Cyera Diligence Report
Proceed only with full financial, customer, security, legal, and cap-table diligence; public evidence supports eligibility and market relevance but not transaction pricing.
Cyera Diligence Report
Cyera is a credible high-growth private cybersecurity unicorn with strong public signals in DSPM, AI security, enterprise logos, compliance posture, and leadership depth, but the public record is insufficient to underwrite valuation, revenue quality, customer concentration, retention, legal exposure, or cap-table economics.
Rapid time-to-value, 95%+ precision, and 80% risk-reduction claims are company-published and subset-based.
Diligence request: Run benchmark tests, customer reference checks, false-positive/negative analysis, and architecture review.
Public materials do not disclose audited statements, ARR, margin, burn, cash/debt, backlog, receivables, or forecast accuracy.
Diligence request: Request financial statements, KPI pack, ARR bridge, gross margin, cash/debt, burn/runway, and board plan.
Public $9B valuation anchors do not reveal share class, liquidation preferences, option pool, debt, warrants, secondary activity, or current fair value.
Diligence request: Review cap table, financing documents, preference stack, 409A reports, and recent transaction support.
Public logos do not disclose ARR, top-customer concentration, deployment depth, renewal status, churn, or NRR.
Diligence request: Request top-customer schedule, contracts, renewal calendar, churn/NRR cohorts, usage telemetry, and reference calls.
Public review did not include comprehensive official docket, IP, open-source, acquisition, or assignment-chain searches.
Diligence request: Conduct official docket/IP searches and review legal schedule, IP assignments, OSS/SBOM, licenses, and counsel letter.
Trust and privacy pages show public posture, but audit exceptions, DPAs, incidents, subprocessors, DPIAs, and regulatory correspondence are private.
Diligence request: Review SOC 2/ISO reports, pen tests, incident log, DPA templates, subprocessors, privacy requests, and regulatory correspondence.
Newsroom signals AI-security expansion and Ryft acquisition, but integration, roadmap timing, costs, and monetization are not public.
Diligence request: Review roadmap, acquisition agreement, integration plan, acquired IP, customer pilots, and R&D cost by initiative.
Product value depends on data-store/cloud/security integrations and trust-center infrastructure controls; vendor terms and cloud cost are private.
Diligence request: Review supplier contracts, cloud spend, subprocessor list, integration dependencies, uptime, and incident history.
Public sources verify unicorn-list status and several headline financing/valuation signals, but operating financials, capital structure, projections, accounting policies, tax positions, and debt obligations are not public.
not publicly verifiable confidence: high
No audited financial statements, management accounts, revenue, margin, cash, debt, backlog, or receivable schedules were found in public sources.
| Financial area | Public status | Private request |
|---|---|---|
| Revenue, ARR, bookings, and margin | Not public; only lower-confidence third-party estimates were found. | ARR bridge, bookings, revenue-recognition policy, gross margin by product, churn, and NRR. |
| Cash, debt, runway, and burn | Not public. | Cash/debt schedule, lender documents, monthly burn, runway, and board-approved budget. |
| Backlog, deferred revenue, and AR aging | Not public. | Backlog, RPO, billings, deferred revenue, invoicing, collections, and AR aging. |
Financial quality is the highest-priority diligence gap.
Dollar amounts are public anchors, not transaction underwriting.
not publicly verifiable confidence: medium
Public materials support a high-growth financing narrative, but forecasts, plan assumptions, sales productivity, and downside scenarios are private.
| Anchor | Public evidence | Diligence implication |
|---|---|---|
| CB Insights unicorn row | $9B valuation, date joined 2024-04-09, United States, New York, Enterprise Tech, investors Accel, CyberStarts, Sequoia Capital. | Verify current valuation, financing terms, post-money support, and whether later financing or secondaries changed economics. |
| Newsroom valuation/funding media signal | Company newsroom links to a Fortune item titled "Cyera CEO Yotam Segev on raising $400 million ... $9 billion valuation." | Treat as a public media/link signal and request financing documents before relying on the amount. |
| Lower-confidence analyst/profile estimate | GetLatka profile reports $288M 2024 revenue, $6B valuation in 2025, $1.3B total funding, and 1.1K employees. | Use only as a diligence lead; reconcile against audited financials, board KPIs, and cap table. |
Public anchors are not a substitute for primary financing documents.
partially verified confidence: medium
Investor names and headline valuation are public; ownership, preferred rights, option pool, debt, and secondary transactions are private.
| Item | Known status | Diligence need |
|---|---|---|
| Named investors | Investor signal verified publicly, but holdings and rights are not. | Stockholder ledger, preferred terms, board rights, information rights, and pro rata rights. |
| Preferred stock, option pool, and dilution | Not publicly verifiable. | Cap table, option/RSU schedule, SAFEs/notes, warrants, debt, and secondary transactions. |
| Transaction valuation support | Headline public anchor only. | Financing documents, price-per-share, liquidation stack, 409A/fair value, and investor demand evidence. |
Public valuation evidence cannot determine security-level economics.
not publicly verifiable confidence: low
Tax, accounting-policy, NOL, lease, and off-balance-sheet information is not public.
