RiskLens

RiskLens is a cyber risk management software company that specializes in quantifying and analyzing cyber risk from a business perspective. Founded in 2011, RiskLens pioneered the Factor Analysis of Information Risk (FAIR) model, which has become an industry standard for cyber risk quantification. The company's platform allows organizations to understand and manage digital risk by quantifying it in financial terms, helping to improve decision-making across executive levels. RiskLens' software prioritizes cybersecurity projects based on risk reduction, measures their value, and optimizes spending while enhancing the quality and consistency of cyber risk management programs.

In July 2023, RiskLens was acquired by Safe Security, an AI-driven cyber risk management company. This acquisition combined RiskLens' FAIR model expertise with Safe Security's AI-powered Cyber Risk Management platform, SAFE. The integration aims to enhance the defensibility of AI-driven breach prediction and prevention recommendations by embedding the FAIR decision science methodology into Safe Security's Cyber Risk Cloud of Clouds platform, which processes over 3 billion signals daily. Following the acquisition, Nick Sanna, former CEO of RiskLens, joined Safe Security as President, while Jack Jones, FAIR author and RiskLens Co-Founder, became Chief Research Scientist at Safe Security.

Key customers and partnerships

RiskLens has established itself as a leader in the cyber risk quantification (CRQ) market, with its FAIR model supported by over 14,000 practitioners representing 50% of Fortune 500 companies. The company's customer base includes organizations such as Equinix, where Michael Montoya, the CISO, has been a RiskLens customer for over three years. Additionally, The University of Kansas Health Systems has adopted the FAIR standard as their risk taxonomy and quantification model.

RiskLens has also fostered partnerships within the cybersecurity industry. The company leads the FAIR Institute, a nonprofit professional organization dedicated to advancing the field of cyber risk quantification. This involvement has helped establish RiskLens as a recognized name in the CRQ space and contributed to the widespread adoption of the FAIR model among large enterprises.