Tel Aviv-based Cymulate, which helps cybersecurity teams stress test their networks, raised a $70M Series D led by One Peak, sources say at a ~$500M valuation
Context & Ripple Effects
Cymulate's new round is a repeat bet: One Peak, which led the company's $45M Series C in May 2021, is leading again at a reported ~$500M valuation — steady step-up financing for a Tel Aviv team selling simulated attacks as a service. That puts Cymulate on a slower valuation curve than the last generation of AI-security names: Cylance crossed the billion-dollar mark back in 2016 on a bigger $100M Series D.
The raise lands in a crowded Israeli security cluster where specialization is the norm — Cylus just took $30M for rail-network defense and Cyolo raised $60M for zero-trust access two months before this deal — so Cymulate's differentiation is the testing side of the stack rather than another prevention product.
First-order effects
- One Peak now has consecutive leads across Cymulate's last two rounds, deepening its exposure and giving the company an extended runway to push breach-and-attack simulation deeper into enterprise security budgets.
- Security teams buying Cymulate get a signal the category is durably funded, reducing vendor-viability risk at renewal time.
Second-order effects
- Prevention-led vendors like Cylance-style AI detection shops face budget competition from validation tools: every dollar a customer spends proving defenses work is a dollar scrutinized before it goes to more detection.
- Adjacent Israeli specialists such as Cyolo and Cylus now benchmark against Cymulate's ~$500M mark when pricing their own next rounds, since investors can compare notes across the same ecosystem.
Third-order effects
- If the pattern holds, Israeli cybersecurity consolidates into two tiers — mega-round outliers like Cyera's later $12B data-security raise and steady mid-stage operators like Cymulate — forcing mid-tier founders to pick between category leadership and early exit.
- Continuous validation becoming a funded, repeat-backed category points toward security procurement shifting from buying point products to buying proof they work.
The trend: Enterprise security spending is shifting from accumulating defensive tools toward continuously validating them, with repeat specialist investors underwriting the shift through Israel's security startup cluster.