Frequently Asked Questions

Product Information

What is Cymulate and what does it do?

Cymulate is a SaaS-based breach and attack simulation (BAS) platform that enables organizations to continuously test and optimize their security posture. With just a few clicks, Cymulate runs thousands of attack simulations to identify security gaps and provides actionable insights on how to fix them, making security validation continuous, fast, and accessible for companies of all sizes. Learn more.

Who founded Cymulate and when was it established?

Cymulate was founded in 2016 by Avihai Ben-Yossef (CTO) and Eyal Wachsman (CEO). The company was created to empower organizations to easily understand and improve their security posture. About Us.

What is the primary purpose of Cymulate's platform?

The primary purpose of Cymulate's platform is to harden defenses and optimize security controls by proactively validating controls, threats, and response capabilities. It helps organizations focus on exploitable exposures and strengthen their overall security posture. Learn more.

How does Cymulate's agentless APT simulation work?

Cymulate offers the industry's first agentless Advanced Persistent Threat (APT) simulation, allowing organizations to test their defenses against sophisticated attack scenarios without deploying agents. This approach simplifies deployment and ensures comprehensive testing across the full kill chain. Learn more.

What types of attack simulations does Cymulate provide?

Cymulate provides continuous testing across the full kill chain, including simulations of the latest threats in the wild. The platform covers network, endpoint, email, web gateway, lateral movement, data exfiltration, and more, enabling organizations to assess their defenses against a wide range of attack vectors. Platform details.

How does Cymulate help organizations of different sizes?

Cymulate's user-friendly and automated approach makes advanced security validation accessible to companies of all sizes, from small businesses to large enterprises. The platform requires minimal resources for implementation and provides actionable insights without the need for highly skilled personnel. About Cymulate.

What is Cymulate's approach to continuous security validation?

Cymulate enables organizations to run on-demand simulations of the latest threats, providing real-time data on where their network is exposed. This continuous validation helps companies stay ahead of emerging threats and maintain a strong security posture. Threat Validation.

What is Cymulate's mission and vision?

Cymulate's mission is to revolutionize how companies approach cybersecurity by fostering a proactive stance against threats. The company empowers organizations to manage their security posture effectively and improve resilience against threats. Read more.

How does Cymulate make security validation accessible?

Cymulate's platform is designed to be user-friendly and easy to implement, enabling organizations to quickly identify security gaps and receive actionable recommendations without the need for highly skilled personnel. Try Cymulate.

What is Cymulate's track record in the cybersecurity industry?

Cymulate has received multiple industry accolades, including Winner of the Breach and Attack Simulation Solution of the Year Award (Cybersecurity Breakthrough Awards) and Editors Choice, BAS (Cyber Defense Global Award). The company has also been recognized by Forbes Israel 30 Under 30 and has secured .5M in funding. Awards.

How can I contact Cymulate for media inquiries?

For media inquiries, contact Diane Mckaye at Silicon Valley Communications via email at [email protected] or phone at +44 7771 926726.

Where can I find Cymulate's case studies and customer reviews?

You can find Cymulate's case studies and customer reviews on the Customers and Reviews pages. These resources provide insights into how organizations across industries have benefited from Cymulate's platform.

What resources does Cymulate provide for learning more about its technology?

Cymulate offers a variety of resources, including whitepapers, guides, solution briefs, data sheets, and e-books. Visit the Resource Hub for a comprehensive collection of technical documentation and educational materials.

How can I start a free trial of Cymulate?

You can register for a free trial of Cymulate by visiting the Free Trial page on the Cymulate website.

What is Cymulate's global presence?

Cymulate has a presence in 8 global locations and serves customers in 50 countries, with over 1,000 organizations relying on its platform to enhance their cybersecurity posture. About Us.

What are some recent recognitions Cymulate has received?

Cymulate has been named a Customers' Choice in the 2025 Gartner Peer Insights, a Market Leader for Automated Security Validation by Frost & Sullivan, and has won multiple industry awards. Awards.

Where can I find Cymulate's latest news and press releases?

The latest news, press releases, and media coverage about Cymulate can be found on the News Room page.

How does Cymulate support continuous innovation?

Cymulate updates its SaaS platform every two weeks with new features, such as AI-powered SIEM rule mapping and advanced exposure prioritization, ensuring customers always have access to the latest capabilities. Learn more.

What is Cymulate's funding history?

Cymulate announced two rounds of funding totaling .5 million in the past 12 months, supporting its growth and technological advancements. About Us.

What is Cymulate's approach to making security validation part of everyday activities?

