CISO Tribune

Vendor comparison · 2 companies

Outpost24 vs XM Cyber

Outpost24 sells security products and services delivered through its cloud platform with automation supported by its cyber security experts. XM Cyber sells a platform that continuously surfaces every validated exposure that forms real attack paths. CISO Tribune files both under Exposure prioritisation and CTEM. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Outpost24
  • XM Cyber
Outpost24 vs XM Cyber: Products, Customers and Funding Compared
Outpost24Outpost24 sells security products and services delivered through its cloud platform with automation supported by its cyber security experts.outpost24.comXM CyberXM Cyber sells a platform that continuously surfaces every validated exposure that forms real attack paths.xmcyber.com
What it sells
  • CompassDRP[1][4][6][7]A single cloud-based Digital Risk Protection solution combining asset discovery with threat intelligence.
  • CyberFlex[1][4][6]A flexible solution for end-to-end application security.
  • External Attack Surface Management[4]Discovery of all internet-facing assets.
  • Digital Risk Protection[4][6][7][9]A modular cyber threat intelligence solution against external threats.
  • Machine Readable Threat Intelligence[4]A machine-readable threat intelligence feed.
  • Continuous Exposure Management Platform[4][5]Surfaces validated exposures that form real attack paths.
  • XM Attack Graph Analysis™Maps viable exposures into attack paths that lead to business-critical assets.
Categories
Headquarters
Sweden[3]Herzliya, Israel[3]
Founded
2001[2][7]Not stated on its pages
Ownership and funding
Not stated on its pagesOwned by Schwarz Group since 2021[2][4][15]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • December 17, 2025Outpost24 announced a new investment from Vitruvian Partners to fund its next phase of global growth.[16]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[17]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[15]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetFrom its own pages, XM Cyber does not state organisation size, industries or deployment models it targets. Its business initiatives menu names Operational Technology (OT), Mergers and Acquisitions, Ransomware Readiness and Executive Risk Reporting, but the pages do not describe these as customer segments or buyer roles. This is our reading of the pages, not a recommendation.
Last verified
September 30, 2026November 2, 2026

Where they overlap

  • Exposure prioritisation and CTEM is the primary category of both Outpost24 and XM Cyber.

Where they differ, field by field

  • Outpost24 is also filed under External attack surface management, Digital risk protection and Dynamic application security testing. XM Cyber is also filed under Breach simulation and automated pen-testing.
  • Outpost24 lists CompassDRP, CyberFlex, External Attack Surface Management, Digital Risk Protection and Machine Readable Threat Intelligence. XM Cyber lists Continuous Exposure Management Platform and XM Attack Graph Analysis™.
  • Outpost24 is headquartered in Sweden. XM Cyber is headquartered in Herzliya, Israel.
  • Outpost24 was founded in 2001.
  • XM Cyber is owned by Schwarz Group, since 2021.

How they differ

CISO Tribune files both Outpost24 and XM Cyber under Exposure prioritisation and CTEM as the primary category. Outpost24 is also filed under External attack surface management, Digital risk protection and Dynamic application security testing, while XM Cyber is also filed under Breach simulation and automated pen-testing. Outpost24 sells CompassDRP, External Attack Surface Management, Digital Risk Protection, CyberFlex and a Machine Readable Threat Intelligence feed. Its services include manual penetration testing and red teaming. XM Cyber sells a Continuous Exposure Management Platform that surfaces validated exposures forming real attack paths. Its XM Attack Graph Analysis™ maps exposures into attack paths that lead to business-critical assets, using a digital twin to validate exploitability and reachability.

XM Cyber chains misconfigurations, identity exposures and over-privileges into attack paths across on-premises and multi-cloud environments. Outpost24 also has Specops, its identity and access management division. XM Cyber also monitors security controls for policy violations and configuration drift.

Outpost24 is headquartered in Sweden and was founded in 2001. On December 17, 2025, it announced a new investment from Vitruvian Partners to fund its next phase of global growth. Landsbankinn has collaborated with Outpost24 over the past ten years. XM Cyber is headquartered in Herzliya, Israel, and has been owned by Schwarz Group since 2021.

