SCYTHE

SCYTHE is a cybersecurity company that develops and operates an adversary emulation platform designed to help organizations test and validate their security defenses by simulating real-world threat actor tactics, techniques, and procedures (TTPs).

The platform enables red teams, blue teams, and security operations personnel to build, launch, and analyze attack campaigns that replicate the behavior of known threat groups such as APT33 and ransomware operators like Interlock.

SCYTHE's core offering centers on threat emulation, allowing security teams to reproduce adversary behavior in a controlled environment to assess how well existing defenses detect and respond to attacks. The platform includes a marketplace model, referred to as the SCYTHE Marketplace, which drives threat emulation innovation by providing a community and ecosystem for sharing emulation content and capabilities.

The company also operates SCYTHE Labs, which produces threat intelligence content and emulation packages tied to specific threat actors and campaigns. SCYTHE publishes analysis of real-world incidents, including ransomware attacks and espionage campaigns, and maps these to emulation exercises practitioners can run within the platform.

SCYTHE serves enterprise security teams as well as managed security service providers and has an advisory council composed of practitioners from red teaming, industrial control systems security, academic research, and penetration testing backgrounds.

The company has publicly engaged on policy issues related to critical infrastructure cybersecurity, including co-signing letters to the U.S. government on infrastructure security investment. Founder and CEO is Bryson Bort.