What Cyscale does

Cyscale Limited is a private cloud security software company that develops an agentless Cloud Native Application Protection Platform (CNAPP). Founded in 2019 and registered in England and Wales with engineering operations in Cluj-Napoca, Romania, the company serves enterprise security, platform, and compliance teams plus managed security service providers operating in multi-cloud environments. The platform unifies Cloud Security Posture Management (CSPM), Cloud Vulnerability Management, Cloud Infrastructure Entitlement Management (CIEM), Data Security Posture Management (DSPM), Kubernetes Security Posture Management (KSPM), AI Security Posture Management (AI-SPM), and Application Security Posture Management with code scanning into a single operating model, with broad connector coverage across AWS, Azure, Google Cloud, Alibaba Cloud, Okta, Microsoft Entra ID, Google Workspace, GitHub, and GitLab.

The platform's central differentiator is its proprietary Security Knowledge Graph™, which correlates cloud assets, identities, data, vulnerabilities, misconfigurations, and attack paths into a unified contextual view to support risk-based prioritization and remediation. Cyscale operates predominantly via an agentless architecture using secure provider APIs for cloud connectors, with a dedicated agent deployed only for Kubernetes runtime data collection. The company is ISO 27001 certified, SOC 2 Type 2 aligned, PCI DSS aligned, runs on CIS-benchmark-aligned production infrastructure hosted on AWS, and has been rated 4.9 stars by Gartner reviewers.

Cyscale monetizes through SaaS subscriptions with quote-based enterprise pricing plus a self-serve free trial, combining sales-led enterprise motions with product-led adoption. Since 2019 the company has raised approximately €3 million in disclosed funding, with the most recent €3 million seed round in May 2022 led by Notion Capital with Seedcamp and GapMinder BV. Named customers include S2E Italy (also a strategic implementation partner), Canon, FP Markets, Mirro, OutTask, S2E, and MeetGeek, and the company is actively expanding into the UK, US, Germany, France, and Singapore markets.

Name

Cyscale

Legal name

Cyscale Limited

Website

https://cyscale.com

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

11–50 employees

Short description

Cyscale is a private cloud security software company offering an agentless CNAPP platform that unifies CSPM, vulnerability management, CIEM, DSPM, KSPM, AI-SPM, and ASPM modules. It serves enterprise security, platform, and compliance teams plus MSSPs across AWS, Azure, GCP, and Alibaba Cloud.

Ownership category

akta.pro rank

Product category

Cloud Security Software

NAICS

Computer Systems Design and Related Services (5415), Computer Systems Design Services (541512)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Cloud Security Posture Management (CSPM) (HDABAHAA)

akta.pro secondary industries

Cloud Data Security (DSPM, Cloud DLP) (HDADADAJ), Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK), Kubernetes & Container Security (KSPM/KCSPM, Runtime) (HDADADAE), Secrets Management & Cloud Key Management (KMS, Vaults) (HDADADAK)

Keywords

• Cloud security posture
• Cloud vulnerability management
• Cloud-native application protection
• Data security posture
• Cloud identity management

Headquarters

HQ city

London

HQ country

United Kingdom

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

1. SaaS Subscription: Cyscale operates as a SaaS platform with subscription-based pricing. Customers pay for access to the CNAPP platform with modules like Data Security and AI Security exposed based on account or plan configuration. The platform offers different tiers with features aligned to billing and connector behavior.

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels6 records

Core offering

Cyscale provides an agentless Cloud-Native Application Protection Platform (CNAPP) that unifies cloud security posture management (CSPM), cloud vulnerability management, identity and entitlement risk analysis (CIEM), Kubernetes security posture management, data security posture management (DSPM), AI security posture management (AI-SPM), and application security posture management (ASPM) with code scanning into a single SaaS platform. The platform's proprietary Security Knowledge Graph™ correlates cloud assets, identities, data, vulnerabilities, and misconfigurations into a unified contextual view, enabling risk-based prioritization and guided remediation workflows across AWS, Azure, Google Cloud, and Alibaba Cloud environments.

