DeNexus

About DeNexus

DeNexus offers a cyber risk quantification and management platform tailored for industrial organizations and the risk transfer market. Founded in 2019 by Jose Seara, the company was established to address a gap in the market for measuring the financial impact of cyber risks in operational technology (OT) environments. Seara, who does not have a traditional security background, experienced this need firsthand while building and managing critical infrastructure companies in the energy sector across Europe and North America. He found no existing solutions to quantify his company's cyber risk or to determine the efficiency of cybersecurity investments, which led to the creation of DeNexus.

The company has its headquarters in Boston, Massachusetts, with engineering operations in Madrid, Spain, and teams in the U.K. and Switzerland. DeNexus has secured a total of $28.6 million over five funding rounds, including a significant Series A round. Key investors include Punja Global Ventures, AXA XL, Prosegur/SegTech, and HCS Capital.

DeNexus' business model is centered on its flagship SaaS platform, DeRISK. This platform provides an evidence-based, data-driven solution that translates complex OT cyber exposures into financial impact metrics. It serves B2B clients in critical infrastructure sectors such as energy, manufacturing, transportation, and data centers. The platform is utilized by CISOs, CFOs, executive boards, and insurers to make informed decisions about cybersecurity investments. DeRISK operates by continuously ingesting and analyzing data from over 50 sources, combining internal OT network data with external threat intelligence. It uses AI, machine learning, and probabilistic inference to model potential cyber breaches, predict their financial impact, and simulate risk mitigation scenarios to calculate ROI on security projects. This allows organizations to prioritize vulnerabilities, justify budgets, and optimize risk transfer through insurance.

The DeRISK platform features capabilities such as dynamic risk aggregation at the site and portfolio levels, attack-path mapping, and peer benchmarking. It also offers specialized modules for different industries, including advanced modeling for power substations, support for ISA/IEC 62443 standards in manufacturing, and a unified view of both cyber and physical security risks for data centers. The company has formed strategic partnerships with firms like Tenable, Claroty, and Cipher to integrate more comprehensive data for improved risk assessments.