Excalibur
Excalibur builds an EU-sovereign Streamed Access Management platform that uses proprietary pixel-streaming isolation and passwordless MFA to replace legacy PAM, VPN, VDI, WAF, and endpoint security for NIS2-regulated enterprises and government buyers across the European Union.
- Company typePrivate
- Founded2016
- HeadquartersPoprad
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Excalibur does
Excalibur s.r.o. is a Slovak-headquartered (Poprad, Slovakia) cybersecurity software vendor that builds Excalibur SAM (Streamed Access Management), a next-generation privileged access management platform replacing legacy PAM, VPN, VDI/Citrix, WAF, and endpoint security tools with a single zero-trust, isolation-centric system. Its core proprietary technology, called VITRO, streams only sanitized pixel-level visual and interactive instructions to the end-user device, creating a virtual air gap between the endpoint and sensitive target systems and supporting web, RDP, SSH, and VNC protocols. The platform adds passwordless MFA with biometric and hardware-key options, full video-fidelity session recording, and AI-powered real-time intent analysis with anomaly-triggered session pausing, dual-control approval, and RLHF continuous learning.
The company monetizes through two deployment models: a SaaS subscription (annual, fully managed Kubernetes in EU data centres) and an on-premises / private cloud perpetual license (multi-year contracts, including air-gapped and government/defence-ready deployments). Pricing is quote-based and not publicly disclosed. Go-to-market is 100% channel-first, relying on dedicated programs for MSPs, SOCs, System Integrators, and Distributors, supplemented by direct enterprise field sales for SaaS and on-premises engagements. Target customers are mid-market and enterprise organizations in the EU's 18 NIS2-regulated critical sectors — energy, banking, health, public administration, and digital infrastructure — where EU data sovereignty, CLOUD Act immunity, and NIS2/GDPR audit-ready evidence trails are procurement requirements. The platform is ISO 27001/27017/27018 certified and built around a Kubernetes-native cloud architecture, with R&D activity located in Bratislava and product development partially co-funded by the European Cybersecurity Competence Centre (ECCC) and the Slovak Republic's Recovery and Resilience Plan.
Excalibur firmographics
Firmographics- Name
- Excalibur
- Legal name
- Excalibur s.r.o.
- Website
- https://getexcalibur.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Excalibur builds an EU-sovereign Streamed Access Management platform that uses proprietary pixel-streaming isolation and passwordless MFA to replace legacy PAM, VPN, VDI, WAF, and endpoint security for NIS2-regulated enterprises and government buyers across the European Union.
- Ownership category
- akta.pro rank
Excalibur industry classification
Industry- Product category
- Privileged Access Management & Zero-Trust Security Software
- NAICS
- Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Access Management & Policy Enforcement (Authorization, ZTNA integration) (HDAEAJAG)
- akta.pro secondary industries
- Web Application Security (WAF, RASP) (HDADACAA), Federation & Identity Standards (SAML/OIDC/OAuth, Federation Hubs) (HDADAAAG), Web Application Firewall (WAF) & Bot Management (ADC‑Integrated) (HDAFAHAG), API Security & Governance (Policy, Threat Protection) (HDAEAIAI)
Keywords
Where Excalibur is headquartered
LocationHeadquarters
- HQ city
- Poprad
Offices2 records
Markets served
Excalibur business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations
Revenue model
- Subscription-based SaaS: Fully managed cloud subscription with automatic scaling, high availability, and zero maintenance burden. Deployed on Kubernetes infrastructure with EU data centres only.
- On-Premises / Private Cloud License: Enterprise perpetual license for full control over infrastructure including air-gapped environments, custom compliance requirements, and government/defence deployments.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | SaaS subscription - Fully managed cloud deployment |
| One time/ perpetual license | Multi-year contract | On-Premises / Private Cloud - Self-managed deployment |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels6 records
Excalibur product offering
Product offeringCore offering
Excalibur provides a unified Streamed Access Management (SAM) platform that delivers next-generation Privileged Access Management through zero-trust, intent-aware access control and proprietary VITRO pixel-streaming isolation. The platform replaces legacy PAM, VPNs, VDI/Citrix, WAFs, and endpoint security with a single solution offering passwordless MFA, Remote Browser Isolation-based WAF, full session recording with forensic audit trails, and AI-powered real-time threat detection. It is built natively for NIS2 and GDPR compliance, deployed across EU-only data centres, and targets mid-market and enterprise customers in regulated sectors.
