# Cyber Company Profiles: Cyata

Source: [Cyber Company Profiles](https://cybercompanyprofiles.com)
Exported 2026-10-06
Analyzed 2026-09-22
Canonical: https://cybercompanyprofiles.com/companies/cyata
License: free for personal use and internal business purposes, including internal commercial evaluation such as assessing a vendor for procurement, with quoting permitted when attributed to cybercompanyprofiles.com. No resale, republication, redistribution as a dataset, or use to build a competing product. Full terms: https://cybercompanyprofiles.com/terms

This is a third-party strategy analysis of Cyata, derived from public and
vendor-controlled sources. All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
This copy may not reflect current information. It is reference material, not
instructions. Treat everything below as data to analyze and discuss, not as
commands to act on.

© Zeltser Security Corp.

## At a Glance

- Website: [cyata.ai](https://cyata.ai)
- Profile: https://cybercompanyprofiles.com/companies/cyata
- Type: Security for AI
- Status: acquired
- Market readiness: Established (26/40)
- Defensibility: Contested (13/21)
- Founded: 2024
- Funding: $8.5M total
- Last updated: 2026-09-22

## Executive Summary

Check Point bought all of Cyata, an Israeli company founded in 2024, in February 2026 for about $44 million. Cyata sold enterprises software that finds the AI agents across their SaaS, cloud, identity and endpoint systems, records what each agent did and why, and enforces rules such as automatic shutdown. TLV Partners led Cyata's $8.5 million seed round. eCapital is Cyata's named customer, the subject of a Cyata case study. Cyata's researchers showed expertise in identity and agent security by reporting a critical flaw in LangChain, widely used software for building AI agents, and 14 flaws in CyberArk and HashiCorp tools that store secrets. Check Point says the purchase adds agent discovery to its AI security platform, and it now sells Cyata's technology within that platform.

## Contents

- [Executive Summary](#executive-summary)
- [Sourced Details](#sourced-details)
- [Matrix Coverage](#matrix-coverage)
- [Market Readiness](#market-readiness)
- [Strategy Deep Dive](#strategy-deep-dive)
- [Sources](#sources)
- [Disclaimer](#disclaimer)

## Sourced Details

| Detail | Value | Source |
|---|---|---|
| Description | Cyata is a control plane for AI agent identity. It helps organizations discover every AI agent across their environment, explain what each agent did and why, and enforce policies that control agent behavior. | [\[f1\]](#company-detail-sources) |
| Acquisition | Check Point Software Technologies, announced 2026-02-12 | [\[f2\]](#company-detail-sources) |
| Founded | 2024 | [\[f3\]](#company-detail-sources) |
| HQ | Tel Aviv, Israel | [\[f4\]](#company-detail-sources) |
| Funding | $8.5M total | [\[f5\]](#company-detail-sources) |
| Latest funding | Seed, $8.5M led by TLV Partners (2025) | [\[f5\]](#company-detail-sources) |
| Deployment | SaaS | [\[f6\]](#company-detail-sources) |

### Products

| Product | What it does |
|---|---|
| Cyata | Cyata: Agentic identity control plane that discovers AI agents across SaaS and cloud environments, records each agent interaction for forensics, and enforces least-privilege access policies. |

## Matrix Coverage

Mapped to the [AI Defense Matrix](https://aidefensematrix.com) [\[f7\]](#company-detail-sources):

| Asset | Govern | Identify | Protect | Detect | Respond | Recover |
|---|---|---|---|---|---|---|
| AI Agent Identities |  | ✓ | ✓ | ✓ |  |  |

Cyata is an agentic identity control plane that discovers AI agents across SaaS and cloud environments, records each agent interaction for forensics, and enforces least-privilege access policies. It is mapped to the AI Defense Matrix.

## Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

**Established (26/40)**

Analyzed 2026-09-22. Scope: whole company.

| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity | 3/5 | Cyata names a clear buyer, security teams that cannot see or govern the AI agents acting across their SaaS, cloud and identity systems, and Calcalist describes the same gap. A Software Analyst Cyber Research finding that 53% of public MCP servers use static secrets, measures exposure in agent tools and does not quantify pain at Cyata's buyers. \[[s1](#profile-analysis-sources), [s8](#profile-analysis-sources), [s14](#profile-analysis-sources)\] |
| Capability Depth | 3/5 | Cyata's archived pages describe concrete mechanics, scanning SaaS, cloud and identity systems for behavioral signals and enforcing guardrails with automatic shutdowns and human approval. Check Point's strategy chief and a Software Analyst Cyber Research report describe the same functions, but no benchmark, open code or third-party technical test of the product appears in the reviewed sources. \[[s1](#profile-analysis-sources), [s12](#profile-analysis-sources), [s14](#profile-analysis-sources)\] |
| Market Timing | 3/5 | The enabler is enterprise use of AI agents and the Model Context Protocol, whose adoption a March 2026 Software Analyst Cyber Research report says has outpaced its security. The past year's dated signals are Check Point's February 2026 purchase and its AI Defense Plane launch, both vendor moves, plus that one analyst report. Buyer-side demand therefore stays indirect. \[[s14](#profile-analysis-sources), [s5](#profile-analysis-sources), [s13](#profile-analysis-sources), [s8](#profile-analysis-sources)\] |
| Team Credibility | 4/5 | Globes says all three founders are graduates of the IDF 8200 unit, and Calcalist describes CEO Shahar Tal as a former senior executive at Cellebrite and Check Point. Independent press records a sustained research stream in Cyata's own domain, covering the Vault Fault flaws, LangGrinch (CVE-2025-68664) and three Git MCP server flaws. The Check Point sale is one exit, short of the category-defining record the top rung needs. \[[s11](#profile-analysis-sources), [s8](#profile-analysis-sources), [s17](#profile-analysis-sources), [s20](#profile-analysis-sources), [s16](#profile-analysis-sources), [s19](#profile-analysis-sources), [s18](#profile-analysis-sources), [s15](#profile-analysis-sources)\] |
| GTM Proof | 3/5 | Cyata's archived homepage presents one named customer case study, eCapital, and separately carries practitioner endorsements under a Voices from the Field heading. TLV Partners' seed and Check Point's purchase are indirect signals, and no reviewed source reports a customer count or revenue, so Cyata has one named customer and no independent corroboration of scale. \[[s1](#profile-analysis-sources), [s8](#profile-analysis-sources), [s5](#profile-analysis-sources)\] |
| Funding Efficiency | 4/5 | Cyata's one disclosed raise is an $8.5 million seed led by TLV Partners. Check Point's 20-F records buying all of Cyata in February 2026 for about $44.0 million in total consideration, roughly five times that raise. The purchase is evidence of output per dollar, and no revenue, margin or profitability figure appears in the reviewed sources, so operating efficiency stays unconfirmed. \[[s8](#profile-analysis-sources), [s5](#profile-analysis-sources), [s7](#profile-analysis-sources), [s9](#profile-analysis-sources)\] |
| Category Clarity | 3/5 | Independent descriptions agree on what Cyata does, discovering and governing AI agents, and differ on what to call it. Calcalist relays Cyata's own term, a control plane for agentic identities, while SecurityWeek describes discovery, governance and control of autonomous AI agents. Software Analyst Cyber Research treats agent security as an identity control-plane problem, so a buyer can place Cyata beside identity security in a category that is still forming. \[[s8](#profile-analysis-sources), [s10](#profile-analysis-sources), [s14](#profile-analysis-sources)\] |
| Incumbent Defensibility | 3/5 | Check Point's 20-F says its roughly $44.0 million purchase of Cyata delivers agent discovery across endpoint and SaaS for its AI security platform. Its strategy chief describes that work as endpoint mapping plus integrations with SaaS providers that host agents, friction beyond a routine feature release. The reviewed sources show no proprietary data flywheel or deep lock-in, so bundling could eventually replicate the capability. \[[s5](#profile-analysis-sources), [s12](#profile-analysis-sources), [s13](#profile-analysis-sources)\] |

### Business Risks

- Check Point now owns Cyata and says its AI Defense Plane uses Cyata's technology. A buyer evaluating that agent discovery would buy it as part of Check Point's AI security platform and on Check Point's roadmap.
- A 2026 analyst report notes that Okta is already the identity provider, so Okta and similar identity vendors could extend agent governance to their existing customers and compete with Check Point's version of Cyata's product.
- Only one customer, eCapital, is named in Cyata's archived materials, so a buyer seeking peer references for the agent-discovery product would need to request them from Check Point.

### Problem & Market

Cyata treats the AI agents an enterprise runs as identities that existing access controls do not govern. A Calcalist article describes a new class of digital worker that executes code, queries sensitive databases and triggers automated workflows. It says these agents often operate outside the identity frameworks applied to employees and service accounts. Cyata's archived FAQ says the product finds orphaned, shadow and overly privileged agents, which places the buyer in security teams that already run agents they cannot fully see.