Product overview

Cyscale is an agentless cloud-native application protection platform (CNAPP) that unifies multiple security capabilities into a single platform-plus-modules architecture. The core CNAPP platform is supplemented by discrete modules including CSPM (Cloud Security Posture Management), Cloud Vulnerability Management, DSPM (Data Security Posture Management), AI-SPM (AI Security Posture Management), ASPM + Code Scanning, Secrets and Outdated Software, CIEM, and Kubernetes Security Posture Management. The platform's central differentiator is the proprietary Security Knowledge Graph™ technology, which correlates cloud assets, identities, data, vulnerabilities, and misconfigurations into a unified contextual view. Cyscale uses an agentless approach for most cloud connectors (AWS, Azure, GCP, Alibaba Cloud) via secure provider APIs, while the Kubernetes coverage uses a dedicated Cyscale Kubernetes agent. The platform is designed to help security, platform, and compliance teams identify what matters most and remediate cloud risk faster.

Differentiator

Problem solved

Functional benefit

Brands

• Security Knowledge Graph: A core technology product that provides contextual analysis of cloud misconfigurations, vulnerabilities, access, and data to provide an accurate and actionable assessment of risk.
• CNAPP (Cloud Native Application Protection Platform)

Products and services

• CNAPP (Cloud Native Application Protection Platform) Cyscale's unified CNAPP platform combines cloud posture management, vulnerability management, identity risk context, compliance workflows, and remediation guidance into a single operating model. It correlates posture drift, CVEs, identity exposure, and attack paths so security and engineering teams can prioritize and remediate cloud risk faster from one unified interface across AWS, Azure, Google Cloud, and Alibaba Cloud.
• CSPM (Cloud Security Posture Management) Cloud Security Posture Management module that continuously identifies cloud misconfigurations and policy violations across AWS, Azure, and Google Cloud to reduce breach exposure and audit risk. Provides identity and data-centric views with automated detection and remediation guidance for security and compliance teams.
• Cloud Vulnerability Management Cloud vulnerability management module that correlates software vulnerabilities (CVEs) with runtime context, internet exposure, identity reachability, asset criticality, and attack paths. Prioritizes exploitable and exposed issues for production environments rather than providing raw CVE lists, reducing noisy vulnerability queues for engineering teams.
• DSPM (Data Security Posture Management) Data Security Posture Management module that discovers data stores across multi-cloud environments, classifies sensitive data, monitors data access patterns, and identifies data exposure risks. Maps findings to compliance frameworks including GDPR for organizations handling regulated data.
• AI-SPM Platform (AI Security Posture Management) AI Security Posture Management module that discovers AI services, AI workloads, models, endpoints, agents, datasets, vector stores, and AI BOM context, then connects them to cloud identities, data paths, public exposure, and remediation priority. Covers AI services and Kubernetes-hosted AI workloads.
• ASPM + Code Scanning Application Security Posture Management module that provides code-to-cloud visibility by mapping repository findings, packages, images, workloads, and exposed services. Integrates with GitHub and GitLab for SAST, SCA, secrets scanning, and IaC scanning to connect code-level findings to live cloud workloads.
• Security Knowledge Graph™ Cyscale's proprietary knowledge graph technology that maps relationships between cloud assets, identities, data, vulnerabilities, misconfigurations, and attack paths. Provides contextual insights that enable prioritization based on real-world risk exposure rather than isolated findings, serving as the core differentiator of the Cyscale platform.
• CIEM (Cloud Infrastructure Entitlement Management) Cloud Infrastructure Entitlement Management providing contextual identity and entitlement risk analysis. Monitors overprivileged identities, identifies unused permissions, and maps identity access to data exposure risks across cloud environments including AWS, Azure, Google Cloud, Microsoft Entra ID, Okta, and Google Workspace.
• Kubernetes Security Posture Management (KSPM) Kubernetes Security Posture Management providing visibility into container environments, workload context, and Kubernetes-specific security configurations. Uses the Cyscale Kubernetes agent for cluster runtime inventory collection as cluster runtime data requires in-cluster collection, complementing the agentless cloud connectors.
• Secrets and Outdated Software Module for detecting exposed credentials and secrets in cloud environments and identifying outdated or end-of-life software dependencies. Helps prevent credential exposure from becoming cloud incidents and ensures software components remain current and patched.

