Frequently Asked Questions

Company & Funding

What is Cymulate and what does the company do?

Cymulate is a leading SaaS-based Breach and Attack Simulation (BAS) platform that enables organizations to automatically assess and continuously validate their overall security posture. The platform simulates real-world cyberattacks to identify vulnerabilities and provides actionable mitigation procedures to close security gaps. Learn more.

How much funding has Cymulate raised to date?

As of March 2019, Cymulate has raised a total of million, including a .5 million Series A funding round led by Vertex Ventures and Dell Technologies Capital, with participation from Susquehanna Growth Equity (SGE) and Eyal Gruner.

Who are Cymulate's investors?

Cymulate is backed by Vertex Ventures, Dell Technologies Capital, Susquehanna Growth Equity (SGE), Eyal Gruner, One Peak, Vertex Ventures Israel, Vertex Growth, and UST. See all investors.

When was Cymulate founded and by whom?

Cymulate was founded in June 2016 by cybersecurity veterans Avihai Ben-Yossef and Eyal Wachsman, alongside serial entrepreneur and investor Eyal Gruner.

What is Cymulate's mission and vision?

Cymulate's mission is to transform cybersecurity practices by providing tools for continuous threat validation and exposure management. The vision is to create a collaborative environment where organizations can achieve lasting improvements in their cybersecurity strategies. Read more.

Where does Cymulate operate and who are its customers?

Cymulate serves customers in North America, Europe, Asia, and Australia, across all industry verticals, including finance, healthcare, retail, media, transportation, and manufacturing. The platform is used by organizations of all sizes, from small enterprises to large corporations with over 10,000 employees.

What industry recognition and awards has Cymulate received?

Cymulate was recognized as a Gartner Cool Vendor in Application and Data Security in 2018, received the Gold Global Excellence Award from Info Security Products Guide, the Fortress Cyber Security Award, and the InfoSec Awards from Cyber Defense Magazine. See all awards.

Where can I find Cymulate's latest news and press releases?

You can find all of Cymulate's latest company announcements, press releases, and media coverage in our newsroom.

How can I contact Cymulate for media inquiries?

For media inquiries, you can contact Leron Kornreich at [email protected] or call 415.937.1724.

Where can I read about Cymulate being named a market leader by Frost & Sullivan?

You can read the press release about Frost & Sullivan naming Cymulate a market leader for automated security validation on our press release page.

Product Information & Features

What is Cymulate's Breach and Attack Simulation (BAS) platform?

Cymulate's BAS platform is a SaaS-based solution that enables organizations to automatically assess their security posture by simulating real-world cyberattacks. It covers the full attack kill-chain, including pre-exploitation, exploitation, and post-exploitation stages, and provides immediate results with vulnerabilities and mitigation procedures.

What attack vectors does Cymulate cover?

Cymulate covers the largest range of attack vectors in the industry, including Email, Web Gateway, Web Application, Phishing, Endpoint, Lateral Movement, Data Exfiltration, and Immediate Threats.

How quickly can Cymulate be deployed?

The Cymulate platform is deployable within minutes, allowing organizations to start running simulated attacks and receiving actionable results almost immediately.

What are the main features of Cymulate's platform?

Main features include continuous threat validation, unified platform for BAS, CART, and Exposure Analytics, attack path discovery, automated mitigation, AI-powered optimization, complete kill chain coverage, ease of use, and an extensive threat library with over 100,000 attack actions updated daily. Learn more.

What integrations does Cymulate support?

Cymulate integrates with a wide range of security technologies, including Akamai Guardicore, AWS GuardDuty, BlackBerry Cylance OPTICS, Carbon Black EDR, Check Point CloudGuard, Cisco Secure Endpoint, CrowdStrike Falcon, Wiz, SentinelOne, and more. For a complete list, visit our Partnerships and Integrations page.

How does Cymulate help organizations improve their security posture?

Cymulate enables organizations to continuously validate their security controls, identify vulnerabilities, and receive actionable recommendations for mitigation. Customers have reported measurable outcomes such as an 81% reduction in cyber risk within four months. See case study.

What is the primary purpose of Cymulate's platform?

The primary purpose of Cymulate's platform is to help organizations proactively validate their cybersecurity defenses, identify vulnerabilities, and optimize their security posture to stay ahead of emerging threats. Learn more.

How does Cymulate differ from traditional security validation tools?

Unlike traditional tools that rely on point-in-time assessments or manual penetration tests, Cymulate offers continuous, automated attack simulations and exposure validation, providing real-time insights and actionable recommendations. The platform is agentless, easy to deploy, and covers the full attack lifecycle.

What is Cymulate's approach to continuous threat exposure management (CTEM)?