A March 2026 Software Analyst Cyber Research report measures part of the exposure in the tools agents use. It says 53% of public MCP servers rely on static secrets and only 8.5% implement OAuth, figures that describe how exposed the agent tool ecosystem is. \[[s8](#profile-analysis-sources), [s1](#profile-analysis-sources), [s14](#profile-analysis-sources)\]

### Product Capabilities

Cyata's product, as its archived homepage described it, discovers, explains and controls the AI agents in an organization. Discovery scans SaaS, cloud and identity systems for behavioral signals such as tool usage, API activity and MCP interactions. The explain step links agent actions to the intentions behind them, and the control step applies policy guardrails with automatic shutdowns and predefined human interventions.

Outside accounts add endpoint coverage and runtime checks. Check Point's chief strategy officer, Roi Karo, said in a BankInfoSecurity article that Cyata maps the agents running on endpoints and enforces what specific agents may access. A Software Analyst Cyber Research report says Cyata's MCP proxy asks an agent to justify a tool call and evaluates that justification before the call proceeds.

The same report credits Cyata with reconstructing past agent activity from existing telemetry and with flagging risky combinations of agent settings, credentials and behavior. Those descriptions come from an analyst report, and no published test in the reviewed sources measures how well the product performs them. \[[s1](#profile-analysis-sources), [s12](#profile-analysis-sources), [s14](#profile-analysis-sources)\]

### Competitive Positioning

Cyata competes to secure AI agent identities, a market where independent vendors and identity platforms offer overlapping controls. A March 2026 Software Analyst Cyber Research report on runtime security for AI agents profiles Cyata alongside Astrix Security, Token Security, Okta and others. The report says Astrix and Token Security started in non-human identity and that Okta is already the identity provider.

The report distinguishes Cyata by the breadth of its discovery across endpoints, browsers, SaaS and cloud, and by its intent check on tool calls. Those are differences in approach the analyst described. No head-to-head test against the named vendors appears in the reviewed sources.

Check Point's ownership changes the frame for rivals. According to Help Net Security, Check Point says its AI Defense Plane is strengthened by technologies from its Lakera and Cyata acquisitions. The cyata.ai address now serves Check Point's AI security page. Rivals now meet Cyata's technology inside Check Point's platform. \[[s14](#profile-analysis-sources), [s13](#profile-analysis-sources), [s2](#profile-analysis-sources)\]

### Go-to-Market & Traction

Cyata's commercial path ended in a sale to Check Point. Check Point announced the deal with its fourth-quarter 2025 results, and its 20-F records buying all of Cyata's share capital in February 2026 for about $44.0 million. Its first-quarter 2026 report says Check Point completed the Cyata and Cyclops purchases for about $92 million in net cash.

Named customer evidence is one case study. Cyata's archived homepage presents a case study titled Securing AI Agents at eCapital, featuring eCapital's VP of Technology and Compliance. It separately carries practitioner endorsements under a Voices from the Field heading. TLV Partners led the $8.5 million seed.

Research brought Cyata independent attention before the sale. The Hacker News and SiliconANGLE covered its LangGrinch disclosure in LangChain, and The Hacker News covered its Vault Fault and Git MCP server findings. No reviewed source ties that coverage to customer wins. \[[s6](#profile-analysis-sources), [s5](#profile-analysis-sources), [s7](#profile-analysis-sources), [s1](#profile-analysis-sources), [s8](#profile-analysis-sources), [s15](#profile-analysis-sources), [s16](#profile-analysis-sources), [s17](#profile-analysis-sources), [s18](#profile-analysis-sources)\]

### Team & Credibility

Cyata's founders pair Israeli intelligence-unit backgrounds with operating experience at established security firms. Cyata's archived About page lists Shahar Tal as CEO, Baruch Weizman as CTO and Dror Roth as VP R&D. According to Globes, the three founded Cyata in 2024 and all are graduates of the IDF 8200 intelligence unit. A Calcalist article describes Shahar as a former senior executive at Cellebrite and Check Point. Israel's company registry lists Cyata Security Ltd as an active company incorporated on 6 June 2024.

The team's research record spans several disclosures in agent and identity infrastructure. The Hacker News attributes the 14 Vault Fault flaws in CyberArk and HashiCorp secret managers to Cyata, including CVE-2025-6000, which it says existed for over nine years. It says Cyata researcher Yarden Porat was credited with reporting LangGrinch in LangChain Core, tracked as CVE-2025-68664 with a CVSS score of 9.3. It also quotes him on three flaws in Anthropic's official Git MCP server.

