Cymmetria

Nomination Highlights

Cymmetria is a cyber deception solution that hunts advanced attackers within organizational networks. MazeRunner provides visibility to lateral movement inside the perimeter, real-time alerts, investigation, and forensics and mitigation. MazeRunner runs within a virtual environment and scales automatically according to organizational needs. All of MazeRunner’s functionality can be activated via an API, making the product available as part of security orchestration.

Cymmetria’s recent achievements have proven monumental for the company and cyber deception overall. We have caught four APT attacks and published a report on one of them this year (“Patchwork”). This was the first time a targeted threat was captured using a commercial deception product. Next, Cymmetria Research released an open source honeypot for Mirai detection. While simple, this is a very specific tool built to match what Mirai expects, based on its source code. Another major recent achievement was the release of our Community Edition, a free version of our enterprise-grade MazeRunner platform. After the release, a community catch was reported. Within two days of launching his campaign, a community user reached out to us to say he had been receiving a lot of code execution alerts. We were able to detect the threat using the code signing technology that we developed in-house. MazeRunner caught the attacker, revealed their tools, and detailed their movement and actions.

Cymmetria currently has a handful of large-scale customers. We also have PoCs in progress with a number of Fortune 500 companies, and continue to see great growth potential. Cymmetria has already raised over $10 million in two funding rounds and was recognized as a Gartner Cool Vendor in 2016. Our team is made up of cyber deception and InfoSec veterans, military specialists, and APT and malware researchers.