As of August 2026, Latka tracks 30 risk assessment software companies with $5M–$10M in annual revenue. They have combined revenues of $206.9M and employ 1.8K people. They have raised $83.3M and serve 3.1K customers combined.
Every company below sells risk assessment software to other businesses and is ranked by its most recent annual revenue. Revenue, funding, headcount and customer figures come from CEO interviews on the Latka podcast, public company filings, and Latka estimates where a company has not disclosed a number.
Risk Assessment Software is designed to help organizations identify, evaluate, and mitigate potential risks that could impact their operations and assets. These tools enable users to systematically analyze risks, prioritize them based on their potential impact, and establish appropriate responses to minimize adverse effects. Common use cases include risk management in finance, IT security, compliance, and safety, ensuring that businesses can proactively address vulnerabilities and maintain operational integrity. Typical features of risk assessment software include risk identification, automated workflows, real-time monitoring, reporting, and dashboards that provide insights into risk exposure. The software can be invaluable for various stakeholders, including risk managers, compliance officers, IT professionals, and executives who need to make informed decisions based on the organizational risk landscape. With its structured approach to risk management, this software helps organizations build resilience and adhere to regulatory requirements.
Sorting: Highest -> Lowest
Showing 10 of 30 companies ranked by annual revenue.
Singapore, Central Singapore, Singapore
watchTowr is a Preemptive Exposure Management platform that helps organizations identify potential breaches and understand their cyber security posture, serving Fortune 500 companies and critical infrastructure providers.
Boston, Massachusetts, United States
DeNexus is an industrial cyber risk modeling and quantification company.
Washington, District Of Columbia, United States
A Washington, D.C.-based professional services firm that offers a full range of cybersecurity, program management and strategic communications solutionsProfile
United States
Silobreaker is a leading security and threat intelligence technology company, that provides powerful insights on emerging risks and opportunities in near-real time. It automates the collection, aggregation and analysis of data from open and dark web sources in a single platform, allowing intelligence teams to produce and disseminate high-quality, actionable reports in line with priority intelligence requirements (PIRs). This enables global enterprises to make intelligence-led decisions to safeguard their business from cyber, physical, and geopolitical threats, mitigate risks and maximise business value.
Richmond, Virginia, United States
Firm leveraging expertise in cybersecurity protections and government-related regulations to ensure clients' cybersecurity withstands the toughest scrutiny
Leuven, Vlaanderen, Belgium
Phished is a cyber security awareness company that helps organizations to obtain a zero-incident-rate caused by human error. Our fully automated, AI-powered platform trains your employees to become a Human Firewall for your organization. By combining personalized phishing simulations, interactive training sessions, active threat reporting, and real-time threat intelligence, we drive measurable behavioral change. The Phished Behavioral Risk Score® (BRS) continuously monitors your organization’s evolving security posture, significantly reducing the risk of cyber incidents.
Boston, Massachusetts, United States
Cork is a cyber risk insight platform designed to evaluate risks across your endpoints and notify you of vulnerabilities exposing your MSP and clients to cyber threats.
London, England, United Kingdom
Keep your business secure and compliant with SureCloud. Everything you need today and tomorrow, in our integrated GRC platform, that everyone can use. SureCloud GRC is built on our industry-first Dynamic Risk Intelligence technology, designed to empower you to proactively manage your GRC landscape by understanding the story within your data. This allows you to analyze, predict, and respond to risks before they become critical issues. The future of GRC delivered today. Our industry-first Dynamic Risk Intelligence technology enables you to be more proactive by revealing the full story and sequence of events across your programs with unparalleled visibility and certainty. It empowers you to anticipate and address potential risks before they escalate, ensuring you're always ahead of risk and compliance challenges. Leveraging advanced event-driven architecture and event sourcing, SureCloud GRC captures and analyzes every detail in real-time, giving you the tools to take proactive control and provide long-term business assurance.
Short Hills, New Jersey, United States
Cranium is an AI security and trust platform that delivers security and trust to the AI revolution. The platform helps organizations identify, manage, and mitigate risks associated with AI, ensuring security, compliance, and responsible innovation.
Latka tracks 30 risk assessment software companies with $5M–$10M in annual revenue. Together they generate $206.9M in annual revenue and employ 1.8K people.
watchTowr is the largest, with $9.7M in annual revenue, founded in 2005.
The average risk assessment software company in this list makes $6.9M a year, across 30 companies with reported revenue. They serve 3.1K customers combined.
Ranked by annual revenue, the leaders are watchTowr, DeNexus, Arlo Solutions, Silobreaker and Cylynt.
The 30 risk assessment software companies with $5M–$10M in annual revenue tracked here have raised $83.3M in disclosed funding between them.
- The product must provide tools for identifying and analyzing potential risks within an organization. - It must include features for risk prioritization and response planning. - The software should offer reporting capabilities that allow for sharing insights with stakeholders. - It must support integration with other business systems and data sources for comprehensive assessments. - Not just focused on qualitative analysis; must also facilitate quantitative analysis of risk scenarios.
Sign up to access all features
Sign up with GoogleSign up with LinkedInAlready have an account? Log in
GetLatka is trusted by 200k+ founders, researchers, and marketers.
No contracts, cancel at any time
