Sacra Logo
View PDF
View Model
Details
Headquarters
Boston, MA
CEO
William Hutchison
Website
Home  >  Companies  >  SimSpace
SimSpace
SimSpace is a cybersecurity testing platform for companies.

Revenue

$50.00M

2023

Funding

$70.00M

2023

Revenue

Sacra estimates SimSpace hit $50M in annual recurring revenue in 2023, marking significant growth as the company expands its cybersecurity simulation and training platform.

The company has seen strong momentum in both government and enterprise sectors, with major contracts from U.S. Cyber Command, FBI, and four of the top five U.S. banks. SimSpace's recent $45M funding round in December 2023 (bringing total funding to $70M) comes as the company pushes into new international markets, including Japan and Eastern Europe.

SimSpace generates revenue primarily through its Cyber Force Platform, which provides military-grade cybersecurity training environments and digital twin simulations for large enterprises, financial institutions, and government agencies. The platform allows organizations to conduct sophisticated cyber defense exercises and validate security tools in safe, isolated environments.

Valuation

SimSpace completed a $45M Series A funding round in December 2023, led by L2 Point Management.

The company has raised $70M in total funding across multiple rounds. Notable investors include L2 Point Management, MIT Lincoln Laboratory, and Wells Fargo Startup Accelerator, with additional support through the Paycheck Protection Program.

Product

SimSpace was founded in 2015 by William "Hutch" Hutchison and Lee Rossey, who previously worked together at U.S. Cyber Command and MIT's Lincoln Laboratory developing cyber training exercises for military personnel.

SimSpace found product-market fit as a cyber range platform for large financial institutions and government agencies who needed to train their security teams in realistic environments without risking their production systems. The company's first major customers included U.S. Cyber Command and several top U.S. banks.

The platform creates digital replicas of an organization's entire technology stack, from network infrastructure to security tools, allowing teams to conduct realistic cybersecurity exercises. It populates these environments with automated "digital workers" that simulate regular employee behavior, generating authentic network traffic and user activities.

Security teams use SimSpace to practice responding to simulated attacks, test new security tools, and validate their incident response procedures. For example, a bank's security team might use the platform to rehearse their response to a ransomware attack, while their regular operations continue unaffected.

The platform has expanded to serve various sectors including healthcare and critical infrastructure, offering specialized training scenarios and compliance-focused exercises. SimSpace's ranges can compress three years' worth of potential attack scenarios into 24-hour training sessions.

Business Model

SimSpace is a cybersecurity simulation platform that enables organizations to create digital replicas of their entire technology stack for security testing and training. The company operates on a subscription model, providing its Cyber Force Platform to Fortune 2000 companies, financial institutions, government agencies, and military organizations.

The platform's core value proposition lies in its ability to generate realistic network traffic and user behaviors through automated bots, allowing security teams to conduct live-fire exercises without risking their production environments. SimSpace can compress three years of unpredictable attack scenarios into 24-hour testing periods, providing granular performance metrics that help organizations evaluate their security tools and team readiness.

SimSpace partners with major security platforms like Google Mandiant, CrowdStrike, and Microsoft to deliver comprehensive testing capabilities. The company's competitive advantage stems from its military-grade technology originally developed for U.S. Cyber Command, combined with its unique ability to simulate complex enterprise environments with high fidelity.

The business model includes upsell opportunities through premium consulting services and custom scenario development. SimSpace's platform becomes more valuable to clients over time as they expand their security testing programs and integrate more of their infrastructure into the simulation environment.

Competition

SimSpace operates in the cybersecurity simulation and training market, which includes both established defense contractors and emerging technology companies focused on cyber ranges and attack simulation.

Traditional cyber range providers

Major defense contractors like Northrop Grumman, Lockheed Martin, and Raytheon dominate the government/military cyber range space. These companies typically offer large-scale, customized training environments primarily serving defense and intelligence agencies. Their solutions often require significant infrastructure investment and long-term contracts.

Attack simulation platforms

Companies like AttackIQ, SafeBreach, and Cymulate focus on continuous security validation through automated attack simulations. These platforms emphasize testing security controls and identifying gaps, but typically don't provide the full-stack environment simulation that cyber ranges offer. They operate on a SaaS model and target enterprise security teams looking to validate their defensive tools.

Emerging cyber range platforms

Newer entrants like RangeForce and Cyberbit offer cloud-based training environments that emphasize individual skills development and certification. These platforms focus on scalable, standardized training scenarios rather than the high-fidelity organizational replicas that SimSpace specializes in. They typically serve mid-market enterprises and educational institutions.

The market is seeing increased demand for solutions that can simulate both technical infrastructure and human behavior within organizations. This is driven by the recognition that effective cybersecurity testing requires realistic user activity patterns alongside technical attack scenarios. Companies are differentiating themselves through their ability to generate authentic network traffic, automate scenario creation, and provide detailed performance metrics.

TAM Expansion

SimSpace has tailwinds from the growing cybersecurity skills gap and increasing regulatory pressure on organizations to demonstrate cyber readiness, with opportunities to expand into adjacent markets like continuous security validation and cyber insurance risk assessment.