Company sources support a broad data-security and AI-security product story, but public evidence does not prove classification accuracy, false-positive rates, deployment economics, platform scalability, or roadmap delivery.
partially verified confidence: medium
Public product pages describe modules for DSPM, DLP, AI Guardian, privacy, classification, remediation, access trails, identities, and integrations.
| Capability | Source evidence |
|---|---|
| AI Security Platform | Platform and company pages. |
| Agentless discovery and classification | Company and platform pages. |
| DSPM, DLP, AI Guardian, privacy, remediation, access trail, identities, integrations | Platform page. |
Company-published capability descriptions require customer and technical validation.
| Area | Verification status |
|---|---|
| Pricing and packaging | not_publicly_verifiable |
| Performance metrics | partially_verified |
| Roadmap and acquisition integration | partially_verified |
Metrics are useful leads, not audited product proof.
Conceptual only; not a verified architecture.
partially verified confidence: medium
Public newsroom signals show ongoing AI-security expansion and an acquisition by Cyera, but release dates, R&D costs, adoption, and monetization are private.
not publicly verifiable confidence: high
Public sources reviewed do not disclose list prices, discounting, usage metrics, contract terms, or packaging economics.
Public pages show credible enterprise-logo and trust-center customer signals, but customer count, top-account concentration, contract value, retention, churn, deployment depth, and reference quality remain private.
partially verified confidence: medium
Company pages reference named customers and trust-center logos, but no public revenue by customer or concentration data was found.
| Customer or logo signal | Evidence type |
|---|---|
| Paramount Pictures and Mercury Financial | Company-published customer reference. |
| Paramount, Valvoline, Vetcor, Cass Information Systems | Company-published customer story/logo signal. |
| Paramount, DocuSign, AT&T, Chipotle, Peloton | Trust-center logo/review signal. |
Logo evidence does not equal ARR concentration proof.
| Relationship area | Risk |
|---|---|
| Top-customer concentration | Logo concentration or churn can be hidden. |
| Cloud and technical suppliers | Cloud cost, security dependency, and platform API risk. |
| Channel and ecosystem partners | Channel pipeline and co-sell quality may be overestimated. |
Relationship economics require direct contract review.
Counts may include overlapping or non-customer trust/review relationships.
partially verified confidence: medium
Public materials imply investor, board, customer, compliance, and technology-ecosystem relationships, but partner economics and commitments are not disclosed.
not publicly verifiable confidence: high
Backlog, bookings, pipeline stage, win rates, and customer success metrics are not publicly verifiable.
Cyera competes in a crowded enterprise data-security and AI-security market against DSPM, DLP, CNAPP, CASB, data-governance, identity, and native cloud/security platform vendors; public evidence does not prove win rates or durable differentiation.
partially verified confidence: medium
Public product positioning spans discovery/classification, DSPM, DLP, identity/access context, and AI security, placing Cyera across multiple competitive categories.
| Competitor category | Cyera public differentiator |
|---|---|
| DSPM and data-security posture vendors | AI Security Platform breadth and agentless discovery. |
| DLP/CASB/SSE/CNAPP suites | Data-centric classification and risk context. |
| Native cloud/data-platform controls | Cross-environment visibility and AI-security positioning. |
Specific vendor-by-vendor win data is not public.
| Axis | Evidence strength |
|---|---|
| Deployment speed | Company-published only. |
| Classification precision | Company-published metric. |
| Enterprise trust | Public trust/customer materials. |
Evidence strength is mostly company-published and requires independent validation.
Competitor categories are analytical framing, not market-share proof.
partially verified confidence: medium
Publicly claimed bases of competition include agentless deployment, AI classification precision, breadth across data stores, and rapid risk reduction, but independent benchmarks are absent.
Public GTM signals show enterprise positioning, security-leader messaging, customer logos, press/newsroom activity, and active hiring, but CAC, channel mix, pipeline conversion, rep productivity, and budget efficiency are private.
partially verified confidence: medium
Cyera positions around protecting data and securing AI for security leaders, with newsroom and customer proof points supporting awareness-building.
| GTM motion | Diligence implication |
|---|---|
| Direct enterprise security selling | Likely enterprise sales motion with long security/procurement cycles. |
| Trust and compliance-led conversion | Security assurance may help deals but can also elongate review cycles. |
| Newsroom and executive media | Awareness is visible, but conversion economics are unknown. |
Public GTM evidence is qualitative.
| Metric | Why it matters |
|---|---|
| CAC, payback, and sales efficiency | Determines whether valuation can be supported by efficient ARR growth. |
| Pipeline conversion and quota attainment | Enterprise security sales may be long-cycle and resource-heavy. |
| Channel and partner contribution | Partner channels can accelerate growth but compress margin or create dependency. |
GTM efficiency cannot be assessed from public materials.
