- Home
- Offensive Security
- Cymulate Platform
Cymulate Platform
Israel
What it is
Cymulate Platform helps security teams check how well their controls handle threats and identify ways to strengthen defenses. It runs continuously and offers agentless attack simulations across endpoint security, email and web gateways, and web application firewalls. Its modules include Exposure Validation, Auto Mitigation, CTEM, Detection Studio, Threat Studio and Cymulate Cowork. The company says its threat library maps to MITRE ATT&CK and that new simulations for US-CERT advisories have a 24-hour SLA. Vero AI adapts threat assessments to a customer’s environment, prioritizes findings and helps create mitigations. Listed partners include AWS GuardDuty, CrowdStrike, Splunk and Anthropic Claude. The platform is cloud-based and runs in isolated servers on a private AWS tenant across multiple regions. A free trial offers partial platform simulation for 14 days unless a quote specifies a different period. Pricing is on request. Cymulate lists SOC 2 Type II, SOC 3 and several ISO certifications, among other compliance credentials.
For and against
For
- Agentless attack simulations
- Maps threats to MITRE ATT&CK
- Custom attack scenarios and continuous scheduling
- 14-day partial-platform free trial
Against
- Pricing is available on request
- Trial simulation is partial
The verdict
Cymulate combines recurring attack simulation with threat assessment and mitigation guidance. Teams should account for quote-based pricing and the trial’s partial simulation scope.
Who it suits
It is aimed at security operations, detection engineering, red teams and exposure management teams, including mid-market and enterprise organizations. It may suit teams seeking continuous security-control validation and threat simulations.
Plans and prices
Cymulate Platform
Subscription tailored to organization · price depends on package, assets and scenarios
Read 30 Sep 2026 · cymulate.com
On the record
- Access controls
- The platform enforces two-factor authentication and offers optional SSO, role-based access controls with three permission levels, and IP address restrictions.cymulate.com · read 30 Sep 2026
- AI workflows
- Vero AI tailors threat assessments to the customer’s environment and helps prioritize findings and create mitigations.cymulate.com · read 30 Sep 2026
- Company history
- Cymulate states that it was founded in 2016 by former IDF intelligence officers and cyber researchers.cymulate.com · read 30 Sep 2026
- Data protection
- Cymulate says traffic is protected with TLS 1.2 or higher and stored data is encrypted with AES-256.cymulate.com · read 30 Sep 2026
- Deployment requirement
- The license agreement says customers must provide equipment, infrastructure, servers and third-party software or licenses required by Cymulate’s prerequisites.cymulate.com · read 30 Sep 2026
- Hosting
- The platform runs on a private AWS tenant across multiple regions, with servers isolated in Cymulate’s VPC.cymulate.com · read 30 Sep 2026
- Integrations
- Technology partners listed include AWS GuardDuty, CrowdStrike, Splunk, and Anthropic Claude, across categories such as cloud security, EDR, SIEM and LLM.cymulate.com · read 30 Sep 2026
- Platform modules
- The platform includes Exposure Validation, Auto Mitigation, CTEM, Detection Studio, Threat Studio and Cymulate Cowork.cymulate.com · read 30 Sep 2026
- Purpose
- Cymulate continuously validates security controls against real-world threats and provides guidance to improve defenses.cymulate.com · read 30 Sep 2026
- Security certifications
- Cymulate lists SOC 2 Type II, SOC 3, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27017, CSA STAR Level 1 and GDPR compliance.cymulate.com · read 30 Sep 2026
- Target users
- Cymulate says it is designed for security operations, detection engineering, red teams and exposure management teams, including mid-market and enterprise organizations.cymulate.com · read 30 Sep 2026
- Threat coverage
- The platform states that its threat library provides full MITRE ATT&CK coverage and that new attack simulations for US-CERT advisories have a 24-hour SLA.cymulate.com · read 30 Sep 2026
- Trial
- The end-user license agreement describes a free trial that provides partial platform simulation for 14 days, unless the quote specifies another period.cymulate.com · read 30 Sep 2026
