ReliaQuest
Runs GreyMatter, a vendor-neutral platform that manages security detection and response for enterprises.
On the record
Checkpoint: Next two quarters resolve whether headcount decline signals cost discipline or restructuring
The call
Profitable and growing at 30%+, but sitting in a neutral middle layer that both platform giants and peer MDR firms are converging on from opposite directions.
ReliaQuest is a middleman between companies and their security tools. It takes data from 250+ different security products (from CrowdStrike, Microsoft, Palo Alto, and others), runs it through its own AI-powered analysis layer called GreyMatter, and sends alerts and recommendations back to the customer's security team. It is hard to copy because the company has spent 15 years teaching its system to recognize real threats versus false alarms, has legal contracts that hold it responsible if something goes wrong, and keeps adding new tool connections. The main threat is not AI replacing the product, but rival companies like Arctic Wolf and Expel doing the same thing cheaper, plus new AI agents handling simpler alerts that used to require human analysts to review. The thing that could change everything: whether ReliaQuest is slowing down (mixed signals from hiring data in mid-2026) or whether a bigger company buys it as part of a wave of security deals.
Why
01
AI pressure: Agentic SOC automation (OpenAI, Anthropic-powered triage agents). Frontier models feed GreyMatter as inputs, but agentic triage that once justified analyst-heavy MDR pricing is now automatable, pressuring fees. Could AI do the core job? Unlikely.
02
Bigger players: CrowdStrike Falcon Complete, Microsoft Defender Experts, Palo Alto Cortex XDR. Each pushes its own bundled detection and response, but selling neutral cross-vendor MDR would cannibalize their own stack sales. Could a giant copy it? Probably.
03
What protects it. Managed liability and SLA accountability plus 250+ tool integrations that raw models or single-stack vendors won't take on.
What would change this call
ReliaQuest headcount trend over next two quarters (Revelio vs Crustdata figures). Would show whether hiring is stable growth or a slowdown/restructuring precursor.
Whether ReliaQuest is acquired or announces a deal following Sophos/Secureworks and Zscaler/Red Canary consolidation. Would show if it stays independent or joins the consolidation wave.
ReliaQuest's next disclosed ARR figure versus the ~$400M 2025 mark. Would confirm if 30%+ growth and profitability are continuing.
Whether ReliaQuest is acquired or announces a deal following Sophos/Secureworks and Zscaler/Red Canary consolidation. Would show if it stays independent or joins the consolidation wave.
ReliaQuest's next disclosed ARR figure versus the ~$400M 2025 mark. Would confirm if 30%+ growth and profitability are continuing.
Key numbers
- $400M+ revenue in 2025
- 1,300+ enterprise customers
- Headcount -4.5% YoY per Crustdata, only 4 open roles
Named risks
- Revenue figures conflict sharply between company claims ($300-400M) and third-party estimates ($149M in 2024), unclear true scale.
- Headcount trend contradiction: Revelio shows +4.5% growth while Crustdata shows -4.5% decline with only 4 open roles as of July 2026.
- Sector consolidation wave (Sophos-Secureworks, Zscaler-Red Canary in 2025) increases acquisition or squeeze pressure on remaining independents.
- Ongoing employment litigation (Allen v. ReliaQuest) with motion to dismiss denied April 2025, case still active.
- Agentic AI automating SOC triage could compress pricing for the analyst-driven MDR delivery model that underpins ReliaQuest's revenue.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| CrowdStrike | contesting | Falcon Complete MDR competes but faces channel conflict selling vendor-neutral positioning, as of 2026-07 |
| Microsoft | contesting | Defender Experts overlaps but Microsoft cannot credibly sell cross-vendor neutrality, 2026-07 |
| Secureworks | gaining on | Acquired by Sophos Feb 2025, removing an independent MDR peer from the field |
| Red Canary | gaining on | Acquired by Zscaler Aug 2025, reducing independent MDR competition |
| Arctic Wolf | contesting | Lateral MDR peer with similar vendor-neutral positioning as of 2026-06 buyer guides |
| Expel | contesting | Lateral MDR peer competing on same neutral-overlay model, cited in 2026-06-24 buyer guide |
Questions people ask
- Is ReliaQuest profitable in 2026?
