Try our new research platform with insights from 80,000+ expert users
XM Cyber Logo

XM Cyber Reviews

Vendor: XM Cyber
4.3 out of 5
Leave a review

What is XM Cyber?

XM Cyber is a leading hybrid cloud security company that’s changing the way innovative organizations approach cyber risk. Our attack path management platform continuously uncovers hidden attack paths to your critical assets across cloud and on-prem environments, so you can cut them off at key junctures and eradicate risk with a fraction of the effort. This overcomes the big disconnect that security teams experience when they’re presented with endless alerts, yet can’t see which exposures impact risk the most, how they come together to be exploited by an attacker, or how to efficiently eliminate them. This approach is a complete game-changer, which is why some of the world’s largest, most complex organizations choose XM Cyber to help eradicate risk. Founded by top executives from the Israeli cyber intelligence community, XM Cyber has offices in North America, Europe, and Israel.

Get the XM Cyber Buyer's Guide and find out what your peers are saying about XM Cyber, Wiz, Snyk and more!
XM Cyber is the #3 ranked solution in top Continuous Controls Monitoring solutions, #4 ranked solution in top Continuous Threat Exposure Management (CTEM) solutions, #22 ranked solution in top Cloud Security Posture Management (CSPM) solutions, and #32 ranked solution in top Vulnerability Management solutions. PeerSpot users give XM Cyber an average rating of 8.6 out of 10. XM Cyber is most commonly compared to Wiz: XM Cyber vs Wiz. XM Cyber is popular among the large enterprise segment, accounting for 52% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 12% of all views.
Buyer's Guide
XM Cyber
December 2025
Get the report
Helped 879,259 peers since 2012

Featured XM Cyber reviews

Read more reviews

XM Cyber mindshare

Product category:
Continuous Threat Exposure Management...
As of December 2025, the mindshare of XM Cyber in the Continuous Threat Exposure Management (CTEM) category stands at 13.7%, down from 14.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Continuous Threat Exposure Management (CTEM) Market Share Distribution
ProductMarket Share (%)
XM Cyber13.7%
Pentera19.4%
Cymulate18.9%
Other48.00000000000001%
Continuous Threat Exposure Management (CTEM)

PeerResearch reports based on XM Cyber reviews

TypeTitleDate
CategoryContinuous Threat Exposure Management (CTEM)Dec 30, 2025Download
ProductReviews, tips, and advice from real usersDec 30, 2025Download
ComparisonXM Cyber vs PenteraDec 30, 2025Download
ComparisonXM Cyber vs CymulateDec 30, 2025Download
ComparisonXM Cyber vs Zafran SecurityDec 30, 2025Download
Suggested products
TitleRatingMindshareRecommending
Wiz4.5N/A96%33 interviewsAdd to research
Snyk4.1N/A100%50 interviewsAdd to research
 
 
Key learnings from peers
Last updated Oct 28, 2025

Valuable Features

XM Cyber's attack simulation and quantification capabilities enable efficient security testing and risk management at both executive and technical levels. It focuses on lateral movement, choke points, and risk assessment, resulting in accelerated patching and reduced risk. The attack surface management feature provides comprehensive visibility from external reconnaissance to internal vulnerabilities. Organizations experience significant cost savings by reducing IT management time and prioritizing significant risks, improving security posture and supporting quantitative risk assessments.
  • "XM Cyber made it clear that browser vulnerabilities were the top priority because the platform was able to examine how vulnerabilities within our estate could be exploited and what the path would be from some bad actor in order to exploit those vulnerabilities."
  • "Six weeks into using XM Cyber, we saw a compelling return on investment—primarily in risk reduction, with a specific issue our other security tooling did not pick up but XM Cyber did, reducing IT remediation time and saving over 60,000 US dollars per year while significantly lowering our loss exposure amount."
  • "Since implementing XM Cyber, we have improved the way we are doing patching, focusing on the choke points in our patching cycle, and it improves the way we assess the risk."

Room for Improvement

XM Cyber could enhance its diff visualization, comparing network activity over different periods. Improvements in mobile exposure and IBM i equipment handling are desired. Expansion in vulnerability identification and closer integration in the vulnerability management cycle is needed. Users recommend cheaper pricing and the addition of chat interfaces for ease of use. Access to querying languages for better business analysis is sought after. XM Cyber is open to future suggestions, enhancing its capabilities over time.
  • "We have not saved any time or effort, but we can prove that the effort involved around vulnerability management has been better spent to greater effect, and we've been able to demonstrate that vulnerabilities that do represent a high risk have been remediated more rapidly and more effectively."
  • "We have high expectations for the next generation, such as a chat interface to ask questions."
  • "There are many interesting things about XM Cyber, but the part that can be improved is the mobile exposure and the IBM i specific equipment."

ROI

XM Cyber reduces the need for extensive teams managing vulnerabilities, saving costs and increasing security. It quantifies and tracks risk, improving management outcomes. Within six weeks, risk reduction marked a significant ROI, revealing issues missed by other tools. The time spent on IT remediation decreased from 15% to 8%, yielding considerable savings. While time spent on vulnerability management remains unchanged, the effectiveness has increased, accelerating high-risk remediation.

Pricing

  • "We have to pay standard licensing fees."

Popular Use Cases

XM Cyber enhances security by identifying critical vulnerabilities and visualizing attack paths. Users leverage it to prioritize remediation efforts, focusing on risks to essential assets. XM Cyber analyzes scenarios like lateral movement in hybrid environments, offering insights beyond traditional patch management. By simulating real-world attacks, XM Cyber highlights chokepoints, enabling efficient risk management. It helps organizations concentrate on vulnerabilities that can be most easily exploited, optimizing time and resources while securing critical infrastructure.

