Cimento

What Cimento does

Cimento AI, Inc. is an early-stage, venture-backed enterprise cybersecurity company headquartered in Salt Lake City, Utah that builds an AI-native human risk management platform. The platform runs multi-channel phishing simulations across email, SMS, and voice enhanced by AI-generated deepfake content, delivers LLM-generated 60–90 second personalized training modules, and produces continuously updated living employee risk scores built on a Bayesian propensity model that separates propensity (likelihood of risky behavior) from exposure (organizational impact if compromised). The platform also extends its risk framework to AI agents through an Agent Security Assessment module that adversarially probes deployed agents and auto-generates hardening fixes, treating agents and humans under a unified governance model.

The platform integrates with enterprise identity, communication, and security stacks including Okta, Azure AD, Google Workspace, Slack, Microsoft Teams, HRIS, and SIEM systems to enable risk-based access controls and automated remediation without manual intervention, and ships audit-ready exports for SOC 2 Type II, ISO 27001, and HIPAA. Cimento targets security and compliance buyers at enterprise organizations, with named customers spanning Gemini, DigitalOcean, Tensorwave, Together AI, Aryaka, and Moveworks — all in AI, cloud infrastructure, or developer-tooling segments.

Cimento operates on an enterprise SaaS subscription model with a demo-first, direct field-sales motion; no public pricing is disclosed and prospects must book a 30-minute live walkthrough. The company was founded in 2024 by Zain Rizavi (CEO) and Eric Liu (CPO), with founding engineers and growth staff drawn from Cloudflare, Palo Alto Networks, Amazon, Microsoft, and Palantir. Cimento raised approximately $3M in pre-seed funding led by Bowery Capital and Indie VC, alongside strategic angels from Cloudflare, Palo Alto Networks, Anysphere/Cursor, Nvidia, and Okta, and emerged from stealth in May 2026 with a small senior team of under ten employees.

Name

Cimento

Legal name

Cimento AI, Inc.

Website

https://cimento.ai

Company type

Private

Founded year

2024

Operating status

Operating

Headcount range

1–10 employees

Short description

Cimento is an AI-native human risk management platform that runs multi-channel phishing simulations, delivers LLM-generated personalized training, and scores employee and AI agent risk for enterprise security teams. The venture-backed SaaS company is based in Salt Lake City.

Ownership category

akta.pro rank

Product category

Human Risk Management Software

NAICS

Security Systems Services (except Locksmiths) (561621)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Model Governance, Risk & Compliance (GRC) Platforms (HDAAAKAA)

akta.pro secondary industries

Prompt Security & Injection Defense (HDAAAKAE), Regulatory Readiness & Audit Automation (e.g., EU AI Act, NIST AI RMF, ISO/IEC 42001) (HDAAAMAE)

Keywords

• Phishing simulation platform
• Security awareness training
• Human risk management
• AI security platform
• Employee risk scoring

Headquarters

HQ city

Salt Lake City

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Human Risk Management Platform Subscription: Enterprise SaaS subscription model providing AI-powered phishing simulations, personalized training, risk scoring, and automated remediation across email, SMS, voice, and AI agent security.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels3 records

Core offering

Cimento provides an AI-native Human Risk Management platform that runs multi-channel phishing simulations (email, SMS, voice with AI-generated deepfakes), generates personalized 60–90 second training modules via an LLM engine, computes continuously updated employee risk scores using Bayesian propensity and exposure modeling, and automates remediation including access restrictions for high-risk users. It also offers an Agent Security Assessment capability to adversarially test and harden deployed AI agents.

Product overview

Cimento offers a unified AI-native human risk management platform that combines phishing simulations, personalized training delivery, real-time risk scoring, and automated remediation. The core Human Risk Management Platform integrates with enterprise identity and communication tools to provide continuous, behavior-based security monitoring. Key modules include Multi-Channel Attack Simulations (email, SMS, voice with deepfakes), AI-Powered Personalized Training (60-90 second micro-modules), Living Employee Risk Scores, Multi-Turn Phishing Simulations, Automated Response & Remediation, AI Content Builder, and Agent Security Assessment. The platform also includes Agent Simulation for testing AI agents as high-risk users. All components work together in a continuous cycle: integrate and learn, test and measure, adapt and train.

