CISO Tribune

Vendor comparison · 2 companies

Threat Intelligence vs XM Cyber

Threat Intelligence delivers cyber security products and services. XM Cyber sells a platform that continuously surfaces every validated exposure that forms real attack paths. CISO Tribune files both under Breach simulation and automated pen-testing. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Threat Intelligence
  • XM Cyber
Threat Intelligence vs XM Cyber: Products, Customers and Funding Compared
Threat IntelligenceThreat Intelligence delivers cyber security products and services.threatintelligence.comXM CyberXM Cyber sells a platform that continuously surfaces every validated exposure that forms real attack paths.xmcyber.com
What it sells
  • Evolve Security Automation[1][11][12]Evolve built-in security capabilities automatically detect, prioritize, and remediate threats.
  • EvolvePT[5][6]EvolvePT is an automated pen testing solution.
  • EvolveAST[7]EvolveAST helps organizations orchestrate and automate application security testing in DevOps pipelines.
  • EvolveIR[8]EvolveIR is an automated incident response tool.
  • Penetration Testing Services[6][9]Penetration Testing Services proactively identify the most exploitable security vulnerabilities of infrastructure.
  • Governance, Risk and Compliance Services[9]Assessments and consulting services to help identify risk levels and compliance requirements.
  • EvolveMDR[11]EvolveMDR combines security specialists with Evolve Security Automation capabilities to streamline security operations.
  • Continuous Exposure Management Platform[4][5]Surfaces validated exposures that form real attack paths.
  • XM Attack Graph Analysis™Maps viable exposures into attack paths that lead to business-critical assets.
Categories
Headquarters
Not stated on its pagesHerzliya, Israel[3]
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesOwned by Schwarz Group since 2021[2][4][15]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 11, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[15]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetFrom its own pages, XM Cyber does not state organisation size, industries or deployment models it targets. Its business initiatives menu names Operational Technology (OT), Mergers and Acquisitions, Ransomware Readiness and Executive Risk Reporting, but the pages do not describe these as customer segments or buyer roles. This is our reading of the pages, not a recommendation.
Last verified
November 6, 2026November 2, 2026

Where they overlap

  • Threat Intelligence and XM Cyber are both filed under Breach simulation and automated pen-testing.

Where they differ, field by field

  • Threat Intelligence's primary category is Breach simulation and automated pen-testing; XM Cyber's is Exposure prioritisation and CTEM.
  • Threat Intelligence is also filed under Incident response and forensics, MDR and managed SOC and Digital risk protection.
  • Threat Intelligence lists Evolve Security Automation, EvolvePT, EvolveAST, EvolveIR, Penetration Testing Services and 2 more. XM Cyber lists Continuous Exposure Management Platform and XM Attack Graph Analysis™.
  • XM Cyber is headquartered in Herzliya, Israel.
  • XM Cyber is owned by Schwarz Group, since 2021.

What it sells: Threat Intelligence

What Evolve Security Automation does[1][11][12]
Evolve automatically generates pre-configured Evolve Virtual Appliances for deployment into corporate networks and on-premise data centers. Evolve Virtual Appliances support VMware or Hyper-V, and third-party cloud providers including AWS and Azure. Evolve maps major security standards and frameworks to ensure the right security controls are in place.
What EvolvePT does[5][6]
Threat Intelligence combines its penetration testing tool, EvolvePT, with a certified, principal-only team of penetration testing consultants. Symbion turned to EvolvePT, an automated pen testing solution.
What EvolveAST does[7]
EvolveAST helps organizations orchestrate and automate the integration of application security testing into DevOps pipelines. Evolve integrates automated application security testing into the standard business as usual processes and technologies of development teams.
What EvolveIR does[8]
EvolveIR is an automated incident response tool that can detect and respond to security threats. Threat Intelligence offers an incident response solution that uses its security team and EvolveIR.
What Penetration Testing Services does[6][9]
Threat Intelligence uses a Purple Team method in which its Principal Consultants collaborate with the internal security team of the customer. Threat Intelligence evaluates web and mobile applications in five phases: reconnaissance, scanning, vulnerability assessment, exploitation, and reporting. Penetration Testers at Threat Intelligence hold qualifications like CEH, OSCP, or GPEN.
What Governance, Risk and Compliance Services does[9]
In its IRAP assessments, Threat Intelligence guides customers through Information Security Registered Assessors Program (IRAP) compliance. Threat Intelligence provides guidance on securing ISO 27001 certification for an Information Security Management System (ISMS).
What EvolveMDR does[11]
Threat Intelligence specialists help customers mitigate threats and create a detection and prevention program. Threat Intelligence describes security and IT teams with limited skills and resources as facing challenges in managing risks and meeting compliance requirements.