Index is analyst-scored public evidence availability, not performance.
partially verified confidence: medium
Careers and public customer signals suggest direct enterprise sales plus ecosystem/security-review motions, but channel contribution is not public.
not publicly verifiable confidence: high
Sales compensation, CAC, payback, quotas, hiring plan, and marketing budget are not public.
Product pages show technical domains and an AI-security roadmap direction, but engineering headcount, R&D spend, build-versus-buy dependencies, model-risk controls, quality metrics, and roadmap status are private.
partially verified confidence: medium
Leadership pages identify technical executives and security leadership, but detailed engineering org, quality process, and budget are private.
| Signal | Diligence implication |
|---|---|
| Founder/CTO and technical leadership | Leadership depth appears public, but org and execution metrics are private. |
| Product scope | Broad scope increases integration, QA, and support complexity. |
| Trust/security documentation | Security maturity signal needs underlying report review. |
Public evidence does not show R&D budget or quality metrics.
| Pipeline area | Verification status |
|---|---|
| AI security and agentic AI security | partially_verified |
| Discovery and classification | partially_verified |
| Remediation and action layer | partially_verified |
Roadmap status cannot be determined from public pages alone.
Use for technical diligence planning.
partially verified confidence: medium
Public materials show ongoing AI security, DLP, data discovery, classification, remediation, and acquisition-related expansion, but pipeline economics and delivery status are not public.
Public sources support a named executive team and active global hiring footprint, but full org chart, headcount, compensation, employment agreements, turnover, and employee-relations issues are not public.
partially verified confidence: medium
Named leaders are public, but reporting lines and succession planning are not.
| Name | Diligence implication |
|---|---|
| Yotam Segev | Key-person and fundraising/customer-leadership diligence. |
| Tamar Bar-Ilan; Yonatan Itai | Product and technical leadership concentration. |
| Jason Clark; Brandon Sweeney; Sharon Shaked; Steve Rog; Shira Azran; Lamont Orange; Aygun Suleymanova; Joseph Iantosca; Guy Gertner; Shiran Bareli; Yael Gertel | Indicates leadership breadth across security, revenue, finance, marketing, people, legal, and operations. |
Reporting lines are not publicly verified.
Mixed units are shown as public signals; verify against HRIS before use.
partially verified confidence: medium
Careers page lists active locations and openings but does not disclose total headcount or hiring plan.
| Workforce signal | Diligence implication |
|---|---|
| Global office/hiring locations | Multi-region employment, compliance, and coordination complexity. |
| Active hiring categories | Growth plan may require continued GTM hiring and cash investment. |
| Third-party headcount estimate | Estimate should be reconciled to HRIS; not a definitive count. |
Headcount data must be verified against HR records.
not publicly verifiable confidence: high
Executive names are public; compensation, equity, retention packages, and invention-assignment coverage are private.
inconclusive confidence: low
No public labor disputes were identified in the sources reviewed, but this was not a comprehensive docket or HR review.
Public trust and privacy pages show a mature security/privacy posture, but litigation, regulatory correspondence, IP ownership, customer indemnities, insurance claims, subprocessors, and incident history require private legal review.
inconclusive confidence: low
No verified pending lawsuit against Cyera was established from the usable public sources, but a comprehensive official docket search was not completed.
| Matter | Verification status |
|---|---|
| Pending lawsuits against Cyera | inconclusive |
| Lawsuits initiated by Cyera | inconclusive |
| IP ownership and licenses | not_publicly_verifiable |
This is not a substitute for official docket and IP searches.
| Area | Diligence request |
|---|---|
| Security and compliance frameworks | SOC 2 report, ISO certificate scope, PCI/HIPAA applicability, VPAT, audit exceptions, and customer security questionnaire history. |
| Privacy and personal-data processing | DPA templates, subprocessors, transfer impact assessments, retention policy, DPIAs, privacy requests, and regulatory correspondence. |
| Incident and insurance history | Incident log, breach notifications, insurance policy/claims, pen-test results, remediation plans, and customer notices. |
Underlying compliance reports likely require NDA/data-room access.