Quantifiable outcome

• 72% of the remediation context is already mapped with Cyscale

Named customers7 records

Segments10 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration9 records

AI capability1 record

Feature5 records

Partnerships

Four partnerships are on record, tiered strategic and core.

• S2E ItalystrategicImplementation/ SI/ Consulting PartnerS2E Italy, the largest Italian digital transformation and cybersecurity consulting company, built an entire misconfigurations and vulnerabilities detection system on top of Cyscale platform. This is a strategic implementation partnership where S2E delivers Cyscale-based services to their clients.
• AWS (Amazon Web Services)coreTechnology or IntegrationCyscale integrates with AWS cloud services as part of its multi-cloud security platform. All Cyscale Platform data is hosted on AWS cloud infrastructure.
• Microsoft AzurecoreTechnology or IntegrationCyscale provides CSPM and cloud security posture management across Microsoft Azure environments.
• Google CloudcoreTechnology or IntegrationCyscale provides cloud security coverage across Google Cloud Platform environments.

Scale indicators2 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Wiz: Market-leading agentless CNAPP combining CSPM, vulnerability management, CIEM, DSPM, and identity security into a single graph-based platform. Most direct competitor to Cyscale's positioning and the primary incumbent Cyscale compares against on its website.
• Orca Security: Agentless cloud security platform providing CSPM, vulnerability management, CIEM, and compliance in a unified product. Closely comparable to Cyscale on architecture (agentless side-scanning) and on the breadth of CNAPP modules offered.
• Lacework: Cloud security platform offering CSPM, workload protection, threat detection, and compliance automation. Competes with Cyscale in the consolidated CNAPP category and is explicitly named on Cyscale's comparison pages.
• Aqua Security: Cloud-native security vendor focused on container, Kubernetes, and serverless workload protection, with broader CNAPP coverage. Overlaps with Cyscale's KSPM and CNAPP modules, particularly for cloud-native application security buyers.

Broad incumbents

• Palo Alto Networks (Prisma Cloud): Enterprise cybersecurity incumbent whose Prisma Cloud platform delivers CNAPP, CSPM, CIEM, and cloud workload protection at scale. Competes with Cyscale but as part of a much broader security portfolio and with substantially larger R&D and go-to-market resources.
• CrowdStrike (Falcon Cloud Security): Endpoint-incumbent expanding into cloud security via Falcon Cloud Security, offering CNAPP and runtime workload protection integrated with its broader Falcon platform. Overlaps with Cyscale's CNAPP coverage but at much larger scale.
• Tenable Cloud Security (formerly Tenable.cs): Cloud security posture management offering from established vulnerability management vendor Tenable. Comparable to Cyscale's CSPM and cloud vulnerability management modules but backed by Tenable's much larger customer base and Nessus telemetry.
• Microsoft Defender for Cloud: Hyperscaler-native CSPM and CNAPP offering bundled into Azure subscriptions. Competes with Cyscale for Azure customers through deeply integrated native posture management that often sets the floor on price and feature expectations.
• Check Point CloudGuard: Enterprise security incumbent offering cloud security posture management, workload protection, and CSPM as part of its broader Infinity platform. Comparable to Cyscale on CSPM and posture management but part of a much wider portfolio.
• Trend Micro Cloud One: Established cloud security suite offering workload protection, CSPM, and container security. Competes with Cyscale across CSPM and cloud-native workload protection but with the resources of a long-tenured security incumbent.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/cyscale
• Facebookfacebook.com/cyscale
• LinkedInlinkedin.com/company/cyscale

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds3 records

Investors5 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cyscale