XM Cyber provides a platform for continuous exposure management across hybrid environments.
- Categories
- Attack surface management, Vulnerability management, Identity threat detection and response, Breach and attack simulation
- Based in
- Neckarsulm, Germany
- Ownership
- Owned by Schwarz Group since 2021
About XM Cyber
XM Cyber provides a Continuous Exposure Management platform. It helps organisations find, rank and fix security exposures that create real attack paths to important assets. The platform covers on-premises and cloud environments, including the external attack surface, identities, access rights, vulnerabilities and security controls. It also addresses AI-related exposures such as shadow AI and misconfigured AI services. The company uses Attack Graph Analysis and a digital twin of the environment to validate which exposures are genuinely exploitable and reachable. This lets defenders focus on choke points, where one fix can remove several attack paths at once. The platform supports remediation with guidance, alternatives and automated ticketing, and it provides reporting for management and auditors. XM Cyber sells to security teams, SOCs and managed security service providers. It also offers service tiers called Standard, Premium and Elite, with options such as guided onboarding, a designated customer success manager and 24/7 support. The text names industries including manufacturing, banking, IT services, insurance and retail.
Products
- Continuous Exposure Management PlatformA platform that continuously discovers, prioritises and helps fix validated exposures across hybrid environments.
- XM Attack Graph AnalysisMaps exposures into attack paths and uses a digital twin to validate exploitability and reachability.
- External Attack Surface ManagementDiscovers and manages exposures visible from outside the organisation.
- Exposed Credentials ManagementFinds and helps address exposed credentials that could be used in attacks.
- Security Controls MonitoringChecks security control configurations and alerts on policy violations.
- Vulnerability Risk ManagementContinuously finds vulnerabilities and validates their exploitability and reachability.
Ownership and deals
Companies owned by Schwarz Group lists both in the directory, with the deals on record.
- CrowdStrike acquired XM CyberReport on CrowdStrike buying XM Cyber (opens in a new tab)
- XM Cyber acquired ConflueraReport on XM Cyber buying Confluera (opens in a new tab)
- XM Cyber acquired Cyber ObserverReport on XM Cyber buying Cyber Observer (opens in a new tab)
- Schwarz Group acquired XM Cyber for $700mReport on Schwarz Group buying XM Cyber (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.