Cybergate
Cybergate is a Malta-headquartered cybersecurity consultancy providing penetration testing, vulnerability management, cloud security assessments, awareness training, and vCISO advisory to financial services, iGaming, legal, retail, and SME clients in Malta and the UK.
- Company typePrivate
- Founded2013
- HeadquartersMálta, Greece
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Cybergate does
Cybergate (legal entity Cybergate Ltd, operating as Cybergate International) is a privately held cybersecurity consultancy and penetration testing firm founded around 2013 and headquartered in St. Venera, Malta, with a regional office in London. The company serves a diverse client base across financial services, iGaming, legal, retail, insurance, real estate, and non-profit sectors, with stated penetration into Maltese and UK markets and over a decade of operating experience. Its offerings are delivered through a B2B, sales-led engagement model targeting enterprise and mid-market clients, and the firm is founder-operated with no disclosed external funding, parent company, or subsidiaries.
The company's core technology stack centers on a portfolio of professional security services rather than a unified software product. Its proprietary offering is an Exposure Management Platform for Vulnerability Management; complementary services include Penetration Testing (external, internal, web, mobile, and physical), Cloud Security Assessment, Risk & Vulnerability Assessment, Phishing as a Service, Cyber Awareness Training (delivered via an e-learning platform), ISO27001 Consultation, and Virtual CISO (vCISO) advisory. Founder Francesco Mifsud holds OSCP, eWPTX, and CISSP credentials and has delivered training at DEF CON, BSides London, BSides Manchester, and BRU CON, signaling technical credibility within the offensive security community.
Revenue is generated through three streams: project-based professional security services (penetration testing, vulnerability assessments, cloud security assessments, ISO27001 consultation, vCISO engagements, and physical penetration testing), professional training services delivered in-person or via the e-learning platform, and recurring managed services including Phishing as a Service and Vulnerability Management platform subscriptions. Pricing is quote-based and tailored to client scope, with multi-year contracts referenced. The company markets primarily through content marketing, organic social media (LinkedIn, Facebook, X, YouTube), newsletter subscriptions, and direct enterprise sales outreach via the website contact forms.
Cybergate firmographics
Firmographics- Name
- Cybergate
- Legal name
- Cybergate Ltd
- Website
- https://cybergateinternational.com
- Company type
- Private
- Founded year
- 2013
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Cybergate is a Malta-headquartered cybersecurity consultancy providing penetration testing, vulnerability management, cloud security assessments, awareness training, and vCISO advisory to financial services, iGaming, legal, retail, and SME clients in Malta and the UK.
- Ownership category
- akta.pro rank
Cybergate industry classification
Industry- Product category
- Cybersecurity Consulting Services
- NAICS
- Computer Systems Design and Related Services (54151)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Vulnerability Management & Penetration Testing Services (BPAEADAD)
- akta.pro secondary industry
- Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF)
Keywords
Where Cybergate is headquartered
LocationHeadquarters
- HQ city
- Málta
- HQ country
- Greece
- HQ region
- Europe
Offices2 records
Markets served
Cybergate business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Professional Security Services: Revenue generated from cybersecurity consulting services including penetration testing, vulnerability assessments, cloud security assessments, ISO27001 consultation, vCISO services, and physical penetration testing. Services are project-based and tailored to client requirements.
- Training Services: Revenue from cybersecurity awareness training sessions and programs delivered to employees of client organizations. Can be delivered in-person or via online e-learning platform.
- Managed Security Services: Ongoing managed services including Phishing as a Service and Vulnerability Management platform subscriptions.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Custom quoting based on scope and requirements |
Go-to-market motion1 record
Distribution channels2 records
Marketing channels7 records
Cybergate product offering
Product offeringCore offering
Cybergate is a Malta-based cybersecurity consultancy that sells tailored offensive-security engagements to businesses, including penetration testing, cloud and risk vulnerability assessments, ISO 27001 implementation support, virtual CISO advisory, and physical penetration testing. It complements these professional services with a Vulnerability Management exposure platform and recurring managed offerings—Phishing as a Service and an online cyber awareness training program—targeting financial, legal, retail, and iGaming organizations in Malta and the UK.
Product overview
Cybergate is a cybersecurity consultancy offering a portfolio of security services rather than a unified software product. The company provides Vulnerability Management as its primary product/platform for exposure management, complemented by eight specialized consulting services: Cyber Awareness Training, Phishing as a Service, Penetration Testing, Cloud Security Assessment, Risk & Vulnerability Assessment, ISO27001 Consultation, Virtual CISO (vCISO) Service, and Physical Penetration Testing. These services are offered as discrete offerings that can address various cybersecurity needs from technical testing to strategic advisory.
Differentiator
Problem solved
Functional benefit
Products and services
- Vulnerability Management An exposure management platform designed to help organizations identify and manage security vulnerabilities across their IT environment, enabling continuous visibility into weaknesses across infrastructure.
- Penetration Testing Comprehensive security audits tailored to client environments and organizational requirements to improve overall security posture, covering external and internal infrastructure testing as well as web and mobile application testing.
- Cloud Security Assessment Comprehensive security assessment of cloud environments tailored to organizational needs, designed to identify cloud-specific risks and improve the organization's cloud security posture.
