XM Cyber announced a strategic collaboration with Google Cloud at Black Hat USA 2025, integrating its Continuous Exposure Management (CEM) platform with Google Security Operations’ cloud-native SIEM and SOAR capabilities. This partnership, showcased at booth #5439, aims to deliver enriched threat exposure insights, enabling enterprises to prioritize and mitigate risks effectively.
XM Cyber integrates CEM with Google Security Operations for enhanced threat management.
Integration prioritizes alerts based on attack path analysis and critical asset reachability.
Features Attack Graph Analysis™ to identify high-risk chokepoints for remediation.
Demos available at Black Hat USA 2025, booth #5439.
Gartner predicts 50% reduction in cyberattack impact by 2028 with SOC data enrichment.
Streamlines incident response with automated workflows and real-time breach point detection.
XM Cyber’s CEM platform, integrated with Google Security Operations, provides SOC analysts with contextual insights to prioritize alerts based on their position within attack paths. The platform’s Attack Graph Analysis™ identifies critical chokepoints where multiple attack paths converge, enabling targeted remediation. Key features include streamlined incident response through optimized detection rules, automated response workflows with detailed justification, and enhanced threat management by refining attack scenarios with real-time incident data. “We’re helping to transform the way SOC teams prioritize and analyze alerts,” said Menachem Shafran, SVP Strategy & Innovation at XM Cyber.
The integration addresses the growing complexity of hybrid cloud environments, where 71% of organizations face exposures enabling attacker pivots from on-premises to cloud systems. By correlating alerts with business risk, the solution reduces remediation time by up to 30%, as reported by a U.S. insurance firm using XM Cyber’s platform. Gartner forecasts that by 2028, organizations leveraging exposure-enriched SOC data will reduce cyberattack frequency and impact by 50%, highlighting the collaboration’s potential.
XM Cyber’s platform aligns with Gartner’s Continuous Threat Exposure Management (CTEM) framework, focusing on scoping, discovery, prioritization, validation, and mobilization. The integration enhances Google Security Operations’ SIEM and SOAR capabilities, supporting AWS, Azure, GCP, and Kubernetes environments. This collaboration builds on XM Cyber’s 2024 initiatives, including External Attack Surface Management (EASM) and Vulnerability Risk Management (VRM), which prioritize vulnerabilities on critical assets and chokepoints.
Attendees at Black Hat USA 2025 can experience live demonstrations of the integration at booth #5439, showcasing how XM Cyber’s insights enhance Google Security Operations’ ability to detect and respond to threats. The partnership leverages Google Cloud’s infrastructure to deliver sovereign, secure solutions, aligning with the needs of enterprises managing complex attack surfaces.
XM Cyber’s collaboration with Google Cloud marks a significant advancement in proactive cybersecurity. By integrating Continuous Exposure Management with Google Security Operations, the partnership empowers SOC teams to focus on high-impact risks, streamline incident response, and strengthen defenses against evolving threats.
XM Cyber is a leader in hybrid cloud exposure management that’s changing the way organizations approach cyber risk. XM Cyber transforms exposure management by demonstrating how attackers leverage and combine misconfigurations, vulnerabilities, identity exposures and more, across AWS, Azure, Google Cloud and on-prem environments to compromise critical assets. With XM Cyber, you can see all the ways attackers might go, and all the best ways to stop them, pinpointing where to remediate exposures with a fraction of the effort. Founded by top executives from the Israeli cyber intelligence community, XM Cyber has offices in North America, Europe, Asia Pacific and Israel.
TechIntelPro empowers B2B technology decision-makers with the latest industry trends, deep insights, leadership perspectives and actionable intelligence to drive both organizational and professional milestones—and thrive on the tech pulse.