Cyolo

• Claroty sells secure access to the same industrial buyer inside a broader cyber-physical systems platform, and could fold that access into platform renewals that displace a standalone purchase.
• BeyondTrust markets privileged remote access covering cloud, on-premises and OT, so an incumbent already holding the enterprise agreement could win the compliance-driven deals Cyolo competes for.
• The cited sources show a June 2022 Series B, so a flat extension, a down round or a quiet sale would show that the growth Cyolo reports did not convert into financial strength.
• Cyolo reports its customer-growth figures, and the public loss of a named account such as Tata Chemicals or Rapac Energy would weaken its traction story.
• TD SYNNEX has a global distribution relationship with Cyolo, and a distributor shift toward a rival secure remote access vendor would cut the channel reach Cyolo's go-to-market motion depends on.
• CPS Segmentation puts asset discovery and traffic visibility next to what partners such as Dragos and Nozomi Networks sell, so an alliance could cool just as Cyolo needs those partners for reach.

Cyolo sells control over remote connections into industrial environments. The buyers it names are OT and security teams who must let employees, third-party vendors and OEMs reach control systems without interrupting production. Its homepage now presents one platform spanning secure remote privileged access and cyber-physical systems segmentation.

Independent evidence of the underlying risk arrived in the middle of 2026. CISA urged water and wastewater operators on 30 July 2026 to disconnect exposed programmable logic controllers and to send operational remote access through a VPN or gateway rather than straight to the controller. SecurityWeek reported that the alert followed a coordinated attack on OT systems at more than 30 Minnesota community water systems.

Cyolo frames the problem as too much access rather than too little. Its February 2026 announcement argues that industrial organizations already have remote access and now need to see and control what users do while connected. That framing matches the product's emphasis on supervision, session recording and just-in-time access over connectivity alone.

Buyer-side demand shows up in analyst and vendor research. Gartner published a Market Guide for CPS Secure Remote Access dated 4 February 2026 and Cyolo announced its listing as a Representative Vendor in March. Cyolo's own survey of 535 manufacturing respondents, run by Takepoint Research, reports that 88% authorize remote third-party access to OT environments. [s1, s52, s54, s6, s12, s45]

Cyolo PRO is the access product and it is built around OT constraints. The product page describes identity-based authentication with MFA for legacy OT systems, credential vaulting, password rotation, per-application policies, session recording and agentless access for third parties. Cyolo splits the architecture into an IDAC controller it calls the brain and a Gateway the customer places on-prem or in the cloud, and it says credentials, keys, policies and other secrets stay inside customer boundaries.

Version 7.0 extended the product from access mediation into OT visibility. The March 2026 release adds session intelligence that turns recordings into searchable transcripts, and passive asset and traffic discovery through a Fabric Controller that reads telemetry from existing OT switches without agents. The earlier Intelligent Supervision announcement states per-session risk scoring in future tense rather than as shipped.

Cyolo CPS Segmentation, launched on 9 July 2026, is the second product. Cyolo describes OT-first microsegmentation that discovers assets and communication flows, simulates policies against real traffic and enforces controls without a network redesign. The launch announcement places it beside remote privileged access, identity security, malware detection, secure web access and endpoint security in one platform.

Outside description of these capabilities stays thin in the reviewed record. The fullest one is the Gartner vendor profile Cyolo quotes in its own announcement, which credits a trustless architecture, mass onboarding of third-party users and support for unpatched HMIs without infrastructure upgrades. The reviewed pages carry no independent benchmark or technical evaluation, and Cyolo publishes the named customer outcomes itself. [s2, s7, s8, s31, s32, s12, s4]

Cyolo positions against VPNs and IT-centric access tools in its product messaging. Its product page contrasts Cyolo PRO with access built for IT on deployment flexibility, identity support for legacy systems and oversight controls. The TD SYNNEX announcement puts the same argument in Cyolo's own words, describing a product that is cloud routed and cloud managed without being cloud hosted.

The field around it mixes specialists with adjacent incumbents. Dispel presents OT secure remote access for industrial operations and Xona presents a zero-trust secure remote access platform for OT and ICS. Claroty sells xDome Secure Access into industrial environments for internal and third-party users, and BeyondTrust markets privileged remote access across cloud, on-premises and OT environments.

