What CYBERGYM does

CybergymIEC (legal entity CyberGym Control Ltd.) is an Israel-based cybersecurity company founded in 2013 by veterans of Israel's intelligence services, with corporate headquarters in Caesarea, Israel. The company builds and operates the Cyber Arena platform — a physical-infrastructure cyber training system on which a Red Team of ex-intelligence experts runs live attack simulations against real machines, distinguishing it from virtualized cyber ranges. The platform is delivered in three tiers: CyberGround (full-scale on-premise arena), CyberPod (compact arena connected remotely to the global arena network), and Virtual Cloud Arena (Azure-hosted online access). The company also sells the Sophic product suite for operational technology (OT) defense, comprising Sophic Zone (dynamic validation platform), Sophic Access (secure third-party remote access for OT networks), and Sophic Info (file sanitization with Content Disarm and Reconstruction). Value-added services include SOC-as-a-Service, Rapid Cyber Maturity Assessment, Incident Response, Vulnerability Assessment, and Penetration Testing, plus OT Managed Services for critical infrastructure operators.

The business model combines subscription-based platform licensing for the Cyber Arena / CyberPod / Virtual Cloud Arena products, professional services revenue from tailored training programs and value-added services, and managed services revenue from the Global Defense Center for OT SOC operations. Pricing is quote-based with no public disclosure, consistent with enterprise field sales targeting critical infrastructure operators, financial institutions, governments, and academic institutions. The go-to-market blends direct enterprise sales (anchored by 'Request a Demo' CTAs), a global partner/reseller network, technology integration alliances (Microsoft, Nozomi Networks), and strategic co-investor partnerships (notably Bank Hapoalim).

The company has grown from its founding mandate defending the Israel Electric Corporation (IEC) — one of the most frequently attacked organizations in the world — to 23 Cyber Arenas deployed across 5 continents, with operational presence in Israel, the United States, Japan, Australia, the Netherlands, Portugal, and Romania. Headcount is reported at 51–100 employees. The company is privately held and has not disclosed any venture or private equity funding rounds; its sole disclosed strategic investment is from Bank Hapoalim as part of the 2020 financial-sector partnership. Co-founder Ofir Hason serves as CEO. Revenue, funding totals, and ownership structure beyond the Bank Hapoalim investment are not publicly disclosed.

Name

CYBERGYM

Legal name

CyberGym Control Ltd.

Website

https://cybergymiec.com

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

51–100 employees

Short description

CybergymIEC is an Israel-based cybersecurity company founded in 2013 by Israeli intelligence veterans that operates a global network of physical Cyber Arenas running live attack simulations by ex-intelligence Red Teams, complemented by the Sophic OT defense product suite, to train and protect critical infrastructure, financial, government, and enterprise customers.

Ownership category

akta.pro rank

Product category

Cybersecurity Training & OT Defense

NAICS

Computer Training (611420), Professional and Management Development Training (61143), Computer Systems Design and Related Services (54151), Custom Computer Programming Services (541511)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming Services (7371), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Cybersecurity Training & Awareness Programs (BPAEANAF)

akta.pro secondary industries

Cybersecurity (EDAAAPAC), IT, Software & Cybersecurity Training (EDAGANAF), Policy Management, Training & Ethics/Whistleblowing (BPAEAPAI), Digital Learning Content Development (eLearning, Labs, Simulations) (BPAEANAD)

Keywords

• Cybersecurity training platform
• Critical infrastructure cyber defense
• OT security solutions
• Cyber attack simulation
• Cyber range training

Headquarters

HQ city

Hadera

HQ country

Israel

HQ region

Middle East

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Operations, Marketing or Sales

Revenue model

1. Training Platform Licensing: Organizations license access to Cyber Arena, CyberPod, or Virtual Cloud Arena platforms for cybersecurity training. Training is delivered either on-premise or remotely connected to global arena networks. Suitable for enterprises requiring ongoing cyber readiness programs.
2. Training Programs: Comprehensive training programs covering topics from basic cyber awareness to advanced incident response and forensics. Programs are tailored to organizational needs and threat models, available for all employee levels from general staff to executives and security professionals.
3. OT Managed Services: Managed services encompassing SOC OT as a service and risk management for OT environments. The Global Defense Center provides continuous monitoring and protection for critical infrastructure.
4. Value-Added Services: Additional services including SOC-as-a-Service, Rapid Cyber Maturity Assessment (RCMA), Incident Response, Vulnerability Assessment, Penetration Testing, and Cybersecurity Workshops. These complement the core training offerings.