Cymulate integrates validation into prioritization and mobilization, enabling collaboration across teams and supporting a continuous threat exposure management (CTEM) program. This approach ensures organizations can proactively address exposures and optimize their security posture. Learn more.

Pricing & Plans

What is Cymulate's pricing model?

Cymulate operates on a subscription-based pricing model tailored to each organization's requirements. Pricing is determined by the chosen package, number of assets, and scenarios selected for testing and validation. For a detailed quote, schedule a demo with the Cymulate team.

Implementation & Ease of Use

How easy is it to implement Cymulate?

Cymulate is designed for rapid, agentless deployment with no need for additional hardware or complex configurations. Customers can start running simulations within minutes and receive immediate, actionable insights. Book a demo.

What feedback have customers given about Cymulate's ease of use?

Customers consistently praise Cymulate for its intuitive interface and ease of use. For example, Raphael Ferreira, Cybersecurity Manager, said, "Cymulate is easy to implement and use—all you need to do is click a few buttons, and you receive a lot of practical insights into how you can improve your security posture." Read more testimonials.

What support resources are available for Cymulate customers?

Cymulate offers comprehensive support, including email support at [email protected], real-time chat support, a knowledge base with technical articles and videos, webinars, e-books, and an AI chatbot for quick answers. Explore resources.

Security & Compliance

What security and compliance certifications does Cymulate hold?

Cymulate holds several key certifications, including SOC2 Type II, ISO 27001:2013, ISO 27701, ISO 27017, and CSA STAR Level 1. These certifications demonstrate Cymulate's commitment to industry-leading security and compliance standards. Learn more.

How does Cymulate ensure data security and privacy?

Cymulate ensures data security through encryption for data in transit (TLS 1.2+) and at rest (AES-256), secure AWS-hosted data centers, a tested disaster recovery plan, and compliance with GDPR. The platform also features mandatory 2FA, RBAC, IP restrictions, and a dedicated privacy and security team. Read more.

Is Cymulate GDPR compliant?

Yes, Cymulate incorporates data protection by design and has a dedicated privacy and security team, including a Data Protection Officer (DPO) and Chief Information Security Officer (CISO), ensuring GDPR compliance. Learn more.

Use Cases & Benefits

Who can benefit from using Cymulate?

Cymulate is designed for CISOs, security leaders, SecOps teams, Red Teams, and vulnerability management teams in organizations of all sizes and industries, including finance, healthcare, retail, media, transportation, and manufacturing. Learn more.

What problems does Cymulate solve for security teams?

Cymulate addresses challenges such as fragmented security tools, resource constraints, unclear risk prioritization, cloud complexity, communication barriers, inadequate threat simulation, operational inefficiencies in vulnerability management, and post-breach recovery challenges. See case studies.

Are there case studies showing Cymulate's impact?

Yes, for example, Hertz Israel reduced cyber risk by 81% in four months using Cymulate. Other case studies include organizations in finance, healthcare, and energy sectors. Explore case studies.

How does Cymulate tailor solutions for different roles?

Cymulate provides tailored solutions for CISOs (metrics and risk prioritization), SecOps (automation and efficiency), Red Teams (offensive testing), and vulnerability management teams (validation and prioritization). Learn more.

What measurable benefits have Cymulate customers reported?

Customers have reported a 52% reduction in critical exposures, a 60% increase in team efficiency, an 81% reduction in cyber risk within four months, and up to 60 hours saved per month in testing new threats. See customer stories.

How does Cymulate compare to other BAS platforms?

Cymulate stands out with its unified platform combining BAS, CART, and Exposure Analytics, continuous automated attack simulations, AI-powered optimization, and the most advanced threat library. It is recognized for ease of use and rapid deployment. See comparisons.

What makes Cymulate a good choice for organizations with limited resources?

Cymulate automates security validation processes, requires minimal resources for deployment, and provides actionable insights quickly, making it ideal for organizations with limited security staff or budgets.

How does Cymulate support continuous innovation?

Cymulate updates its SaaS platform every two weeks with new features, such as AI-powered SIEM rule mapping and advanced exposure prioritization, ensuring customers always have access to the latest capabilities. Learn more.