Product overview
Excalibur offers a unified Streamed Access Management platform combining next-generation Privileged Access Management (PAM), Remote Browser Isolation (RBI), and AI-powered governance. The core product, Excalibur SAM, integrates with sub-products including VITRO Technology (pixel streaming isolation), Excalibur VITRO (RBI WAF), and VITRO AI (LLM-based threat filtering). The platform is distinguished by its 100% EU-based architecture with native NIS2 and GDPR compliance.
Differentiator
Problem solved
Functional benefit
Brands
- Excalibur VITRO: Remote Browser Isolation (RBI) and RBI-based Web Application Firewall (RBI WAF) solutions for SMEs and public organisations, funded by the European Cybersecurity Competence Centre.
- VITRO AI
Products and services
- Excalibur SAM (Streamed Access Management) Unified zero-trust Streamed Access Management platform providing continuous, context-driven, intent-aware privileged access governance with pixel-streaming isolation. Replaces legacy PAM, VPNs, VDI/Citrix, WAFs, and endpoint security with passwordless MFA, full session recording, AI-powered anomaly detection, and audit-ready evidence trails. Targets enterprise and government customers in EU NIS2-regulated sectors.
- Excalibur VITRO (RBI WAF) Remote Browser Isolation solution with integrated Web Application Firewall capabilities that protects web applications at the browser level using cloud browser isolation and DOM sanitisation. Shields against zero-days, XSS, and injection attacks without endpoint agents, for SMEs and public organisations.
- VITRO AI LLM-based user input filtering system for next-generation Remote Browser Isolation Web Application Firewalls. Uses reinforcement learning techniques to analyse user inputs in real-time and neutralise potential threats, providing protection against zero-day attacks on web applications.
Quantifiable outcome
- Reduces incident investigation time from days to minutes with AI-accelerated session analysis
- +3 more outcomes
Companies that use Excalibur
Customer profileNamed customers2 records
Segments8 records
Ideal customer profiles4 records
Excalibur technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration4 records
AI capability7 records
Feature6 records
Excalibur partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered core.
- European Cybersecurity Competence Centre (ECCC)coreECCC funds two Excalibur projects: the main Excalibur project focused on accelerating market uptake of passwordless MFA and PAM solutions for SMEs and public organizations, and the Excalibur VITRO project focused on Remote Browser Isolation and RBI-based WAF solutions. Both projects involve collaborative development and market acceleration.
- Recovery and Resilience Plan of the Slovak RepubliccoreFunded project 09I05-03-V03-00016 supporting excellent research and development. Project focuses on research and development of LLM-based user input filtering for next-generation RBI-based WAFs. Amount: €949,895.59. Located at Plynárenská 5, Bratislava.
- MSPs & SOCs Partner ProgramcoreChannel-focused partner program enabling Managed Service Providers and Security Operations Centers to deliver 'Oversight-as-a-Service' with preemptive security platform. Designed to break free from commoditized security market with high-margin recurring revenue opportunities.
- System Integrators Partner ProgramcorePartner program positioning SIs as trusted advisors for regulated industries requiring EU-sovereign, audit-ready compliance platforms. Supports government and finance sector engagements with sovereign brokerage capabilities.
- Distributors Partner ProgramcoreChannel distribution partners enable winning high-stakes contracts in government and finance sectors. Expands portfolio with next-generation cybersecurity category for regulated industries.
Scale indicators4 records
Recent moves6 records
Expansion highlights5 records
Excalibur competitors and assessment
Company assessmentDirect peers
- CyberArk: CyberArk is the global leader in Privileged Access Management, offering session management, credential vaulting, and just-in-time access for enterprises. It is the most direct competitor to Excalibur SAM in the PAM space, and the reference vendor Excalibur positions against in its 'legacy PAM vs. Excalibur' comparison.
- BeyondTrust: BeyondTrust provides unified Privileged Access Management with privileged session management, endpoint privilege management, and remote support. It competes head-to-head with Excalibur in mid-market and enterprise PAM deals across the EU.
