Cylera
Cylera provides a healthcare IoT and IoMT security platform that discovers and risk-scores connected medical devices using a patented digital-twin approach.
Visit Website ↗ + Add to CompareOverview
Cylera builds an asset visibility and risk management platform purpose-built for healthcare Internet of Things (IoT), Internet of Medical Things (IoMT), and operational technology devices — the infusion pumps, imaging systems, building controls, and clinical equipment that traditional IT security tools generally can’t see or safely scan. Its patented digital-twin methodology passively models device behavior to flag vulnerabilities and anomalies without the active probing that risks disrupting sensitive clinical equipment, which has historically been the core tension in medical device security.
Founded in 2017 by Timur Ozekcin and Paul Bakoyiannis and headquartered in New York City, Cylera has raised roughly $19.5 million to date, including a $10 million Series A led by Concord Health Partners and Maverick Ventures. The company has built a customer base of large health systems and hospital networks, including St. Luke’s University Health Network, RWJBarnabas Health (across 70 sites and more than 100,000 IoT devices), Weill Cornell Medicine, and several UK NHS trusts including Royal Bolton and The Christie.
The American Hospital Association named Cylera a preferred cybersecurity provider for its member hospitals, and Quadrant Knowledge Solutions ranked the company a leader in its SPARK Matrix for Connected Medical Device Security. Cylera sits in a crowded healthcare-IoT security field alongside Claroty/Medigate and Armis, competing primarily on the clinical-workflow context its platform attaches to each device finding rather than raw device discovery, which is now table stakes across the category.
Innovation Matrix Assessment
Cylera has shipped steadily since 2017 but the roadmap is incremental within its core asset-visibility niche rather than fast-moving into adjacent categories; the digital-twin methodology itself dates to the company's founding patent.
A named, verifiable customer base of large health systems (RWJBarnabas across 70 sites, St. Luke's, Weill Cornell) and multiple NHS trusts indicates a functioning enterprise deployment model with real production footprint, not just pilots.
Roughly $19.5M raised through a Series A is modest relative to well-funded competitors like Claroty and Armis, and no funding round has been disclosed since 2021, suggesting momentum has plateaued rather than accelerated.
The passive digital-twin approach to modeling clinical device behavior is a genuine technical differentiator for a category where active scanning can disrupt life-safety equipment, though competitors have converged on similarly passive techniques.
Named customer testimonials describing full asset inventories across tens of thousands of devices, plus AHA's preferred-vendor designation and a third-party SPARK Matrix leader ranking, are independently corroborated efficacy signals beyond vendor marketing.
Healthcare IoT/IoMT security is a persistent, regulator-driven priority (FDA premarket cybersecurity guidance, hospital ransomware exposure via unmanaged devices), keeping this category's relevance high and durable.
Why CISOs Should Care
For hospital CISOs, Cylera answers the basic but frequently unmet question of what clinical and IoT devices are actually on the network and which ones represent the highest real-world risk, without needing to touch equipment that can't tolerate active scanning.
What Makes It Different
Its patented digital-twin modeling of device behavior is built specifically around clinical workflow context, rather than treating a hospital IV pump the same as a generic IoT sensor the way broader asset-visibility platforms often do.
The Matrix Verdict
67/100 — INCREMENTAL INNOVATOR
A credible, evidence-backed specialist in a narrow but important niche; strong on named customer proof points but financially and competitively overshadowed by better-capitalized healthcare-IoT rivals like Claroty/Medigate and Armis.
Editorial Note: Claims vs. Verified Findings
Independently verifiable: named customer case studies (St. Luke's, RWJBarnabas, NHS trusts) with attributed quotes, and the AHA preferred-provider designation, are third-party confirmable. Vendor-sourced and unverified: total funding figures beyond the disclosed $10M Series A vary across data aggregators ($17M-$19.5M) and are not independently reconciled; specific efficacy percentages in marketing material were not independently tested by us.
Sources
Alternatives to Cylera
Armis (a ServiceNow company)
Agentless asset intelligence platform discovering and assessing every connected IT, OT, IoT and medical device, now part of…
CybelAngel
External attack surface management and digital risk protection platform that scans the open, deep, and dark web for…
watchTowr
Singapore-based platform combining external attack surface management with continuous automated red teaming to validate whether exposures are actually…
CyCognito
Agentless attack surface management platform that maps organizations' entire external footprint, including subsidiaries and shadow assets, using graph-based…
Axonius
New York-based CAASM pioneer that aggregates data from hundreds of existing tools to build a unified, agentless asset…
Doppel
San Francisco AI-native digital risk protection platform that detects and automatically takes down phishing sites, impersonation accounts, and…