CyCognito Platform

Spec sheet

What it does

CyCognito is a SaaS platform that continuously simulates attacker reconnaissance across live internet-facing infrastructure to analyze external attack surfaces.Read 15 Oct 2026 · cycognito.com

Purpose

CyCognito discovers, tests, and prioritizes external security risks from an attacker’s perspective.Read 2 Oct 2026 · cycognito.com

API

CyCognito provides a REST API using secure API keys and end-to-end encryption for access to platform data.Read 15 Oct 2026 · cycognito.com

Integrations

CyCognito advertises more than 1,200 integrations spanning asset management, vulnerability management, SIEM/SOAR/XDR, cloud security and ticketing.Read 15 Oct 2026 · cycognito.com

Support

CyCognito’s customer-success datasheet lists Standard, Premium and Premium Plus plans with onboarding, knowledge-base access and quarterly reviews.Read 15 Oct 2026 · cycognito.com

Founded

CyCognito was founded in 2017.Read 15 Oct 2026 · linkedin.com

AI pentesting

Continuous AI Pentesting uses specialized agents to reason about attack chains, chained exploits and business-logic flaws across web apps, APIs, cloud services and exposed AI infrastructure.Read 15 Oct 2026 · cycognito.com

API lifecycle

The API catalog says version 0 remains supported but is undergoing deprecation while version 1 is the current REST API.Read 15 Oct 2026 · apis.io

API operations

The documented API includes user endpoints such as GET and POST /v1/users and GET /v1/users/{email}.Read 15 Oct 2026 · apis.io

Beyond CVEs

The platform tests non-CVE weaknesses such as misconfigurations, data exposure and authentication bypass risks.Read 15 Oct 2026 · cycognito.com

Cloud coverage

The platform supports external discovery and testing across AWS, Azure, and Google Cloud environments.Read 2 Oct 2026 · cycognito.com

Company headquarters

CyCognito lists Palo Alto, California as its headquarters location.Read 15 Oct 2026 · linkedin.com

Company legal name

The company identifies itself as CyCognito Inc.Read 15 Oct 2026 · cycognito.com

Company size

LinkedIn lists CyCognito as a privately held company with 51–200 employees.Read 15 Oct 2026 · linkedin.com

Continuous testing

CyCognito actively tests the mapped external footprint and confirms which exposures are exploitable.Read 15 Oct 2026 · cycognito.com

Coverage

CyCognito says its discovery network covers cloud, SaaS, APIs, on-premises, AI assets, and third-party systems.Read 2 Oct 2026 · cycognito.com

Deployment model

The terms define the product as a remotely provided SaaS service rather than software installed on customer infrastructure.Read 15 Oct 2026 · cycognito.com

Developer documentation

A public API reference is hosted at api.platform.cycognito.com/v1/docs/index.html and an OpenAPI specification is available through the API catalog.Read 15 Oct 2026 · apis.io

Discovery

The platform starts with an organization’s name and continuously maps its external footprint without seed data, IP lists, or manual setup.Read 2 Oct 2026 · cycognito.com

Discovery network

CyCognito says its global discovery network has 60,000 nodes and covers cloud, SaaS, APIs, on-premises, AI and third-party systems.Read 15 Oct 2026 · cycognito.com

Evidence trail

Each finding includes how it was discovered, why it belongs to the organization and who owns it.Read 15 Oct 2026 · cycognito.com

Free assessment

The company site offers a free risk assessment; it does not state that this is a free plan or free trial.Read 2 Oct 2026 · cycognito.com

Funding

CyCognito announced a $100 million Series C in December 2021, bringing total funding to $153 million.Read 15 Oct 2026 · cycognito.com

Independent headcount estimate

Crustdata reports 103 employees and $153 million raised as of 2026.Read 15 Oct 2026 · research.crustdata.com

Licence

The terms reserve ownership of the service and prohibit reverse engineering, copying or creating derivative works, indicating proprietary software rather than open source.Read 15 Oct 2026 · cycognito.com