Differentiator

Problem solved

Functional benefit

Products and services

• Cimento Human Risk Management Platform AI-native enterprise SaaS platform that runs continuous multi-channel phishing simulations (email, SMS, voice with AI-generated deepfake content), delivers personalized 60–90 second LLM-generated training modules, maintains living employee risk scores with Bayesian propensity and exposure modeling, automates response and remediation (including access restrictions for high-risk users), and includes an Agent Security Assessment capability to adversarially test deployed AI agents. Designed for enterprise security and compliance teams.
• Agent Security Assessment Capability within the Cimento platform that runs adversarial tests against deployed AI agents, probes for vulnerabilities such as prompt extraction and authority impersonation, and auto-generates hardening fixes that can be applied immediately and verified via one-click re-test. Provides AI agent inventory and adversarial playbooks, treating AI agents as high-risk users that require the same observation, permission scoping, and monitoring as human employees.

Quantifiable outcome

• Training completion rates boosted by 40% and retention by 65%
• +1 more outcomes

Named customers6 records

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

AI capability8 records

Feature9 records

Partnerships

Six partnerships are on record, tiered core and infrastructure.

• OktacoreTechnology or IntegrationIntegration partner - Cimento connects with Okta for identity and access management integration, enabling risk-based access controls and automated remediation.
• Microsoft Azure ADcoreTechnology or IntegrationIntegration partner - Cimento connects with Azure AD for identity and access management integration, enabling risk-based access controls.
• Google WorkspacecoreTechnology or IntegrationIntegration partner - Cimento connects with Google Workspace for identity and access management integration.
• SlackcoreTechnology or IntegrationIntegration for training-related notification delivery via direct messages. Uses OAuth 2.0 with minimum scopes (chat:write, im:write, users:read, users:read.email) to send notifications.
• Microsoft TeamscoreTechnology or IntegrationIntegration partner for training notification delivery and communication within Teams environment.
• Amazon Web Services (AWS)infrastructureTechnology or IntegrationCloud infrastructure provider hosting Cimento's application services, encrypted database, encryption keys, message queues, and application logs. Region us-west-2.

Scale indicators5 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Hoxhunt: Enterprise security awareness and phishing simulation platform emphasizing personalized, gamified training and behavior change. Direct competitor to Cimento's adaptive training thesis, though narrower on AI agent security.
• Living Security: Security awareness and human risk management platform combining behavioral science with training delivery. Direct competitor in the human risk management category Cimento targets.
• KnowBe4: The dominant security awareness training and phishing simulation platform for enterprises. Closest direct competitor to Cimento, though built on periodic compliance exercises and static email templates rather than AI-native continuous adaptation.
• Cofense: Phishing detection, simulation, and response platform focused on human-reported phishing intelligence. Comparable to Cimento's phishing simulation and remediation workflows, but more reactive/report-driven than continuous.
• Curricula: Security awareness training platform focused on engaging, story-driven content for SMB and mid-market. Comparable in phishing simulation and training delivery, but lacks the AI-native risk scoring of Cimento.
• Tessian (now part of Proofpoint): Human layer security focused on email-based threats (misdirected emails, impersonation, data exfiltration). Adjacent competitor addressing the same human risk surface as Cimento but with email-only scope.

Broad incumbents

• Proofpoint: Large incumbent offering security awareness training as part of a broader email security and information protection portfolio. Overlaps with Cimento on phishing simulation and human risk scoring but lacks Cimento's AI-native multi-channel deepfake approach.
• SANS Institute: Long-established cybersecurity training and certification body offering awareness programs and content. Adjacent incumbent providing training curricula that Cimento's AI-generated content could supplement or displace.

Emerging players

• Lakera: AI security platform focused on prompt injection defense and LLM guardrails. Comparable to Cimento's Agent Security Assessment module, though Lakera focuses on protecting AI applications rather than testing/scoring deployed AI agents.

Regional players

• SoSafe: Europe-headquartered security awareness and phishing simulation platform with strong DACH presence. Comparable product offering to Cimento, but geographic focus and content library differ.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Funding overview

Funding rounds2 records

Investors2 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cimento