CyCraft
A Taiwan-based AI-driven MDR/XDR vendor with repeated MITRE ATT&CK Evaluation participation, recently listed on the Taiwan Stock Exchange Innovation Board.
Visit Website ↗ + Add to CompareOverview
CyCraft Technology is a Taiwan-based AI-driven detection and response vendor, founded in 2017 in New Taipei City by Jeremy Chiu, Benson Wu, and PK Tsung, built around its Xensor platform for endpoint telemetry, correlation, and automated response. The company packages this into managed detection and response (MDR), network detection and response (NDR), threat intelligence gateways, compromise assessment, and auto-generated incident-response reporting, aimed at reducing the manual analyst workload typical of SOC operations.
CyCraft’s most concrete evidence of technical capability is repeat participation in MITRE ATT&CK Evaluations — the company states three appearances with zero-configuration, zero-latency detection performance — which is independently meaningful since MITRE evaluations are run and scored by a third party rather than self-administered. The company has also been referenced in Gartner research multiple times and, in early 2026, completed a listing on the Taiwan Stock Exchange Innovation Board, becoming (per its own framing) Taiwan’s first AI-native cybersecurity company to go public, which subjects its financials to public disclosure requirements going forward.
Regionally, CyCraft has concentrated on expanding across East and Southeast Asia — Japan, South Korea (via a Logpresso partnership for cloud SIEM), and Singapore — rather than pursuing the US/European enterprise market directly. For CISOs outside Asia, CyCraft is a name to know for its independently-evaluated MITRE performance and public-market financial transparency, but a company whose primary channel and support infrastructure is currently built around APAC customers rather than North American or European enterprise buyers.
Innovation Matrix Assessment
CyCraft has expanded its Xensor-based platform across MDR, NDR, threat intelligence gateways, and automated IR reporting while actively entering new regional markets (Japan, South Korea via a Logpresso partnership, Singapore), a solid pace for a company its size.
The company reports having captured meaningful share of the domestic Taiwan market within its first two years and has sustained operations since 2017, though its delivery infrastructure remains concentrated in APAC rather than global.
CyCraft completed a listing on the Taiwan Stock Exchange Innovation Board in early 2026 and has added regional partnerships in Japan and South Korea, concrete and independently reportable growth signals beyond self-reported metrics.
AI-driven automation of SOC detection and response is a genuinely valuable direction, but CyCraft is not a first-mover globally against established MDR/XDR players; its disruption is more pronounced within its home APAC market than internationally.
CyCraft states three appearances in MITRE ATT&CK Evaluations with zero-configuration, zero-latency detection performance; MITRE Evaluations are independently run and scored, making this one of the stronger third-party efficacy signals found in this batch, though the company's characterization of the results (rather than the raw MITRE scorecards) is what was reviewed.
AI-automated MDR/XDR directly addresses the SOC analyst-shortage problem that most security operations teams face today, though CyCraft's current go-to-market and support infrastructure is built primarily around APAC customers.
Why CISOs Should Care
CISOs operating in or expanding into the APAC region, or those specifically weighing MITRE ATT&CK Evaluation performance as a selection criterion, should have CyCraft on their shortlist of MDR/XDR vendors.
What Makes It Different
CyCraft combines AI-native detection automation with repeated, independently-run MITRE ATT&CK Evaluation participation and, following its 2026 IPO, public financial disclosure — a combination of third-party technical validation and financial transparency less common among comparably-sized regional competitors.
The Matrix Verdict
63/100 — INCREMENTAL INNOVATOR
A credible AI-driven MDR/XDR vendor with genuine independent validation via repeated MITRE ATT&CK Evaluations and a newly public financial profile; its primary limitation for a global buyer is that its scale and support model remain APAC-centered rather than proven in North American or European enterprise environments.
Editorial Note: Claims vs. Verified Findings
The "TSMC of cybersecurity" characterization and the specific zero-configuration/zero-latency framing of its MITRE results are CyCraft's own summary of an independently-run evaluation, not the raw MITRE scorecards, which were not separately reviewed. Independently confirmed via press coverage and the Taiwan Stock Exchange: the 2026 Innovation Board listing, the Gartner research citations, and the Logpresso partnership in South Korea.
Sources
Alternatives to CyCraft
Abnormal AI
AI-native behavioral security platform that analyzes sender identity and communication patterns, rather than message content alone, to stop…
Palo Alto Networks Cortex XSIAM
Palo Alto Networks' AI-driven 'autonomous SOC' platform that unifies SIEM, EDR, SOAR, and attack-surface data into a single…
Fenix24
Chattanooga-based ransomware recovery specialist that has restored operations after 500+ real-world incidents, including 30 Fortune 500 companies.
Torq
AI-native hyperautomation platform positioning itself as an 'agentic SOC,' using a multi-agent system to autonomously execute large volumes…
Sophos
Sophos is a UK-founded, Thoma Bravo-owned cybersecurity vendor unifying endpoint protection, network firewalls, and managed detection and response…
Edge Delta
A telemetry pipeline and AI-agent observability platform that processes logs, metrics, and security data at the edge to…