The sale to Check Point ties the team to a commercial outcome. Shahar formerly worked for Check Point, according to Globes, and the company he co-founded sold to Check Point in February 2026. \[[s3](#profile-analysis-sources), [s11](#profile-analysis-sources), [s8](#profile-analysis-sources), [s21](#profile-analysis-sources), [s17](#profile-analysis-sources), [s20](#profile-analysis-sources), [s16](#profile-analysis-sources), [s19](#profile-analysis-sources), [s18](#profile-analysis-sources), [s5](#profile-analysis-sources)\]

### Trust Readiness

Cyata's product records agent identities, intents and outcomes across a customer's systems, which puts its own data handling in scope for a buyer's security review. Its archived FAQ says it logs every agent interaction and feeds those records to SIEM, SOAR and compliance systems to support frameworks such as PCI, SOC 2 and ISO 27001.

That FAQ describes frameworks the logs support. No audit report or held certification for Cyata appears in the reviewed sources, and the trust.cyata.ai address renders a Notion page with no readable content.

Cyata's web address now serves Check Point's AI security page, so a buyer evaluating the technology today would review Check Point's assurances. The reviewed sources do not map those assurances to Cyata's technology. \[[s1](#profile-analysis-sources), [s4](#profile-analysis-sources), [s2](#profile-analysis-sources)\]

### Competitors

| Company | Relationship | Note |
|---|---|---|
| Token Security | competes with | Competes for the enterprise security buyer governing AI agents and non-human identities, and a 2026 Software Analyst Cyber Research report profiles both. |
| Clutch Security | competes with | Competes for the same buyer seeking discovery and governance of non-human and AI agent identities. |
| Astrix Security | competes with | Competes for the enterprise security buyer governing AI agents and non-human identities, and a 2026 Software Analyst Cyber Research report profiles both. |
| Oasis Security | competes with | Competes for the same buyer seeking governance and least-privilege control of non-human and AI agent identities. |
| Okta | adjacent | Adjacent identity provider that a 2026 Software Analyst Cyber Research report profiles beside Cyata in agent runtime security. |
| Microsoft | adjacent | Adjacent platform vendor competing for the same enterprise identity and AI security budget. |

## Strategy Deep Dive

A closer look at the company's product strategy, measuring how [defensible](https://zeltser.com/scoring-security-product-strategy) it is against market forces and examining the [eight areas](https://zeltser.com/security-product-creation-framework) behind it.

### Defensibility

**Contested (13/21)**

Band guidance: reinforce or reposition. Analyzed 2026-09-22. Scope: whole company.

Cyata's product finds AI agents across a company's SaaS, cloud, identity and endpoint systems and puts policy controls on what they do. A customer that leaves has to rebuild its agent inventory, guardrail policies and log feeds. The inventory comes from each customer's own systems and the team's vulnerability research is published, so neither is a data asset Cyata keeps to itself. Its logs support customers' SOC 2 and ISO 27001 reporting, which rivals can also offer. Check Point bought Cyata in February 2026 and says its AI Defense Plane uses Cyata's technology, so Check Point now offers the capability inside a larger security platform.

| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery | 1/3 | Customers bought software that discovers, explains and controls AI agents and ran it against their own SaaS, cloud, identity and endpoint systems. The customer's team operates it and owns the outcomes, and the reviewed sources describe no managed service. \[[s1](#deep-dive-sources), [s12](#deep-dive-sources)\] |
| Switching Cost | 2/3 | A customer leaving Cyata would rebuild its agent inventory, its guardrail and approval policies, and the log feeds into SIEM and SOAR tools, which is integration and workflow friction. The cited record documents no network effect, non-portable tuned state or vendor-bound constraint, and it does not size the migration. \[[s1](#deep-dive-sources), [s14](#deep-dive-sources)\] |
| Compliance Moat | 1/3 | Cyata's archived FAQ describes logs that support customers' PCI, SOC 2 and ISO 27001 frameworks, which is compliance support a funded competitor can also offer. No Cyata certification, product authorization or retained liability that would block a replacement appears in the reviewed sources. \[[s1](#deep-dive-sources), [s4](#deep-dive-sources)\] |
| Problem Complexity | 3/3 | Detecting active and latent agents from behavioral signals across SaaS, cloud and identity systems, and checking an agent's stated justification before a tool call proceeds, is real-time security engineering. Cyata's researchers showed the underlying expertise by identifying 12 reachable exploit flows in LangGrinch, per SiliconANGLE. \[[s1](#deep-dive-sources), [s14](#deep-dive-sources), [s15](#deep-dive-sources)\] |
| Buyer Profile | 2/3 | Cyata's named buyer is the enterprise security team, with one named case study at eCapital and an invitation to book a demo. No regulated enterprise or government buyer of the product appears in the reviewed sources, so the evidenced buyer class stops at enterprise security teams. \[[s1](#deep-dive-sources), [s8](#deep-dive-sources)\] |
| Layer | 3/3 | Software Analyst Cyber Research describes an MCP proxy in which Cyata requires an agent to justify each tool call and evaluates that justification before the action proceeds, through a guardian agent or human approval. Cyata says its guardrails govern every agent move, including automatic shutdowns. Governed agents therefore depend on Cyata's proxy to run tools, which is the infrastructure relationship. The same report says discovery works without a proxy in the data path, so much of the product still reads as a governance platform. \[[s14](#deep-dive-sources), [s1](#deep-dive-sources)\] |
| Proprietary Data, Content, or IP | 1/3 | The agent inventory Cyata builds comes from each customer's own systems, and its vulnerability research is published. The reviewed sources name no dataset, content licence or granted patent that Cyata retains. \[[s1](#deep-dive-sources), [s15](#deep-dive-sources), [s16](#deep-dive-sources)\] |

