cyber-risk-quantification
(6)
Black Kite
Black Kite is a Boston-based cybersecurity company that rates and monitors the cyber risk posed by an organization's third-party vendors and supply chain. Built from a hacker's perspective, its platform combines non-intrusive external assessments, ransomware-likelihood scoring, standards-based compliance mapping, and Open FAIR financial-impact modeling so risk teams can see, quantify, and act on the exposure hiding inside their vendor ecosystem.
CyberSaint
CyberSaint is a Boston-based cybersecurity software company whose CyberStrong platform helps enterprises assess, quantify, and communicate cyber risk. It converges compliance, security operations, and risk management, using AI to automate control scoring, translate cyber risk into financial terms, and produce board-ready reporting for Fortune 500 companies and high-growth organizations.
DeNexus
DeNexus is a Boston-based cyber risk company that quantifies the financial impact of cyber threats to industrial and operational technology (OT) environments. Its DeRISK platform uses AI, machine learning and simulation to predict where breaches are likely in OT/ICS networks, express that risk in dollar terms, and prioritize mitigation by ROI. The company serves CISOs, boards, risk managers and cyber insurers across data centers, energy, manufacturing and transportation, and has expanded into agentic-AI underwriting automation for the industrial cyber insurance market.
Maxxsure
Maxxsure is a Dallas-area cybersecurity company that turns cyber risk into a number executives can actually use. Its flagship product, the M-Score, quantifies an organization's cyber risk on a 0-to-1000 scale by collecting thousands of internal, external, and third-party variables and running them through AI and machine-learning models. Rather than handing boards another vulnerability report, Maxxsure frames risk in financial terms - 'down to the dollar' - so leadership can decide what to remediate, what to accept, and how much cyber insurance they actually need.
RiskOpsAI
RiskOpsAI (formerly OptimEyes AI) is an AI/ML-driven integrated risk modeling and decisioning platform that helps Fortune 2000 and Global 500 organizations discover, measure, prioritize, predict and optimize cyber risk, data privacy, third-party threat exposure and regulatory compliance. Its patented, AI-native risk quantification aggregates data from multiple risk sources into a single source of truth, giving CXOs a near real-time, transparent view of enterprise-wide risk and the actions to remediate it.
Safe Security
Safe Security is a Palo Alto-based cybersecurity company building an Agentic AI-native platform for cyber risk quantification (CRQ), third-party risk management (TPRM) and continuous threat exposure management (CTEM). Founded in 2012 in India as Lucideus, it now translates security posture into dollars-and-cents risk for enterprises like Google, Chevron, T-Mobile, Fidelity and IHG, and is pursuing what its founders call 'CyberAGI'.