- ReliaQuest states it is operating profitably while growing ARR over 30% year over year, with ARR surpassing $300M around March 2025 (company claim) and revenue reportedly growing to more than $400M in 2025 per its own about page dated 2026-03-06.
- Who owns ReliaQuest?
- ReliaQuest is privately held and venture/PE backed. On 2025-03-31 it raised more than $500 million led by EQT Growth, with existing investors KKR and FTV Capital plus Ten Eleven Ventures and Finback Investment Partners, valuing the company at $3.4 billion.
- Could AI replace ReliaQuest?
- Frontier AI models like Claude and OpenAI's Daybreak program are integrated as inputs into ReliaQuest's GreyMatter platform rather than replacements, per a partnership announced 2026-07-19. ReliaQuest's own Agentic Teammates (launched 2025-07-29) automate SOC triage, creating pricing pressure on its analyst-driven delivery model rather than eliminating the company outright.
- Is ReliaQuest a good company to join in 2026?
- Signals are mixed. Revelio Labs reports headcount of about 1,183 as of December 2025, up 4.5% year over year, while Crustdata reports 1,153 employees as of July 2026, down 4.5% year over year with only about 4 open roles, suggesting hiring has slowed.
- Who is ReliaQuest's biggest competitor?
- Closest MDR/SecOps peers include Arctic Wolf, Rapid7, Expel, and eSentire, plus larger platform incumbents CrowdStrike, Microsoft, and Palo Alto Networks. Two peers, Secureworks and Red Canary, were acquired by Sophos (Feb 2025) and Zscaler (Aug 2025), reducing the field of independent players.
- How much funding has ReliaQuest raised?
- ReliaQuest has raised approximately $830 million in total funding as of a November 2025 estimate, including a 2020 $300M round led by KKR and a March 31, 2025 round of more than $500 million led by EQT Growth at a $3.4 billion valuation.
Timeline
- 2026-07-19Announced joining OpenAI Daybreak Cyber Partner Program for frontier model access
- 2026-06-23Published AI-Powered Cybercrime Report 2026 on adversarial AI use
- 2026-05-01Added Claude Enterprise Compliance API integration and workflow builder to GreyMatter
- 2025-10-30Added Agentic Memory and Automated Response Playbooks to Agentic Teammates
- 2025-07-29Launched GreyMatter Agentic Teammates, role-based autonomous AI agents
- 2025-04-28Launched GreyMatter Discover, cyber-asset attack surface module
- 2025-03-31Raised over $500M led by EQT Growth at $3.4B valuation
- 2023-05-16Acquired engineering and agent-software assets from EclecticIQ
- 2022-08-02Closed acquisition of Digital Shadows for $160M
- 2020-08Raised $300M round led by KKR
Revision history
21 July 2026
First assessed. Protection under test. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- ReliaQuest Raises More Than $500 Million in Funding at a Valuation of $3.4 Billion (2025-03-31)
- About Us (2026-03-06)
- ReliaQuest Revenue, Valuation & Funding History (2024) (2025-11-27)
- ReliaQuest and Digital Shadows, The Next Stage of the Journey (2022-08-02)
- ReliaQuest acquires software and engineering from EclecticIQ (2023-05-16)
- ReliaQuest Named to Inc.'s 2025 Best Workplaces List (2025-06-17)
- Agentic Defense for the Enterprise SOC (2026-07-07)
- ReliaQuest Number of Employees 2026 (2026-06-29)
- ReliaQuest - Headcount, Funding & Open Jobs (2026-07-07)
- ReliaQuest launches GreyMatter Discover (2025-04-28)
- ReliaQuest Announces Industry's First Role-Based Agentic AI Teammates (2025-07-29)
- October Product Release (2025-10-30)