Service and Support

XM Cyber customers praise its customer service and support, highlighting responsiveness and effective help. Many say no complaints arise, with some describing the support as one of the best compared to other security vendors. Users appreciate the prompt handling of complex issues, and some rank the customer support highly. However, some mention challenges in employee training due to organizational changes within XM.

Deployment

XM Cyber's initial setup is frequently praised for its simplicity and efficiency. Users appreciate its easy deployment, especially in cloud-based installations, and the seamless integration without disrupting existing systems. While some encounter challenges with agent deployment, most users commend it for not necessitating server reboots. Training is well-regarded and support teams are described as professional. Despite some reported complexities, users find significant value, reinforcing their commitment to XM Cyber's implementation.

Scalability

XM Cyber offers easy scalability with a straightforward licensing model where agents are added automatically. It suits medium to large enterprises, allowing user expansion within minutes. Customers praise its ease of deployment and seamless scalability, rating it highly. No scaling issues have been reported, and XM Cyber's quick response to concerns fosters a strong collaborative relationship.

Stability

XM Cyber demonstrates strong reliability, handling issues promptly with real-time adjustments. Users report no major problems, even in complex IT environments, highlighting its capacity to scale effectively. They find stability satisfactory, rating it eight out of ten. While occasional glitches occur, they are swiftly resolved without significant disruption. The lack of an IDS system means short-term issues don't trigger escalations, enhancing user satisfaction with XM Cyber's performance across diverse operational frameworks.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our XM Cyber Buyer's Guide for additional reliable information.

Top industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
10%
Manufacturing Company
9%
Retailer
7%
Insurance Company
6%
Comms Service Provider
5%
Outsourcing Company
5%
Real Estate/Law Firm
5%
Government
5%
Construction Company
4%
Media Company
4%
Educational Organization
3%
University
3%
Healthcare Company
3%
Energy/Utilities Company
2%
Non Profit
2%
Hospitality Company
2%
Wholesaler/Distributor
1%
Marketing Services Firm
1%
Transportation Company
1%
Security Firm
1%
Legal Firm
1%
Performing Arts
1%
International Affairs Institute
1%
Recreational Facilities/Services Company
1%
Engineering Company
1%

Compare XM Cyber with alternative products

Go!

Learn more about XM Cyber

XM Cyber customers

Hamburg Port Authority, Plymouth Rock Corporation

Related questions

  • 103
When evaluating Continuous Threat Exposure Management (CTEM), what aspect do you think is the most important to look for?
  • 19
Why is Continuous Threat Exposure Management (CTEM) important for companies?

Product Categories

Product Categories
Continuous Threat Exposure Management (CTEM)
Continuous Controls Monitoring
Vulnerability Management
Cloud Security Posture Management (CSPM)

Popular Comparisons

Popular Comparisons
Wiz vs XM Cyber Logo
Wiz vs XM Cyber
Snyk vs XM Cyber Logo
Snyk vs XM Cyber
Microsoft Defender for Cloud vs XM Cyber Logo
Microsoft Defender for Cloud vs XM Cyber
SentinelOne Singularity Cloud Security vs XM Cyber Logo
SentinelOne Singularity Cloud Security vs XM Cyber
Darktrace vs XM Cyber Logo
Darktrace vs XM Cyber
Prisma Cloud by Palo Alto Networks vs XM Cyber Logo
Prisma Cloud by Palo Alto Networks vs XM Cyber
Qualys VMDR vs XM Cyber Logo
Qualys VMDR vs XM Cyber
Tanium vs XM Cyber Logo
Tanium vs XM Cyber
Tenable Nessus vs XM Cyber Logo
Tenable Nessus vs XM Cyber
Zafran Security vs XM Cyber Logo
Zafran Security vs XM Cyber
CrowdStrike Falcon Cloud Security vs XM Cyber Logo
CrowdStrike Falcon Cloud Security vs XM Cyber
Tenable Security Center vs XM Cyber Logo
Tenable Security Center vs XM Cyber
Orca Security vs XM Cyber Logo
Orca Security vs XM Cyber
Pentera vs XM Cyber Logo
Pentera vs XM Cyber
Trend Vision One - Cloud Security vs XM Cyber Logo
Trend Vision One - Cloud Security vs XM Cyber
See all alternatives
 
XM Cyber Reviews Summary
Author infoRatingReview Summary
Group CISO at a insurance company with 51-200 employees4.5XM Cyber helps me manage risk by simulating attacker behavior, improving remediation focus, and reducing loss exposure; its deployment was smooth, support is excellent, and we've seen real savings and enhanced visibility into both data center and cloud environments.
Chief Information Security Officer at a financial services firm with 5,001-10,000 employees4.0I've used XM Cyber for over two years to prioritize high-risk vulnerabilities, effectively focusing remediation efforts. Its attack path mapping is invaluable, though deeper integration with other tools would enhance its overall threat and vulnerability management capabilities.
IT Security manager at a tech services company with 10,001+ employees4.5I've used XM Cyber for two years to assess attack paths and improve risk management, especially around choke points, seeing strong ROI. It's stable, scalable, and effective, though mobile exposure and IBM i support could be improved.
Director at ST Electronics4.0I find XM Cyber useful for identifying network vulnerabilities, with attack simulation being its most valuable feature for testing security. However, it could improve by expanding its vulnerability identification across more areas. Return on investment isn't mentioned.
Ffounder at It.sec4.5No summary available