What it sells: XM Cyber

What XM Attack Graph Analysis™ does
XM Attack Graph Analysis™ maps all viable exposures into attack paths from the external attack surface, across on-prem and cloud, to business-critical assets. The platform takes a digital twin approach to prioritize exposures validated against exploitability and reachability conditions, taking into account compensating security controls.

Questions about Threat Intelligence and XM Cyber

What do Threat Intelligence and XM Cyber sell?
Threat Intelligence sells Evolve Security Automation, EvolvePT, EvolveAST, EvolveIR, Penetration Testing Services and 2 more. XM Cyber sells Continuous Exposure Management Platform and XM Attack Graph Analysis™.
Are Threat Intelligence and XM Cyber in the same category?
They share Breach simulation and automated pen-testing. Threat Intelligence's primary category is Breach simulation and automated pen-testing and XM Cyber's is Exposure prioritisation and CTEM.
Where are Threat Intelligence and XM Cyber headquartered?
XM Cyber is headquartered in Herzliya, Israel.
Who owns Threat Intelligence and XM Cyber?
XM Cyber is owned by Schwarz Group, since 2021.
Who are Threat Intelligence and XM Cyber sold to?
From its own pages, XM Cyber does not state organisation size, industries or deployment models it targets.

About Threat Intelligence

Threat Intelligence delivers cyber security products and services. Threat Intelligence services combine cyber security consultants with security automation. Evolve is a Security Automation Cloud designed and operated by the Threat Intelligence team. Evolve built-in security capabilities automatically detect, prioritize, and remediate threats.[1][2][3][4]

Evolve provides solutions for large enterprises and medium-sized businesses. Evolve maps major security standards and frameworks to ensure the right security controls are in place. Evolve automatically generates pre-configured Evolve Virtual Appliances for deployment into corporate networks and on-premise data centers. Evolve Virtual Appliances support VMware or Hyper-V, and third-party cloud providers including AWS and Azure.[4]

Symbion, a national wholesaler of healthcare services and products, needed to evaluate its current security posture and identify major security gaps. Symbion turned to EvolvePT, an automated pen testing solution. Threat Intelligence combines its penetration testing tool, EvolvePT, with a certified, principal-only team of penetration testing consultants. EvolveAST helps organizations orchestrate and automate the integration of application security testing into DevOps pipelines. EvolveIR is an automated incident response tool that can detect and respond to security threats. EvolveDW monitors domains and keywords on the dark web and alerts the customer team when data leaks or threats are detected.[1][4][5][6][7][9]

Threat Intelligence uses a Purple Team method in which its Principal Consultants collaborate with the internal security team of the customer. Threat Intelligence evaluates web and mobile applications in five phases: reconnaissance, scanning, vulnerability assessment, exploitation, and reporting. Penetration Testers at Threat Intelligence hold qualifications like CEH, OSCP, or GPEN.[6]

Threat Intelligence incident response services provide containment, digital forensic investigation, and remediation assistance. Threat Intelligence offers a 30-day monitoring option after containment to prevent threats from resurfacing. Threat Intelligence offers Board Tabletop Exercises. The Threat Intelligence specialist team manages major security breach investigations and ransom and extortion campaigns every month for local and global organisations. Threat Intelligence has provided support during significant data breaches, including the Medibank 2022 and the Latitude 2023 incidents.