What it sells: Outpost24

What CompassDRP does[1][4][6][7]
CompassDRP is a single cloud-based Digital Risk Protection solution that combines asset discovery with threat intelligence. CompassDRP monitors for compromised credentials, leaked data, phishing domains, and brand threats across social media and external channels.
What CyberFlex does[1][4][6]
CyberFlex is a flexible solution for end-to-end application security. CyberFlex unifies ASM and PTaaS for full attack surface visibility, with expert pen testing insights.
What External Attack Surface Management does[4]
External Attack Surface Management provides deep and proactive discovery of all internet-facing assets. External Attack Surface Management identifies vulnerabilities and misconfigurations alongside actionable insights for remediation.
What Digital Risk Protection does[4][6][7][9]
Digital Risk Protection is a modular cyber threat intelligence solution to detect and deter external threats to a business. Digital Risk Protection monitors known and unknown public-facing assets, and threats from external channels across the open, deep, and dark web.

What it sells: XM Cyber

What XM Attack Graph Analysis™ does
XM Attack Graph Analysis™ maps all viable exposures into attack paths from the external attack surface, across on-prem and cloud, to business-critical assets. The platform takes a digital twin approach to prioritize exposures validated against exploitability and reachability conditions, taking into account compensating security controls.

Questions about Outpost24 and XM Cyber

What do Outpost24 and XM Cyber sell?
Outpost24 sells CompassDRP, CyberFlex, External Attack Surface Management, Digital Risk Protection and Machine Readable Threat Intelligence. XM Cyber sells Continuous Exposure Management Platform and XM Attack Graph Analysis™.
Are Outpost24 and XM Cyber in the same category?
Yes. Exposure prioritisation and CTEM is the primary category of both on CISO Tribune.
Where are Outpost24 and XM Cyber headquartered?
Outpost24 is headquartered in Sweden. XM Cyber is headquartered in Herzliya, Israel.
When were Outpost24 and XM Cyber founded?
Outpost24 was founded in 2001.
Who owns Outpost24 and XM Cyber?
XM Cyber is owned by Schwarz Group, since 2021.
Who are Outpost24 and XM Cyber sold to?
From its own pages, XM Cyber does not state organisation size, industries or deployment models it targets.
What have Outpost24 and XM Cyber announced recently?
December 17, 2025: Outpost24 announced a new investment from Vitruvian Partners to fund its next phase of global growth.

About Outpost24

Outpost24 sells security products and services delivered through its cloud platform with automation supported by its cyber security experts. Outpost24 services include expert support, manual penetration testing, and red teaming from certified specialists. Classic penetration testing on networks, web, and mobile applications is one of the Outpost24 services.[5]

Outpost24 offers External Attack Surface Management combined with PTaaS or DRP for discovery and insights on known and unknown applications. CompassDRP integrates External Attack Surface Management (EASM) with threat intelligence to provide real-time visibility into a digital footprint. CompassDRP is a single cloud-based Digital Risk Protection solution that combines asset discovery with threat intelligence. CompassDRP detects known and unknown internet-facing assets, shadow IT, and external exposures across a digital footprint, including the open, deep, and dark web. CompassDRP monitors for compromised credentials, leaked data, phishing domains, and brand threats across social media and external channels.[1][6][8][10]

External Attack Surface Management provides deep and proactive discovery of all internet-facing assets and identifies vulnerabilities and misconfigurations. Digital Risk Protection from Outpost24 is a modular cyber threat intelligence solution to detect and deter external threats to a business. Digital Risk Protection monitors known and unknown public-facing assets, and threats from external channels across the open, deep, and dark web.[6][8]

Outpost24 vulnerability management integrates with tools such as Jira, ServiceNow, Slack, and SIEM platforms through automated workflows and notifications.[10]

Outpost24 offers a Machine Readable Threat Intelligence (MRTI) feed to power proactive cyber defense. Outpost24 offers a strategic threat intelligence solution focused on threat actors, context, and behaviors. Outpost24 offers a free Credential Checker that checks whether an organization's email domain is linked to credentials exposed on the dark web.[12]

Specops is the identity and access management division of Outpost24. Specops Device Trust authenticates and verifies users and devices at every access point, and continuously throughout every session. Specops password tools block weak passwords at creation and continuously scan AD for over 5.5 billion breached credentials. Every Specops product is designed to integrate natively with an existing Active Directory infrastructure.[13][14]