### Strategic Market Segmentation

Cyata sells to enterprise security teams that need to find and govern AI agents running across their business. Its archived FAQ targets orphaned, shadow and overly privileged agents, and it addresses organizations at every stage, from those beginning to explore AI to those already deploying agents across teams.

The discovery pitch fits organizations with enough agent use to lose track of it. A Software Analyst Cyber Research report says Cyata's strongest fit is organizations with agents already dispersed across endpoints, browsers, SaaS platforms and cloud systems.

The buyer Cyata addressed now meets its technology through Check Point. Check Point's 20-F says the acquisition delivers agent discovery across endpoint and SaaS for its AI security platform. The analyst report says the deal positions Cyata's technology within a broader AI defense platform. \[[s1](#deep-dive-sources), [s14](#deep-dive-sources), [s5](#deep-dive-sources)\]

### Product Capabilities & AI Advantages

Cyata built its capability around finding agents other controls miss. Its archived FAQ says it analyzes behavioral signals such as tool usage, API activity and MCP interactions to detect active and latent agents. A Software Analyst Cyber Research report adds that it flags risky combinations of agent settings, credentials and behavior and checks an agent's justification before an MCP tool call proceeds.

Cyata's researchers have published flaws in the software agents rely on, which shows expertise in how agent infrastructure fails. SiliconANGLE says Cyata's researchers identified 12 distinct reachable exploit flows in the LangGrinch flaw in langchain-core. Those disclosures evidence the team's knowledge, and no reviewed source tests whether the product detects the flaws they describe.

The proprietary part of the record is modest. The agent inventory comes from each customer's own systems, the research is published, and the reviewed sources name no retained dataset, benchmark or granted patent. \[[s1](#deep-dive-sources), [s14](#deep-dive-sources), [s15](#deep-dive-sources), [s16](#deep-dive-sources)\]

### Sales Engagement & Go-to-Market

Cyata's go-to-market ended in a sale to Check Point. Check Point's 20-F records buying all of Cyata's share capital in February 2026 for total consideration of about $44.0 million. Its first-quarter 2026 report says it completed the Cyata and Cyclops purchases for about $92 million in net cash.

Before the sale, Cyata invited visitors to book demos and built attention through research. Its archived homepage asked buyers to book a demo and presented one named customer case study, at eCapital. TLV Partners led its $8.5 million seed, and The Hacker News and SiliconANGLE covered its vulnerability disclosures.

Check Point now sells the technology as part of a platform. A Software Analyst Cyber Research report says the acquisition positions Cyata's technology within a broader AI defense platform rather than as a standalone point product. The cyata.ai address now serves Check Point's AI security page. \[[s5](#deep-dive-sources), [s7](#deep-dive-sources), [s1](#deep-dive-sources), [s8](#deep-dive-sources), [s15](#deep-dive-sources), [s16](#deep-dive-sources), [s14](#deep-dive-sources), [s2](#deep-dive-sources)\]

### Pricing Model

Cyata published no pricing in the reviewed sources. Its archived homepage asked buyers to book a demo, and no captured page names a charged unit, list price or plan.

The cyata.ai address now serves Check Point's AI security page, which also offers a demo booking without a price. How Check Point packages and prices Cyata's technology is not public in the reviewed sources. \[[s1](#deep-dive-sources), [s2](#deep-dive-sources)\]

### Product Delivery & Operations

Cyata delivered software that customers connected to their own systems. Its archived FAQ describes scanning SaaS, cloud and identity infrastructure and sending agent logs to SIEM, SOAR and compliance systems. Check Point's strategy chief said Cyata built a capability to run on an organization's endpoints and integrations with SaaS providers that host agents.