Cymulate named a Customers' Choice in 2025 Gartner® Peer Insights™
Learn More
New Case Study: Credit Union Boosts Threat Prevention & Detection with Cymulate
Learn More
New Research: Cymulate Research Labs Discovers Token Validation Flaw
Learn More
An Inside Look at the Technology Behind Cymulate
Learn More

Cymulate Raises Series A Funding

April 6, 2019

March 13, 2019- Cymulate, a leading SaaS-based BAS platform, today announced an A funding round of $7.5M  led by Vertex Ventures and Dell Technologies Capital, the investment arm of Dell Technologies; additional funds came from Susquehanna Growth Equity (SGE) and Eyal Gruner, who previously led the Seed rounds. The company has now raised $11M total. Cymulate’s BAS platform enables organizations to automatically assess their overall security posture, continuously validating that security measures and controls are working as expected. The Cymulate platform is deployable within minutes and the simulated attacks provide immediate results that include vulnerabilities and mitigation procedures to close each gap. The platform offers the largest range of attack vectors in the industry covering pre- exploitation, exploitation and post-exploitation stages of an attack kill-chain: Email, Web Gateway, Web Application, Phishing, Endpoint, Lateral Movement, Data Exfiltration and Immediate Threats. Cymulate will use the funding for expanding its operations in the United States, adding key leadership positions and investing further in the research team to enhance the platform’s functionality. “The fast adoption of our platform by organizations optimizing their protection against attacks has enabled Cymulate to consistently surpass revenue and sales targets with triple growth which permits us now to focus on innovation and outreach,” said Eyal Wachsman, Co-Founder and CEO of Cymulate. “We’ve been very strategic about the amount of funding we’ve raised in this round. This new funding will ensure that we remain ahead of the curve with the best Breach and Attack Simulation platform in the industry, while broadening strategic partnerships as we scale up research and operations to increase market share in 2019 and beyond.” “We’re impressed with Cymulate’s technology and product market fit which has already resulted in a large customer base,” said Emanuel Timor, General Partner at Vertex Ventures. “Their easy to use SaaS platform is proving invaluable to CISOs by providing insight that helps maximize security investments whilst minimizing security gaps. As cyber attacks such as data exfiltration, email attacks and phishing continue to be of prime concern to companies, we believe Cymulate has the potential to be the leading BAS company. “Enabling data-driven decisions for cyber security implementations and investments is critical for organizations of all sizes. We believe Cymulate is taking the right approach and has built the right end-to-end platform to enable this vision at scale.” said Alon Weinberg, Director at Dell Technologies Capital. “Looking ahead, we are very pleased to be able to support Cymulate and help build the company wider vision.” Cymulate was founded in June 2016 by cyber security veterans Avihai Ben-Yossef and Eyal Wachsman, alongside Eyal Gruner, a serial entrepreneur and investor in cybersecurity startups. In less than three years, Cymulate has successfully launched its technology in key markets across all industry verticals, with customers in North America, Europe, Asia, and Australia. In 2018, Cymulate was recognized as a Cool Vendor in Application and Data Security by Gartner.* In addition, Cymulate was distinguished in 2018 with the Gold Global Excellence Award from Info Security Products Guide, the Fortress Cyber Security Award, and Winner of the InfoSec Awards from the Cyber Defense Magazine. About Cymulate Cymulate helps companies to stay one step ahead of cyber attackers with a unique breach and attack simulation platform that empowers organizations with complex security solutions to safeguard their business-critical assets. By mimicking the myriad of strategies hackers deploy, the system allows businesses to assess their true preparedness to handle cyber security threats effectively. For more information, visit www.cymulate.com and register for a Free Trial. About Dell Technologies Capital Dell Technologies Capital is the investment arm for Dell Technologies.  We’ve invested in over 100 companies that push the envelope on digital technology for enterprises and consumers.  We are a team of world-class investors who help our companies succeed.  We focus on early-stage investments with passionate founders and often lead rounds.  Our companies gain unique access to the go-to-market capabilities of Dell Technologies. Dell Technologies is the parent company of Dell, Dell EMC, Pivotal, RSA, Secureworks, Virtustream, and VMWare. Dell Technologies is a unique family of businesses that provides the essential infrastructure for organizations to build their digital future, transform IT and protect their most important asset, information. About Vertex Ventures Vertex Ventures is a leading global venture capital group supporting entrepreneurs to transform their innovative ideas into world-class businesses. With cumulative committed capital in excess of $2.5 billion, Vertex invests in early-stage IT and healthcare opportunities in Silicon Valley, China, India, Israel, and Southeast Asia. Since 1988, Vertex is honored to have partnered with the founders of global leaders such as Waze, 91, Grab, IGG, CyberArk, Reebonz, SolarEdge, Force10, FirstCry, Yatra and Changba. Vertex Ventures Israel is one of the pillars of the Vertex Group’s network of Funds focusing on early stage opportunities in the Information Technology sector in Israel. Learn more here. *Gartner, Cool Vendors in Application and Data Security, 4 May 2018 NOTE: Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. ______________ Media Contact: Leron Kornreich [email protected] 415.937.1724

Read the full press release here.