Outpost24 red team simulated attacks combine internal and external network exploitation, social engineering, phishing, and physical intrusion attempts. Outpost24 red team specialists conduct open-source intelligence (OSINT) and threat intelligence analysis to map a digital footprint, identify exposed assets, and uncover potential attack paths. Landsbankinn has collaborated with Outpost24 over the past ten years.[1][6][8][10][11][12][13][15]

Outpost24 on the record

Sources

Outpost24 full record

  1. [1]outpost24.comOutpost24 · outpost24.com · undated page, accessed September 30, 2026 · Tier A
  2. [2]CompanyOutpost24 · outpost24.com · undated page, accessed September 30, 2026 · Tier A
  3. [3]Outpost24 raises bar adaptive application security next gen cyberflexOutpost24 · outpost24.com · published July 8, 2026 · Tier A
  4. [4]Cybersecurity & Risk Management Solutions - Outpost24Outpost24 · undated page, accessed October 31, 2026 · Tier A
  5. [5]Services - Outpost24Outpost24 · undated page, accessed November 10, 2026 · Tier A
  6. [6]Cybersecurity & Risk Management Products - Outpost24Outpost24 · undated page, accessed November 10, 2026 · Tier A
  7. [7]CompassDRP | Outpost24Outpost24 · undated page, accessed November 10, 2026 · Tier A
  8. [8]Outpost24 Exposure Management Platform - Outpost24Outpost24 · undated page, accessed November 10, 2026 · Tier A
  9. [9]Our Cybersecurity Solutions - Outpost24Outpost24 · undated page, accessed November 10, 2026 · Tier A
  10. [10]Risk-Based Vulnerability Management Tool | OutscanNXOutpost24 · undated page, accessed November 10, 2026 · Tier A
  11. [11]Dynamic Application Security Testing Tool | Outpost24 ScaleOutpost24 · undated page, accessed November 10, 2026 · Tier A
  12. [12]Machine Readable Threat Intelligence Feed | Outpost24Outpost24 · undated page, accessed November 10, 2026 · Tier A
  13. [13]Specops Device Trust | Outpost24Outpost24 · undated page, accessed November 10, 2026 · Tier A
  14. [14]Identity & Access Management - Outpost24Outpost24 · undated page, accessed November 10, 2026 · Tier A
  15. [15]Red Teaming Services | Outpost24Outpost24 · undated page, accessed November 10, 2026 · Tier A
  16. [16]Outpost24 Secures New Investment to Scale its Exposure Management and Identity Security SolutionsOutpost24 · published December 17, 2025 · Tier A
  17. [17]OUTSCAN Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

XM Cyber full record

  1. [1]xmcyber.comXM Cyber · xmcyber.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Schwarz group acquires israeli hybrid cloud cybersecurity innovator xm cyberXM Cyber · xmcyber.com · published November 22, 2021 · Tier A
  3. [3]0,7340,L 3734737,00Calcalist · calcalistech.com · published March 23, 2018 · Tier B
  4. [4]Continuous Exposure Management | XM CyberXM Cyber · undated page, accessed October 30, 2026 · Tier A
  5. [5]Use case- Audit & ComplianceXM Cyber · undated page, accessed November 10, 2026 · Tier A
  6. [6]Platform | XM CyberXM Cyber · undated page, accessed November 10, 2026 · Tier A
  7. [7]Security Controls MonitoringXM Cyber · undated page, accessed November 10, 2026 · Tier A
  8. [8]Vulnerability Risk ManagementXM Cyber · undated page, accessed November 10, 2026 · Tier A
  9. [9]XM Cyber for Continuous Exposure Prioritization | XM CyberXM Cyber · undated page, accessed November 10, 2026 · Tier A
  10. [10]Safely Adopt AI Without Introducing RiskXM Cyber · undated page, accessed November 10, 2026 · Tier A
  11. [11]Case Studies | XM CyberXM Cyber · undated page, accessed November 10, 2026 · Tier A
  12. [12]Security, Compliance and Privacy | XM CyberXM Cyber · undated page, accessed November 10, 2026 · Tier A
  13. [13]Solution Briefs | XM CyberXM Cyber · undated page, accessed November 10, 2026 · Tier A
  14. [14]XM Cyber Named a Challenger in the Gartner® Magic Quadrant™ for Exposure Assessment Platforms | XM CyberXM Cyber · published November 13, 2025 · Tier A
  15. [15]XM Cyber Exposure Management Platform Reviews 2026G2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.