Cymulate integrates security validation into daily operations by providing continuous, automated testing and actionable insights, making it an ongoing part of organizational processes rather than a one-time event. Platform.

Features & Capabilities

What are the key features of Cymulate's platform?

Cymulate's platform offers continuous threat validation, a unified platform combining BAS, CART, and Exposure Analytics, AI-powered optimization, complete kill chain coverage, attack path discovery, automated mitigation, cloud validation, and ease of use. Platform details.

What integrations does Cymulate support?

Cymulate integrates with numerous security technologies, including Akamai Guardicore, AWS GuardDuty, BlackBerry Cylance OPTICS, Carbon Black EDR, Check Point CloudGuard, CrowdStrike Falcon, Crowdstrike Falcon LogScale, and Cybereason. For a complete list, visit the Partnerships and Integrations page.

How easy is Cymulate to implement and use?

Cymulate is designed for rapid implementation and ease of use. Customers report that deployment is fast and straightforward, with an intuitive dashboard and minimal resource requirements. The platform can be used in agentless mode and provides comprehensive support resources. Customer feedback.

What technical documentation is available for Cymulate?

Cymulate provides whitepapers, guides, solution briefs, data sheets, and e-books covering its Exposure Management Platform, CTEM, detection engineering, vulnerability management, and more. Access the full library at the Resource Hub.

What security and compliance certifications does Cymulate hold?

Cymulate is SOC2 Type II certified and complies with ISO 27001:2013, ISO 27701, ISO 27017, and CSA STAR Level 1. These certifications demonstrate Cymulate's commitment to security, privacy, and cloud service best practices. Security at Cymulate.

How does Cymulate ensure data security and privacy?

Cymulate hosts its services in secure AWS data centers, uses strong encryption (TLS 1.2+ for data in transit, AES-256 for data at rest), and follows a strict Secure Development Lifecycle (SDLC). The company also complies with GDPR and has a dedicated privacy and security team. Security at Cymulate.

What is Cymulate's approach to continuous threat exposure management (CTEM)?

Cymulate's platform evolves security practices into Continuous Threat Exposure Management (CTEM), enabling organizations to proactively validate, prioritize, and remediate exposures for measurable improvements in threat resilience and operational efficiency. Enable CTEM.

What is Cymulate's threat library and how is it updated?

Cymulate provides an advanced library of attack simulations with daily updates, ensuring customers are protected against the latest threats and can validate their defenses against real-world scenarios. Platform.

What support resources does Cymulate offer?

Cymulate offers comprehensive support, including email and chat support, webinars, e-books, a knowledge base, and educational resources to ensure a smooth onboarding and ongoing user experience. Resource Hub.

Pricing & Plans

What is Cymulate's pricing model?

Cymulate operates on a subscription-based pricing model tailored to each organization's needs. Pricing depends on the chosen package, number of assets, and scenarios selected for simulation. For a personalized quote, schedule a demo with Cymulate's team.

Use Cases & Benefits

Who can benefit from using Cymulate?

Cymulate is designed for CISOs, security leaders, SecOps teams, red teams, and vulnerability management teams across industries such as media, transportation, financial services, retail, and healthcare. The platform supports organizations of all sizes, from small businesses to enterprises with over 10,000 employees. Learn more.

What business impact can customers expect from Cymulate?

Customers typically see a 30% improvement in threat prevention, a 52% reduction in critical exposures, a 60% increase in team efficiency, and an 81% reduction in cyber risk within four months. Cymulate also enables 40X faster threat validation and significant time savings. See more.

What core problems does Cymulate solve?

Cymulate addresses overwhelming threat volumes, lack of visibility, unclear prioritization, operational inefficiencies, fragmented security tools, cloud complexity, and communication barriers for CISOs. The platform provides continuous threat validation, actionable insights, and unified security validation. About Us.

How does Cymulate address pain points for different personas?

Cymulate tailors its solutions for CISOs (visibility, metrics), SecOps (efficiency, automation), red teams (scalable offensive testing), and vulnerability management teams (prioritization, resource optimization). Each persona benefits from features aligned to their specific challenges. Learn more.

What feedback have customers given about Cymulate's ease of use?

Customers praise Cymulate for its intuitive design, ease of deployment, and user-friendly dashboard. Testimonials highlight the platform's simplicity, practical insights, and excellent support. Read testimonials.

How quickly can Cymulate be implemented?

Cymulate can be implemented rapidly, often within hours. Customers report that the process is fast and straightforward, with minimal technical requirements and immediate access to simulations and insights. Customer feedback.

Competition & Comparison

How does Cymulate compare to AttackIQ?