Enterprise cyber training and validation

The cybersecurity skills shortage has reached 3.4 million unfilled positions globally, creating massive demand for SimSpace's cyber range training platform. Their digital twin technology allows organizations to replicate production environments for realistic training scenarios, addressing a critical need that basic certification programs cannot meet. The company's expansion from military/government into enterprise customers, particularly financial services and critical infrastructure, demonstrates strong product-market fit.

Continuous security validation

SimSpace can leverage its simulation capabilities to move beyond training into continuous security validation, competing with players like AttackIQ in a $480B total cybersecurity market. Their platform's ability to simulate three years of attacks in 24 hours positions them to help organizations validate security controls and demonstrate compliance with evolving regulations.

Cyber insurance enablement

With cyber insurance premiums rising dramatically, SimSpace could expand into risk assessment and scoring for insurers. Their detailed performance metrics and simulation capabilities could help quantify organizational cyber readiness, enabling more accurate premium pricing and risk assessment. This would tap into both the $9.5T in projected 2024 cybercrime damages and the growing cyber insurance market.

The company's recent $45M funding round and expansion into Japan signals strong international growth potential, particularly in regions facing heightened cyber threats. Their military-grade technology creates high barriers to entry while enabling premium pricing in enterprise markets.

Risks

Dependency on military/government expertise: SimSpace's core competitive advantage stems from its military-grade cyber range technology and expertise from US Cyber Command origins. While this provides credibility, it could limit innovation and adaptability in the commercial sector where threats evolve differently than in military contexts. The company may struggle to maintain its edge if commercial competitors develop more agile, business-focused solutions.

High-touch implementation challenges: The platform requires creating detailed digital twins of customer environments and generating realistic user behavior patterns. This complex, customized approach could limit scalability and make it difficult to serve mid-market customers profitably. Long implementation cycles may slow growth and strain resources as the company expands.

Market education burden: Many organizations still rely on basic security tools and may not understand the value of sophisticated cyber ranges. SimSpace must invest heavily in market education to drive adoption beyond early adopters like banks and critical infrastructure. This could lead to longer sales cycles and higher customer acquisition costs, particularly during economic uncertainty when training budgets are scrutinized.

News

February 6, 2024

SimSpace Awarded Multi-Year Contract to Enhance Cybersecurity Preparedness in Florida

SimSpace's multi-year contract to enhance cybersecurity preparedness in Florida is a significant step towards strengthening the state's defense against cyber threats, ensuring a safer digital environment for its residents and businesses.
December 20, 2023

SimSpace Raises $45 Million in Funding to Enhance Cybersecurity Platform and Expand Market Presence

SimSpace's successful funding round of $45 million will enable the company to strengthen its cybersecurity platform and broaden its reach in the market, further solidifying its position as a key player in the industry.
August 9, 2022

Citrus Consulting Partners with SimSpace to Enhance Cybersecurity Offerings

Citrus Consulting's partnership with SimSpace will bolster their cybersecurity solutions, enabling them to provide even stronger protection against cyber threats.

DISCLAIMERS

This report is for information purposes only and is not to be used or considered as an offer or the solicitation of an offer to sell or to buy or subscribe for securities or other financial instruments. Nothing in this report constitutes investment, legal, accounting or tax advice or a representation that any investment or strategy is suitable or appropriate to your individual circumstances or otherwise constitutes a personal trade recommendation to you.

This research report has been prepared solely by Sacra and should not be considered a product of any person or entity that makes such report available, if any.

Information and opinions presented in the sections of the report were obtained or derived from sources Sacra believes are reliable, but Sacra makes no representation as to their accuracy or completeness. Past performance should not be taken as an indication or guarantee of future performance, and no representation or warranty, express or implied, is made regarding future performance. Information, opinions and estimates contained in this report reflect a determination at its original date of publication by Sacra and are subject to change without notice.

Sacra accepts no liability for loss arising from the use of the material presented in this report, except that this exclusion of liability does not apply to the extent that liability arises under specific statutes or regulations applicable to Sacra. Sacra may have issued, and may in the future issue, other reports that are inconsistent with, and reach different conclusions from, the information presented in this report. Those reports reflect different assumptions, views and analytical methods of the analysts who prepared them and Sacra is under no obligation to ensure that such other reports are brought to the attention of any recipient of this report.

All rights reserved. All material presented in this report, unless specifically indicated otherwise is under copyright to Sacra. Sacra reserves any and all intellectual property rights in the report. All trademarks, service marks and logos used in this report are trademarks or service marks or registered trademarks or service marks of Sacra. Any modification, copying, displaying, distributing, transmitting, publishing, licensing, creating derivative works from, or selling any report is strictly prohibited. None of the material, nor its content, nor any copy of it, may be altered in any way, transmitted to, copied or distributed to any other party, without the prior express written permission of Sacra. Any unauthorized duplication, redistribution or disclosure of this report will result in prosecution.