Cyver
- Company typePrivate
- Founded2020
- HeadquartersAmsterdam, Netherlands
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Cyver does
Cyver BV, incorporated in the Netherlands and founded in 2020, operates Cyver Core, a cloud-based pentest management platform built on Microsoft Azure with SOC 2 Type 2 compliant infrastructure. The platform unifies the full pentest lifecycle — scoping, execution, reporting, and remediation tracking — across modules for automated pentest reporting, red teaming with MITRE ATT&CK mapping, pentest-as-a-service delivery, continuous threat exposure management (CTEM), vulnerability management, audit management, and SOC integration. Cyver differentiates through 20+ native security tool integrations (Nmap, Nessus, Burp Suite, Invicti, OpenVAS, Nexpose, Acunetix, Tenable WAS, ServiceNow, Snyk, Checkmarx, and others), an API/webhook framework for custom workflows, and a white-label client portal that lets pentest service providers deliver pentest-as-a-service under their own brand.
The platform serves two primary customer segments: pentest service providers (cybersecurity firms that deliver pentest services to their own clients) and enterprise security teams (in-house offensive security functions managing internal pentest engagements). Named customers include Hacken, WardenSec, Layer8, AlphaOne, Thoropass, Cyberoffsec, Cyvercrowd, Hacksclusive, Risk Associates, and Pentiq, with the company reporting 90%+ customer retention and 70–85% time savings on report generation. Distribution combines direct enterprise sales (demo-led), Microsoft Azure Marketplace procurement, and white-label/OEM deployment.
Cyver monetizes via subscription-based annual SaaS contracts priced by team size and feature requirements, with no publicly disclosed pricing tiers. Generative AI is applied to report generation, summaries, and writeups within a human-in-the-loop control model, though AI is a feature layer rather than the primary differentiator. The company remains privately held by founders Mike Terhaar (Co-Founder, COO and Senior Pentester) and Luis Gomes de Abreu (Founder), with no institutional funding or parent company disclosed.
Cyver firmographics
Firmographics- Name
- Cyver
- Legal name
- Cyver BV
- Website
- https://cyver.io
- Company type
- Private
- Founded year
- 2020
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Ownership category
- akta.pro rank
Cyver industry classification
Industry- Product category
- Pentest Management Software
- NAICS
- Software Publishers (5132), Software Publishers (513210)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Vulnerability Management & Penetration Testing Services (BPAEADAD)
- akta.pro secondary industry
- Application Security & DevSecOps Services (BPAKAHAJ)
Keywords
Where Cyver is headquartered
LocationHeadquarters
- HQ city
- Amsterdam
- HQ country
- Netherlands
- HQ region
- Europe
Offices1 record
Markets served
Cyver business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations
Revenue model
- Software Platform Subscription: SaaS-based pentest management platform subscription model. The platform is offered with tiered pricing based on team size and features. Revenue is recurring subscription-based with annual or multi-year contract options.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise tier with full platform access |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels8 records
Cyver product offering
Product offeringCore offering
Cyver sells Cyver Core, a cloud-based SaaS pentest management platform that automates the full penetration testing lifecycle — scoping, reporting, vulnerability tracking, team coordination, and client delivery — for pentest service providers and enterprise security teams. The platform includes AI-powered report generation, a white-label client portal, a comprehensive findings library with MITRE ATT&CK mapping, automated workflows, native integrations with 20+ security tools, and flexible cloud, private, or on-premises deployment on SOC 2 Type 2 compliant Microsoft Azure infrastructure.
Product overview
Cyver offers Cyver Core as a unified pentest management platform combining multiple modules for the complete pentest lifecycle. The core platform provides pentest reporting automation, red teaming with MITRE ATT&CK mapping, pentest-as-a-service delivery, continuous threat exposure management (CTEM), vulnerability management, audit management, and SOC integration. Supporting modules include a white-label client portal, project and team management, sales pipeline, generative AI for automated reporting, API/integrations, and flexible hosting options. The platform connects with major security tools (Nmap, Nessus, Burp Suite, Invicti, and others) and is available as cloud, private, or on-premises deployment.
