Cymulate, which tests clients' networks by running simulated machine learning-based cyber attacks, raises $45M Series C led by One Peak Partners
Context & Ripple Effects
Cymulate's $45M Series C is the middle beat of a three-round run: One Peak Partners leads here and then returns to lead the $70M Series D at a reported ~$500M valuation just over a year later, making this the round where the Tel Aviv breach-and-attack simulation specialist became a repeat bet for its backer.
The raise lands in an already crowded offensive-security funding cycle — Cyware's $30M Series B came two months earlier, CyCognito raised $18M for internet-exposure scanning in 2019, and Cymulate itself is applying the playbook Cylance validated when it hit a reported ~$1B valuation on AI-driven threat detection in 2016: machine learning aimed at the attacker's side of the ledger.
First-order effects
- One Peak Partners now has concentrated exposure to Cymulate across two consecutive rounds, betting the firm's capital on simulated ML-based attacks becoming a recurring line item in enterprise security budgets.
- Security teams at Cymulate's clients gain a continuously updated adversarial testing capability, shifting their posture from periodic penetration tests to always-on simulation.
Second-order effects
- Rivals selling adjacent detection and prevention tooling — Cyware, CyCognito, and the broader Israeli cybersecurity cluster — face buyers who can now demand proof their defenses hold against automated attack simulations before renewing.
- A well-funded simulation vendor pressures pure-play pentesting consultancies, whose manual engagements compete directly with software that runs attacks on demand.
Third-order effects
- If the pattern from Cylance through Cymulate holds, security spending structurally migrates from perimeter defense toward continuous red-teaming-as-software, with AI-generated attacks forcing AI-assisted defense as the default operating model.
- Repeat-led rounds by growth investors like One Peak suggest consolidation pressure is building toward a market where continuous validation platforms absorb point-tool budgets rather than coexist with them.
The trend: Enterprise security is moving from static defenses to continuous, AI-driven adversarial testing, with growth investors concentrating behind platforms like Cymulate that automate the attacker's side.