Cryptomage
Cryptomage is a Polish cybersecurity vendor that develops Cryptomage Cyber Eye™, an AI/ML-powered Network Detection and Response (NDR) probe for deep packet inspection, anomaly detection, and GDPR compliance, sold on subscription to enterprise and public-sector customers across financial services, critical infrastructure, healthcare, and government.
- Company typePrivate
- Founded2015
- HeadquartersWroclaw, Poland
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Cryptomage does
Cryptomage S.A. is a Polish cybersecurity vendor founded in 2015 and headquartered in Wrocław, Poland, with an additional sales and operations office in Warsaw. The company develops and sells Cryptomage Cyber Eye™, a Network Detection and Response (NDR) class probe that performs deep packet inspection and low-level network protocol analysis using proprietary AI and machine learning algorithms to detect anomalies, hidden communications, botnet traffic, zero-day attacks, DDoS, and personal data leaks. The platform is delivered through five integrated modules — Threat Detection, Event Management, Network Monitoring, Forensics, and a dedicated GDPR Module — and is designed to integrate with customers' existing SIEM, SOAR, NGFW, and EDR tooling.
The company's revenue model is built on subscription-based, quote-priced enterprise licensing of the probe plus a 30-day free trial motion, supported by a multi-tier distribution model combining direct enterprise field sales with specialized IT distributors (Stovaris, S4E) and technology partners across EMEA (Advatech, Gekosystem, Prianto, Stinet, Pitlabs, ITBiotic). Cryptomage serves financial services, critical infrastructure, public administration, healthcare, manufacturing, telecommunications, and military and uniformed services customers, with named deployments including Tauron, a major Polish bank, Prokuratura Krajowa, AGH University, Warsaw University of Technology, eZdrowie, BOS Bank, Alior Leasing, and the Małopolska region. R&D is anchored in an academic lineage: co-founder and Chief Scientist Prof. Krzysztof Szczypiorski heads the Cybersecurity Department at Warsaw University of Technology and brings 200+ publications and 2,000+ citations to the platform.
Financially, Cryptomage has been funded primarily through a series of EU and Polish National Centre for Research and Development grants — eight disclosed awards spanning 2016-2022 — cumulatively in the EUR 5-7M range, supplemented by a strategic corporate investment from Atende S.A. in April 2023. Atende acquired 20% of Cryptomage through newly issued shares and has signaled a ramp to 31.63% ownership by 2025, while simultaneously embedding Cyber Eye into the Atende Security Suite as the NDR component of a joint EDR-NDR-SIEM SaaS offering aligned with Gartner's Visibility Triad concept. The company has 11-50 employees and is privately held.
Cryptomage firmographics
Firmographics- Name
- Cryptomage
- Legal name
- Cryptomage S.A.
- Website
- https://cryptomage.com
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Cryptomage is a Polish cybersecurity vendor that develops Cryptomage Cyber Eye™, an AI/ML-powered Network Detection and Response (NDR) probe for deep packet inspection, anomaly detection, and GDPR compliance, sold on subscription to enterprise and public-sector customers across financial services, critical infrastructure, healthcare, and government.
- Ownership category
- akta.pro rank
Cryptomage industry classification
Industry- Product category
- Network Detection and Response (NDR) Cybersecurity Software
- NAICS
- Security Systems Services (56162)
- akta.pro primary industry
- Network Detection & Response (NDR) (HDADABAI)
- akta.pro secondary industry
- OT Threat Detection & Monitoring (NDR/IDS for ICS) (HDADAJAF)
Keywords
Where Cryptomage is headquartered
LocationHeadquarters
- HQ city
- Wroclaw
- HQ country
- Poland
- HQ region
- Europe
Offices2 records
Markets served
Cryptomage business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- NDR Probe Sales and Subscriptions: Cryptomage Cyber Eye™ NDR class network probe sold as network security equipment with subscription support. Pricing is quote-based with 30-day free trial available.