- Risk & Vulnerability Assessment Systematic evaluation of IT environments to identify known security issues, misconfigurations, and outdated software that could serve as entry points for attackers, providing a cost-effective starting point for security posture assessment.
- ISO27001 Consultation Consultation services to help organizations implement a robust ISO 27001 compliant Information Security Management System (ISMS), safeguarding information assets through structured controls.
- Virtual CISO (vCISO) Service Strategic cybersecurity leadership and advisory services delivered remotely to improve overall cyber security strategy and organizational resilience to cyber attacks, acting as an outsourced CISO function.
- Phishing as a Service A fully managed phishing program that maintains and improves workforce vigilance to real malicious phishing emails through continuous simulated phishing campaigns and reporting.
- Cyber Awareness Training Hands-on training sessions designed to help companies proactively address the human element of cybersecurity by educating employees on security best practices through interactive content and real-life case studies.
- Physical Penetration Testing Assessment of physical security controls to identify weak access points that could be exploited by intruders or rogue employees, evaluating entry controls, access cards, and surveillance systems.
Quantifiable outcome
- Up to 40% customer loss after data breaches - proactive security testing helps prevent this
Companies that use Cybergate
Customer profileNamed customers9 records
Segments5 records
Ideal customer profiles4 records
Cybergate technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature3 records
Cybergate partnerships and signals
Strategic signalScale indicators1 record
Recent moves7 records
Expansion highlights5 records
Cybergate competitors and assessment
Company assessmentDirect peers
- Secarma: UK cybersecurity consultancy specializing in penetration testing, red teaming, and managed security. Directly comparable to Cybergate on offensive-security services, training offerings, and UK/European customer base.
- NCC Group: UK-headquartered cybersecurity consultancy offering penetration testing, vulnerability management, and managed security services across regulated industries. Closely comparable to Cybergate in service mix (pentest, vulnerability assessment, advisory) and core UK/European client base.
- Pen Test Partners: UK-based penetration-testing boutique offering web, infrastructure, cloud, and IoT testing plus consultancy. Comparable in scale and service focus to Cybergate's pentest-heavy portfolio and UK footprint.
- Bishop Fox: US-based offensive-security consultancy offering penetration testing, red teaming, and attack-surface management. Comparable in boutique, talent-led positioning with a strong emphasis on high-end pentest engagements.
- WithSecure: European cybersecurity firm (formerly F-Secure) providing consulting-led penetration testing, vulnerability management, and managed detection. Comparable to Cybergate in combining offensive-security services with a managed vulnerability platform.
- MDSec: UK-based offensive-security firm known for advanced penetration testing and security research. Highly comparable in boutique positioning, founder-led profile, and depth in web/application pentesting.
Broad incumbents
- Mandiant (Google Cloud): Global incident response, threat intelligence, and security consulting provider (now part of Google Cloud). Overlaps with Cybergate on penetration testing, vCISO-style advisory, and regulated-industry engagements, but at vastly larger scale.
- Trustwave: Global MSSP offering managed security, vulnerability management, and consulting at enterprise scale. Competes with Cybergate on managed services and vulnerability assessment but serves a much broader portfolio of customers.
- KPMG Cyber Security Services: Big-Four cybersecurity practice offering penetration testing, ISO 27001 advisory, vCISO, and compliance services. Competes with Cybergate for the same regulated-vertical mandates but bundles services into enterprise-wide transformation programs.
Emerging players
- Cyberis: UK-based cybersecurity consultancy offering penetration testing, threat intelligence, and managed security services. Closely comparable in boutique size, offensive-security focus, and UK/European customer profile.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
Cybergate social profiles
Digital presenceCybergate financial estimates
Financial estimateRevenue estimate
Valuation estimate
Cybergate leadership team
Management profileNumber of profiles
Profiles2 records
Cybergate funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Cybergate M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Cybergate
What does Cybergate do?
Cybergate is a Malta-based cybersecurity consultancy that sells tailored offensive-security engagements to businesses, including penetration testing, cloud and risk vulnerability assessments, ISO 27001 implementation support, virtual CISO advisory, and physical penetration testing. It complements these professional services with a Vulnerability Management exposure platform and recurring managed offerings—Phishing as a Service and an online cyber awareness training program—targeting financial, legal, retail, and iGaming organizations in Malta and the UK.
Is Cybergate a public or private company?
Cybergate is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Cybergate founded?
Cybergate was founded in 2013. It employs 11 to 50 people.
Where is Cybergate based?
Cybergate is headquartered in Málta, Greece, in the Europe region.
How does Cybergate make money?
Three revenue lines are on record. Professional Security Services are the primary driver. The others are training Services and managed Security Services.
Who are Cybergate's main competitors?
Direct peers on record are Secarma, NCC Group, Pen Test Partners, Bishop Fox, WithSecure and MDSec. Broad incumbents are Mandiant (Google Cloud), Trustwave and KPMG Cyber Security Services. Cyberis is listed as an emerging player.
Does Cybergate have an API?
No public API is recorded for Cybergate.
What industry is Cybergate in?
Cybergate's product category is Cybersecurity Consulting Services. Its primary akta.pro industry code is BPAEADAD, Vulnerability Management & Penetration Testing Services, with a secondary code of BPAHAFAF, Privacy, Data Protection & Cyber Governance (GRC). Its NAICS code is 54151 and its SIC code is 7373.