About XM Cyber
XM Cyber sells a platform that continuously surfaces every validated exposure that forms real attack paths. XM Cyber delivers Exposure Assessment and Exposure Validation in a single platform for adopting and maintaining the Continuous Threat Exposure Management (CTEM) framework. XM Cyber states its aim as continuously discovering, prioritizing, and fixing every validated exposure in a customer environment before it is exploited.[1]
XM Cyber's platform monitors a hybrid environment with agent-based and agentless discovery of every asset and every exposure. XM Cyber's discovery includes security controls, shadow AI, AI services in the cloud and on-prem, and AI policy violations. XM Cyber chains misconfigurations, identity exposures, over-privileges, and AI exposures into attack paths spanning on-premises and multi-cloud environments, from the external attack surface to critical assets. XM Cyber builds a digital twin of an environment to validate the exploitability and reachability of every exposure and every attack path, checking conditions across assets, networks, and compensating security controls. XM Attack Graph Analysis™ maps all viable exposures into attack paths from the external attack surface, across on-prem and cloud, to business-critical assets. XM Cyber prioritizes exposures that sit at intersections of multiple attack paths, called Choke Points, so a single fix eliminates multiple paths. XM Cyber's platform provides remediation guidance, alternatives, and automated ticketing, and verifies resolution with remediation confirmation.[1][6]
XM Cyber's platform supports audit readiness by monitoring security controls for policy violations and configuration drift in accordance with regulatory frameworks. Security controls monitoring in XM Cyber covers on-prem, cloud and SaaS tools including endpoint security, network security, identity and access management, data protection and device management, all from the same console. XM Cyber maps frameworks and regulations such as BSI C5, CIS controls, FedRAMP, GDPR, ISO 27001, NIST CSF, PCI-DSS and SOC2 to specific tools and controls. XM Cyber continuously assesses core Active Directory and cloud deployments to identify and prioritize issues. XM Cyber tracks a security posture score over time so teams can quantify and share improvements.[5][6][7]
XM Cyber's vulnerability work automatically tests every CVE discovered across an attack surface, including runtime memory, against exploit conditions. XM Cyber brings together findings from on-prem network and cloud scanners in one place. XM Cyber validates intended fixes, whether a patch or a downstream control, with continuous testing in a digital twin. XM Cyber aligns with regulatory frameworks like PCI DSS, ISO 27001 and NYDFS with agentless network scanning that sets CVEs in the context of broader attack paths. XM Cyber lets users create a request for specific patches or devices and pass it to teammates, executives or IT teams, and track the outbound requests.[8][9]
XM Cyber continuously discovers AI resources and maps the validated exposures that compromise them across a hybrid environment. XM Cyber discovers AI tools, agents, and workloads in order to eliminate shadow AI, and addresses validated attack paths that traverse and target AI resources. XM Cyber uses Attack Graph Analysis™ to show how attackers exploit exposures in development resources like AWS Bedrock, GCP Vertex, and Azure OpenAI. XM Cyber visualizes how misconfigured MCP servers create validated attack paths to sensitive models and training data. XM Cyber provides mutation detection to identify unauthorized configuration shifts in AI server definitions as they happen. XM Cyber aligns AI deployments with governance frameworks like the NIST AI RMF and the EU AI Act.[10]
XM Cyber monitors policy compliance with standards and regulations such as NIST, ISO 27001, PCI-DSS, GDPR, NIS 2, and DORA, and addresses violations as they happen across a tech stack. XM Cyber offers ongoing and automated testing of attack scenarios across the hybrid environment on a non-intrusive digital twin. XM Cyber provides centralized reporting of violations across exposure types such as vulnerabilities, misconfigurations, over-privileges, exposed credentials, and behavior anomalies. Markus Armsruster of Thalia talks about using XM Cyber.[5][11]
XM Cyber is compliant with the SOC 2 Type 2 standard and is EU GDPR compliant. XM Cyber develops its Information Security Management System in accordance with the ISO 27001 international standard. XM Cyber complies with BSI C5, a cloud security standard from the German Federal Office for Information Security. XM Cyber utilizes Amazon Web Services secured servers. XM Cyber protects customer data in transit using Transport Layer Security (TLS) and at rest with a data key using AES-256 encryption. XM Cyber maintains a 24/7 Operations Center to monitor its customer solutions.[5][7][9][12][13]
XM Cyber on the record