Cyver
An Amsterdam-based, self-funded Pentest-as-a-Service (PTaaS) platform, originally launched as PentestHero, that gives cybersecurity service providers and their clients a shared cloud workspace for scoping, tracking, and reporting on penetration testing engagements.
Visit Website ↗ + Add to CompareOverview
Cyver, founded in 2020 by Luis Gomes De Abreu and based in Amsterdam, builds Cyver Core, a cloud-based platform that centralizes the pentest lifecycle — scoping, testing, findings management, reporting, remediation tracking, and retesting — in one shared workspace. The product was originally launched under the name PentestHero before rebranding to Cyver, and the company has grown without external venture funding according to Tracxn’s company profile.
Unlike vendors that sell vulnerability scanning or pentesting directly to enterprises, Cyver’s primary customers are cybersecurity service providers and pentest firms themselves, who use the platform to run their client engagements more efficiently — an infrastructure/tooling role one layer removed from the end enterprise, similar to how PlexTrac (already covered on this site) serves pentest teams.
Innovation Matrix Assessment
Steady evolution from the original PentestHero product into the current Cyver Core platform, without evidence of unusually rapid iteration.
A shared, structured workspace for scoping, findings, and retesting genuinely improves consistency and trackability for pentest service providers running many client engagements.
Bootstrapped with no disclosed external funding, indicating slower, more constrained growth capital relative to venture-backed competitors in adjacent categories.
Digitizes and structures existing pentest-engagement workflows rather than introducing a fundamentally new testing methodology.
Continued operation since 2020 under a rebrand from PentestHero suggests real usage among pentest providers, though no independent efficacy data was found.
Structured pentest-engagement tooling addresses a persistent workflow need for the pentest-provider ecosystem, though it is a narrower niche than direct enterprise-facing vulnerability management.
Why CISOs Should Care
CISOs who outsource penetration testing to third-party firms benefit indirectly when those firms use structured platforms like Cyver, which typically produce more consistent, trackable, and retestable findings than ad hoc PDF reports.
What Makes It Different
Cyver targets the pentest-service-provider market specifically (B2B2B) rather than selling scanning or testing tools directly to enterprise security teams, and has grown as a bootstrapped company without external venture funding.
The Matrix Verdict
38/100 — EMERGING / UNRANKED
A small, bootstrapped, but genuinely useful PTaaS workflow platform serving the pentest-provider ecosystem; modest scale and indirect enterprise relevance limit momentum and operational scores relative to vendor-facing tools, but it fills a real gap in pentest-engagement tooling.
Editorial Note: Claims vs. Verified Findings
Bootstrapped/unfunded status and founding details are per Tracxn's company profile rather than direct company financial disclosure; specific platform-adoption figures were not available from the sources reviewed.
Sources
Alternatives to Cyver
Unknown Cyber Inc.
Malware genomics platform using automated deep static analysis and code-lineage comparison to identify unseen malware, variants, and supply-chain…
Synack Inc
A penetration-testing-as-a-service platform pairing a vetted researcher community with AI-driven attack surface discovery for continuous security validation.
Horizon3.ai
Autonomous penetration testing company whose NodeZero platform self-attacks networks without persistent agents, aiming to replace annual manual pentests…
Cogent Security
Agentic AI platform that autonomously triages, investigates, and remediates vulnerabilities as a force multiplier for security teams.
Airlock Digital
Application allowlisting (deny-by-default) platform that blocks unapproved executables, scripts, and processes to prevent ransomware and malware execution.
ReversingLabs
Software supply chain security and binary analysis vendor that inspects compiled software and packages for malware and unauthorized…