tprm
(13)
Black Kite
Black Kite is a Boston-based cybersecurity company that rates and monitors the cyber risk posed by an organization's third-party vendors and supply chain. Built from a hacker's perspective, its platform combines non-intrusive external assessments, ransomware-likelihood scoring, standards-based compliance mapping, and Open FAIR financial-impact modeling so risk teams can see, quantify, and act on the exposure hiding inside their vendor ecosystem.
Lema AI
Lema AI is a New York-based cybersecurity startup building an agentic AI platform for third-party risk management (TPRM). Founded by three veterans of Israel's Unit 8200, Lema replaces static vendor questionnaires and check-the-box compliance with continuous, behavior-based analysis that maps how vendors actually operate inside an enterprise - tracking data access, permission changes and 'risk drift' to surface real attack paths. The company emerged from stealth in February 2026 with roughly $24M in total funding, including a $17.5M Series A led by Team8.
Rescana
Rescana is a cybersecurity company that builds autonomous, AI-agent-driven third-party risk management (TPRM) and external attack surface management software. Its platform discovers, classifies, assesses, monitors, and helps remediate risk across a company's vendor ecosystem - including vendors with no web presence - using agentic AI and open-source intelligence (OSINT). Founded by Guy Halfon and based between New York and Tel Aviv, Rescana targets regulated, vendor-heavy industries such as banking, telecom, healthcare, real estate and government, promising vendor-risk oversight that scales without a proportional increase in security headcount.
Supply Wisdom
Supply Wisdom is a New York-based SaaS company that delivers real-time, continuous third-party and location risk intelligence. Its platform monitors suppliers and business locations across seven risk domains - financial, cyber, operational, compliance, ESG/sustainability, nth-party, and location - tracking 350+ risk metrics and pushing early-warning alerts so enterprises can act before a disruption hits. Its clients are Fortune 100 and Global 2000 firms in financial services, insurance, healthcare, and technology.
Eddie Dovzhik
Eddie Dovzhik is the co-founder and CEO of Lema AI, a New York and Israel-based cybersecurity company building what it calls the world's first Agentic Risk Engineer for third-party risk management. A former Major in Israel's Unit 8200 and a former product leader at Noname Security (acquired by Akamai), Dovzhik launched Lema in 2023 with the belief that third-party risk should be treated as a security problem rather than a compliance checklist. The company emerged from stealth in early 2026 with $24 million in total funding, including a $17.5 million Series A led by Team8.
Guy Halfon
Guy Halfon is the co-founder and CEO of Rescana, a Tel Aviv and New York based cybersecurity company building autonomous, agent-based third-party risk management. After years running security for global gaming operator Playtech and founding boutique security consultancies, he started Rescana in 2016 to connect cyber risk to business decisions. The company now uses teams of AI agents to discover, classify and assess vendors and continuously map external attack surfaces at enterprise scale, including its no-code Vega platform.
Jenna Wells
Jenna Wells is the Chief Executive Officer and a board member of Supply Wisdom, a real-time risk intelligence platform based in New York. A former U.S. Marine Corps signals intelligence officer and Purdue University graduate, she spent nearly two decades in intelligence and third-party risk management, including leadership roles at Wellington Management and Iron Mountain, before joining Supply Wisdom. She rose through the company from Head of Customer Experience to Head of Product to Chief Operating Officer, and was named CEO in June 2025 alongside a $14 million Series B funding round led by Jurassic Capital. Notably, she used the Supply Wisdom platform as a customer before joining the team that builds it.
Paul Paget
Paul Paget is the CEO of Black Kite, a Boston-based third-party cyber risk platform he joined in 2019 after a career running cybersecurity companies including PwnieExpress, Savant Protection, and Core Security Technologies. A Bowdoin history major turned career security operator, he has built and sold a string of security businesses and now leads Black Kite in the security ratings market.
Aravo Solutions
Aravo Solutions is a San Francisco-based enterprise SaaS company that builds cloud software for third-party risk, governance, and compliance. Its Intelligence First Platform - now wrapped with an AI agent layer called Aravo AI - helps Fortune 500 companies manage vendors, suppliers, and partners across 154 countries and 36 languages.
Michael Saracini
Michael Saracini is the CEO of Aravo Solutions, a San Francisco-based enterprise SaaS company he has led since 2011. With over two decades building profitable high-growth software businesses across CRM, HCM, and supply chain, Saracini has positioned Aravo as the category-defining platform for third-party risk management - managing 10.5 million suppliers and vendors across 177 countries for global enterprises in financial services, pharma, high-tech, and consumer goods. Under his leadership, Aravo has earned five consecutive Chartis Category Leader designations, won the 2025 TPRM Innovator Award, and built an AI-driven TPRM platform trusted by Fortune 500 companies navigating an era of regulatory complexity.
Rahul Tyagi
Rahul Tyagi is Co-Founder of Safe Security (formerly Lucideus), the Palo Alto-based Autonomous Cyber Risk Management platform that processes over three billion signals daily. A Certified Ethical Hacker who graduated from Lovely Professional University in 2011, he co-founded the company at IIT Bombay in 2012 alongside Saket Modi and Vidit Baxi. He has spent over a decade pioneering cyber risk quantification - using FAIR model frameworks and MITRE ATT&CK integration to give Fortune 500 boards a dollar figure on their digital exposure. Featured in Fortune India's 40-under-40, he discovered vulnerabilities in Intel, Sony, HP, TED, and dozens more before pivoting from pen-testing to platform. His most recent chapter: leading Safe Security's CyberAGI vision after closing a $70M Series C in July 2025.
Saket Modi
Saket Modi is the Co-Founder and CEO of Safe Security (formerly Lucideus), the AI-native cyber risk management platform he started building in his final year of engineering in 2012. Based in Palo Alto, he has grown Safe Security from a bootstrapped IIT Bombay-incubated startup into a 1,300-person company with over $200M in funding — backed by Cisco's legendary John Chambers — protecting the digital infrastructure of Fortune 500 companies worldwide. His audacious goal: build CyberAGI, the definitive autonomous system of intelligence and action for the modern CISO.
Safe Security
Safe Security is a Palo Alto-based cybersecurity company building an Agentic AI-native platform for cyber risk quantification (CRQ), third-party risk management (TPRM) and continuous threat exposure management (CTEM). Founded in 2012 in India as Lucideus, it now translates security posture into dollars-and-cents risk for enterprises like Google, Chevron, T-Mobile, Fidelity and IHG, and is pursuing what its founders call 'CyberAGI'.