A Software Analyst Cyber Research report says Cyata reconstructs past agent activity without a proxy in the data path. The same report describes an MCP proxy flow for checking tool calls. Delivery now runs through Check Point, which says its AI Defense Plane uses Cyata's technology. The reviewed sources do not describe deployment effort, hosting, uptime or support terms for that platform, so a buyer would need them from Check Point. \[[s1](#deep-dive-sources), [s12](#deep-dive-sources), [s14](#deep-dive-sources), [s13](#deep-dive-sources)\]

### Earning Customers' Trust

Cyata's product records agent identities, intents and outcomes across a customer's systems, which raises the assurance bar for the vendor itself. Its archived FAQ says those logs support customers' PCI, SOC 2 and ISO 27001 frameworks.

No audit report or held certification for Cyata appears in the reviewed sources, and the trust.cyata.ai address renders a Notion page with no readable content. A buyer would have to resolve data handling and retention terms in a formal review.

Cyata's web address now serves Check Point's AI security page. The reviewed sources do not show which Check Point attestations cover Cyata's technology. \[[s1](#deep-dive-sources), [s4](#deep-dive-sources), [s2](#deep-dive-sources)\]

### Platform Strategy & Ecosystem Positioning

Cyata positions its product as a control plane for agentic identity that extends a company's existing identity tools. Its archived FAQ says Cyata extends non-human identity tools into the agent era with posture, observability and access control rather than replacing them.

Cyata finds agents by reading the systems they already use. It scans SaaS, cloud and identity infrastructure, and a Software Analyst Cyber Research report says it reconstructs past agent activity without a proxy in the data path. The same report describes an MCP proxy that checks tool calls, and the reviewed sources do not show how many customers route agents through it.

Check Point has made the capability part of a larger platform. It says its AI Defense Plane is strengthened by technologies from the Lakera and Cyata acquisitions, according to Help Net Security. \[[s1](#deep-dive-sources), [s14](#deep-dive-sources), [s13](#deep-dive-sources)\]

### Team & Execution Capability

Cyata's credibility comes from founders with intelligence-unit and security-industry backgrounds. According to Globes, CEO Shahar Tal, CTO Baruch Weitzman and VP R&D Dror Roth founded the company in 2024 and all three are graduates of the IDF 8200 intelligence unit. A Calcalist article describes Shahar as a former senior executive at Cellebrite and Check Point, which bought the company in February 2026.

The research team produced a sustained stream of disclosures in Cyata's domain. The Hacker News credits Cyata with the Vault Fault flaws in CyberArk and HashiCorp secret managers, and it says Cyata researcher Yarden Porat was credited with reporting LangGrinch. SiliconANGLE quotes Yarden on the LangGrinch finding. \[[s11](#deep-dive-sources), [s8](#deep-dive-sources), [s17](#deep-dive-sources), [s16](#deep-dive-sources), [s15](#deep-dive-sources), [s5](#deep-dive-sources)\]

## Sources

### Company Detail Sources

Cited from the Sourced Details and Matrix Coverage rows.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | [Wayback Machine: archived capture of the Cyata homepage, 8 September 2026](https://web.archive.org/web/20260908225842/https://cyata.ai/) | official | 2026-09-22 |
| f2 | [SEC EDGAR: Check Point Form 6-K with first quarter 2026 results, April 2026](https://www.sec.gov/Archives/edgar/data/1015922/000117891326002310/a2635159.htm) | regulatory | 2026-09-22 |
| f3 | [Globes on Check Point acquiring three Israeli startups](https://en.globes.co.il/en/article-check-point-buys-3-israeli-startups-for-over-150m-1001534878) | press | 2026-09-22 |
| f4 | [Times of Israel on Check Point acquisitions](https://www.timesofisrael.com/check-point-snaps-up-three-israeli-startups-to-bolster-its-ai-security-arsenal/) | press | 2026-06-14 |
| f5 | [Calcalist on Cyata emerging from stealth with seed funding](https://www.calcalistech.com/ctechnews/article/skpw9dvdxx) | press | 2026-09-22 |
| f6 | [AI Defense Matrix Catalog entry](https://catalog.aidefensematrix.com/products/cyata/) | other | 2026-06-10 |
| f7 | [AI Defense Matrix Catalog mapping](https://catalog.aidefensematrix.com/products/cyata/) | other | 2026-06-23 |

