Cymulate

Cymulate is an Israeli cybersecurity company founded in 2016. It offers a SaaS platform for simulating cyberattacks and validating security posture, a product category known as Breach and Attack Simulation (BAS). The company is headquartered in Israel and also maintains a presence in North America.

Cymulate's primary product is its BAS platform, which allows enterprise security teams to test the effectiveness of existing controls — firewalls, EDR tools, email gateways — by running simulations of real attack techniques without impacting production environments. Typical buyers are corporate security teams (SOC, Red Team, CISO-level) in financial services, healthcare, and industrial sectors. The sales model is sales-led, primarily through channel partners and MSSPs.

The platform is organized into modules covering email phishing simulation, Web Gateway testing, Endpoint simulation, internal network (Lateral Movement) simulation, and data exfiltration simulation. Cymulate also offers Continuous Automated Red Teaming (CART) capabilities and integrates with the MITRE ATT&CK framework for mapping security gaps. Published integrations include Splunk, IBM QRadar, and SOAR platforms.

Direct competitors in the BAS space include AttackIQ, SafeBreach (also Israeli-founded), and Picus Security. Cymulate also competes against broader Exposure Management platforms such as Tenable and XM Cyber. The company is recognized in Gartner research coverage of the BAS category.

Cymulate is based in Israel, with core R&D functions located there. The company has raised funding from investors including One Peak Partners and Susquehanna Growth Equity. Detailed public information on total headcount or specific funding round amounts is not verified with sufficient confidence and is therefore omitted here.