Cypago
- Company typePrivate
- Founded2023
- HeadquartersTel Aviv, Israel
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
Cypago firmographics
Firmographics- Name
- Cypago
- Legal name
- Cypago
- Website
- https://cypago.com
- Company type
- Private
- Founded year
- 2023
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Ownership category
- akta.pro rank
Cypago industry classification
Industry- Product category
- Cyber GRC Automation Software
- NAICS
- Software Publishers (513210)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Compliance, GRC Workflow & Audit Automation Platforms (HDAEAHAL)
- akta.pro secondary industries
- IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK), AI Governance, Risk & Compliance (GRC) Platforms (HDAAAMAA), Enterprise AI Governance, Risk & Compliance Platforms (Model Risk, Audit, Policies) (HDAEANAE)
Keywords
Where Cypago is headquartered
LocationHeadquarters
- HQ city
- Tel Aviv
- HQ country
- Israel
- HQ region
- Middle East
Offices1 record
Markets served
Cypago business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure
Revenue model
- SaaS Subscription: Enterprise-grade Cyber GRC Automation platform delivered as a SaaS subscription service. Pricing appears to be quote-based/enterprise tier targeting CISOs and GRC managers at large organizations.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise quote-based pricing |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels10 records
Cypago product offering
Product offeringCore offering
Cypago sells an enterprise-grade Cyber GRC Automation (CGA) SaaS platform that uses Agentic AI, Generative AI, NLP, and no-code workflow automation to automate governance, risk, and compliance processes for organizations. The platform continuously monitors security controls across cloud and on-premises systems, automates evidence collection, performs user access reviews, manages risk, and supports 15+ compliance frameworks (SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST, CMMC, FedRAMP, SOX ITGC) via 50+ native integrations with enterprise tools.
Product overview
Cypago offers a unified Cyber GRC Automation (CGA) platform that serves as the core product, with integrated modules including Continuous Control Monitoring (CCM), User Access Reviews (UAR), Risk Management, and Compliance Automation. The platform provides Agentic AI capabilities through ChatGRC and Agentic Workflows, enabling autonomous GRC task execution. Additional capabilities include No-Code Workflow Automation and Custom Frameworks, supporting compliance across multiple frameworks (SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST, CMMC, FedRAMP, SOX ITGC) and multiple business entities.
Differentiator
Problem solved
Functional benefit
Brands
- Cyber GRC Automation (CGA): Enterprise-grade platform that automates cybersecurity governance, risk, and compliance processes using AI and automation.
- ChatGRC
- Agentic Workflows
Products and services
- Cyber GRC Automation (CGA) Platform Enterprise-grade SaaS platform that automates governance, risk, and compliance processes across cloud and on-premises systems using GenAI, NLP, and customizable automation templates, supporting 15+ regulatory frameworks including SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST, CMMC, FedRAMP, and SOX ITGC.
- Continuous Control Monitoring (CCM) Provides near real-time visibility into security controls and frameworks, continuously monitoring critical controls, detecting findings, and providing actionable insights for proactive risk mitigation.
- User Access Reviews (UAR) Automates user access reviews by discovering users, permissions, and employee-user-permission relationships across applications, identity providers, and SSOs to identify anomalies and reduce compliance risk.
- Risk Management Automated cyber risk identification, assessment, and mitigation platform that provides risk scores, prioritizes high/critical risks, and continuously monitors risks within dynamic business environments.
- Compliance Automation Streamlines compliance automation at scale with seamless onboarding, gap analysis, intelligent remediation, continuous monitoring, and AI-based audit scoping for multiple frameworks.
- ChatGRC Agentic AI interface that understands the compliance universe and allows users to query frameworks, policies, controls, evidence, risks, and findings across documents, providing context-aware answers powered by LLM reasoning and retrieval-augmented intelligence.
Quantifiable outcome
- Reduced workload by 30-35% through automation of manual compliance tasks
- +4 more outcomes
Companies that use Cypago
Customer profileNamed customers13 records
Segments6 records
Ideal customer profiles4 records
Cypago technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration75 records
AI capability7 records
Feature13 records
Cypago partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Archer (RSM)coreStrategic partnership to deliver AI-driven continuous controls monitoring for enterprises. The Cypago and Archer partnership will transform security and compliance management by combining Cypago's Agentic AI Cyber GRC platform with Archer's enterprise governance solutions.
