CyCognito
Agentless attack surface management platform that maps organizations' entire external footprint, including subsidiaries and shadow assets, using graph-based discovery.
Visit Website ↗Overview
CyCognito was founded in 2017 and is headquartered in Palo Alto with a substantial R&D presence in Tel Aviv. The company raised a $100 million Series C in December 2021 at an $800 million valuation, led by The Westly Group with participation from Accel, Lightspeed, Sorenson Ventures, and others, bringing total funding to roughly $153 million.
The platform builds a graph of an organization’s business relationships — subsidiaries, brands, and related entities — to discover assets that traditional scanners miss because no one declared them, then scans billions of web assets, cloud services, and APIs to surface exposures. It couples discovery with attack-path validation, aiming to show not just that an asset is exposed but that it is realistically reachable and exploitable, which is the operational differentiator versus simple inventory tools.
Innovation Matrix Assessment
Named a Leader and Outperformer in the 2026 GigaOm Radar for Attack Surface Management out of 32 evaluated vendors, indicating continued platform investment relative to peers.
Agentless, business-relationship-graph discovery specifically targets the blind spot of undeclared subsidiary and shadow assets that inventory-based tools miss.
$100M Series C at an $800M valuation with named enterprise customers including Tesco, Colgate-Palmolive, Panasonic, and Hitachi.
Graph-based discovery modeled on how an attacker actually maps an organization's business relationships is a meaningfully different starting point than scanning a declared asset list.
4.7/5 rating on Gartner Peer Insights and adoption by large, security-mature enterprises supports real-world exposure detection value.
Purpose-built for the exact problem — unknown, unmanaged, shadow assets — that keeps expanding as organizations sprawl across cloud and M&A activity.
Why CISOs Should Care
A CISO gets visibility into subsidiary and shadow infrastructure the organization never formally inventoried, which is precisely the blind spot attackers exploit first.
What Makes It Different
Discovery starts from mapping business relationships rather than a declared asset list, and pairs that with attack-path validation so findings are prioritized by real exploitability, not just presence.
The Matrix Verdict
77/100 — MEANINGFUL INNOVATOR
One of the more credible pure-play EASM vendors, with independent analyst recognition and enterprise-scale customers backing its graph-based approach — lands in the upper tier for disruption and momentum among the smaller, focused players.
Editorial Note: Claims vs. Verified Findings
Funding amounts, valuation, and named customers are corroborated by TechCrunch and CyCognito's own press releases; the GigaOm Radar placement and Gartner Peer Insights rating come from third-party analyst sources, though the underlying review volume was not independently verified.
Sources
- TechCrunch — https://techcrunch.com/2021/12/01/attack-surface-management-startup-cycognito-raises-100m-series-c-on-800m-valuation/
- CyCognito press release — https://www.cycognito.com/news/press-releases/cycognito-secures-100m-to-accelerate-next-evolution-of-attack-surface-management.php
- Company site — https://www.cycognito.com/company/
Alternatives to CyCognito
Axonius
New York-based CAASM pioneer that aggregates data from hundreds of existing tools to build a unified, agentless asset…
watchTowr
Singapore-based platform combining external attack surface management with continuous automated red teaming to validate whether exposures are actually…
IONIX
EASM vendor, formerly Cyberpion, that maps not just an organization's own internet-facing assets but the chain of third-party…
Assetnote (Searchlight Cyber)
Offensive-security-researcher-built EASM platform from Brisbane, profitable and self-funded until its 2025 acquisition by dark-web intelligence firm Searchlight Cyber.
Detectify
Stockholm-based EASM and DAST platform that feeds its scanner with vulnerability research crowdsourced from a network of ethical…
Palo Alto Networks Cortex Xpanse
DARPA-derived internet scanning platform, now Palo Alto Networks' EASM module, that continuously maps and attributes internet-facing assets.