XM Cyber, which develops simulation and remediation software to expose cyberattack vectors, raises $17M Series B, bringing its total raised to $49M
XM Cyber, a startup developing a simulation and remediation platform to expose cyberattack vectors, today announced it raised $17 million.
Context & Ripple Effects
XM Cyber is back on the funding treadmill less than two years after its $22M Series A, with the new $17M Series B taking it to $49M total — right at the capital level TrapX reached last year with its $18M Series C for decoy-based attack detection. The two Israeli startups are converging on the same budget line from opposite ends: TrapX baits attackers with fake assets, XM Cyber simulates attack paths before an intruder ever moves.
The raise also lands three months after CyberMDX pulled $20M for hospital network security, underscoring that investors are funding the defensive-simulation slice of cybersecurity across verticals — and that buyers are being asked to spend on proving their own exposure, not just blocking known threats.
First-order effects
- XM Cyber gets runway to scale sales of a platform whose pitch — find your own cyberattack vectors before attackers do — now has to compete directly against detection-first rivals like TrapX for the same enterprise security budgets.
Second-order effects
- TrapX and other deception-based vendors face pressure to add proactive simulation or remediation features of their own, since a buyer funding both approaches is paying twice for overlapping visibility into internal attack paths.
- Adjacent security vendors such as CyberMDX gain potential integration partners rather than pure competitors, as simulation platforms that map attack vectors need device-level telemetry from networks like hospitals to model real routes.
Third-order effects
- If simulation-and-remediation keeps attracting nine-figure cumulative rounds alongside later preparedness plays like CYGNVS's $55M Series A, enterprise security spending shifts structurally toward continuous self-testing — validating defenses as a standing function rather than a periodic audit.
The trend: Cybersecurity budgets are moving toward platforms that let organizations continuously simulate attacks against themselves, with venture capital funding that category across simulation, deception, and crisis-preparedness startups.