Heatmap reflects public-evidence gaps, not confirmed adverse events.
inconclusive confidence: low
No public evidence of lawsuits initiated by Cyera was verified from the sources used.
not publicly verifiable confidence: medium
Product and brand claims are public, but patent portfolio, trade-secret protection, open-source obligations, and invention assignments were not verified.
partially verified confidence: medium
Trust center and privacy policy provide public compliance/privacy signals, but audit reports, exceptions, incidents, regulatory correspondence, and customer data-processing terms are private.
| ID | Claim | Status | Sources |
|---|---|---|---|
| EC-001 | CB Insights lists Cyera as a private unicorn at a $9B valuation, joined 2024-04-09, United States, New York, Enterprise Tech, with Accel, CyberStarts, and Sequoia Capital named as investors. | verified high | SRC-001 |
| EC-002 | Cyera appears active rather than IPOed, acquired, or shut down based on current company, newsroom, trust, privacy, and careers pages. | verified medium | SRC-002SRC-006SRC-007SRC-008 |
| EC-003 | Cyera publicly positions itself as an AI Security Platform with modules spanning data protection, access governance, AI security, DLP, privacy, classification, remediation, access trails, identities, and integrations. | verified medium | SRC-003 |
| EC-004 | Cyera describes agentless deployment and AI-powered classification, including a company-page claim of deployment in five minutes and 95% accuracy. | partially verified medium | SRC-002 |
| EC-005 | Cyera's platform page claims less than one day to value, 74PB in 7 days, 95%+ precision, and 80% less risk in three months based on a subset of customer examples. | partially verified medium | SRC-003 |
| EC-006 | Cyera public customer signals include Paramount Pictures, Mercury Financial, Valvoline, Vetcor, and Cass Information Systems. | partially verified medium | SRC-002SRC-005 |
| EC-007 | Cyera trust-center customer signals include Paramount, DocuSign, AT&T, Chipotle, and Peloton as organizations that trust or reviewed Cyera. | partially verified medium | SRC-004 |
| EC-008 | Cyera Trust Center lists compliance and assurance topics including CCPA, EU-US DPF, GDPR, ISO/IEC 27001, PCI DSS, SOC 2, VPAT, C5, HIPAA, SIG Core, cyber insurance, application security, data security, and infrastructure/AWS. | partially verified medium | SRC-004 |
| EC-009 | Cyera company page lists a named leadership team including Yotam Segev, Tamar Bar-Ilan, Yonatan Itai, Jason Clark, Brandon Sweeney, Sharon Shaked, Steve Rog, Shira Azran, Lamont Orange, Aygun Suleymanova, Joseph Iantosca, Guy Gertner, Shiran Bareli, and Yael Gertel. | verified medium | SRC-002 |
| EC-010 | Cyera careers page shows active global footprint including New York, Tel Aviv, London, Chicago, San Francisco, St. Louis, Dallas, Toronto, and Sydney. | verified medium | SRC-006 |
| EC-011 | Cyera privacy policy describes website/platform data processing and identifies business systems and providers including Salesforce, Marketo, Google/Microsoft, ZoomInfo, Frontegg, Mixpanel, and LinkedIn. | verified medium | SRC-008 |
| EC-012 | Cyera newsroom shows active 2026 media and press activity, including a Fortune-linked headline about raising $400M and a $9B valuation and press-release headlines about board expansion and Ryft acquisition. | partially verified medium | SRC-007 |
| EC-013 | Cyera company page and CB Insights identify investor and board-linked names, including Accel, Sequoia, Coatue, Cyberstarts, and other board/investor figures. | partially verified medium | SRC-001SRC-002 |
| EC-014 | Core financial, customer, legal, employee, IP, and product-performance records are not publicly verifiable from the sources reviewed. | not publicly verifiable high | SRC-001SRC-002SRC-003SRC-004SRC-006SRC-008 |
| EC-015 | GetLatka profile reports estimated/company-profile figures of $288M 2024 revenue, $6B 2025 valuation, $1.3B total funding, $540M Series E, and 1.1K employees. | inconclusive low | SRC-009 |
| ID | Publisher | Title | Accessed |
|---|---|---|---|
| SRC-001 | CB Insights | The Complete List Of Unicorn Companies | 2026-05-20 |
| SRC-002 | Cyera | Company - Cyera | 2026-05-20 |
| SRC-003 | Cyera | Platform - Cyera | 2026-05-20 |
| SRC-004 | Cyera | Trust Center - Cyera | 2026-05-20 |
| SRC-005 | Cyera | Cyera customer and homepage snippets | 2026-05-20 |
| SRC-006 | Cyera | Careers - Cyera | 2026-05-20 |
| SRC-007 | Cyera | Newsroom - Cyera | 2026-05-20 |
| SRC-008 | Cyera | Privacy Policy - Cyera | 2026-05-20 |
| SRC-009 | Latka | Cyera Revenue, Valuation & Growth Rate | 2026-05-20 |
This report is a public-evidence diligence snapshot, not investment advice. Important financial, legal, technical, and contractual facts remain non-public and should be verified directly with management and primary documents before any investment decision.