Breach and attack simulation platform for continuous security validation
Cymulate sells a SaaS security validation platform that runs attack simulations mapped to MITRE ATT&CK, built on a TypeScript/NestJS/React stack across AWS, Azure and GCP. Adoption of LangChain, LangGraph, LlamaIndex and Langfuse alongside OpenAI, Anthropic and Gemini points to agentic AI features entering the product. Hiring is accelerating and heavily sales-led, with channel partner enablement and APJ field marketing driving expansion from Singapore.
Cymulate, founded in 2016 and headquartered in New York, builds a cloud-delivered platform that lets security teams test and validate their defenses through breach and attack simulation. The product supports threat-intelligence-driven risk assessments plus automated red and purple team exercises tailored to each customer environment. It serves security practitioners across varying maturity levels. The privately held company has 201–500 employees and is hiring in the United States, Israel and Singapore.
Cymulate runs on AWS, Azure and GCP with TypeScript, Node.js, NestJS, React, Python, Kafka, MongoDB, PostgreSQL, Redis, Docker and Kubernetes, and uses OpenAI, Anthropic and Gemini models.
Yes. Sales dominates Cymulate's accelerating hiring, mostly at senior level, with supporting roles in marketing, support and customer success across the United States, Israel and Singapore.
Cymulate is headquartered in New York, NY, and also hires in Israel and Singapore.
Other companies in the same industry, closest in size
Cymulate's technology stack, projects, and hiring signals are inferred from public hiring and company data — career pages, public listings, and company web presence — then clustered and de-duplicated. Figures are estimates that refresh over time. Read our full methodology →
This is not an official vendor or customer list. It is a technology-adoption signal inferred from public data, intended for B2B research.