In its IRAP assessments, Threat Intelligence guides customers through Information Security Registered Assessors Program (IRAP) compliance. Threat Intelligence provides guidance on securing ISO 27001 certification for an Information Security Management System (ISMS). The services also cover HIPAA, described as a regulation for securing Personal Health Information in healthcare. The services also cover NIST, described as controls for critical infrastructure operators to manage cybersecurity risk.[9][10]

EvolveMDR combines security specialists with Evolve Security Automation capabilities to streamline security operations. Threat Intelligence has cybersecurity experts in Sydney. Threat Intelligence professional services are delivered by CREST certified cyber security consultants. GT Law is an independent Australian law firm. GT Law turned to Evolve Security Automation. Threat Intelligence contributes to the development of global security methodologies, standards, and libraries that are incorporated into industry-specific security regulations of the Open Web Application Security Project (OWASP).[1][4][7][9][11][12]

Threat Intelligence on the record

Sources

Threat Intelligence full record

  1. [1]threatintelligence.comThreat Intelligence · threatintelligence.com · undated page, accessed November 6, 2026 · Tier A
  2. [2]We are Threat IntelligenceThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  3. [3]Cybersecurity Solutions| Pentesting | IR | MSSP | AUSThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  4. [4]Evolve Cybersecurity PlatformThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  5. [5]Automated Penetration Testing Case Study | EvolvePTThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  6. [6]Penetration Testing Services | Red Team | AustraliaThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  7. [7]EvolveAST Application Security TestingThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  8. [8]Incident Response and Digital Forensic InvestigationsThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  9. [9]Cyber Security Professional ServicesThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  10. [10]Governance, Risk and Compliance ServicesThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  11. [11]Managed Security Services AustraliaThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  12. [12]Security Automation Case Study - Evolve and GTLawThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  13. [13]SOCRadar Extended Threat Intelligence Reviews 2026G2 · undated page, accessed November 11, 2026 · Tier C

XM Cyber full record

  1. [1]xmcyber.comXM Cyber · xmcyber.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Schwarz group acquires israeli hybrid cloud cybersecurity innovator xm cyberXM Cyber · xmcyber.com · published November 22, 2021 · Tier A
  3. [3]0,7340,L 3734737,00Calcalist · calcalistech.com · published March 23, 2018 · Tier B
  4. [4]Continuous Exposure Management | XM CyberXM Cyber · undated page, accessed October 30, 2026 · Tier A
  5. [5]Use case- Audit & ComplianceXM Cyber · undated page, accessed November 10, 2026 · Tier A
  6. [6]Platform | XM CyberXM Cyber · undated page, accessed November 10, 2026 · Tier A
  7. [7]Security Controls MonitoringXM Cyber · undated page, accessed November 10, 2026 · Tier A
  8. [8]Vulnerability Risk ManagementXM Cyber · undated page, accessed November 10, 2026 · Tier A
  9. [9]XM Cyber for Continuous Exposure Prioritization | XM CyberXM Cyber · undated page, accessed November 10, 2026 · Tier A
  10. [10]Safely Adopt AI Without Introducing RiskXM Cyber · undated page, accessed November 10, 2026 · Tier A
  11. [11]Case Studies | XM CyberXM Cyber · undated page, accessed November 10, 2026 · Tier A
  12. [12]Security, Compliance and Privacy | XM CyberXM Cyber · undated page, accessed November 10, 2026 · Tier A
  13. [13]Solution Briefs | XM CyberXM Cyber · undated page, accessed November 10, 2026 · Tier A
  14. [14]XM Cyber Named a Challenger in the Gartner® Magic Quadrant™ for Exposure Assessment Platforms | XM CyberXM Cyber · published November 13, 2025 · Tier A
  15. [15]XM Cyber Exposure Management Platform Reviews 2026G2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.