XM Cyber

XM Cyber was founded in 2016 by Noam Erez, Tamir Pardo (former director of the Mossad), and Boaz Gorodissky. The company is headquartered in Herzliya, Israel, with additional operations in the United States and Europe. In 2021, XM Cyber was acquired by Schwarz Group, the German retail conglomerate that operates Lidl and Kaufland, marking an unusual strategic move by a non-technology parent into the cybersecurity space.

XM Cyber's primary product is an attack path management and continuous exposure management platform. It simulates how an attacker could move laterally through an organization's hybrid environment — spanning on-premises infrastructure, cloud, and Active Directory — to reach critical assets. The platform is aimed at enterprise security teams, specifically those responsible for vulnerability management and security posture, and helps prioritize remediation based on the actual risk of exploitation rather than raw CVSS scores. The buyer is typically the CISO or the security operations function within large enterprises.

XM Cyber's flagship product is its Attack Path Management platform, which continuously maps potential attack paths from any entry point to crown-jewel assets across hybrid environments. A core technical focus is Active Directory security and the identification of misconfigurations and credential-based lateral movement paths that conventional vulnerability scanners miss. The platform integrates with cloud environments including AWS, Azure, and GCP, enabling organizations to see cross-environment attack paths.

XM Cyber operates in the exposure management and attack path management segment, competing with companies such as CrowdStrike (via its Falcon platform's exposure management capabilities), Tenable (ExposureAI and attack path analysis), and Microsoft (Defender for Identity and Defender for Cloud). Gartner has cited attack path management as part of the broader Continuous Threat Exposure Management (CTEM) framework, a category that XM Cyber has been positioned within. The company's acquisition by Schwarz Group in 2021 provided financial backing but separated it from the typical VC-to-IPO trajectory common among Israeli cybersecurity firms.

XM Cyber's R&D and founding team are based in Herzliya. The founders have deep roots in Israeli intelligence and national security — Tamir Pardo's role as former Mossad director brought significant credibility and network to the company's early formation. The company is a recognizable name in the Israeli cybersecurity ecosystem and is associated with the broader talent pipeline from Israeli intelligence units.