Go-to-market motion2 records

Distribution channels4 records

Marketing channels5 records

Core offering

CybergymIEC builds and operates a Cyber Arena training platform that runs live, physical-machine cyberattack simulations conducted by a Red Team of ex-intelligence experts. It sells on-premise (CyberGround), compact remote-connected (CyberPod), and cloud-based (Virtual Cloud Arena) training environments, the Sophic Suite of OT defense products (Zone, Access, Info), and managed/professional cyber services to critical infrastructure operators and large enterprises.

Product overview

CybergymIEC offers a comprehensive cybersecurity platform built around its core Cyber Arena training architecture, comprising three platform tiers: CyberGround (full-scale on-premise arena), CyberPod (compact arena with remote connectivity to global network), and Virtual Cloud Arena (cloud-based online access). These platforms support various training delivery modes including instructor-led programs, self-paced online awareness training, and specialized OT-specific training. The Sophic Suite provides three OT defense products: Sophic Zone (dynamic validation platform), Sophic Access (secure remote access solution), and Sophic Info (file sanitization). Value-added services include SOC-as-a-Service, Rapid Cyber Maturity Assessment, Incident Response, Vulnerability Assessment, Penetration Testing, and Cyber Awareness Workshops. The Academic Cyber Arena extends the platform to educational institutions for degree and certification programs.

Differentiator

Problem solved

Functional benefit

Brands

• Sophic: OT defense product suite including Sophic Zone (validation platform), Sophic Access (secure remote access), and Sophic Info (file sanitization solution).
• CyberPod
• CyberGround
• Virtual Cloud Arena
• Cyber Arena

Products and services

• CyberGround Full-scale, on-premise training arena that enables organizations to cyber train and qualify their entire workforce using real physical machines and live cyberattack simulations conducted by a Red Team of ex-intelligence experts.
• CyberPod Compact training arena that enables organizations to cyber train and qualify their workforce via a remote connection to CybergymIEC's global network of Cyber Arenas, providing hands-on training in cyberattack detection, containment, and mitigation.
• Virtual Cloud Arena Cloud-based online arena hosted on Microsoft Azure that provides multiple users with remote access to a wide variety of cyber training programs tailored to different skill levels and roles, making specialized training accessible to SMEs and distributed teams.
• Sophic Zone Advanced dynamic validation platform for emulating, simulating and validating operational systems in a near real-time environment, with hardware-in-the-loop capabilities to test and raise cyber sturdiness of OT systems.
• Sophic Access Advanced solution providing secure, controlled third-party remote access to OT networks and Industrial Control Systems, with unique user identification via a 7-gate onboarding process and tamper-proof activity recording.
• Sophic Info Secure SaaS file sanitation solution providing 3-dimensional file inspection including Content Disarm and Reconstruction (CDR), multi-engine AV scanning, and threat emulation to protect against known and zero-day threats during data transfers.
• Training Programs Tailored training programs emulating customer environments and threat models, available on-premise or virtually, covering topics from basic cyber awareness and incident response to advanced SOC detection tactics, for general staff through to executives and security professionals.
• Online Cyber Awareness Program Round-the-clock online cyber awareness training covering 36 vital cybersecurity topics with 36 training sessions spread over three years, using 5-15 minute sessions with video, text, and gamification accessible from laptops, tablets, or mobile devices.
• OT Managed Services Premium OT domain managed services encompassing comprehensive SOC OT-as-a-Service and risk management for OT environments, leveraging the Global Defense Center for continuous monitoring and protection of critical infrastructure.
• SOC-as-a-Service Managed Security Operations Center service delivered by ex-intelligence cyber experts who identify, mitigate and collect forensics for cyber incidents anywhere in the world, minimizing escalation and brand damage.
• Academic Cyber Arena Cyber training platform designed for academic institutions to transform students into cybersecurity experts, including Master's degrees in Cyber Security, BSc in Computer Science, certificated training programs for postgraduates, and executive education.

Quantifiable outcome

• 95% of cyberattacks are caused by the human factor, which means that with the right training, they can be prevented.

Named customers5 records

Segments6 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

Feature8 records

Partnerships

Eight partnerships are on record, tiered core, major, minor and flagship.