Limit: G2 false positives

A G2 reviewer says false positives keep the service from being excellent.Read 15 Oct 2026 · g2.com

Limit: Gartner navigation

A Gartner reviewer complains that resolving an issue requires opening too many linked pages.Read 15 Oct 2026 · gartner.com

Limit: internal coverage

An independent comparison says CyCognito lacks native internal network scanning, internal asset posture and local endpoint telemetry.Read 15 Oct 2026 · upguard.com

Limit: pricing transparency

Independent analysis describes enterprise-centric pricing as opaque and potentially cost-prohibitive for small and mid-sized businesses.Read 15 Oct 2026 · upguard.com

Limit: service guarantees

CyCognito’s terms disclaim guarantees that all vulnerabilities will be detected or that service access will be uninterrupted and error-free.Read 15 Oct 2026 · cycognito.com

Limit: third-party risk workflows

The same comparison says CyCognito lacks native vendor questionnaires, supplier risk tiering and third-party compliance lifecycle workflows.Read 15 Oct 2026 · upguard.com

Organizational attribution

Graph-based attribution links discovered assets to subsidiaries, brands or business units and attaches evidence to each relationship.Read 15 Oct 2026 · cycognito.com

Praise: G2 usability

G2 reviewers praise continuous monitoring, easy onboarding, hidden-asset discovery, risk prioritization and integration with existing tools.Read 15 Oct 2026 · g2.com

Praise: Gartner interface

Gartner review excerpts describe the interface as intuitive and say realm management is easy.Read 15 Oct 2026 · gartner.com

Pricing limits

The pricing page offers a custom estimate and lists asset-volume bands; it does not show fixed prices.Read 2 Oct 2026 · cycognito.com

Prioritization

Risk ranking combines validated findings, business context, asset attractiveness, discoverability, and attacker activity.Read 2 Oct 2026 · cycognito.com

Rating on G2

4.3 out of 5 from 5 reviewsRead 15 Oct 2026 · g2.com

Rating on Gartner Peer Insights

4.7 out of 5 from 39 reviewsRead 15 Oct 2026 · upguard.com

Rating on GetApp

0 out of 5 from 0 reviewsRead 15 Oct 2026 · getapp.com

Rating on Software Advice

No reviews are listedRead 15 Oct 2026 · softwareadvice.com

Remediation workflows

Findings can be routed into Jira, ServiceNow, Splunk and other workflow systems with remediation guidance.Read 15 Oct 2026 · cycognito.com

Risk prioritization

Risk ranking combines validated findings, business context and threat intelligence to identify the small set of exposures that matter most.Read 15 Oct 2026 · cycognito.com

Security certifications

CyCognito says customer reports include SOC 2 Type II and ISO/IEC 27001, with GDPR processing commitments.Read 15 Oct 2026 · cycognito.com

Setup

CyCognito says it needs no agents, sensors, or deep cloud integrations to get started.Read 2 Oct 2026 · cycognito.com

System requirements

The product pages describe agentless, outside-in operation with no deployment, agents or internal network access required.Read 15 Oct 2026 · cycognito.com

Testing scale

Automated security testing covers more than 35 threat categories and 100,000 scenarios, according to the product page.Read 15 Oct 2026 · cycognito.com

Third-party connector

Axonius documents a CyCognito adapter using API v1, API keys and configurable retrieval of domains, vulnerabilities, certificates, web apps and IP ranges.Read 15 Oct 2026 · docs.axonius.com

Validation

Its testing covers 100,000+ attack scenarios across 30+ threat categories, including web, cloud, network, and AI surfaces.Read 2 Oct 2026 · cycognito.com

Zero-input discovery

The platform starts with an organization name and discovers external assets without seed IP lists, asset lists or manual scoping.Read 15 Oct 2026 · cycognito.com

Plans and prices

Every CyCognito Platform plan and price →

Where Specifiction places it

• Security Ratings Software#3 of 308.3
• Attack Surface Management Software#7 of 338.1