As of August 2026, Latka tracks 52 security risk analysis software companies. They have combined revenues of $1B and employ 4K people. They have raised $826.8M and serve 1.2M customers combined.
Every company below sells security risk analysis software to other businesses and is ranked by its most recent annual revenue. Revenue, funding, headcount and customer figures come from CEO interviews on the Latka podcast, public company filings, and Latka estimates where a company has not disclosed a number.
Security Risk Analysis Software encompasses tools designed to identify, evaluate, and mitigate potential security risks within an organization. These solutions are primarily used by IT and compliance teams to ensure the integrity of sensitive data and systems. Key features often include risk assessments, incident tracking, compliance management, and reporting functionalities, enabling organizations to maintain regulatory standards and prepare for audits. The software supports various workflows such as risk identification, evaluation of risk impact, and implementation of mitigation strategies. Typically, user personas include IT security professionals, compliance officers, and risk managers who utilize these tools to streamline their security processes and enhance decision-making related to risk management. Security Risk Analysis Software is crucial for businesses looking to protect assets and ensure ongoing operational resilience against potential threats.
Sorting: Highest -> Lowest
Showing 10 of 52 companies ranked by annual revenue.
New Delhi, Delhi, India
Lucideus Tech Private Limited is a company that provides risk assessment and digital security services. It specializes in Cyber Risk Quantification and Management (CRQM) to help organizations measure, manage, and transfer cyber risks.
Boston, Massachusetts, United States
Developer of cyber security software application. The company provides a security rating platform, which analyzes external data on security behaviors in order to allow organizations to manage third party risk, benchmark performance, and assess and negotiate cyber insurance premiums.
Hangzhou, China
A professional third-party intelligent risk management and decision-making service provider specializing in risk control and anti-fraud services.
Austin, Texas, United States
HiddenLayer is a provider of security solutions for machine learning algorithms and models. The company offers threat modeling, ML risk assessment training, and red team assessment services, as well as AI and ML model scanning.
London, England, United Kingdom
With 18+ years of experience in the Cyber Security and Compliance market, MetaCompliance provides an innovative solution for staff information security awareness and incident management automation. The MetaCompliance platform was created to meet customer needs for a single, comprehensive solution to manage the people risks surrounding Cyber Security, Data Protection and Compliance. The solution provides an easier approach to managing ISO27001, NIST and Cyber Security Resilience. Our focus on staff awareness and security risk management enables customers to benefit from functionality that includes eLearning, simulated phishing, policy management, incident management regulatory reporting. Our SaaS platform offers the highest quality cyber security and compliance training content available on the market. It is easy to use, engaging and regularly updated; allowing cyber and compliance professionals to track progress of their staff members and demonstrate human risk reduction. MetaCompliance has a unique focus on encouraging participation by employees with Personalised Security Awareness. This leverages behavioural science best practices to make security awareness meaningful for each employee. This means providing training content that is in the correct language and relevant to each person’s role and department. In addition, the content is customised to leverage brand loyalty, reflect the unique organisational practices and reflect their specific approach to threat mitigation. By leveraging the power of MetaCompliance, customers can optimise their cyber security and compliance response to meet the demands of today’s digital world.
Fulton, Maryland, United States
Company providing intelligence analysis and cyber-operations support services across the federal government and the national security sector
Sydney, New South Wales, Australia
Operator of incident management and organizational resilience firm intended for organizational disruption management. The company's platform provides security incident reports, situational awareness and incident reporting dashboards, enabling clients to manage any type of risk, hazard or incident in a single integrated solution.
Cuarte, Huesca, Spain
IriusRisk is an open Threat Modeling platform that automates and supports creating threat models at design time. The threat model includes recommendations on how to address the risk. IriusRisk then enables the user to manage security risks throughout the rest of the software development lifecycle (SDLC) with best-in-class architectural diagramming and full customization to enable every stakeholder to collaborate.
Columbia, Maryland, United States
CANDA Solutions is a leading risk management software and services provider specializing in serving National Security enterprises who must meet the latest government security, risk, and compliance requirements.
Latka tracks 52 security risk analysis software companies with reported revenue. Together they generate $1B in annual revenue and employ 4K people.
lucideus.com is the largest, with $258.5M in annual revenue, founded in 2012.
The average security risk analysis software company in this list makes $20M a year, across 52 companies with reported revenue. They serve 1.2M customers combined.
Ranked by annual revenue, the leaders are lucideus.com, BitSight, SecurityScorecard, Tongdun Technology and HiddenLayer.
The 52 security risk analysis software companies tracked here have raised $826.8M in disclosed funding between them.
- Software must provide tools for conducting comprehensive risk assessments. - Must include features for tracking incidents and remediating security weaknesses. - Capable of generating compliance reports related to legal and regulatory standards. - Should facilitate risk prioritization based on potential impact and likelihood. - Not only identifies risks but also provides actionable insights for mitigation and remediation.
Sign up to access all features
Sign up with GoogleSign up with LinkedInAlready have an account? Log in
GetLatka is trusted by 200k+ founders, researchers, and marketers.
No contracts, cancel at any time
