CybelAngel

CybelAngel provides an external threat intelligence platform that helps organizations identify exposed data, internet-facing assets, leaked credentials, brand abuse, and threat activity outside the traditional security perimeter. Its monitoring is designed to surface risks across public, deep, and dark web sources so security teams can detect exposures early and respond before they are exploited.

CybelAngel combines machine learning with dedicated analyst review to prioritize the incidents that matter most and deliver verified, actionable findings instead of large volumes of raw alerts. In addition to monitoring, it supports takedowns, investigations, risk assessments, and compliance-focused services for organizations managing external exposure across supply chains, cloud environments, and digital brands.

Offerings, Capabilities, and Integrations

CybelAngel’s platform is built around outside-in visibility, helping security teams discover external exposures, investigate threat context, and accelerate remediation. Its operating model emphasizes continuous scanning, analyst-validated prioritization, and actionable incident reporting so teams can move from detection to containment with less noise and clearer business context.

CybelAngel is designed to fit into existing security operations rather than replace them. The company supports workflow integrations for detection and monitoring, orchestration and automation, identity and access response, and team collaboration, and it also supports OIDC-based single sign-on for platform access. CybelAngel Connect extends this model into tools such as SIEM, SOAR, ITSM, and collaboration environments.

Products and Services

• Attack Surface Management: Discovers and monitors internet-facing assets, including shadow IT, exposed services, third-party exposures, and vulnerable external assets, to give security teams an outside-in view of what attackers can see.
• Data Breach Prevention: Detects exposed sensitive data outside the internal perimeter across sources such as public storage, cloud applications, cloud storage, and databases so organizations can remediate leaks before they are abused.
• Brand Protection: Monitors for brand impersonation and abuse, including malicious domains, fake social media accounts, fraudulent mobile apps, and other external threats that can damage customer trust and reputation.
• Cyber Threat Intelligence: Provides contextualized external threat intelligence drawn from sources such as data breaches, dark web forums, and paste sites to help teams understand and prioritize threats tied to their digital footprint.
• Credential Intelligence: Detects compromised credentials and related sensitive identity data from breach dumps, unsecured databases, malware-related exposures, paste sites, and dark web sources so organizations can reduce account takeover risk.
• Dark Web Monitoring: Monitors dark web communities and illicit marketplaces for early signs of threats, exposed data, and criminal activity relevant to the organization.
• Cybersecurity Remediation: Provides analyst-led takedown and remediation support to shorten mean time to remediation and help organizations contain critical incidents faster.
• Comprehensive Risk Analysis: Delivers continuous threat monitoring and in-depth assessments for high-stakes exposure scenarios, including third parties, M&A activity, VIP exposure, and cyber crisis monitoring.
• Cyber Risk Intelligence Services: Offers on-demand, expert-led investigations into specific threats, threat actors, phishing campaigns, fraud activity, data breaches, and indicators of compromise or attack.
• Regulatory Cyber Compliance: Supports organizations with external risk monitoring and compliance-oriented security use cases aligned to frameworks and regulations such as DORA, NIS 2, and NIST CSF.
• API Threat Detection: Extends asset discovery to uncover rogue, zombie, shadow, and vulnerable external-facing APIs and supports active testing to identify API-related weaknesses.
• Third-Party Risk Assessment: Evaluates the external security posture of vendors, partners, and suppliers with risk scoring, benchmarking, and mitigation guidance to reduce supply chain exposure.
• M&A Cyber Due Diligence: Assesses the external cyber exposure of acquisition targets to identify hidden liabilities, quantify risk, and support more informed transaction decisions.
• VIP Exposure Analysis: Analyzes the digital footprint of key individuals to identify credential leaks, reputational risks, doxing exposure, and other personal or professional threats.

Target Customers

CybelAngel is aimed primarily at enterprise security organizations that need visibility beyond the firewall, especially teams responsible for external exposure management, SOC operations, incident response, brand abuse monitoring, and cyber risk reduction. Its customer base spans complex, high-risk, and highly visible environments where exposed assets, leaked data, and impersonation can create material operational or reputational impact.

The company markets strongly into industries such as financial services, manufacturing, healthcare and pharmaceuticals, retail, government, and transport and logistics. Its services also align with the needs of third-party risk teams, M&A and due diligence stakeholders, executive protection functions, and managed security service providers that want to offer external threat intelligence as a managed service.

Cloud Integrations and Marketplace

• Google Cloud Marketplace: CybelAngel is available through Google Cloud Marketplace, which the company uses to streamline procurement and make its external threat intelligence offering accessible to Google Cloud customers.

Key People

• Erwan Keraudy: CEO
• Grégory Faitas: Deputy CEO
• Jeff Gore: CRO
• Todd Carroll: CISO
• Romain Brun: VP Marketing & Business Ops
• Oliver Quix: Senior Director of Global Sales

Key Facts

• Headquarters: Paris, Île-de-France, France
• Employees: Approximately 150
• Annual Revenue: Undisclosed
• Parent Company: None
• Subsidiaries: None
• Publicly Listed: Private

Analyst Recognitions

• Gartner: 2025 Gartner Hype Cycle for Cyber-Risk Management — Sample Vendor for Digital Risk Protection Services (DRPS). 2021 Gartner Competitive Landscape: Digital Risk Protection Services — Best of Breed for data leakage detection.
• Forrester: 2025 Q1 Forrester landscape report for External Threat Intelligence Service Providers — Featured as one of 29 leading providers.