CyberSierra
Singapore, SG · 4 known investors
Singapore-based Cyber Sierra builds agentic AI governance, risk and compliance software for regulated enterprises.
Also known as Cyber Sierra · Fort One Technologies Pte Ltd
Founders & leadership
Investors · 4
Also in the syndicate · 1
Company profile
researched Aug 2026Cyber Sierra is a Singapore-headquartered cybersecurity company that sells an AI-native governance, risk and compliance (GRC) platform to regulated enterprises. The product is organised around a set of "AI analysts" that execute compliance workflows end to end rather than only assisting human operators: a Gap Assessment Analyst that maps regulations against internal policies paragraph by paragraph across multiple frameworks in a single pass; a Continuous Control Monitoring analyst that tests controls automatically and raises alerts when control breaks occur; an Evidence Auditor that reviews evidence artifacts and assigns compliance ratings with written reasoning; a Third Party Risk Management analyst that reviews vendor-submitted evidence and flags gaps for review by exception; and a Due Diligence analyst that completes security questionnaires from existing policies and prior responses. Outputs are presented in audit-ready form with each rating and flag traceable back to source evidence.
The company originally launched as a cyber insurtech. At its 2022 seed announcement it was described as a technology-enabled cyber insurtech provider offering cyber risk, compliance and insurance products backed by global brokers and insurers, with up to US$5 million of cyber and technology insurance coverage for small and medium enterprises operating on the cloud, alongside tools such as threat alerts, intelligence feeds, anti-phishing, vulnerability scanning and governance features. Cyber Sierra is described as a wholly owned product launched by Fort One Technologies Pte Ltd. Its current positioning targets large regulated organisations, with website references to Fortune 500 financial institutions, a defense-sector government agency, an ASX-listed bank operating in 12 countries, a global bank in ASEAN and a multinational conglomerate present in 30+ countries.
Cyber Sierra was named a Sample Vendor in the Cyber GRC and Continuous Controls Monitoring categories of the Gartner Hype Cycle for Cyber Risk Management, 2024. The company also cites an AI Trailblazer Award from Smart Nation Singapore and Google, IMDA accreditation as of 1 April 2026, and status as a solution provider to CSA Singapore's AI for Cyber Center of Excellence in 2026.
Founding story
Cyber Sierra was founded in June 2021 by Subhajit Mandal and Pramodh Rai. Rai had led technical teams at Hmlet and Funding Societies, while Mandal is a fintech and insurtech specialist with prior stints at AXA and MetLife. The founders set out to combine risk and compliance tooling with embedded cyber insurance so that cloud-native businesses could both improve security posture and obtain coverage and incident response support.
Business model
Cyber Sierra provides a software platform sold to enterprises, deployed either in the customer's own environment or as a hosted service. In its earlier phase it bundled compliance and security tooling with cyber and technology insurance underwritten by third-party brokers and insurers. Customer engagement begins with a demo/consultation process aimed at security, compliance and audit functions.
Sources describe an enterprise software platform with bundled insurance offerings in the company's earlier SME-focused phase; specific pricing terms are not disclosed. A third-party data profile lists estimated annual revenue of approximately $1,000,000.
Traction
Reported customers include a Fortune 500 financial institution, a defense-sector government agency, an ASX-listed bank operating in 12 countries, a global bank in ASEAN and a multinational conglomerate operating in more than 30 countries, with testimonials from a regional insurance group. Earlier-stage customers cited include Locofy.ai, Yocket, Leap Finance, Kinobi, Indorse and Speedoc. A third-party data profile lists 21-50 employees.
Latest developments
The company now markets a suite of agentic AI analysts covering gap assessment, continuous controls monitoring, evidence auditing, third-party risk management and due diligence questionnaires, with more than 140 integrations and flexible deployment across air-gapped, on-premises, hybrid and customer-cloud environments. It cites the AI Trailblazer Award from Smart Nation Singapore and Google, IMDA accreditation as of 1 April 2026, and selection as a solution provider for CSA Singapore's AI for Cyber Center of Excellence in 2026, and publishes 2026-dated guidance on agentic GRC, on-premise GRC and APRA CPS 234 compliance.
▸Full profile — market position, technology, go-to-market, geography, history
Market position
Positions itself as an AI-native, agentic GRC platform in contrast to incumbent GRC tools with AI features added, emphasising 100% coverage of tickets, vendors and controls versus sample-based auditing, and deployment options that keep data inside the customer environment. It was cited as a Sample Vendor in the Gartner Hype Cycle for Cyber Risk Management 2024 for both Cyber GRC and Continuous Controls Monitoring.
