Predictive attack path intelligence — joining external exposure signals into the chains an attacker would actually walk

CloudSEK collects external threat signals and organises them by attacker logic rather than by feed. Its platform spans several modules: XVigil for digital risk protection covering phishing, data leaks, and brand impersonation; BeVigil for attack surface monitoring of shadow assets and misconfigurations; SVigil for supply chain and third-party dependency risk; AIVigil for exposed AI infrastructure, MCP servers, and leaked model credentials; and Nexus AI, a command centre that quantifies cyber risk and surfaces the alerts that matter.

What ties the modules together is the graph. Signals from the deep and dark web, brand monitoring, leaked data, and internal telemetry are mapped into a structure that represents how an adversary would chain them, then validated by agentic reasoning before a disruption workflow is proposed. The intent is to flag an attack path while it is still a path — an exposed asset plus a leaked credential plus a reachable service — rather than reporting each piece separately and leaving the correlation to an analyst. AIVigil in particular reflects the newer exposure surface created by organisations standing up AI services and agent infrastructure faster than they inventory it. CloudSEK reports use by more than 1,000 security teams including Fortune 500 enterprises. Founded in 2015, the company is headquartered in Singapore with its main engineering base in Bengaluru, India, and has raised in the region of $43M.