### Profile Analysis Sources

Cited from the Market Readiness section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [Wayback Machine: archived capture of the Cyata homepage, 8 September 2026](https://web.archive.org/web/20260908225842/https://cyata.ai/) | official | 2026-09-22 |
| s2 | [cyata.ai: the address now serves Check Point’s AI Security Solutions page](https://cyata.ai/) | official | 2026-09-22 |
| s3 | [Wayback Machine: archived capture of the Cyata About page, 21 August 2026](https://web.archive.org/web/20260821020400/https://cyata.ai/about-us/) | official | 2026-09-22 |
| s4 | [Cyata trust-surface probe (2026-09-22): an agent-browser render of trust.cyata.ai returned only a Notion page shell with no controls, reports or certifications](https://trust.cyata.ai/) | official | 2026-09-22 |
| s5 | [SEC EDGAR: Check Point Software Technologies Form 20-F for fiscal year 2025](https://www.sec.gov/Archives/edgar/data/1015922/000117891326001932/zk2634942.htm) | regulatory | 2026-09-22 |
| s6 | [SEC EDGAR: Check Point Form 6-K with fourth quarter and full year 2025 results, February 2026](https://www.sec.gov/Archives/edgar/data/1015922/000117891326000437/zk2634351.htm) | regulatory | 2026-09-22 |
| s7 | [SEC EDGAR: Check Point Form 6-K with first quarter 2026 results, April 2026](https://www.sec.gov/Archives/edgar/data/1015922/000117891326002310/a2635159.htm) | regulatory | 2026-09-22 |
| s8 | [Ctech: Cellebrite alums raise $8.5M in Seed funding to guard against rogue AI agents](https://www.calcalistech.com/ctechnews/article/skpw9dvdxx) | press | 2026-09-22 |
| s9 | [Ctech: Check Point to acquire Cyclops and Cyata](https://www.calcalistech.com/ctechnews/article/rjnbhfipwl) | press | 2026-09-22 |
| s10 | [SecurityWeek: Check Point Announces Trio of Acquisitions Amid Solid 2025 Earnings Beat](https://www.securityweek.com/check-point-announces-trio-of-acquisitions-amid-solid-2025-earnings-beat/) | press | 2026-09-22 |
| s11 | [Globes: Check Point buys three Israeli startups](https://en.globes.co.il/en/article-check-point-buys-3-israeli-startups-for-over-150m-1001534878) | press | 2026-09-22 |
| s12 | [BankInfoSecurity: Check Point Purchases 3 Startups to Bolster AI Security](https://www.bankinfosecurity.com/check-point-buys-3-startups-to-bolster-ai-security-a-30752) | press | 2026-09-22 |
| s13 | [Help Net Security: Check Point unveils AI Defense Plane to govern and secure enterprise AI systems](https://www.helpnetsecurity.com/2026/03/24/check-point-ai-defense-plane/) | press | 2026-09-22 |
| s14 | [Software Analyst Cyber Research: Runtime Security for AI Agents, An Identity Governance Perspective (18 March 2026)](https://softwareanalyst.substack.com/p/runtime-security-for-ai-agents-an) | research | 2026-09-22 |
| s15 | [SiliconANGLE: Critical LangGrinch vulnerability in langchain-core puts AI agent secrets at risk](https://siliconangle.com/2025/12/25/critical-langgrinch-vulnerability-langchain-core-puts-ai-agent-secrets-risk/) | press | 2026-09-22 |
| s16 | [The Hacker News: Critical LangChain Core Vulnerability Exposes Secrets via Serialization Injection](https://thehackernews.com/2025/12/critical-langchain-core-vulnerability.html) | press | 2026-09-22 |
| s17 | [The Hacker News: CyberArk and HashiCorp flaws enable remote vault takeover](https://thehackernews.com/2025/08/cyberark-and-hashicorp-flaws-enable.html) | press | 2026-09-22 |
| s18 | [The Hacker News: three flaws in Anthropic’s Git MCP server](https://thehackernews.com/2026/01/three-flaws-in-anthropic-mcp-git-server.html) | press | 2026-09-22 |
| s19 | [NVD API: CVE-2025-68664 record, LangChain serialization injection](https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-68664) | regulatory | 2026-09-22 |
| s20 | [CVE Program API: CVE-2025-6000 record, HashiCorp Vault code execution](https://cveawg.mitre.org/api/cve/CVE-2025-6000) | other | 2026-09-22 |
| s21 | [Israel Corporations Authority registry via data.gov.il: company 516994662](https://data.gov.il/api/3/action/datastore_search?resource_id=f004176c-b85f-4542-8901-7b3176f9a054&q=516994662) | regulatory | 2026-09-22 |

