Cyberattack simulation company Cymulate picks up $7.5m in Series A

March 14, 2019

Cymulate, a cyberattack breach and attack simulation company, has raised $7.5m in a Series A round.

The capital injection was led by Vertex Ventures and Dell Technologies Capital. Other contributions came from seed-round backers Susquehanna Growth Equity (SGE) and Eyal Gruner. In total, the company has raised $11m in funding since it was founded in 2016.

With this line of funding, Cymulate will look to expand operations in the US by adding to the size of its team and furthering the investment into its research team.

The platform helps organisations to automatically assess their overall security position, with continuous security measure and controls validation. It can be deployed within minutes and simulate attacks with immediate results which identify vulnerabilities and mitigation procedures to close the gaps.

Some of the area’s threats are assessed include email, web gateway, web application, phishing, endpoint, lateral movement, data exfiltration and immediate threats.

Vertex Ventures general partner Emanuel Timor said, “We’re impressed with Cymulate’s technology and product market fit which has already resulted in a large customer base.

“Their easy to use SaaS platform is proving invaluable to CISOs by providing insight that helps maximize security investments whilst minimizing security gaps. As cyber-attacks such as data exfiltration, email attacks and phishing continue to be of prime concern to companies, we believe Cymulate has the potential to be the leading BAS company.”

Vertex has made a handful of investments into cybersecurity solutions this year. Prior to this deal, the firm participated in the $43m Series C round of PerimeterX. The cyber startup has built a bot mitigation solution which analysis millions of daily events to prevent bot attacks.

Another recent investment from the firm was a contribution to the $13m Series A of cybersecurity asset management company Axonius. The RegTech startup automatically detects if devices connected to a company are meeting their security policies.