Differentiator
Problem solved
Functional benefit
Quantifiable outcome
- 70% reduction in average reporting time
- +2 more outcomes
Companies that use Cyver
Customer profileNamed customers4 records
Segments2 records
Ideal customer profiles2 records
Cyver technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration20 records
AI capability2 records
Feature7 records
Cyver partnerships and signals
Strategic signalScale indicators5 records
Recent moves6 records
Expansion highlights5 records
Cyver competitors and assessment
Company assessmentDirect peers
- Plextrac: Plextrac is a pentest reporting and management platform providing similar capabilities for service providers and enterprise teams - automated reporting, findings management, client portals, and integrations - making it the closest direct competitor to Cyver Core.
- Cobalt: Cobalt operates a Pentest-as-a-Service (PtaaS) platform that overlaps with Cyver's PaaS module, offering pentest management, finding triage, and collaboration workflows for both pentest providers and internal security teams.
- Pentera: Pentera delivers automated security validation and continuous pentesting technology that intersects with Cyver's CTEM and vulnerability management modules, serving enterprise teams with attack-surface validation.
- Horizon3.ai: Horizon3.ai provides autonomous pentesting (NodeZero) which is integrated into Cyver's platform and competes for the same enterprise continuous-testing budget Cyver targets with its CTEM module.
Broad incumbents
- SafeBreach: SafeBreach is a broader breach-and-attack-simulation incumbent whose continuous validation capabilities overlap with Cyver's red teaming and CTEM modules, competing for enterprise offensive-security budget.
- AttackIQ: AttackIQ is a breach-and-attack-simulation platform incumbent addressing continuous security validation, directly adjacent to Cyver's CTEM, vulnerability management, and red teaming offerings.
- Bugcrowd: Bugcrowd operates a crowdsourced pentest and vulnerability disclosure platform that overlaps with Cyver's pentest orchestration, finding management, and client portal capabilities.
- Synack: Synack is a Pentest-as-a-Service and crowdsourced security platform providing managed pentest delivery and findings workflows that parallel Cyver's PaaS and client-portal offering.
Emerging players
- Cymulate: Cymulate is an exposure validation and BAS platform focused on continuous threat exposure management, intersecting with Cyver's CTEM module and vulnerability management workflows.
- NopSec: NopSec provides vulnerability risk management and prioritization tooling, overlapping with Cyver's vulnerability management module and competing for similar enterprise security-team budgets.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
Cyver social profiles
Digital presenceCyver compliance and trust
Trust signalCompliance2 records
Cyver financial estimates
Financial estimateRevenue estimate
Valuation estimate
Cyver leadership team
Management profileNumber of profiles
Profiles2 records
Cyver funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Cyver M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Cyver
What does Cyver do?
Cyver sells Cyver Core, a cloud-based SaaS pentest management platform that automates the full penetration testing lifecycle — scoping, reporting, vulnerability tracking, team coordination, and client delivery — for pentest service providers and enterprise security teams. The platform includes AI-powered report generation, a white-label client portal, a comprehensive findings library with MITRE ATT&CK mapping, automated workflows, native integrations with 20+ security tools, and flexible cloud, private, or on-premises deployment on SOC 2 Type 2 compliant Microsoft Azure infrastructure.
Is Cyver a public or private company?
Cyver is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Cyver founded?
Cyver was founded in 2020. It employs 11 to 50 people.
Where is Cyver based?
Cyver is headquartered in Amsterdam, Netherlands, in the Europe region.
How does Cyver make money?
One revenue line is on record: software Platform Subscription.
Who are Cyver's main competitors?
Direct peers on record are Plextrac, Cobalt, Pentera and Horizon3.ai. Broad incumbents are SafeBreach, AttackIQ, Bugcrowd and Synack. Emerging players are Cymulate and NopSec.
Does Cyver have an API?
Yes. Cyver Core provides an API for integrating with custom applications using events and webhooks to automate workflows across tools. The API enables connecting Cyver with the user's ecosystem. Developer documentation is at cyver.zendesk.com/hc/en-us/articles/4404341226514-Working-with-the-API.
What industry is Cyver in?
Cyver's product category is Pentest Management Software. Its primary akta.pro industry code is BPAEADAD, Vulnerability Management & Penetration Testing Services, with a secondary code of BPAKAHAJ, Application Security & DevSecOps Services. Its NAICS code is 5132 and its SIC code is 7372.