Cyolo's visible differentiators are architectural. The decentralized design keeps secrets inside the customer's boundary, the same software runs in air-gapped sites, and the identity retrofit reaches equipment that cannot support MFA natively. None of that blocks a well-resourced incumbent, though each is work a rival would have to do.

The segmentation launch expands Cyolo from remote access into machine-to-machine communication control. The cited Claroty page establishes overlap in secure access and asset inventory. [s2, s10, s22, s23, s56, s37, s32]

Cyolo runs a channel-first go-to-market. The partner page says the company is built to work hand-in-hand with partners, and Cyolo called the TD SYNNEX distribution agreement the cornerstone of the Cyolo PRO launch. An AWS Marketplace listing gives buyers a second route to purchase.

Technology alliances put Cyolo next to vendors its buyers already run. The integrations page describes an IBM QRadar pairing that correlates secure-access data with threat intelligence, and a certified Nozomi Networks integration that moves asset data between the two platforms, which Cyolo said in September 2026 is available to joint customers now. The Dragos partnership announcement describes an integration the companies plan rather than one that shipped, and the NVIDIA announcement stated global availability for the second quarter of 2025.

Named customers span energy, water, manufacturing and insurance. Rapac Energy, Tata Chemicals, Lillehammer Municipality, Viridor, Italian manufacturer Maddalena and PIB Insurance appear in published case studies, with outcomes that include cutting secure remote access costs by 70% at Maddalena and weeks of work saved at Rapac Energy.

The growth numbers are the company's own. Cyolo reports more than doubling its customer base in 2025, a five-fold increase across two years, expansion accounting for 45% of 2025 growth, and an approximately 80% compound annual growth rate within its addressable market. It publishes no revenue, no customer count and no third-party audit of those figures. [s5, s10, s25, s44, s9, s11, s4, s3, s6]

Cyolo's three co-founders are CEO Almog Apirion, CTO Dedi Yarkoni and chief architect Eran Shmuely. CTech named all three when it covered the Series A and reported 27 employees at that point, and the company page has Almog calling himself a recovering CISO. SecurityWeek covered the Series B and described a Tel Aviv-based company.

Domain standing appears in the cited research. A Cyolo contributor appears in the OWASP Non-Human Identities Top 10 contributor list, and the company's security team identified a Remote Desktop Gateway vulnerability, CVE-2023-35332, which it reported to the Microsoft Security Response Center. The reviewed record names no founder exit, and the disclosed research targets a third-party product rather than Cyolo PRO.

The go-to-market bench is separate from the founders. Cyolo's February 2026 announcement names Joe O'Donnell as chief strategy officer and channel lead, Asa Kedar as chief customer officer and Mark Edge as vice president of global sales, each with an expanded role for 2026.

Investors and the public registry round out the picture. Glilot Capital Partners led the Series A with National Grid Partners and Merlin Ventures investing, National Grid Partners led the Series B, and CB Insights also lists IBM Ventures among the backers. The Israeli Corporations Authority records Cyolo Security Ltd as an active private company incorporated on 9 January 2020. [s16, s3, s14, s28, s29, s6, s20, s36, s27, s26]

Cyolo's trust pitch is architectural. The product page says the decentralized design keeps credentials, keys, policies and other secrets inside customer boundaries at all times, which answers the vendor-compromise question an inline access broker raises. The TD SYNNEX announcement adds that Cyolo is cloud routed and cloud managed without being cloud hosted.

The reviewed pages do not provide a public attestation of Cyolo's own controls. No SOC 2 report, ISO certificate or penetration test summary appears on the probed trust surfaces or anywhere else in the reviewed pages. A vulnerability disclosure policy is named in the site footer, and the compliance page speaks about customer obligations rather than Cyolo's own controls.

Compliance is sold as a customer outcome. The regulatory-compliance page says Cyolo keeps customers aligned with regional and industry regulations and names ISA/IEC 62443, NERC CIP, NIS2 and CAF, which is framework-alignment marketing for buyers rather than an attestation about Cyolo's own controls. The product page makes the same case, listing access control, supervision, session recording and segmentation as mandate requirements the product implements. [s2, s10, s40, s1, s30]

Add analyzed competitors to compare them side by side with Cyolo.

