What Cymulate does

Cymulate is an Israel-headquartered cybersecurity vendor founded in 2016 (per firmographic data) that operates an agentic AI-powered Security Validation and Exposure Management Platform. The platform continuously tests enterprise security controls against a daily-refreshed attack library aligned with the MITRE ATT&CK framework, validating whether organizations can prevent and detect modern threats including APT groups, ransomware, vulnerability exploits and emerging AI/LLM attack vectors. Its modular product suite spans Cymulate Exposure Validation, Auto Mitigation, CTEM, Detection Studio and Threat Studio, all orchestrated by Vero AI—a multi-agent system that automates threat intelligence analysis, targeting, assessment building, mitigation coordination and reporting tailored to each customer's environment, assets and risk profile. The platform integrates with 50+ security controls (SIEM, EDR, XDR, WAF) and operates a closed-loop control plane that pushes vendor-specific mitigations, detection rules and IoCs directly into deployed defenses.

The company sells to enterprise security teams—CISOs, SecOps/SOC, red/purple teams and vulnerability management functions—primarily in financial services, retail, technology and government-adjacent verticals. Revenue is generated through quote-based annual subscriptions with auto-renewal and a 7% annual price escalator, supported by a hybrid go-to-market combining direct enterprise field sales, a 14-day self-serve trial (PLG funnel) and a growing channel/reseller program. The customer base scaled from over 300 enterprise clients in May 2021 to more than 1,000 enterprise security teams by 2026, with named logos spanning Banco PAN, RBI, Hertz Israel, Saffron Building Society, Darling Ingredients and multiple undisclosed financial regulatory authorities and global retailers. Cymulate has raised $141 million across five disclosed rounds (Series D $70M led by One Peak with Susquehanna Growth Equity in September 2022), holds SOC 2 Type II, ISO 27001/27017/27701 and CSA STAR Level 1 certifications, and operates subsidiaries in the United States, United Kingdom and India.

Name

Cymulate

Legal name

Cymulate Ltd.

Website

https://cymulate.com

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

101–250 employees

Short description

Cymulate provides an agentic AI-powered exposure management and security validation platform that continuously tests enterprise security controls against a daily-updated MITRE ATT&CK-aligned attack library, serving over 1,000 enterprise security teams globally.

Ownership category

akta.pro rank

Product category

Cybersecurity / Security Validation & Exposure Management

NAICS

Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (5415)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Continuous Controls Monitoring (CCM) (HDADAHAE)

akta.pro secondary industry

Vulnerability Assessment & Scanning (HDADAHAA)

Keywords

• Exposure management platform
• Breach attack simulation
• Security validation platform
• Threat exposure management
• Automated security testing

Headquarters

HQ city

Holon

HQ country

Israel

HQ region

Middle East

Offices5 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Subscription SaaS Platform: Annual subscription model for access to the Cymulate Exposure Management Platform. The subscription fee is paid regardless of actual use and is non-refundable. Initial term auto-renews for successive 12-month terms unless 30 days notice is given. Annual price increase of 7% upon renewal.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels7 records

Core offering

Cymulate is a SaaS-based exposure management and security validation platform that continuously tests, validates, and optimizes an organization's security controls against real-world threats. The platform uses automated attack simulations mapped to the MITRE ATT&CK framework and combines offensive security testing, detection engineering, threat intelligence, and automated remediation in a single integrated offering for enterprise security teams.

Product overview

Cymulate offers a unified Exposure Management Platform with a modular architecture built around agentic cyber defense engineering. The core Cymulate Platform serves as the central hub, with integrated modules including Cymulate Exposure Validation (continuous threat and security control testing), Cymulate Auto Mitigation (automated security control updates), Cymulate CTEM (exposure prioritization and validation), Cymulate Detection Studio (detection engineering and tuning), and Cymulate Threat Studio (custom offensive testing). Cymulate Vero AI serves as the AI intelligence layer powering the platform with autonomous agents for threat analysis, assessment building, and reporting. The platform integrates with 50+ security controls to provide a closed-loop system that proves, prioritizes and adapts cybersecurity defenses.

