CISO Tribune

Vendor comparison · 2 companies

XM Cyber vs Zafran Security

XM Cyber sells a platform that continuously surfaces every validated exposure that forms real attack paths. Zafran Security sells a platform that brings vulnerability findings together across existing tools into a unified view of exposure across the hybrid enterprise. CISO Tribune files both under Exposure prioritisation and CTEM. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • XM Cyber
  • Zafran Security
XM Cyber vs Zafran Security: Products, Customers and Funding Compared
XM CyberXM Cyber sells a platform that continuously surfaces every validated exposure that forms real attack paths.xmcyber.comZafran SecurityZafran Security sells a platform that brings vulnerability findings together across existing tools into a unified view of exposure across the hybrid enterprise.zafran.io
What it sells
  • Continuous Exposure Management Platform[4][5]Surfaces validated exposures that form real attack paths.
  • XM Attack Graph Analysis™Maps viable exposures into attack paths that lead to business-critical assets.
  • Zafran Platform[2]Brings vulnerability findings together across existing tools into a unified view of exposure.
  • RemOps[1][2]Uses generative AI to consolidate overlapping remediation tasks and route work to owners.
  • Zero Day Agent[6]Matches new threats to a live software inventory.
  • Exposure Graph[2][7]Weighs what is running, reachable, exploited in the wild and critical to the business.
Categories
Headquarters
Herzliya, Israel[3]Not stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Owned by Schwarz Group since 2021[2][4][15]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[15]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, XM Cyber does not state organisation size, industries or deployment models it targets. Its business initiatives menu names Operational Technology (OT), Mergers and Acquisitions, Ransomware Readiness and Executive Risk Reporting, but the pages do not describe these as customer segments or buyer roles. This is our reading of the pages, not a recommendation.Not written yet
Last verified
November 2, 2026November 5, 2026

Where they overlap

  • Exposure prioritisation and CTEM is the primary category of both XM Cyber and Zafran Security.

Where they differ, field by field

  • XM Cyber is also filed under Breach simulation and automated pen-testing. Zafran Security is also filed under Vulnerability management and External attack surface management.
  • XM Cyber lists Continuous Exposure Management Platform and XM Attack Graph Analysis™. Zafran Security lists Zafran Platform, RemOps, Zero Day Agent and Exposure Graph.
  • XM Cyber is headquartered in Herzliya, Israel.
  • XM Cyber is owned by Schwarz Group, since 2021.

How they differ

CISO Tribune files both XM Cyber and Zafran Security under Exposure prioritisation and CTEM as the primary category. XM Cyber also sits under Breach simulation and automated pen-testing, while CISO Tribune files Zafran Security additionally under Vulnerability management and External attack surface management. XM Cyber is headquartered in Herzliya, Israel, and has been owned by Schwarz Group since 2021.

XM Cyber sells a Continuous Exposure Management Platform, and its XM Attack Graph Analysis™ maps exposures into attack paths from the external attack surface to business-critical assets. It builds a digital twin of an environment to validate whether each exposure is exploitable and reachable. XM Cyber also describes discovery of AI resources and monitoring of security controls against frameworks such as ISO 27001 and PCI-DSS. Its pages name Operational Technology, Mergers and Acquisitions, Ransomware Readiness and Executive Risk Reporting as business initiatives, and Thalia appears as a named user.

Zafran Security sells the Zafran Platform, which brings vulnerability findings together from tools a customer already runs, with no new agent to deploy. It takes cloud and AppSec findings from Wiz, Palo Alto Networks, Upwind, AWS and Snyk, and on-prem findings from Tenable, Qualys and Rapid7. Zafran Security also sells RemOps, which uses generative AI to consolidate overlapping remediation tasks, and Zero Day Agent, which matches new threats to a live software inventory. For regulated sectors, Zafran Security describes a five-stage maturity model for banks, insurers and payment processors, and an agentless approach for healthcare.

What it sells: XM Cyber

What XM Attack Graph Analysis™ does
XM Attack Graph Analysis™ maps all viable exposures into attack paths from the external attack surface, across on-prem and cloud, to business-critical assets. The platform takes a digital twin approach to prioritize exposures validated against exploitability and reachability conditions, taking into account compensating security controls.