• Eximprod GrupcoreStrategic or Co-development Partner · 19 June 2025Strategic partnership for the launch of Cyber Arena Romania in Bucharest. Eximprod Grup, a group of companies offering equipment, solutions, and services for the utility field, partnered with CybergymIEC to establish Romania's first dedicated cyber training hub.
• Arctic StreamcoreStrategic or Co-development Partner · 19 June 2025IT integrator based in Bucharest, focused on Cisco Systems technologies with over 70 years of combined experience in networking and cybersecurity. Partnered as Co-Founder and Director of Cyber Arena Romania.
• MicrosoftcoreTechnology or Integration · 21 November 2022Collaboration to deliver immersive cyber training experience at the Microsoft Technology Center in Herzliya, Israel. Microsoft invites potential customers to participate in hands-on cyber training simulations to demonstrate Microsoft's security solutions (Defender and Sentinel). CybergymIEC became a Microsoft IP co-seller with training programs available via Azure marketplace.
• Nozomi NetworksmajorTechnology or Integration · 1 October 2022Technical alliance integrating Nozomi Networks' ICS and IoT security platform into CybergymIEC's global network of over 10 Cyberwarfare Arenas. Enables Nozomi customers to train using their own network topology and ICS platform. CybergymIEC trainees can use Nozomi Networks as a defense tool during live cyber training sessions.
• INCM (Portuguese Mint and National Printing Office)majorStrategic or Co-development Partner · 24 September 2021Agreement for provision of a new CyberPod training facility located at Nova School of Business & Economics. This is CYBERGYM's second major project in Portugal, following the opening of a training facility with EDP in 2016.
• Nova School of Business & EconomicsminorStrategic or Co-development Partner · 24 September 2021Academic institution in Carcavelos (Cascais, Lisbon) hosting the CyberPod training facility for INCM. Supports CybergymIEC's commitment to the education sector.
• Bank HapoalimflagshipStrategic or Co-development Partner · 29 January 2020Strategic partnership and investment to establish a global network of Centers of Excellence and Cyber Training for the financial and banking industry. First finance arena established in Israel with plans for additional arenas in financial capitals worldwide. Following seven years of successful collaboration between CYBERGYM and IEC.
• EDP (Portugal)majorStrategic or Co-development Partner · 1 January 2016Training facility opened in Portugal in 2016 which has been successfully training EDP employees at all levels to deal with cyberattacks. EDP is a major energy utility in Portugal.

Scale indicators6 records

Recent moves9 records

Expansion highlights6 records

Broad incumbents

• KnowBe4: Largest security awareness and phishing simulation vendor, now part of Vista Equity; overlaps with CybergymIEC's Online Cyber Awareness Program for general employee cyber hygiene training across the enterprise.
• SANS Institute: Established cybersecurity training and certification organization offering courses, ranges (NetWars) and GIAC credentials; broader incumbent with overlapping corporate and government training programs and a much larger catalog.

Direct peers

• Hack The Box: Cybersecurity upskilling platform combining cloud-based labs, CTF-style challenges, and team training; competes with CybergymIEC's training programs and Virtual Cloud Arena, particularly for technical practitioner audiences.
• RangeForce: Cloud-native cyber skills training platform offering hands-on attack/defense simulations for SOC teams and IT staff; competes head-on with CybergymIEC's Virtual Cloud Arena in the enterprise training category.
• Immersive Labs: Enterprise cyber resilience platform with live attack simulations, crisis exercises, and skills development for security teams; directly comparable in product scope and target buyer (large enterprises with SOC/IR teams).
• Cyberbit (EC-Council): Israel-based provider of cyber ranges and SOC automation that runs live, simulated cyberattack training for enterprises and governments — the most direct competitor to CybergymIEC's Cyber Arena model.

Emerging players

• AttackIQ: Breach and attack simulation (BAS) platform; overlaps with CybergymIEC's red-team methodology and Sophic Zone-style validation use cases for enterprise security teams.
• Dragos: OT/ICS cybersecurity vendor with incident response, threat intelligence and training for industrial operators; competes directly with the Sophic OT defense product line for the same critical infrastructure buyers.
• Claroty: Industrial cybersecurity platform for OT/IoT visibility, secure remote access (competing with Sophic Access), and threat detection — adjacent competitor within the same OT buyer budget.

Regional players

• NCC Group / NCC Cyber Training: UK-headquartered cyber consultancy offering incident response, red-teaming and training services to critical infrastructure and large enterprises; comparable service portfolio especially across European markets.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/CyberGymArena
• Facebookfacebook.com/CybergymIEC

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CYBERGYM