Differentiator

Problem solved

Functional benefit

Brands

• Cymulate Exposure Validation: Automated continuous testing to validate threats, security controls and exposures
• Cymulate Auto Mitigation
• Cymulate CTEM
• Cymulate Detection Studio
• Cymulate Threat Studio
• Vero AI
• Mitigation Hub

Products and services

• Cymulate Platform Unified exposure management and security validation platform that continuously tests, validates, and optimizes enterprise security controls for security operations and red/blue team leaders.
• Cymulate Exposure Validation Continuous security control validation module that runs automated attack scenarios to verify the effectiveness of deployed security tools and configurations for enterprise security teams.
• Cymulate CTEM Continuous Threat Exposure Management (CTEM) module that scopes, discovers, prioritizes, validates, and mobilizes responses to exposures across the attack surface for security leaders.
• Cymulate Auto Mitigation Automated mitigation and response module that operationalizes remediation actions for exposures identified through validation and exposure management workflows.
• Cymulate Detection Studio Detection engineering and validation module that enables SOC and detection engineering teams to build, test, and tune detection rules against simulated attack techniques.
• Cymulate Threat Studio Threat intelligence and adversary emulation module that delivers curated, MITRE ATT&CK-mapped threat scenarios and adversary emulation campaigns for red and blue teams.
• Cymulate Vero AI Agentic AI layer embedded across the Cymulate platform that automates validation workflows, exposure analysis, and mitigation decisioning for security operations teams.

Quantifiable outcome

• Nearly 50% risk reduction within first three months of deployment
• +9 more outcomes

Named customers10 records

Segments5 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

AI capability6 records

Feature10 records

Partnerships

Three partnerships are on record, tiered core.

• SentinelOnecoreTechnology or IntegrationSentinelOne integration partnership - Self-Healing Endpoint Security. SentinelOne is listed as a technology alliance partner providing endpoint security integration with Cymulate's platform for comprehensive security validation.
• WizcoreTechnology or IntegrationWiz cloud security integration partnership. Wiz is listed as a technology alliance partner providing cloud security integration with Cymulate's platform for cloud security validation.
• AWS (Amazon Web Services)coreTechnology or IntegrationAWS serves as Cymulate's primary cloud infrastructure provider (IaaS). Servers and databases for production and backup of the Cymulate platform are hosted on AWS in US, EU, and India regions. AWS infrastructure has ISO 27001:2022, PCI DSS Service Provider Level 1, and SOC 2/3 Type II compliance.

Scale indicators13 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• AttackIQ: AttackIQ is a direct BAS/continuous security validation peer, providing an automated platform that emulates adversary TTPs to test security control effectiveness, the same core use case as Cymulate Exposure Validation.
• SafeBreach: SafeBreach is a direct competitor in the breach and attack simulation (BAS) and security validation market, offering continuous automated testing of security controls against the latest threats, closely aligned with Cymulate's core Exposure Validation proposition.
• Pentera: Pentera is a direct peer in automated security validation, offering continuous, agentless penetration testing of enterprise environments, a closely comparable product category to Cymulate's continuous validation platform.
• XM Cyber: XM Cyber (acquired by Schwarz Group) is a direct peer in attack path management and continuous security validation, addressing adjacent exposure-management use cases that overlap with Cymulate's CTEM offering.
• Bishop Fox: Bishop Fox is a direct peer in continuous offensive security testing, combining automated attack-surface validation with human red-team expertise, partially overlapping with Cymulate's Threat Studio and Exposure Validation modules.

Broad incumbents

• Palo Alto Networks (Cortex XSIAM/XDR): Palo Alto Networks is a broad incumbent in security operations whose Cortex XDR/XSIAM and Unit 42 BAS capabilities increasingly overlap with Cymulate's validation and CTEM use cases, often bundled into larger enterprise platform deals.
• CrowdStrike (Falcon Platform): CrowdStrike is a broad endpoint and SOC incumbent that has expanded into exposure management and validation-adjacent capabilities within the Falcon platform, competing with Cymulate for enterprise security budget.
• Tenable: Tenable is a broad incumbent in vulnerability management whose Tenable One platform extends into exposure validation and prioritization, directly competing with Cymulate's CTEM module for vulnerability-prioritization budget.
• Rapid7: Rapid7 is a broad security-operations incumbent offering exposure management, vulnerability management, and managed validation services that overlap with Cymulate's continuous validation and CTEM positioning.

Emerging players

• Safe Security (SAFE): Safe Security is an emerging player in cyber risk quantification and continuous threat exposure management, addressing the same CTEM category that Cymulate is pursuing, with a different methodological angle (BREACH likelihood scoring).

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/cymulate-ltd
• Xx.com/CymulateLtd
• Facebookfacebook.com/Cymulate

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles11 records

Subsidiaries3 records

Funding overview

Funding rounds5 records

Investors6 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cymulate