CyTwist

What CyTwist does

CyTwist is an Israeli cybersecurity company founded in 2019 and headquartered in Ramat Gan. It has developed a deductive AI-powered threat detection platform that identifies attacker behavior, intent, and progression sequences by analyzing legitimate operating system logs and telemetry, rather than relying on signatures, indicators of compromise, or anomaly baselining. The company describes its approach as applying cyber counterintelligence methodologies to surface stealth targeted attacks, advanced persistent threats, AI-generated malware, and novel attack tactics within minutes of infiltration.

The product portfolio centers on the CyTwist Profiler, a patented core engine, and the CyTwist Insights Engine, which correlates and triages existing EDR alerts alongside deep OS-level telemetry. The platform is positioned as a complementary layer that integrates with — rather than replaces — incumbent EDR, SIEM, XDR, and MDR/MSSP stacks. CyTwist also operates a research function that publishes ongoing threat intelligence and breach analyses.

CyTwist operates a SaaS subscription business model and distributes through direct enterprise sales targeting SOC teams and an MSSP channel. The company counts a global bank, a leading federal managed services company, and a leading US MSSP (also serving as design-partner) among its named customers. It is privately held, founder-led, and has not publicly disclosed funding rounds or revenue figures.

Name

CyTwist

Legal name

CyTwist Ltd.

Website

https://cytwist.com

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

11–50 employees

Short description

CyTwist is an Israeli cybersecurity company offering a patented deductive AI threat detection platform. It identifies attacker behavior and intent via OS-level telemetry, serving enterprise SOC teams and MSSPs as a complementary layer alongside EDR, SIEM, and XDR stacks.

Ownership category

akta.pro rank

Product category

AI Cybersecurity / Threat Detection Software

NAICS

Computer Systems Design Services (541512), Security Systems Services (56162)

SIC

Services-Prepackaged Software (7372)

akta.pro industry

PRIMARYHDADAEAB

Extended Detection & Response (XDR)

Hardware, Technology & Telecom/Cybersecurity/Endpoint & Mobile Security (EDR/XDR/MTD)

SECONDARYHDADAEAJ

Endpoint Forensics & Incident Response (DFIR)

Hardware, Technology & Telecom/Cybersecurity/Endpoint & Mobile Security (EDR/XDR/MTD)

SECONDARYBPAEADAB

Security Operations Center (SOC) as a Service

Business & Public Services/IT & Digital Services (Managed Services, Systems Integration)/Cybersecurity Services (MSSP)

Keywords

• AI cybersecurity
• Threat detection platform
• Cyber counterintelligence
• Attacker behavior analysis
• Security operations tooling

Headquarters

HQ city

Ramat Gan

HQ country

Israel

HQ region

Middle East

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Security Platform Subscription: CyTwist operates as a SaaS cybersecurity platform offering subscription-based access to its deductive AI threat detection capabilities. The platform is sold as a defense layer that complements existing security stacks, likely through annual subscription contracts with enterprise and MSSP customers.

Go-to-market motion2 records

Distribution channels2 records

Marketing channels5 records

Core offering

CyTwist provides an AI-powered cybersecurity platform that applies deductive AI and cyber counterintelligence to detect attacker behavior, intent, and threats inside enterprise IT environments. The offering combines a Profiler, an Insights Engine, and a Research capability to analyze network and endpoint telemetry, identify malicious activity, and prioritize threats for security operations teams and managed security service providers (MSSPs).

Product overview

CyTwist offers a unified threat detection platform centered on its CyTwist Profiler core product, which uses deductive AI and cyber counterintelligence to detect sophisticated threat actors, AI-generated attacks, and novel malware by identifying attacker intent and behavioral progression rather than relying on signatures or IOCs. The portfolio includes the CyTwist Insights Engine, which provides oversight and correlation for existing EDR alerts by analyzing them alongside deep OS-level telemetry to surface hidden attack patterns. CyTwist Research delivers ongoing threat intelligence and market insights. The platform is designed as a complementary layer that integrates with existing security infrastructure (EDR, SIEM, XDR, MDR/MSSP) rather than replacing it, requiring no signatures, no custom rules, and minimal tuning to deliver rapid time to value.

Differentiator

Problem solved

Functional benefit

Products and services

• CyTwist Profiler A deductive AI-driven profiler that continuously inspects enterprise network and endpoint telemetry to characterize attacker behavior and surface malicious activity for SOC and MSSP analysts.
• CyTwist Insights Engine An analytics engine that converts raw behavioral and telemetry signals into cyber counterintelligence insights, helping security teams understand adversary intent and prioritize response actions.
• CyTwist Research A threat intelligence and research offering that supplies CyTwist customers with curated adversary research, tradecraft analysis, and ongoing updates to detection content.

Quantifiable outcome

• Threat detection within minutes of infiltration
• +4 more outcomes

Named customers3 records

Segments3 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability5 records

Feature6 records

Scale indicators5 records

Recent moves5 records

Expansion highlights6 records

Direct peers

• CrowdStrike: CrowdStrike's Falcon XDR platform is a leading endpoint and extended detection and response solution that competes directly with CyTwist's threat detection capabilities, particularly in the SOC team buyer segment. Both target sophisticated threat detection and behavioral analysis.
• Hunters Security: Hunters is an XDR-focused startup that correlates telemetry across endpoint, identity, cloud, and network to surface attack stories for SOC teams — directly comparable to CyTwist's behavioral correlation engine and SOC-focused value proposition.
• ReliaQuest: ReliaQuest operates a security operations platform combined with managed detection and response services for enterprise SOC teams, addressing similar alert fatigue and threat detection challenges as CyTwist.
• Expel: Expel is a managed detection and response provider serving enterprise SOC teams, offering advanced threat detection that augments customer EDR/SIEM investments — closely aligned with CyTwist's MSSP/SOC use case and complementary-layer positioning.
• SentinelOne: SentinelOne's Singularity XDR platform offers AI-driven endpoint and behavioral threat detection aimed at SOC teams and MSSPs, overlapping with CyTwist's intent-based detection and behavioral correlation approach.
• Palo Alto Networks (Cortex XDR): Palo Alto Networks' Cortex XDR is a directly comparable extended detection and response platform that integrates across endpoint, network, and cloud telemetry — the same domains where CyTwist provides complementary behavioral and intent-based detection.
• Arctic Wolf: Arctic Wolf is a leading MDR provider delivering SOC-as-a-service to enterprises and through MSSP/channel partners, directly competing with CyTwist in the MSSP/SOC buyer segment and addressing similar alert fatigue and threat detection pain points.

Broad incumbents

• Microsoft Defender XDR: Microsoft Defender XDR is a broad enterprise XDR offering bundled into the Microsoft security stack. As a complementary layer to EDR/SIEM/XDR, CyTwist must compete against Microsoft's ability to natively add behavioral and intent-based detection across enterprise environments.
• Sophos (Sophos XDR / Intercept X): Sophos offers an extended detection and response platform widely used by MSSPs and mid-market enterprises, overlapping with CyTwist's MSSP distribution motion and behavioral threat detection capabilities.
• Trellix: Trellix (formed from FireEye + McAfee Enterprise) provides a broad XDR platform with behavioral analytics, representing an established incumbent that competes for SOC and enterprise detection budgets overlapping with CyTwist.

Market position

Strengths4 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/cytwist

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CyTwist