Cyberpion
Cyberpion is an Israeli external attack surface management (EASM) startup that provides continuous discovery, monitoring, and risk assessment of organizations external-facing digital assets, third-party connections, and shadow IT exposure.
Visit WebsiteCompany Overview
Cyberpion is a Tel Aviv-based cybersecurity company, founded in 2020, specializing in external attack surface management. The platform automatically discovers and maps an organization's entire external-facing digital footprint, including domains, subdomains, cloud assets, third-party connections, certificate configurations, and shadow IT, then continuously monitors for security risks and misconfigurations.
The platform identifies vulnerabilities in the extended attack surface that traditional vulnerability scanners miss, including compromised third-party JavaScript libraries, dangling DNS records, expired SSL certificates, exposed cloud storage, and supply chain partner risk. Cyberpion raised $27M in Series A funding led by U.S. Venture Partners and Hyperwise Ventures.
Dual-use relevance is very high: external attack surface management technology serves both commercial cybersecurity and military/intelligence applications including mapping adversary digital infrastructure, identifying vulnerabilities in enemy-facing systems, supporting offensive cyber operations target development, and protecting defense organization external digital assets from reconnaissance. The technology is also critical for protecting defense industrial base (DIB) supply chain partners' attack surfaces. Cyberpion later rebranded to IONIX as it expanded its platform capabilities.
Dual-Use Assessment
External attack surface discovery and monitoring serves both defensive enterprise cybersecurity and offensive military/intelligence operations for adversary digital infrastructure mapping and target development.
Key Technologies
- Automated external attack surface discovery and mapping
- Third-party connection and supply chain risk monitoring
- Shadow IT and cloud asset identification
- Continuous external vulnerability and misconfiguration detection
- DNS, certificate, and domain security analysis
Use Cases & Applications
- Defense industrial base external attack surface protection
- Military intelligence adversary digital infrastructure mapping
- Offensive cyber operations target development and vulnerability identification
- Enterprise third-party and supply chain digital risk monitoring
- Government agency external-facing asset security compliance
Strategic Value to U.S.-Israel Alliance
External attack surface technology serves both defensive security for DIB and government assets, and offensive intelligence capabilities for adversary infrastructure mapping.
Interested in this startup?
Learn more about our investment approach or get in touch to discuss opportunities in dual-use technology.