# XM Cyber: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 20 judge labels across 1 category by 13 of 14 models. Page: https://www.gane.ai/index/it/vendors/xm-cyber

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Breach and attack simulation](https://www.gane.ai/index/it/security/breach-and-attack-simulation/index.md) | 0% | 16 | 10% | 20 |

## What the models said for it

- "Choose XM Cyber when prioritization depends on identifying the shortest or most dangerous attack paths" (Perplexity Sonar, BAS)
- "Choose XM Cyber if you need to visualize attack paths and prioritize risk across a complex network." (GLM 4.7 FlashX, BAS)
- "XM Cyber excels at revealing inter-connected breach paths across identity and infrastructure." (Gemini 3.5 Flash, BAS)
- "Choose Pentera/NodeZero/XM Cyber when the priority is autonomous internal exploit chaining" (Muse Glimmer 30B, BAS)

## And against it

- "AttackIQ, Keysight Threat Simulator, and XM Cyber—scale or integration concerns" (GPT-6 Luna, BAS)
- "now often positioned more as exposure/attack-path validation than pure BAS" (GPT-5.4 mini, BAS)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 1 | 1 | 0 | 2 |
| GPT-5.4 mini | 0 | 0 | 0 | 1 | 1 |
| Gemini 3.5 Flash | 0 | 2 | 0 | 0 | 2 |
| Perplexity Sonar | 0 | 1 | 0 | 0 | 1 |
| Grok 4.20 | 0 | 2 | 2 | 0 | 4 |
| Mistral Small | 0 | 0 | 2 | 0 | 2 |
| DeepSeek V4 Flash | 0 | 1 | 0 | 0 | 1 |
| Llama 4 Maverick | 0 | 0 | 1 | 0 | 1 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 1 | 0 | 0 | 1 |
| GLM 4.7 FlashX | 0 | 1 | 0 | 0 | 1 |
| MiniMax M2.5 | 0 | 0 | 1 | 0 | 1 |
| GPT-6 Luna | 0 | 0 | 0 | 1 | 1 |
| Muse Glimmer 30B | 0 | 1 | 1 | 0 | 2 |

## Sources returned with these answers

The sites and pages cited by the answers that named XM Cyber, from 43 of the 51 answers that named it (only the models that return a source list).

### Domains cited

- csoonline.com: 23
- picussecurity.com: 23
- g2.com: 19
- cymulate.com: 18
- socradar.io: 17
- securityopswire.com: 14
- guideflow.com: 12
- safebreach.com: 11
- techtarget.com: 11
- gane.ai/index: 10

### Pages cited

- https://csoonline.com/article/2132289/breach-and-attack-simulation-tools.html: 23
- https://socradar.io/blog/top-10-breach-and-attack-simulation-bas-software-2024: 17
- https://g2.com/categories/breach-and-attack-simulation-bas: 14
- https://securityopswire.com/best-breach-and-attack-simulation-tools: 14
- https://guideflow.com/blog/breach-and-attack-simulation-software: 12
- https://techtarget.com/news/Pros-and-cons-of-7-breach-and-attack-simulation-tools/837268: 11
- https://startupstash.com/best-breach-and-attack-simulation-tools: 10
- https://verifiedmarketresearch.com/blog/top-automation-breach-and-attack-simulation-tools: 10

## In its own words

What XM Cyber's own pages state, read 2026-10-05. Stated by the vendor, not checked by the index.

- Positioning: XM Cyber is a leader in Continuous Exposure Management, helping organizations continuously reduce cyber risk by prioritizing remediation based on real attack paths across hybrid environments. (https://xmcyber.com/)
- For: organizations (https://xmcyber.com/)
- Price stated: Pricing varies based on customer needs. Contact for a custom quote. (https://xmcyber.com/platform)
- Starting price: 0.00 (https://xmcyber.com/platform)
- Customers named: Hamburg Port Authority, Bizerba, Sana Kliniken, Thalia, Save the Children, Vinci Construction, Kärcher

## What it publishes

Every page xmcyber.com exposes, read 2026-10-05: 1188 addresses. By kind, pages and the last 90 days:

- blog: 367 pages, 7 in the last 90 days, latest 2026-09-26
- case study: 69 pages, 19 in the last 90 days, latest 2026-08-18
- webinar or virtual event: 40 pages, 2 in the last 90 days, latest 2026-09-01
- conference or event: 24 pages, 0 in the last 90 days, latest 2026-06-08
- report or ebook: 31 pages, 3 in the last 90 days, latest 2026-09-01
- comparison: 10 pages, 0 in the last 90 days, latest 2026-06-01
- template or tool: 18 pages, 1 in the last 90 days, latest 2026-09-01
- glossary or explainer: 38 pages, 0 in the last 90 days, latest 2025-10-27
- podcast or video: 19 pages, 1 in the last 90 days, latest 2026-08-16
- news or press: 341 pages, 1 in the last 90 days, latest 2026-08-18
- Recent: 2026-09-26 blog: Closing the ai exposure gap course https://xmcyber.com/closing-the-ai-exposure-gap-course
- Recent: 2026-09-15 blog: Risk reporting to the board course https://xmcyber.com/risk-reporting-to-the-board-course
- Recent: 2026-09-01 webinar or virtual event: Zur Webinar SUBS fixed 1 1.mp4 https://xmcyber.com/wp-content/uploads/2026/09/Zur_Webinar_SUBS_fixed-1-1.mp4
- Recent: 2026-09-01 report or ebook: How Identity Becomes the Attack Path Ebook.pdf https://xmcyber.com/wp-content/uploads/2026/09/How-Identity-Becomes-the-Attack-Path-Ebook.pdf
- Recent: 2026-09-01 webinar or virtual event: Final marketing webinar v3 sub compressed 1.mp4 https://xmcyber.com/wp-content/uploads/2026/09/final-marketing-webinar-v3-sub-compressed-1.mp4
- Recent: 2026-09-01 template or tool: Identity and Access Security Checklist.pdf https://xmcyber.com/wp-content/uploads/2026/09/Identity-and-Access-Security-Checklist.pdf

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.