RiskRecon provides a SaaS platform for continuous third‑party cyber risk management, assessing vendors based on continuous discovery and 39 security risk criteria. Its platform delivers risk‑prioritized action plans and capabilities for customers to engage vendors on critical issues, enabling faster assessment and remediation. The company says its customer base has nearly tripled in the last twelve months. RiskRecon will use the new capital to meet increasing global market demand for third‑party cyber risk management solutions and to expand its rapidly growing team of security professionals. Since founding in September of 2015, Global 2000 customers across industries including financial services, retail, technology, healthcare, energy, and pharmaceuticals have used RiskRecon’s technology. Following the Series B, the company has raised more than $40 million in total funding. RiskRecon provides a SaaS solution that delivers security measurements, analytics and analyst-level insight to improve third-party risk management programs. Led by CEO Kelly White, the platform discovers a vendor’s entire public IT footprint and produces actionable security assessments. It supplies not just summary information but all supporting evidence, remediation priorities and vendor collaboration to help users scale their third-party risk programs. The company completed a $12M Series A financing to support its growth. RiskRecon intends to use the funds to accelerate product development and global sales expansion. RiskRecon emerged from stealth offering a platform that harvests publicly discoverable internet data (web servers, DNS, software/version info) to measure and observe third-party cloud vendors’ security posture. The company produces objective security scores and supplies detailed, actionable findings so customers can work with vendors to remediate gaps. CEO and co‑founder Kelly White says the platform contains more than the initial scorecard and the team plans to leverage the underlying technology to measure other types of signals in the future. RiskRecon is in early stages with about 10 employees and has paying customers, though the company declined to disclose customer counts. The startup competes with manual and less scalable vendor-assessment approaches and aims to address CISOs’ stated budgets and need for automated third‑party security evaluation. General Catalyst led investor interest and cited founder experience, early customer validation, and market need as reasons to back the company.

Total raised

$40M

Funding rounds

3

Latest round

Series B

Latest activity

Aug 2018