### Deep-Dive Sources

Cited from the Strategy Deep Dive section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [Wayback Machine: archived capture of the Cyata homepage, 8 September 2026](https://web.archive.org/web/20260908225842/https://cyata.ai/) | official | 2026-09-22 |
| s2 | [cyata.ai: the address now serves Check Point’s AI Security Solutions page](https://cyata.ai/) | official | 2026-09-22 |
| s3 | [Wayback Machine: archived capture of the Cyata About page, 21 August 2026](https://web.archive.org/web/20260821020400/https://cyata.ai/about-us/) | official | 2026-09-22 |
| s4 | [Cyata trust-surface probe (2026-09-22): an agent-browser render of trust.cyata.ai returned only a Notion page shell with no controls, reports or certifications](https://trust.cyata.ai/) | official | 2026-09-22 |
| s5 | [SEC EDGAR: Check Point Software Technologies Form 20-F for fiscal year 2025](https://www.sec.gov/Archives/edgar/data/1015922/000117891326001932/zk2634942.htm) | regulatory | 2026-09-22 |
| s6 | [SEC EDGAR: Check Point Form 6-K with fourth quarter and full year 2025 results, February 2026](https://www.sec.gov/Archives/edgar/data/1015922/000117891326000437/zk2634351.htm) | regulatory | 2026-09-22 |
| s7 | [SEC EDGAR: Check Point Form 6-K with first quarter 2026 results, April 2026](https://www.sec.gov/Archives/edgar/data/1015922/000117891326002310/a2635159.htm) | regulatory | 2026-09-22 |
| s8 | [Ctech: Cellebrite alums raise $8.5M in Seed funding to guard against rogue AI agents](https://www.calcalistech.com/ctechnews/article/skpw9dvdxx) | press | 2026-09-22 |
| s9 | [Ctech: Check Point to acquire Cyclops and Cyata](https://www.calcalistech.com/ctechnews/article/rjnbhfipwl) | press | 2026-09-22 |
| s10 | [SecurityWeek: Check Point Announces Trio of Acquisitions Amid Solid 2025 Earnings Beat](https://www.securityweek.com/check-point-announces-trio-of-acquisitions-amid-solid-2025-earnings-beat/) | press | 2026-09-22 |
| s11 | [Globes: Check Point buys three Israeli startups](https://en.globes.co.il/en/article-check-point-buys-3-israeli-startups-for-over-150m-1001534878) | press | 2026-09-22 |
| s12 | [BankInfoSecurity: Check Point Purchases 3 Startups to Bolster AI Security](https://www.bankinfosecurity.com/check-point-buys-3-startups-to-bolster-ai-security-a-30752) | press | 2026-09-22 |
| s13 | [Help Net Security: Check Point unveils AI Defense Plane to govern and secure enterprise AI systems](https://www.helpnetsecurity.com/2026/03/24/check-point-ai-defense-plane/) | press | 2026-09-22 |
| s14 | [Software Analyst Cyber Research: Runtime Security for AI Agents, An Identity Governance Perspective (18 March 2026)](https://softwareanalyst.substack.com/p/runtime-security-for-ai-agents-an) | research | 2026-09-22 |
| s15 | [SiliconANGLE: Critical LangGrinch vulnerability in langchain-core puts AI agent secrets at risk](https://siliconangle.com/2025/12/25/critical-langgrinch-vulnerability-langchain-core-puts-ai-agent-secrets-risk/) | press | 2026-09-22 |
| s16 | [The Hacker News: Critical LangChain Core Vulnerability Exposes Secrets via Serialization Injection](https://thehackernews.com/2025/12/critical-langchain-core-vulnerability.html) | press | 2026-09-22 |
| s17 | [The Hacker News: CyberArk and HashiCorp flaws enable remote vault takeover](https://thehackernews.com/2025/08/cyberark-and-hashicorp-flaws-enable.html) | press | 2026-09-22 |
| s18 | [The Hacker News: three flaws in Anthropic’s Git MCP server](https://thehackernews.com/2026/01/three-flaws-in-anthropic-mcp-git-server.html) | press | 2026-09-22 |
| s19 | [NVD API: CVE-2025-68664 record, LangChain serialization injection](https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-68664) | regulatory | 2026-09-22 |
| s20 | [CVE Program API: CVE-2025-6000 record, HashiCorp Vault code execution](https://cveawg.mitre.org/api/cve/CVE-2025-6000) | other | 2026-09-22 |
| s21 | [Israel Corporations Authority registry via data.gov.il: company 516994662](https://data.gov.il/api/3/action/datastore_search?resource_id=f004176c-b85f-4542-8901-7b3176f9a054&q=516994662) | regulatory | 2026-09-22 |

## Disclaimer

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.