- SaaS Security Services: Integration with Atende Security Suite for SaaS-based security services. Joint development of SaaS system integrating EDR, NDR, and SIEM solutions for complete threat visibility.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise NDR Probe - Custom pricing based on network scale and requirements |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels5 records
Cryptomage product offering
Product offeringCore offering
Cryptomage develops and sells Cryptomage Cyber Eye™, a Network Detection and Response (NDR) class network probe that combines proprietary AI and machine learning algorithms with deep network protocol analysis to deliver real-time anomaly detection, advanced threat identification, and forensic visibility. The probe is sold as subscription-based network security equipment with annual billing, deployed on-premises or in the cloud via physical or virtual sensors, and integrates with existing SIEM, SOAR, NGFW, and EDR security stacks.
Product overview
Cryptomage offers a unified Network Detection and Response (NDR) platform called Cryptomage Cyber Eye™, which combines advanced AI-powered network traffic analysis with multiple security modules. The core Cryptomage Cyber Eye™ probe provides comprehensive network visibility through five integrated modules: Threat Detection (deep packet inspection and ML-based risk scoring), Event Management (SIEM/SOAR/NGFW integration), Network Monitoring (proprietary flow metadata analysis), Forensics (high-risk traffic extraction and storage), and the GDPR Module (personal data leak detection). This modular architecture allows organizations to deploy the core NDR platform and add specialized capabilities as needed, with all modules sharing a consistent analytical interface for unified security operations.
Differentiator
Problem solved
Functional benefit
Brands
- Cryptomage Cyber Eye: Network Detection and Response (NDR) class network probe providing real-time anomaly detection and prediction powered by low-level network protocol analysis, machine learning, and artificial intelligence algorithms.
Products and services
- Cryptomage Cyber Eye™ Network Detection and Response (NDR) class network probe that provides real-time, network-based anomaly detection and prediction powered by low-level network protocol analysis combined with proprietary AI and machine learning algorithms. Enables organizations to identify, monitor, and triage traffic flows, connections, and potential malicious events across hybrid IT environments, supporting both physical and virtual sensors for on-premises and cloud deployments.
Quantifiable outcome
- Reduces average attack detection time from ~287 days to real-time detection
- +3 more outcomes
Companies that use Cryptomage
Customer profileNamed customers9 records
Segments7 records
Ideal customer profiles5 records
Cryptomage technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration4 records
AI capability3 records
Feature6 records
Cryptomage partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered primary and secondary.
- StovarisprimarySpecialized IT distributor with added value. Designs and builds modern computer networks and data centers ensuring highest cybersecurity standards. Provides implementation, training, and technical support to partners and customers.
- S4EprimarySpecialized IT distributor with training centers (S4EDU), specialized engineering staff (S4Engineers), and business units for Smart Energy, Security, and Data Center. Actively promotes Cryptomage products at events.
- AdvatechsecondaryTop ten Polish integrators specializing in mass storage, virtualization, and security solutions. Works with leading manufacturers including IBM, Oracle, Dell EMC, HPE, VMware, Microsoft, Fortinet.
- PriantosecondaryOne of the largest German distributors specializing in enterprise software. Present in UK, Austria, Switzerland, Benelux, Poland, France, Czech Republic, Hungary, Slovakia, Balkan countries, and Canada since 2019.
- CyberMadeInPoland ClustersecondaryCryptomage is a member of the CyberMadeInPoland cluster, participating in organized events like Access-2-Market alongside ECSO and ECCC.
- European Cyber Security Organization (ECSO)secondaryCryptomage participates in ECSO competitions and events, winning European STARtup Award finalist status and awards in European Cybersecurity Competition.
Scale indicators9 records
Recent moves7 records
Expansion highlights6 records
Cryptomage competitors and assessment
Company assessmentDirect peers
- Darktrace: UK-headquartered pure-play NDR vendor using AI/ML for network anomaly detection across enterprise IT and OT environments. Most direct comparable to Cryptomage Cyber Eye by product category (NDR probe), target verticals (critical infrastructure, financial services), and AI-driven behavioral analytics.
- Vectra AI: AI-driven NDR platform focused on detecting attacker behaviors across network, identity, and cloud. Directly comparable as an enterprise NDR vendor competing for SOC Visibility Triad budget with similar AI/ML anomaly detection capabilities and SIEM/SOAR integration story.