Stated differentiators include end-to-end workflow completion by AI agents rather than assistive drafting, full population coverage instead of 10% manual sampling, no LLM lock-in with the ability to swap models or infrastructure components, deployment in air-gapped, on-premises or customer-controlled cloud environments for data residency, and full auditability with every rating linked to its underlying evidence.
Technology
The platform runs agentic AI analysts over customer policies, frameworks, controls, vendors and assets, with more than 140 connectors including SharePoint, Archer, ServiceNow, AWS and Azure. It is designed to be model-agnostic, supporting GPT-4, Claude, Gemini or customer-supplied models, and to be deployed air-gapped, on-premises, hybrid or in the customer's chosen cloud so that data remains inside the customer perimeter. Every AI action is logged and traceable to source evidence for auditor and regulator verification.
Go-to-market
Direct enterprise sales driven by demo bookings and sharing sessions with the company's AI specialists, supported by content marketing through a blog covering GRC topics, a newsletter for CTOs and CISOs, press releases, customer testimonials and analyst recognition.
Currently regulated enterprises including banks and financial institutions, insurers, government agencies and defense organisations, with the demo form segmenting companies from 500 to 20,000+ employees. At founding the focus was small and medium enterprises operating on the cloud, including fintech, healthcare, e-procurement, ed-tech and e-commerce companies.
Geography
Headquartered in Singapore. The company began operations in Singapore and expanded to India and other Southeast Asian markets, offering insurance-backed coverage in Singapore and India; its stated enterprise customers include organisations operating across ASEAN and multi-country footprints.
History
Founded in June 2021 in Singapore as a cyber risk solutions suite launched under Fort One Technologies Pte Ltd, the company raised a US$4.3 million seed round announced in March 2022 led by Leo Capital with AppWorks, Credit Saison and angel investors, using the capital to broaden risk and compliance products, hire across functions and expand in Southeast Asia and India. In September 2024 it was named a Sample Vendor in the Gartner Hype Cycle for Cyber Risk Management for Cyber GRC and Continuous Controls Monitoring. It has since repositioned from SME cyber insurtech toward agentic GRC software for large regulated enterprises, citing IMDA accreditation as of 1 April 2026 and a 2026 solution-provider role with CSA Singapore's AI for Cyber Center of Excellence.
Compiled by commissioned research from 7 cited public sources — announcements, filings, and press listed under research sources below.
Key figures
latest reportedCompany-reported or press-reported figures, each dated to when it was claimed — not independently audited.
Timeline · 4
launches, deals, and filingsThe company states it won the AI Trailblazer Award (Smart Nation Singapore and Google), holds IMDA accreditation as of 1 April 2026, and is a solution provider to the AI for Cyber Center of Excellence of CSA Singapore in 2026.
Cyber Sierra was named a Sample Vendor in two categories - Cyber Governance, Risk and Compliance (GRC) and Continuous Controls Monitoring (CCM) - in the Gartner Hype Cycle for Cyber Risk Management, 2024.
Having started in Singapore, the company reported it was expanding into India and other Southeast Asian countries, offering cyber and technology insurance coverage in Singapore and India.
Cyber Sierra announced the completion of a US$4.3 million seed round led by Leo Capital, with participation from AppWorks, Credit Saison and angel investors from the cloud and insurance sectors. Proceeds were earmarked for expanding risk and compliance product lines, hiring across functions, and growing the SME customer base in Southeast Asia, India and other markets.
$4.3M source ↗
Dated company events from announcements, filings, and press; legal rows summarize public dockets and regulator releases.
▸Research sources · 7
primary sources listed
- CyberSierracybersierra.co · web
7 public sources were cited for this profile; the first-party ones are listed here.
Frequently asked questions
- What does CyberSierra do?
- Singapore-based Cyber Sierra builds agentic AI governance, risk and compliance software for regulated enterprises.
- Who founded CyberSierra?
- CyberSierra was founded by Subhajit Mandal, Pramodh Rai, Subhajit Mandal, CFA.
- Who are CyberSierra's investors?
- CyberSierra's investors include AppWorks Ventures, Leo Capital Ventures, Saison Capital.
- Where is CyberSierra headquartered?
- CyberSierra is headquartered in Singapore, SG.