models to detect and correlate threats across on-premises networks, remote workers, and cloud environments, targeting mid-market and small organizations. Now a WatchGuard Technologies subsidiary.
- Ownership category
- akta.pro rank
CyGlass industry classification
Industry- Product category
- Network Detection and Response (NDR)
- NAICS
- Software Publishers (5132), Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Network Detection & Response (NDR) (HDADABAI)
- akta.pro secondary industries
- Identity Threat Detection & Response (ITDR) (HDAEAJAH), Extended Detection & Response (XDR) (HDADAEAB)
Keywords
Where CyGlass is headquartered
LocationHeadquarters
- HQ city
- Littleton
- HQ country
- United States
- HQ region
- North America
Markets served
CyGlass business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations
Revenue model
- Subscription-based SaaS: CyGlass operates as a cloud-delivered SaaS solution requiring no additional hardware or software on-premise. Revenue is generated through subscription licensing, with pricing designed to meet the budgets and needs of midsize and small organizations.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | No tiers publicly disclosed |
Go-to-market motion1 record
Distribution channels3 records
Marketing channels7 records
CyGlass product offering
Product offeringCore offering
CyGlass provides cloud-delivered Network Detection and Response (NDR) software that delivers AI-driven threat detection and response across hybrid environments spanning on-premises networks, remote workers, and cloud platforms. The platform employs over 100 unsupervised and semi-supervised machine learning models to surface unusual authentication, access, communications, and file events, correlates them with risk scoring, and provides plain language remediation guidance tailored to organizations with limited security resources.
Product overview
CyGlass offers a unified cloud-based Network Detection and Response (NDR) platform under the CyGlass Hybrid Network Defense product. The solution provides AI-driven threat detection and response across hybrid environments (on-premises, remote workers, cloud platforms) with over a hundred machine learning models for anomaly detection. CyGlass was acquired by WatchGuard and its technology is being integrated into WatchGuard NDR and the broader Unified Security Platform. The product is positioned for midsize and small organizations, requiring no additional hardware or software and integrating with existing infrastructure.
Differentiator
Problem solved
Functional benefit
Brands
- CyGlass Hybrid Network Defense: AI-driven hybrid network defense solution offering threat detection and response across on-premises, cloud, and remote work environments.
Products and services
- CyGlass Hybrid Network Defense
- WatchGuard NDR (Network Detection and Response)
Quantifiable outcome
- Deployment time in minutes with no additional hardware or software required
Companies that use CyGlass
Customer profileSegments1 record
Ideal customer profiles2 records
CyGlass technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability4 records
Feature4 records
CyGlass partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- WatchGuard TechnologiescoreCyGlass is now a WatchGuard company. WatchGuard acquired CyGlass and is integrating its network threat detection and response technology into the WatchGuard Unified Security Platform. WatchGuard NDR brings CyGlass-based network threat detection and response solutions to the platform.
Recent moves6 records
Expansion highlights5 records
CyGlass competitors and assessment
Company assessmentDirect peers
- Darktrace: Darktrace is a leading AI-driven NDR platform using unsupervised machine learning to detect anomalous network behavior across enterprise environments. It is the most directly comparable competitor to CyGlass, though it skews to larger enterprise customers while CyGlass targets mid-market.
- Vectra AI: Vectra AI provides AI-driven network detection and response focused on attacker behaviors across cloud, SaaS, identity, and on-prem networks. Closely comparable to CyGlass on the AI/ML threat correlation approach and multi-environment coverage.
- ExtraHop: ExtraHop offers Reveal(x), a network detection and response platform with deep packet inspection and machine learning for threat detection. Directly competes with CyGlass in NDR category with a more enterprise-focused GTM.
- IronNet Cybersecurity: IronNet offers AI-based network detection and collective defense for enterprises and critical infrastructure. Direct NDR competitor with similar ML-driven anomaly detection philosophy.
Broad incumbents
- Cisco Secure Network Analytics (Stealthwatch): Cisco's Stealthwatch/Secure Network Analytics is an established enterprise NDR offering bundled within Cisco's broader networking and security portfolio. Represents broad-incumbent competitive pressure on CyGlass's network threat detection capabilities.
- Microsoft Defender for Identity: Microsoft's Defender for Identity (formerly Azure ATP) provides identity threat detection for Active Directory environments, directly overlapping with CyGlass's M365/AD/Azure threat detection capabilities and bundled into Microsoft 365 E5 licensing.
- Rapid7 InsightIDR: Rapid7's InsightIDR is a cloud-based SIEM/XDR alternative offering user behavior analytics, network traffic analysis, and deception technology. Competes with CyGlass on the detection-and-response use case, especially for mid-market.
- CrowdStrike Falcon Network Threat Response: CrowdStrike's Falcon platform includes network threat detection capabilities as part of its broader XDR suite. Represents broad-incumbent competition as CrowdStrike increasingly bundles NDR-style telemetry into its endpoint-centric platform.
Emerging players
- Corelight: Corelight provides network detection and response based on open-source Zeek data with ML analytics, serving enterprise SOC teams. Comparable NDR technology stack though typically sold into more technical buyer profiles than CyGlass.
- Arctic Wolf: Arctic Wolf delivers managed detection and response (MDR) services for mid-market organizations, combining NDR, EDR, and SIEM telemetry into a managed SOC offering. Competes with CyGlass for the same mid-market buyer needing outsourced security operations.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
CyGlass social profiles
Digital presenceCyGlass financial estimates
Financial estimateRevenue estimate
Valuation estimate
CyGlass leadership team
Management profileNumber of profiles
Profiles5 records
CyGlass funding detail
Funding detailFunding overview
Funding rounds2 records
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
CyGlass M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about CyGlass
What does CyGlass do?
CyGlass provides cloud-delivered Network Detection and Response (NDR) software that delivers AI-driven threat detection and response across hybrid environments spanning on-premises networks, remote workers, and cloud platforms. The platform employs over 100 unsupervised and semi-supervised machine learning models to surface unusual authentication, access, communications, and file events, correlates them with risk scoring, and provides plain language remediation guidance tailored to organizations with limited security resources.
Is CyGlass a public or private company?
CyGlass is a private company. It is classified as corporate owned and is currently operating.
When was CyGlass founded?
CyGlass was founded in 2016. It employs 11 to 50 people.
Where is CyGlass based?
CyGlass is headquartered in Littleton, United States, in the North America region.
How does CyGlass make money?
One revenue line is on record: subscription-based SaaS.
Who are CyGlass's main competitors?
Direct peers on record are Darktrace, Vectra AI, ExtraHop and IronNet Cybersecurity. Broad incumbents are Cisco Secure Network Analytics (Stealthwatch), Microsoft Defender for Identity, Rapid7 InsightIDR and CrowdStrike Falcon Network Threat Response. Emerging players are Corelight and Arctic Wolf.
Does CyGlass have an API?
No public API is recorded for CyGlass.
What industry is CyGlass in?
CyGlass's product category is Network Detection and Response (NDR). Its primary akta.pro industry code is HDADABAI, Network Detection & Response (NDR), with a secondary code of HDAEAJAH, Identity Threat Detection & Response (ITDR). Its NAICS code is 5132 and its SIC code is 7372.