Is CyCognito profitable in 2026?

No public profit disclosure exists. Third-party estimates put revenue at just $8.4M in 2024, versus an $800M valuation set in December 2021, and no new funding round has been reported since then as of July 2026.

Who founded CyCognito and when?

CyCognito was founded in 2017 by Rob Gurzeev and Dima Potekhin. The company is headquartered in Palo Alto, California, and remains privately held and venture-backed as of July 2026.

Could AI replace CyCognito's pentesting service?

CyCognito itself markets AI as a replacement for manual pentesting, launching 'Continuous AI Pentesting' on June 16, 2026, explicitly framing AI-driven testing as already happening in-house at customers, exposing the company's own core workflow to the same automation trend.

Who is CyCognito's biggest competitor?

Palo Alto Networks poses the largest threat: its Cortex XDR 5.0, updated in early 2026, bundles 'Unified Exposure Management' and scans roughly 500 billion ports per day, a scale standalone vendors like CyCognito cannot match.

Has CyCognito raised any funding recently?

No. Its last raise was a $100M Series C at an $800M post-money valuation in December 2021, led by The Westly Group. As of June 2026, roughly 4.5 years have passed with no new disclosed round.

CyCognito is privately owned and venture-capital backed, with investors including Accel, Lightspeed Venture Partners, The Westly Group, Thomvest Ventures, The Heritage Group, and former Microsoft Chairman John Thompson, as of the December 2021 Series C.

Cybersecurity companies · United States

CyCognito

cycognito.com ↗

CyCognito finds and ranks a company's exposed internet-facing assets and vulnerabilities.

Losing its protection

Assessed 21 July 2026 · Evidence as of 21 July 2026

The structural protection is eroding.

On the recordSince 21 July 2026 · Checkable from Q3-Q4 2026 · Every call on the record Checkpoint: Adoption results from Continuous AI Pentesting launch, watched for renewed ARR growth versus churn to bundled rivals

The call

CyCognito still ships a working product, but flat funding, shrinking headcount, and platform giants bundling the same scans for free point toward a sale or down-round rather than independent growth.

CyCognito is a software company that helps large organizations discover all the places hackers could break in online, then prioritizes which ones matter most. The problem is that Palo Alto Networks, CrowdStrike, Microsoft, and Tenable have already added the same kind of scanning to their security suites, which thousands of companies already pay for and use every day, so there is no real reason to buy a separate tool. The one thing that could save CyCognito is if its artificial intelligence for simulating attacks becomes so much better and cheaper than what the big platforms offer that companies decide the specialist is worth the extra cost, but if that does not happen soon, the company will likely run out of money or get bought for much less than investors expected.

Why

AI pressure: AI-driven pentesting and vulnerability triage tools (including CyCognito's own bet). CyCognito says AI can replace manual pentesting customers already do in-house, but that same automation lets rivals copy its scans cheaply. Could AI do the core job? Yes, likely.

Bigger players: Palo Alto Networks Cortex XDR, CrowdStrike Falcon Exposure Management, Microsoft Defender EASM, Tenable. Palo Alto scans roughly 500 billion ports a day inside Cortex XDR, and Tenable bought Vulcan Cyber and Apex Security, folding attack-surface scanning into suites customers already pay for. Could a giant copy it? Yes, easily.

What protects it. A seedless discovery method covering about 90% of assets, plus SOC 2 and ISO 27001 certifications that some buyers require.

What would change this call

Whether CyCognito announces new funding or a valuation reset by early 2027. Shows if investors still back the $800M valuation or if a down-round is happening.
Headcount trend past the current 112 employees over the next two quarters. Further decline would confirm ongoing capital constraints and shrinking operations.
Net-new ARR growth tied to the June 2026 Continuous AI Pentesting launch. Would show customer wins from incumbents rather than churn into bundled suites.

Key numbers

No new funding since $100M round at $800M value (Dec 2021)
Headcount down 19.4% YoY to 112 employees (Jun 2026)
Revenue estimated $8.4M in 2024 vs $800M valuation (Dec 2024)

Named risks

No new funding round since December 2021 despite $800M valuation. Severity: high
Third-party revenue estimates ($6.6M to $27.3M) suggest revenue far below valuation implied targets. Severity: high
Headcount decline of 19.4% YoY as of June 2026 signals cost pressure. Severity: medium
Platform giants bundling EASM into suites customers already own, commoditizing standalone category. Severity: high
Rival vendor claims of false positives in attribution engine causing customer churn. Severity: medium

Rivals, as read in July 2026

Rival	Direction	Evidence
Palo Alto Networks	gaining on	Cortex XDR 5.0 bundled Unified Exposure Management, ~500B ports/day scanning, early 2026
CrowdStrike	gaining on	Falcon Exposure Management bundled into existing Falcon platform suite, 2026
Tenable	gaining on	Acquired Bit Discovery (2022), Vulcan Cyber (Jan 2025), Apex Security (May 2025) to build ASM stack
Microsoft	gaining on	Defender EASM bundled into existing security suite customers already own
IONIX	contesting	Claims a Fortune 500 insurance customer switched away over false positives, April 2026

Questions people ask

Is CyCognito profitable in 2026?: No public profit disclosure exists. Third-party estimates put revenue at just $8.4M in 2024, versus an $800M valuation set in December 2021, and no new funding round has been reported since then as of July 2026.
Who founded CyCognito and when?: CyCognito was founded in 2017 by Rob Gurzeev and Dima Potekhin. The company is headquartered in Palo Alto, California, and remains privately held and venture-backed as of July 2026.
Could AI replace CyCognito's pentesting service?: CyCognito itself markets AI as a replacement for manual pentesting, launching 'Continuous AI Pentesting' on June 16, 2026, explicitly framing AI-driven testing as already happening in-house at customers, exposing the company's own core workflow to the same automation trend.
Who is CyCognito's biggest competitor?: Palo Alto Networks poses the largest threat: its Cortex XDR 5.0, updated in early 2026, bundles 'Unified Exposure Management' and scans roughly 500 billion ports per day, a scale standalone vendors like CyCognito cannot match.
Has CyCognito raised any funding recently?: No. Its last raise was a $100M Series C at an $800M post-money valuation in December 2021, led by The Westly Group. As of June 2026, roughly 4.5 years have passed with no new disclosed round.
Who owns CyCognito?: CyCognito is privately owned and venture-capital backed, with investors including Accel, Lightspeed Venture Partners, The Westly Group, Thomvest Ventures, The Heritage Group, and former Microsoft Chairman John Thompson, as of the December 2021 Series C.

Timeline

2026-07-19CEO Rob Gurzeev interviewed on AI expanding attack surfaces
2026-06-16Launched Continuous AI Pentesting across full exposed asset base
2025-12-16Press release cites 2025 enterprise momentum, no revenue figures
2025-05Rival Tenable acquires Apex Security for AI security
2025-01Rival Tenable acquires Vulcan Cyber
2024-01CyCognito achieves SOC 2 Type II and ISO 27001 certification
2022-12CyCognito lays off about 15percent of staff, roughly 30 people
2021-12-01Raises $100M Series C at $800M post-money valuation
2020-07-23Raises $30M Series B
2017CyCognito founded by Rob Gurzeev and Dima Potekhin

Revision history

21 July 2026

First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.

In the same band

Seqrite Meiya Pico NSFOCUS