RiskRecon

RiskRecon, now a part of Mastercard, operates in the cybersecurity sector, specializing in third-party risk management. The company was founded in 2015 by Kelly White and Eric Blatte, both of whom brought extensive experience from the cybersecurity and intelligence communities to the venture. White, the co-founder and former CEO, previously held a leadership role in the information security function at Ernst & Young, giving him firsthand insight into the challenges of managing third-party cyber risk. This background was instrumental in shaping RiskRecon's core offering. The company saw a significant milestone in 2020 when it was acquired by Mastercard, a move that integrated its capabilities into a global payment and technology powerhouse.

The firm's business model is centered on a subscription-based, software-as-a-service (SaaS) platform. It generates revenue by charging clients for access to its cybersecurity ratings and detailed risk assessments. RiskRecon serves a wide array of clients, particularly those in highly regulated industries such as finance, healthcare, and insurance, who need to manage the complex cyber risks posed by their extensive networks of vendors and partners. The platform provides these organizations with continuous, non-intrusive monitoring of their own and their third-party partners' public-facing IT profiles.

RiskRecon's service functions by automatically discovering a company's complete internet-facing asset footprint and then assessing the security posture of those assets against 41 different security criteria. The platform translates this complex data into a simple A-F rating scale, making it straightforward for clients to understand their risk exposure at a glance. Beyond just the rating, it delivers risk-prioritized action plans with specific, actionable recommendations tailored to the client's risk appetite. This allows organizations to move beyond manual, questionnaire-based assessments to a more automated, scalable, and data-driven approach for managing supply chain risk. A key differentiator is the platform's high data accuracy, which has been independently certified, giving clients confidence in the insights provided.

Keywords: cybersecurity ratings, third-party risk management, supply chain security, cyber risk assessment, vendor risk, SaaS, data accuracy, security posture, risk intelligence, automated monitoring