Skyhawk

About Skyhawk

Skyhawk Security operates in the cloud security market, providing a platform focused on preemptive threat detection and response. The company was established in May 2022 as a spin-off from Radware's (NASDAQ: RDWR) cloud security business, formerly known as Cloud Native Protector. This strategic move was accompanied by a significant $35 million Series A funding round led by Tiger Global Management, which valued the new entity at $180 million.

The company is led by CEO Chen Burshan, a veteran in the cybersecurity space who was instrumental in developing the original Cloud Security Posture Management (CSPM) category at Dome9 (acquired by Check Point). His experience in identifying the limitations of traditional, reactive security measures, which often overwhelm security teams with a high volume of alerts, shaped Skyhawk's proactive approach. The leadership team is composed of professionals with deep roots in cybersecurity and cloud technologies who aim to evolve security beyond static analysis.

Skyhawk's core offering is its Cloud Threat Detection and Response (CDR) platform, which serves clients with workloads and applications in public cloud environments like AWS, Azure, and Google Cloud. The business model appears to include a freemium option, providing basic posture management for free to attract users, with advanced features available for purchase. The platform is designed to address the shortcomings of traditional security tools that generate excessive, often false-positive, alerts. To combat this alert fatigue, Skyhawk employs a multi-layered approach using machine learning and AI to contextualize and correlate runtime events, identifying genuine attack sequences as they unfold.

A key differentiator is the AI-powered "Autonomous Purple Team." This feature acts as a continuous, automated system that combines the offensive tactics of a red team with the defensive strategies of a blue team. It proactively discovers cloud assets, analyzes configurations and vulnerabilities to map potential attack paths, and simulates attacks on a digital twin of the client's environment. The insights gained are used to adapt and improve detection models and automate responses, enabling security teams to shift from a reactive to a proactive stance. This allows for the prioritization of critical threats and reduces the mean time to detect and respond to incidents to mere seconds.