- Delinea: Delinea (formerly Thycotic + Centrify) is a major PAM vendor offering privileged credential management and session recording. It targets the same enterprise/government buyer segments as Excalibur and is a primary displacement target in regulated EU verticals.
- Teleport: Teleport is an identity-native access platform combining zero-trust SSH/RDP/Kubernetes access, MFA, and session recording. Its 'access plane' architecture and engineering-centric buyer base make it the closest modern architectural peer to Excalibur SAM in the EU mid-market.
- StrongDM: StrongDM provides a unified access plane for databases, servers, Kubernetes, and web apps with just-in-time credentials and session auditing. It targets the same modern infrastructure access use case as Excalibur and competes for similar DevOps and platform engineering buyers.
- Island: Island pioneered the Enterprise Browser category, providing browser-level isolation, DLP, and governance for SaaS and internal web apps. Its browser-isolation-led approach to enterprise access and web application security closely mirrors Excalibur's VITRO/RBI WAF architecture.
Emerging players
- HashiCorp Boundary: HashiCorp Boundary provides identity-based session access to infrastructure without exposing credentials, with session-level auditing. It targets a similar developer-centric, infrastructure-access use case as Excalibur but is positioned as an emerging, infrastructure-tooling alternative rather than full enterprise PAM.
Broad incumbents
- Microsoft Entra ID: Microsoft Entra ID (formerly Azure AD) is a broad identity and access management platform with Privileged Identity Management (PIM) capabilities. It is bundled into Microsoft enterprise agreements and represents the default incumbent that Excalibur must displace to win large enterprise and public-sector accounts.
- Zscaler Private Access: Zscaler Private Access (ZPA) is a cloud-native ZTNA service replacing traditional VPNs for application access. As a broader zero-trust network access platform, it overlaps with Excalibur's VPN-replacement positioning for enterprise network access use cases.
- Cloudflare Access: Cloudflare Access is a Zero Trust Network Access (ZTNA) product within Cloudflare's broader security platform, including WAF capabilities that overlap with Excalibur's RBI WAF. As a global infrastructure incumbent with bundled pricing, Cloudflare is a frequent competitor in EU enterprise security procurements.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights4 records
Customer concentration
Excalibur compliance and trust
Trust signalCompliance5 records
Excalibur financial estimates
Financial estimateRevenue estimate
Valuation estimate
Excalibur leadership team
Management profileNumber of profiles
Profiles1 record
Excalibur funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Excalibur M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Excalibur
What does Excalibur do?
Excalibur provides a unified Streamed Access Management (SAM) platform that delivers next-generation Privileged Access Management through zero-trust, intent-aware access control and proprietary VITRO pixel-streaming isolation. The platform replaces legacy PAM, VPNs, VDI/Citrix, WAFs, and endpoint security with a single solution offering passwordless MFA, Remote Browser Isolation-based WAF, full session recording with forensic audit trails, and AI-powered real-time threat detection. It is built natively for NIS2 and GDPR compliance, deployed across EU-only data centres, and targets mid-market and enterprise customers in regulated sectors.
Is Excalibur a public or private company?
Excalibur is a private company. It is classified as venture growth investor backed and is currently operating.
When was Excalibur founded?
Excalibur was founded in 2016. It employs 11 to 50 people.
Where is Excalibur based?
Excalibur is headquartered in Poprad.
How does Excalibur make money?
Two revenue lines are on record. Subscription-based SaaS are the primary driver. The others are on-Premises / Private Cloud License.
Who are Excalibur's main competitors?
Direct peers on record are CyberArk, BeyondTrust, Delinea, Teleport, StrongDM and Island. HashiCorp Boundary is listed as an emerging player. Broad incumbents are Microsoft Entra ID, Zscaler Private Access and Cloudflare Access.
Does Excalibur have an API?
Yes. Excalibur provides a full REST API for automated provisioning and orchestration. The API enables automated access management, session control, and administrative operations within enterprise environments. Developer documentation is at docs.xclbr.com.
What industry is Excalibur in?
Excalibur's product category is Privileged Access Management & Zero-Trust Security Software. Its primary akta.pro industry code is HDAEAJAG, Access Management & Policy Enforcement (Authorization, ZTNA integration), with a secondary code of HDADACAA, Web Application Security (WAF, RASP). Its NAICS code is 561621 and its SIC code is 7372.