What it sells: Zafran Security

What Zafran Platform does[2]
The Zafran platform takes cloud and AppSec findings from Wiz, Palo Alto Networks, Upwind, AWS and Snyk, and on-prem findings from Tenable, Qualys and Rapid7. Zafran applies a customer's own risk context to reveal which vulnerabilities are exploitable in its environment. Zafran uses existing security controls to show how to reduce exploitability across the environment. Zafran auto-assigns fixes to the right owner in Jira, Slack and ServiceNow.
What RemOps does[1][2]
RemOps uses generative AI to consolidate overlapping remediation tasks and create a clear get-well plan. RemOps routes work to the right owners through existing ticketing platforms.
What Zero Day Agent does[6]
Zafran's Zero Day Agent matches a flaw to a customer's live software inventory, showing which assets run the vulnerable version, which are reachable from the internet, and which are blocked by a live control. Zafran autonomously identifies which assets new threats affect every day, using threat intelligence matched against SBOM data.
What Exposure Graph does[2][7]
Zafran's Exposure Graph weighs what's running and reachable, exploited in the wild, unprotected by controls, and critical to the business. Zafran's exposure graph unifies findings from continuous detection, cloud, AppSec and on-prem scanners, adds risk context, and maps each exposure.

Questions about XM Cyber and Zafran Security

What do XM Cyber and Zafran Security sell?
XM Cyber sells Continuous Exposure Management Platform and XM Attack Graph Analysis™. Zafran Security sells Zafran Platform, RemOps, Zero Day Agent and Exposure Graph.
Are XM Cyber and Zafran Security in the same category?
Yes. Exposure prioritisation and CTEM is the primary category of both on CISO Tribune.
Where are XM Cyber and Zafran Security headquartered?
XM Cyber is headquartered in Herzliya, Israel.
Who owns XM Cyber and Zafran Security?
XM Cyber is owned by Schwarz Group, since 2021.
Who are XM Cyber and Zafran Security sold to?
From its own pages, XM Cyber does not state organisation size, industries or deployment models it targets.

About XM Cyber

XM Cyber sells a platform that continuously surfaces every validated exposure that forms real attack paths. XM Cyber delivers Exposure Assessment and Exposure Validation in a single platform for adopting and maintaining the Continuous Threat Exposure Management (CTEM) framework. XM Cyber states its aim as continuously discovering, prioritizing, and fixing every validated exposure in a customer environment before it is exploited.[1]

XM Cyber's platform monitors a hybrid environment with agent-based and agentless discovery of every asset and every exposure. XM Cyber's discovery includes security controls, shadow AI, AI services in the cloud and on-prem, and AI policy violations. XM Cyber chains misconfigurations, identity exposures, over-privileges, and AI exposures into attack paths spanning on-premises and multi-cloud environments, from the external attack surface to critical assets. XM Cyber builds a digital twin of an environment to validate the exploitability and reachability of every exposure and every attack path, checking conditions across assets, networks, and compensating security controls. XM Attack Graph Analysis™ maps all viable exposures into attack paths from the external attack surface, across on-prem and cloud, to business-critical assets. XM Cyber prioritizes exposures that sit at intersections of multiple attack paths, called Choke Points, so a single fix eliminates multiple paths. XM Cyber's platform provides remediation guidance, alternatives, and automated ticketing, and verifies resolution with remediation confirmation.[1][6]

XM Cyber's platform supports audit readiness by monitoring security controls for policy violations and configuration drift in accordance with regulatory frameworks. Security controls monitoring in XM Cyber covers on-prem, cloud and SaaS tools including endpoint security, network security, identity and access management, data protection and device management, all from the same console. XM Cyber maps frameworks and regulations such as BSI C5, CIS controls, FedRAMP, GDPR, ISO 27001, NIST CSF, PCI-DSS and SOC2 to specific tools and controls. XM Cyber continuously assesses core Active Directory and cloud deployments to identify and prioritize issues. XM Cyber tracks a security posture score over time so teams can quantify and share improvements.[5][6][7]

XM Cyber's vulnerability work automatically tests every CVE discovered across an attack surface, including runtime memory, against exploit conditions. XM Cyber brings together findings from on-prem network and cloud scanners in one place. XM Cyber validates intended fixes, whether a patch or a downstream control, with continuous testing in a digital twin. XM Cyber aligns with regulatory frameworks like PCI DSS, ISO 27001 and NYDFS with agentless network scanning that sets CVEs in the context of broader attack paths. XM Cyber lets users create a request for specific patches or devices and pass it to teammates, executives or IT teams, and track the outbound requests.[8][9]

XM Cyber continuously discovers AI resources and maps the validated exposures that compromise them across a hybrid environment. XM Cyber discovers AI tools, agents, and workloads in order to eliminate shadow AI, and addresses validated attack paths that traverse and target AI resources. XM Cyber uses Attack Graph Analysis™ to show how attackers exploit exposures in development resources like AWS Bedrock, GCP Vertex, and Azure OpenAI. XM Cyber visualizes how misconfigured MCP servers create validated attack paths to sensitive models and training data. XM Cyber provides mutation detection to identify unauthorized configuration shifts in AI server definitions as they happen. XM Cyber aligns AI deployments with governance frameworks like the NIST AI RMF and the EU AI Act.[10]