Scale indicators6 records
Recent moves7 records
Expansion highlights6 records
Cypago competitors and assessment
Company assessmentDirect peers
- Vanta: Vanta is a leading automated compliance and GRC platform for SOC 2, ISO 27001, HIPAA, and other frameworks, with a self-serve go-to-market and broad SaaS integrations. It is the most direct functional competitor to Cypago, especially in the mid-market and startup segments Cypago also targets.
- Drata: Drata is an automated continuous compliance platform that streamlines SOC 2, ISO 27001, HIPAA, and other audits with pre-built integrations and continuous controls monitoring. It competes head-to-head with Cypago's CCM and compliance automation modules.
- Secureframe: Secureframe automates compliance for SOC 2, ISO 27001, HIPAA, PCI DSS, and more via continuous monitoring and integrations. It is a close direct peer in automated cyber GRC, particularly for fast-growing technology companies.
- AuditBoard: AuditBoard is a cloud-based GRC platform for audit, risk, and compliance management with strong enterprise penetration. It overlaps with Cypago in compliance automation, evidence collection, and risk management for larger organizations.
- LogicGate Risk Cloud: LogicGate's Risk Cloud is a no-code GRC workflow platform for risk, compliance, and audit programs. Its no-code workflow and framework mapping capabilities directly overlap with Cypago's No-Code Workflow Automation and Custom Frameworks modules.
Broad incumbents
- RSA Archer: RSA Archer is a long-established enterprise GRC platform serving large financial institutions and regulated enterprises. It is both a Cypago strategic partner (announced November 2025) and a broad incumbent competitor with overlapping capabilities in risk, compliance, and audit.
- Diligent (Galvanize/ACL): Diligent offers a broad GRC and board management platform acquired from Galvanize/ACL, covering risk, audit, compliance, and ethics at enterprise scale. It competes with Cypago in the enterprise compliance automation category, especially for governance-heavy buyers.
- ServiceNow GRC: ServiceNow Integrated GRC is a large-scale enterprise platform unifying risk, compliance, and audit workflows on the ServiceNow platform. It is a broad incumbent that competes with Cypago for enterprise GRC budget and benefits from deep existing ServiceNow footprints.
Emerging players
- Hyperproof: Hyperproof is a SaaS compliance and risk management platform with continuous controls monitoring and evidence collection capabilities. It is an emerging player with significant product overlap with Cypago's CCM and compliance automation modules.
- Sprinto: Sprinto is a compliance automation platform purpose-built for fast-growing tech companies pursuing SOC 2, ISO 27001, HIPAA, and similar frameworks. It overlaps with Cypago's compliance automation capabilities but is currently more focused on the SMB/startup segment.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
Cypago social profiles
Digital presenceCypago compliance and trust
Trust signalCompliance1 record
Cypago financial estimates
Financial estimateRevenue estimate
Valuation estimate
Cypago leadership team
Management profileNumber of profiles
Profiles2 records
Cypago funding detail
Funding detailFunding overview
Funding rounds2 records
Investors3 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Cypago M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Cypago
What does Cypago do?
Cypago sells an enterprise-grade Cyber GRC Automation (CGA) SaaS platform that uses Agentic AI, Generative AI, NLP, and no-code workflow automation to automate governance, risk, and compliance processes for organizations. The platform continuously monitors security controls across cloud and on-premises systems, automates evidence collection, performs user access reviews, manages risk, and supports 15+ compliance frameworks (SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST, CMMC, FedRAMP, SOX ITGC) via 50+ native integrations with enterprise tools.
Is Cypago a public or private company?
Cypago is a private company. It is classified as venture growth investor backed and is currently operating.
When was Cypago founded?
Cypago was founded in 2023. It employs 11 to 50 people.
Where is Cypago based?
Cypago is headquartered in Tel Aviv, Israel, in the Middle East region.
How does Cypago make money?
One revenue line is on record: saaS Subscription.
Who are Cypago's main competitors?
Direct peers on record are Vanta, Drata, Secureframe, AuditBoard and LogicGate Risk Cloud. Broad incumbents are RSA Archer, Diligent (Galvanize/ACL) and ServiceNow GRC. Emerging players are Hyperproof and Sprinto.
Does Cypago have an API?
No public API is recorded for Cypago.
What industry is Cypago in?
Cypago's product category is Cyber GRC Automation Software. Its primary akta.pro industry code is HDAEAHAL, Compliance, GRC Workflow & Audit Automation Platforms, with a secondary code of HDAEALAK, IT Governance, Risk & Compliance (IT GRC) Platforms. Its NAICS code is 513210 and its SIC code is 7372.