Cyberesist provides automated cybersecurity auditing and compromised-access monitoring platforms for MSPs and MSSPs. Its CYBERESIST platform scans external attack surfaces, Active Directory, and Azure/M365 environments, while CYBERCREDS continuously monitors dark web and Telegram logs to detect stolen credentials before attackers exploit them. The platforms require no agents or probes and generate actionable remediation reports.
Funding
Funding not disclosed
Founders
Product
Problem
Traditional cybersecurity solutions such as SOC, SIEM, and EDR detect attacks only when they occur, leaving organizations vulnerable to blind spots that attackers can exploit. Regular security audits are essential to identify and correct these gaps, but manual audits are time-consuming, costly, and often fail to keep pace with the growing number of AI-driven attacks.
Solution
Cyberesist provides two automated platforms that reveal security blind spots before attackers can exploit them. CYBERESIST automates comprehensive security audits across external attack surfaces, Active Directory, and Azure/Microsoft 365 environments, detecting vulnerabilities, misconfigurations, and attack paths without requiring agents, probes, or event log collection. CYBERCREDS continuously monitors dark web forums, Telegram channels, and private markets for compromised credentials and infostealer logs, alerting organizations within 72 hours (or within the first hour for critical alerts) so they can revoke exposed access. Both platforms generate detailed reports with risk categorization and remediation recommendations, enabling organizations to fix vulnerabilities proactively rather than reactively.
Target Audience
Primary customers are MSPs and MSSPs that need to audit their clients' attack surfaces and monitor for compromised credentials, as well as mid-sized and large organizations seeking automated security assessments of their external web presence, Active Directory, and cloud environments.
Features
- External attack surface management (EASM) with pre-scanning, subdomain discovery, shadow IT inventory, and data leak detection across search engines, cloud resources, and source code repositories
- Active Directory auditing that identifies privileged account risks, Kerberoasting, dangerous delegations, attack paths via ACLs and PKI templates, and password management weaknesses
- Azure Entra-ID and Microsoft 365 security assessment covering MFA enforcement, privileged identity management, legacy authentication, Secure Score, and sign-in risk analytics
- OSINT investigations including email configuration checks, DNS takeover risks, domain squatting detection, and website counterfeit identification
- OWASP Top 10 web application testing with over 80 tools and detection of more than 100 vulnerability families
- Continuous credential monitoring with real-time matching against domains, emails, and IPs, including session cookie risk assessment and machine infection profiling
- Automated reporting in French or English with Word, Excel, and PDF formats, including attack surface mapping, detailed findings, and prioritized action plans