- ExtraHop: NDR and network performance monitoring vendor with Reveal(x) product combining packet-level analysis, machine learning, and SOAR integration. Directly comparable to Cryptomage Cyber Eye's real-time, low-level network traffic analysis and enterprise SIEM/SOAR interoperability.
- Corelight: NDR vendor built on the open-source Zeek network security monitor, providing enterprise-grade network detection, forensics, and analytics. Comparable to Cryptomage's packet-level protocol analysis, forensics module, and integration with SIEM/SOAR pipelines.
- Dragos: OT/ICS cybersecurity specialist providing network visibility and threat detection for industrial environments. Comparable to Cryptomage's ICS security module and EU-funded ICS R&D project for AI-based detection of attacks on industrial control systems.
- Nozomi Networks: OT/IoT security vendor combining NDR with asset discovery and threat intelligence for industrial networks. Comparable to Cryptomage's ICS-focused R&D, AI-based behavioral detection, and energy/manufacturing customer footprint.
- Claroty: Cybersecurity platform for industrial (OT/ICS) networks with continuous threat detection and asset visibility. Comparable to Cryptomage's EU-funded ICS anomaly detection project and deployment at critical infrastructure operators like Tauron.
Broad incumbents
- Cisco (Secure Network Analytics / Stealthwatch): Cisco's enterprise NDR solution, originally Stealthwatch, providing flow-based network analytics and threat detection as part of a broader networking and security portfolio. Comparable as a competing NDR provider for the same enterprise customers Cryptomage targets (banks, energy, government).
- Palo Alto Networks (Cortex XDR / XSIAM): Global cybersecurity incumbent offering integrated NDR/XDR/SIEM through Cortex, with strong AI/ML analytics and partner ecosystem. Comparable as a broad-line vendor competing for SOC Visibility Triad budget that Cryptomage's joint SaaS project with Atende also targets.
- Arista Networks (Awake Security): Acquired Awake Security to add AI-driven NDR capabilities to its broader networking/extensible operating system (EOS) portfolio. Comparable as an integrated NDR + networking vendor offering real-time threat detection within enterprise and critical infrastructure accounts.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks7 records
Key highlights7 records
Customer concentration
Cryptomage social profiles
Digital presenceCryptomage financial estimates
Financial estimateRevenue estimate
Valuation estimate
Cryptomage leadership team
Management profileNumber of profiles
Profiles5 records
Cryptomage funding detail
Funding detailFunding overview
Funding rounds1 record
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Cryptomage M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Cryptomage
What does Cryptomage do?
Cryptomage develops and sells Cryptomage Cyber Eye™, a Network Detection and Response (NDR) class network probe that combines proprietary AI and machine learning algorithms with deep network protocol analysis to deliver real-time anomaly detection, advanced threat identification, and forensic visibility. The probe is sold as subscription-based network security equipment with annual billing, deployed on-premises or in the cloud via physical or virtual sensors, and integrates with existing SIEM, SOAR, NGFW, and EDR security stacks.
Is Cryptomage a public or private company?
Cryptomage is a private company. It is classified as corporate owned and is currently operating.
When was Cryptomage founded?
Cryptomage was founded in 2015. It employs 11 to 50 people.
Where is Cryptomage based?
Cryptomage is headquartered in Wroclaw, Poland, in the Europe region.
How does Cryptomage make money?
Two revenue lines are on record. NDR Probe Sales and Subscriptions are the primary driver. The others are saaS Security Services.
Who are Cryptomage's main competitors?
Direct peers on record are Darktrace, Vectra AI, ExtraHop, Corelight, Dragos, Nozomi Networks and Claroty. Broad incumbents are Cisco (Secure Network Analytics / Stealthwatch), Palo Alto Networks (Cortex XDR / XSIAM) and Arista Networks (Awake Security).
Does Cryptomage have an API?
No public API is recorded for Cryptomage.
What industry is Cryptomage in?
Cryptomage's product category is Network Detection and Response (NDR) Cybersecurity Software. Its primary akta.pro industry code is HDADABAI, Network Detection & Response (NDR), with a secondary code of HDADAJAF, OT Threat Detection & Monitoring (NDR/IDS for ICS). Its NAICS code is 56162.