XM Cyber

Hybrid attack-path graph that shows how an identity, cloud, or on-prem foothold becomes a breach.

Proof of life. Named a Challenger in the first Gartner Magic Quadrant for Exposure Assessment Platforms, 2025

XM Cyber models choke points across Active Directory, cloud, and on-prem so you fix the one edge that collapses many paths. It is attack-path analysis, not a pentest bot: the value is 'this identity plus this misconfig equals crown jewels'. Gartner's first Exposure Assessment Platforms Magic Quadrant in 2025 put them in as a Challenger, which is the category they have been selling into for years under other names.

Category: Offensive and exposure
Headquarters: Tel Aviv, Israel
Country: Israel
Founded: 2016
Funding stage: Series B
Total funding: $49M
Website: https://xmcyber.com