Cymulate’s platform runs a perpetual, automated red team. From a Tel Aviv command center, its software simulates thousands of attack vectors against a client’s live network, probing for weak points that a human pen tester might miss in an annual audit. The pitch is straightforward: continuous validation beats periodic checkups. With a reported $137.5 million in venture funding behind it, the company is betting that this automated, always-on approach is the new standard for enterprise security posture [ZoomInfo].
The Breach and Attack Simulation Wedge
Cymulate launched in 2016 with a focus on breach and attack simulation (BAS). The core product automates the process of emulating real-world attacks, from initial access to lateral movement and data exfiltration. This allowed security teams to test their defenses without hiring expensive external consultants or pausing operations for a manual test. The initial wedge was cost and frequency, replacing a $250,000 annual pen test with a $50,000 SaaS subscription that could run weekly [Cymulate website].
Over time, the platform expanded into what the company now calls its Exposure Management Platform. It layers on continuous automated red teaming (CART), control assessment tools, and vulnerability management, aiming to provide a unified view of risk [CB Insights, 202x].
The Team and the Tel Aviv Connection
The founding team carries a distinct pedigree. Co-founders Avihai Ben-Yossef, Eyal Wachsman, and Eyal Gruner are all former Israeli Defense Forces intelligence officers and cyber researchers [Cymulate about us].
| Role | Name | Background Note |
|---|---|---|
| Co-Founder & CEO | Eyal Wachsman | Former IDF intelligence. |
| Co-Founder & CTO | Avihai Ben-Yossef | Former IDF intelligence; Forbes Israel 30 Under 30 (2020). |
| Co-Founder | Eyal Gruner | Serial cybersecurity entrepreneur. |
Capital and Customer Traction
Cymulate has raised capital in steady, growing increments, a sign of investor confidence in its expansion from a BAS tool to a broader exposure management platform. A $45 million Series C in May 2021 was led by growth investor One Peak [TechCrunch, May 2021]. This was followed by a $70 million Series D in 2022, which brought total disclosed funding to approximately $137.5 million [ZoomInfo] [PRNewswire, Sep 2022].
| Metric | Value |
|---|---|
| 2021 Series C | $45M |
| 2022 Series D | $70M |
| Total Disclosed | $137.5M |
The company reports traction with over 400 customers across 32 countries, targeting mid-market and enterprise clients [Cymulate media kit]. ZoomInfo estimates its annual revenue at $42 million [ZoomInfo].
Where the Competition is Heating Up
The market Cymulate helped define is now crowded. The company lists direct competitors like Pentera, AttackIQ, SafeBreach, and Picus Security [Cymulate website].
The Next Twelve Months
For a company with nine years of operation and nine-figure funding, the next phase is about scaling the enterprise footprint and proving the platform’s stickiness. The recent capital infusion suggests ambitions beyond organic growth, potentially for strategic acquisitions to bolster its technology stack, similar to its 2023 purchase of cloud security posture management firm CYNC Secure.