cyber risk quantification

Acuity Risk Management Ltd develops STREAM®, a cyber GRC (governance, risk and compliance) platform that brings cyber risk, control monitoring, compliance evidence and third-party risk into one place. Founded in 2005, it is the operating subsidiary of AIM-quoted Acuity RM Group plc (LSE: ACRM). STREAM is offered in two editions, STREAM Cloud (SaaS) and STREAM Classic (on-premises), plus a Vendor Management Hub.

compliance evidence capturecontinuous controls monitoringon-premises and air-gapped deploymentquantitative risk modelling (Monte Carlo)reporting APISaaS deploymentthird-party and vendor risk assessment

Axio provides a cyber risk management platform, Axio360, that helps organizations assess and manage cyber risks, quantify the financial impact of cyber attacks, enhance resilience, and optimize cybersecurity investments. Its offerings include AI risk governance (Axio AIR), cyber risk quantification, cybersecurity assessment, cyber insurance and risk transfer, and board-level cyber risk reporting, along with professional services, training, and technical support.

architectural design reviewCybersecurity assessmentscyber strategy and program transformationinsurance stress testingtechnical supporttraining and eLearning

Black Kite provides an AI-native third-party cyber risk management (TPCRM) platform built on Decision-Grade Third-Party Risk™ Intelligence. The platform offers continuous monitoring of millions of organizations, AI-powered assessments, cyber event response, cyber risk quantification using Open FAIR™, and supply chain risk management with nth-party visibility.

AI agentsAI-powered assessmentsCVE analysiscyber event responsedigital footprintingnth-party visibilityopen API integrationsOpen FAIR™ risk quantificationransomware susceptibility indexingThird Party Monitoring

CyberCube is a cyber risk analytics provider for the insurance industry, translating cyber risk into financial impact. Founded as a division of Symantec in 2015, it launched as a standalone company in 2018. Its analytics are used to model over 70% of global cyber premiums, and its clients include 75% of the top 40 European and US cyber insurance carriers and 50% of the top 20 reinsurance carriers.

actuarial modelingArtificial Intelligenceconsultingcyber risk modelingCyber securitycyber underwriting analyticsData Scienceportfolio intelligence and health assessmentsoftware engineering

Cyber Unveil International LLC is an independent, vendor-neutral executive cyber and AI risk advisory firm. It helps CEOs, CFOs, boards, and CISOs understand material cyber and AI exposure, prioritize investment, and establish clear accountability, with direct guidance from a Global CISO. The firm sells no technology and accepts no vendor commissions. It serves the United States, Canada, Latin America, and Puerto Rico.

AI governanceboard advisorycyber risk advisorydecision-authority methodology (ADS-Ω)FAIR-informed scenario modelingfractional CISO advisoryoperational resilience and incident readiness

DigitalXForce provides an AI-powered Enterprise Trust, Risk, Security and Compliance Management (TRiSCM) platform that converges automated GRC with security posture management (X-SPM) into one real-time system. The platform is built from 15 modules sharing one data layer, 50+ compliance frameworks and 250+ technology integrations, and delivers Continuous Control Assurance, risk quantification and digital trust. It was named a Leader in IDC MarketScape assessments for GRC (2025) and Third-Party Risk Management (2026).

250+ technology integrationsAI risk governance and assessmentsAutomated GRCBusiness continuity and operational resilienceContinuous Control AssuranceContinuous Control MonitoringCybersecurity Mesh ArchitectureExtended Security Posture Management (X-SPM)third-party risk management

Hive Systems is a cybersecurity firm founded in 2018 by two Virginia Tech graduates, headquartered in Richmond, Virginia. It delivers expert-led cybersecurity services and data-driven platforms that help CISOs, CIOs, and CEOs reduce risk, meet compliance, and protect critical assets. Its products include Derive, a cybersecurity risk and operations platform, and Audora, an audit automation platform.

audit automationCMMC readiness assessmentsCybersecurity awareness trainingFedRAMP readinesspenetration testingSOC 2 readinessvCISO servicesvulnerability assessmentsweb app security testing