Cymulate offers an industry-leading threat scenario library and AI-powered capabilities for streamlined workflows and accelerated security posture improvement. AttackIQ focuses on automated security validation but lacks Cymulate's innovation, threat coverage, and ease of use. Read more.

How does Cymulate compare to Mandiant Security Validation?

Mandiant is one of the original BAS platforms but has seen little innovation in recent years. Cymulate continually innovates with AI and automation, expanding into exposure management and recognized as a grid leader. Read more.

How does Cymulate compare to Pentera?

Pentera is useful for attack path validation but lacks the depth Cymulate provides for fully assessing and strengthening defenses. Cymulate optimizes defense, scales offensive testing, and increases exposure awareness. Read more.

How does Cymulate compare to Picus Security?

Picus may suit organizations seeking a BAS vendor with an on-prem option. Cymulate offers a more complete exposure validation platform covering the full kill chain and cloud control validation. Read more.

How does Cymulate compare to SafeBreach?

Cymulate outpaces SafeBreach with unmatched innovation, precision, and automation. It features the industry’s largest attack library, a full CTEM solution, and comprehensive exposure validation. Read more.

How does Cymulate compare to Scythe?

Scythe is suitable for advanced red teams building custom attack campaigns. Cymulate provides a more comprehensive exposure validation platform with actionable remediation and automated mitigation. Read more.

How does Cymulate compare to NetSPI?

NetSPI excels in penetration testing as a service (PTaaS). Cymulate is designed for continuous, independent assessment and strengthening of defenses, recognized as a leader in exposure validation by Gartner and G2. Read more.

Why should a customer choose Cymulate over other solutions?

Cymulate provides a unified platform, continuous threat validation, AI-powered optimization, complete kill chain coverage, ease of use, proven results, continuous innovation, and an extensive threat library. Customers report measurable improvements in risk reduction and operational efficiency. Why Cymulate.

New: 2026 Gartner® Market Guide for Adversarial Exposure Validation
Learn More
Cymulate named a Customers' Choice in 2025 Gartner® Peer Insights™
Learn More
New Research: Azure Arc Privilege Escalation & Identity Takeover
Learn More
An Inside Look at the Technology Behind Cymulate
Learn More

Cymulate Co-founder and CTO Avihai Ben-Yossef Selected for Forbes Israel 30 Under 30 2020

January 27, 2020

Rishon Letzion, Israel – (January 28, 2020) – Cymulate, the most comprehensive SaaS-based Breach and Attack Simulation (BAS) platform, today announced that its co-founder and CTO Avihai Ben-Yossef has been recognized by this year’s Forbes Israel 30 Under 30 for his outstanding business achievements. Avihai, together with co-founder and CEO Eyal Wachsman, established Cymulate in 2016 to empower companies to easily understand their security posture at any given moment, enabling them to prepare for the ongoing cyber onslaught. Simulations of the latest threats in the wild can be run on-demand to test an organization’s security defenses and controls, providing actionable insights and data on where a company’s network is exposed. Under Avihai’s technological leadership, the company is transforming the way companies perform security testing, and making it accessible to companies of all sizes. Cymulate’s automated BAS offering delivers continuous testing across the full kill-chain, including the ability to run the industry’s first agentless APT simulation. Having recently solidified its leadership position in the BAS arena, its user-friendly approach is swiftly being adopted by enterprises across the US and Europe.  The company also announced two rounds of funding during the past 12 months totaling $22.5M, alongside a slew of accolades including Winner, Breach and Attack Simulation Solution of the Year Award, Cybersecurity Breakthrough Awards, and Editors Choice, BAS, Cyber Defense Global Award. Avihai served in an Intelligence Unit of the IDF in a leading technological role, before becoming Head of Cyber Research at Avnet Cyber & Information Security, where he worked on several projects for the Israeli Ministry of Defense. He was 26 when he started Cymulate. I’m delighted to have been honored by Forbes for Cymulate’s success and the recognition of its critical role within cybersecurity,” says Avihai. “We will continue to grow the company and advance our technology to ensure companies can quickly and easily identify security gaps without the need for highly skilled personnel.” Media Contact for Cymulate: Diane Mckaye, Silicon Valley Communications [email protected] +44 7771 926726 About Cymulate Cymulate is a SaaS-based breach and attack simulation platform that makes it simple to know and optimize your security posture any time, all the time and empowers companies to safeguard their business-critical assets. With just a few clicks, Cymulate challenges your security controls by initiating thousands of attack simulations, showing you exactly where you’re exposed and how to fix it—making security continuous, fast and part of every-day activities. For more information, visit www.cymulate.com and register for a Free Trial.