Cymulate

Cymulate started as breach-and-attack simulation across email, endpoint, network, and cloud, then expanded into CTEM scoring and ASM.

Vero AI is the 2026 layer that turns a new threat into a tailored validation and, where possible, a control change rather than a slide for the CISO.

If you want 'did the WAF/EDR actually block it' more than 'can we pop DA', this is the BAS-shaped CTEM vendor.