Cyolo targets industrial enterprises and critical infrastructure operators. The published customer set, under the names the case-studies page itself uses, covers Rapac Energy, Tata Chemicals, Lillehammer Municipality and its water and wastewater operations, Italian manufacturer Maddalena, Viridor and PIB Insurance. That roster matches the manufacturing and utility messaging on the rest of the site.

The sale runs through two personas at once. Cyolo pitches operations leaders on uptime and simplicity while pitching security leaders on visibility, control and zero-trust enforcement. Its own survey of 535 manufacturing respondents puts numbers behind that split, reporting that 88% authorize remote third-party access to OT environments while 54% allow internal employee access.

Reach runs past one region. Case studies span manufacturing, energy, water and insurance operators, and the TD SYNNEX distribution agreement is global. An industry page aims the same product at AI data centers, where Cyolo argues that every facility depends on OT devices, power and cooling systems and third-party vendor support.

The freshest demand evidence is recent and mixed in origin. Gartner's Market Guide for CPS Secure Remote Access carries a 4 February 2026 date, Cyolo announced its Representative Vendor listing on 24 March 2026, and CISA's 30 July 2026 alert told water and wastewater operators to route operational remote access through a gateway. Deal sizes and segment splits stay undisclosed.

Cyolo documents its capabilities at the feature level rather than the slogan level. The product page enumerates identity-based authentication with MFA for legacy OT systems, credential vaulting and password rotation, per-application policies, session recording, supervised access and agentless third-party connections. Deployment runs on-prem, air-gapped or cloud-connected from one solution, with an IDAC controller and a Gateway placed to fit the environment.

AI shows up against the oversight burden the product itself creates. Session intelligence in v7.0 uses AI to categorize user actions and generate a searchable transcript so teams stop reviewing hours of footage, and the earlier Intelligent Supervision announcement states in future tense that Cyolo PRO will score each session for risk. The announced NVIDIA integration pointed the same way for managed service providers, with availability stated for the second quarter of 2025.

The July 2026 segmentation launch added a second machine-facing product. Cyolo CPS Segmentation discovers assets and communication flows, groups them, simulates policies against real traffic and then enforces least-privilege controls, which extends the platform from human-to-machine access into machine-to-machine control. Cyolo PRO's own v7.0 release added passive asset and traffic discovery through a Fabric Controller that reads telemetry from existing OT switches without agents.

No proprietary data asset is evidenced in the reviewed record. Cyolo says credentials, keys, policies and other secrets stay inside each customer's boundary, which is the trust pitch, and the cited pages name no dataset, content licence or granted patent that Cyolo retains. The announced session-risk scoring and the asset inventories the product discovers are the kind of output a vendor could aggregate, and the reviewed pages do not say whether Cyolo does.

Cyolo describes itself as channel-first and structures launches accordingly. The TD SYNNEX agreement, which Cyolo called the cornerstone of the Cyolo PRO launch, opens a global distributor's integrators, resellers and managed service providers as a route to industrial buyers. The partner page recruits with full access to Cyolo's sales process and ongoing support.

Technology alliances place Cyolo beside vendors the buyer already trusts. The integrations page pairs Cyolo with IBM QRadar to correlate secure-access data with threat intelligence and lists an AWS Marketplace listing, and the certified Nozomi Networks integration moves asset data between the two platforms and is available to joint customers now. Dragos and Cyolo announced a partnership whose integration the announcement describes as planned, and NVIDIA availability was announced for the second quarter of 2025.

The selling motion has moved past the founders. Cyolo's February 2026 announcement expanded the remits of Joe O'Donnell in strategy and channel, Asa Kedar in customer success and Mark Edge in global sales, while Almog Apirion still fronts the public narrative. The cited sources show a June 2022 Series B and give no revenue figure, so they do not establish the go-to-market team's economics.

Distribution breadth is real and reproducible. One global distributor, a marketplace listing and a set of named alliances give Cyolo reach it does not have to build, and the growth figures that would prove channel productivity are the company's own.

Cyolo publishes no pricing. The product pages end in a demo request, no packaging tiers appear, and the charging unit is undisclosed, so a buyer cannot tell whether Cyolo charges per user, per site, per application or per connected asset.