XM Cyber monitors policy compliance with standards and regulations such as NIST, ISO 27001, PCI-DSS, GDPR, NIS 2, and DORA, and addresses violations as they happen across a tech stack. XM Cyber offers ongoing and automated testing of attack scenarios across the hybrid environment on a non-intrusive digital twin. XM Cyber provides centralized reporting of violations across exposure types such as vulnerabilities, misconfigurations, over-privileges, exposed credentials, and behavior anomalies. Markus Armsruster of Thalia talks about using XM Cyber.[5][11]

XM Cyber is compliant with the SOC 2 Type 2 standard and is EU GDPR compliant. XM Cyber develops its Information Security Management System in accordance with the ISO 27001 international standard. XM Cyber complies with BSI C5, a cloud security standard from the German Federal Office for Information Security. XM Cyber utilizes Amazon Web Services secured servers. XM Cyber protects customer data in transit using Transport Layer Security (TLS) and at rest with a data key using AES-256 encryption. XM Cyber maintains a 24/7 Operations Center to monitor its customer solutions.[5][7][9][12][13]

XM Cyber on the record

Sources

XM Cyber full record

  1. [1]xmcyber.comXM Cyber · xmcyber.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Schwarz group acquires israeli hybrid cloud cybersecurity innovator xm cyberXM Cyber · xmcyber.com · published November 22, 2021 · Tier A
  3. [3]0,7340,L 3734737,00Calcalist · calcalistech.com · published March 23, 2018 · Tier B
  4. [4]Continuous Exposure Management | XM CyberXM Cyber · undated page, accessed October 30, 2026 · Tier A
  5. [5]Use case- Audit & ComplianceXM Cyber · undated page, accessed November 10, 2026 · Tier A
  6. [6]Platform | XM CyberXM Cyber · undated page, accessed November 10, 2026 · Tier A
  7. [7]Security Controls MonitoringXM Cyber · undated page, accessed November 10, 2026 · Tier A
  8. [8]Vulnerability Risk ManagementXM Cyber · undated page, accessed November 10, 2026 · Tier A
  9. [9]XM Cyber for Continuous Exposure Prioritization | XM CyberXM Cyber · undated page, accessed November 10, 2026 · Tier A
  10. [10]Safely Adopt AI Without Introducing RiskXM Cyber · undated page, accessed November 10, 2026 · Tier A
  11. [11]Case Studies | XM CyberXM Cyber · undated page, accessed November 10, 2026 · Tier A
  12. [12]Security, Compliance and Privacy | XM CyberXM Cyber · undated page, accessed November 10, 2026 · Tier A
  13. [13]Solution Briefs | XM CyberXM Cyber · undated page, accessed November 10, 2026 · Tier A
  14. [14]XM Cyber Named a Challenger in the Gartner® Magic Quadrant™ for Exposure Assessment Platforms | XM CyberXM Cyber · published November 13, 2025 · Tier A
  15. [15]XM Cyber Exposure Management Platform Reviews 2026G2 · undated page, accessed November 10, 2026 · Tier C

Zafran Security full record

  1. [1]zafran.ioZafran Security · zafran.io · undated page, accessed November 5, 2026 · Tier A
  2. [2]AI-Native Exposure Management Platform | ZafranZafran · undated page, accessed November 10, 2026 · Tier A
  3. [3]Customer Reviews | ZafranZafran · undated page, accessed November 10, 2026 · Tier A
  4. [4]About Us | ZafranZafran · undated page, accessed November 10, 2026 · Tier A
  5. [5]Unify Vulnerability Findings | ZafranZafran · undated page, accessed November 10, 2026 · Tier A
  6. [6]Prevent Exploitation at the Speed of AI Attacks | ZafranZafran · undated page, accessed November 10, 2026 · Tier A
  7. [7]Prioritize What's Exploitable | ZafranZafran · undated page, accessed November 10, 2026 · Tier A
  8. [8]Mitigate Risk | ZafranZafran · undated page, accessed November 10, 2026 · Tier A
  9. [9]Exposure Management for Healthcare | ZafranZafran · undated page, accessed November 10, 2026 · Tier A
  10. [10]Detect Exposure | ZafranZafran · undated page, accessed November 10, 2026 · Tier A
  11. [11]Automate Reporting | ZafranZafran · undated page, accessed November 10, 2026 · Tier A
  12. [12]Exposure Management for Financial Services | ZafranZafran · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.