Cymulate Brings In-Region Hosting to Singapore for Asia Pacific Security Teams 

Organizations can now run the Cymulate Platform on AWS in Singapore and keep validation results and defense updates in-country as they prove, prioritize and adapt their defenses 

SINGAPORE, November 11, 2026 — Cymulate, the leader in security and exposure validation, today announced that the Cymulate Platform is now hosted in the Amazon Web Services (AWS) Asia Pacific (Singapore) Region. Security teams in Singapore and across the Asia Pacific can run autonomous threat validation and agentic cyber defense engineering with both the application and its database in Singapore.  

“This investment from Cymulate provides data sovereignty for our Singapore customers and demonstrates our commitment to the Asia Pacific market,” said Cymulate co-founder and CEO Eyal Wachsman.  

Exposure validation results are some of the most sensitive records a security team keeps. They show which threats get past prevention, which detections stay silent and which exposures an attacker could exploit today. Many organizations classify that data as confidential, and their policies often dictate where a vendor may store it. With Singapore hosting, those teams can test continuously and keep the results in-country, without requiring a policy exception. 

Where the data lives is important because of what Cymulate does with it. The Cymulate Platform uses validation findings to identify control weaknesses, prioritize what is exploitable, then builds and deploys vendor-specific detection rules, indicators of compromise (IoCs) and recommended control updates and re-tests to confirm each fix holds. Hosting in Singapore keeps that closed loop in the region. 

The timing fits a wider shift in Singapore. On July 22, the Cyber Security Agency of Singapore (CSA) announced a new Cybersecurity Code of Practice (CCoP) for Cloud Services, planned for the second half of 2026, to set requirements for critical information infrastructure (CII) systems hosted in the cloud. CSA issued the updated CCoP for CII on July 29 and plans further technical guidance on adversarial attack simulation, penetration testing and threat hunting. For CII owners and their suppliers, both cloud hosting choices and continuous testing are now on the agenda. 

“Singapore security leaders tell us that where validation data lives is now part of the buying decision,” said Damian Bach, Head of APJ Sales at Cymulate. “With in-country hosting, they no longer have to choose between continuous testing and their data policies. They can prove what attackers can exploit, fix it fast and keep the evidence in Singapore.”  

Availability 

The Singapore Region is now available to new and existing customers and supports Cymulate Exposure Validation, Cymulate Cowork, Cymulate CTEM, Cymulate Detection Studio, Cymulate Threat Studio and Cymulate Auto Mitigation.  

About Cymulate 

Cymulate is the leader in proactive, AI-powered security that continuously proves, prioritizes and adapts against real attacker behavior – before incidents occur. More than 1,000 enterprise security teams rely on Cymulate for autonomous threat validation and cyber defense engineering. Founded and led by experienced red teamers who know that testing alone does not deliver better security, Cymulate goes beyond threat validation to build threat- and exposure-informed cyber defenses. For more information, visit www.cymulate.com.