The opacity fits the motion rather than proving anything about it. The reviewed pages disclose no charging model and no contract terms, and the product pages route a buyer to a demo request rather than to a price. Multi-site deployment and the distributor relationship both point at contracts a buyer negotiates with a seller in the room.

The open question is the unit. Sites and connected vendors look like the natural way to size this problem, and the reviewed pages do not say how Cyolo's contracts scale across the hundreds of sites its product claims to span. The segmentation product adds a second dimension to that question, since asset counts and communication flows are what it discovers.

Deployment flexibility is the central operational claim. One solution covers on-prem, air-gapped and cloud-connected environments, the IDAC controller and Gateway are placed to fit the site, and Cyolo says no infrastructure changes are required. The agentless model removes software installation for third-party users.

Operational integration runs in both directions. Cyolo PRO connects inward to identity providers and to OT switches for asset discovery, and outward to security operations tooling, with the Nozomi integration moving asset and risk data continuously between the two platforms. Rapac Energy's case study headline claims weeks of work saved securing OT and SCADA systems.

Inline delivery cuts both ways. Vendor connections run through Cyolo, which puts the broker in the path of remote operations rather than beside them, and Cyolo describes the product as cloud routed and cloud managed without being cloud hosted. The reviewed public pages carry no SLA, no geographic data-residency commitment and no support-model detail, so operational depth cannot be inspected from outside.

Cyolo's trust argument is about custody. The decentralized architecture keeps credentials, keys, policies and other secrets inside the customer's trusted boundaries at all times, and the Gartner vendor profile Cyolo quotes says Cyolo Security does not store customer data, encryption keys or passwords. For industrial buyers wary of vendor-side incidents, that is a procurement-relevant property, and the reviewed pages do not say where session recordings and transcripts reside.

Evidence about Cyolo's own posture is thinner than the oversight it sells. No SOC 2 report, ISO certificate or penetration test summary appears on the probed trust surfaces or anywhere else in the reviewed pages, and a vulnerability disclosure policy is named in the site footer. The reviewed pages do not address private attestations.

Compliance is sold as a customer outcome rather than evidenced as a vendor posture. The regulatory-compliance page says Cyolo keeps customers aligned with regional and industry-specific regulations and names ISA/IEC 62443, NERC CIP, NIS2 and CAF. The product page lists access control, supervision, session recording and segmentation as mandate requirements the product implements for customers.

Cyolo now sells two products under one platform story. The homepage presents secure remote privileged access and CPS segmentation as one platform protecting the people, processes and systems behind critical operations, and the July 2026 launch announcement lists identity security, malware detection, secure web access and endpoint security alongside them. That is an expanding OT suite and the reviewed pages do not show other vendors building products on it.

Integrations run inward and outward. Identity providers and OT switches feed Cyolo, security operations tooling consumes what it produces, and the Nozomi integration sends Cyolo's asset data back into a partner's inventory and risk scoring. That two-way flow is the closest thing in the record to another vendor depending on Cyolo.

Buyers can meet Cyolo without meeting a Cyolo seller. TD SYNNEX puts the product in front of integrators, resellers and managed service providers, Dragos announced a planned integration, and the announced NVIDIA integration aimed at managed service providers building OT offerings. Cyolo publishes no partner or integration counts.

The segmentation launch also pushes into partner territory. Passive asset and traffic discovery overlaps what Dragos and Nozomi Networks sell, which puts Cyolo in front of a wider OT security budget and could strain the alliances its channel motion leans on.

Cyolo's founding trio pairs a former CISO with two technical founders. CEO Almog Apirion calls himself a recovering CISO on the company page, and CTech named Dedi Yarkoni as CTO and Eran Shmuely as chief architect when it covered the Series A. All three remain in post six years after the company was incorporated.

Beyond the founders the company page names a chief strategy officer, a chief customer officer and vice presidents across sales, marketing, research and development, product and customer success, and the February 2026 announcement expanded the remits of Joe O'Donnell, Asa Kedar and Mark Edge.

The investor table doubles as a go-to-market asset. National Grid Partners, the venture arm of National Grid, led the Series B, Glilot Capital Partners led the Series A alongside National Grid Partners and Merlin Ventures, and CB Insights also lists IBM Ventures among the backers.

Headcount below the named layer stays undisclosed. CTech reported 27 employees at the 2021 Series A, and no current engineering or sales headcount appears in the reviewed record.