Safe Security
Cyber risk quantification platform that turns hacking risk into dollar figures for boards.
On the record
Checkpoint: Next Forrester Wave CRQ and Gartner Magic Quadrant exposure management refresh
The call
SAFE has bought its way to owning a respected risk methodology, but bigger security vendors could still fold cyber risk scoring into tools they already sell.
Safe Security helps big companies measure and explain cyber risk using a framework called FAIR, plus it connects to over 100 other security tools. The main question is whether bigger rivals like CrowdStrike or Tenable will simply add the same math to their own products as a feature, which they probably can do without much trouble. The one thing that could change everything is if Safe Security becomes the main place companies go to manage all their cyber risk and vendor safety checks, making it too expensive to switch away from.
Why
01
AI pressure: Foundation model based risk-scoring tools. Generic AI can copy simple risk dashboards, but SAFE is racing to build its own autonomous agents first, calling it CyberAGI. Could AI do the core job? Only partly.
02
Bigger players: CrowdStrike, Tenable, Wiz. These bigger security vendors could bolt a FAIR-style risk score onto tools customers already run, undercutting SAFE's standalone pitch. Could a giant copy it? Yes, easily.
03
What protects it. Owns the FAIR risk methodology through the RiskLens buy and sits inside board and regulator reporting, which is hard to rip out once installed.
What would change this call
CrowdStrike, Tenable, or Wiz ships a native CRQ/TPRM module within 12 months. Would show Safe Security's FAIR/integration moat is being closed by exposure-management giants.
Next Forrester Wave (CRQ) or Gartner MQ (exposure management) places Safe Security below Leader. Would show analysts see rivals overtaking Safe Security's category position.
Balbix customer retention/unification results disclosed through Q1-Q2 2026. Would show whether the acquisition strengthens or drains Safe Security's competitive position.
Next Forrester Wave (CRQ) or Gartner MQ (exposure management) places Safe Security below Leader. Would show analysts see rivals overtaking Safe Security's category position.
Balbix customer retention/unification results disclosed through Q1-Q2 2026. Would show whether the acquisition strengthens or drains Safe Security's competitive position.
Key numbers
- $70M Series C raised
- Acquired RiskLens, FAIR method owner
- Acquired Balbix, Gartner MQ Visionary
Named risks
- Balbix integration (acquired Nov 2025) unproven; customer retention and product unification outcome unclear through 2026.
- Core CRQ dashboard layer vulnerable to commoditization by foundation models, conceded by company's own CyberAGI roadmap.
- No independently audited revenue figures; all growth and customer ROI claims are vendor-sourced.
- Residual reputational exposure from settled SecurityScorecard lawsuit alleging fake accounts and fake interviews.
- Adjacent incumbents CrowdStrike, Tenable and Wiz face no structural bar to shipping competing CRQ features.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| CrowdStrike | contesting | Sells Falcon Exposure Management with no structural barrier to adding FAIR-style CRQ, as of 2026 |
| Tenable | contesting | Tenable One competes in exposure management and could add CRQ quantification |
| SecurityScorecard | contesting | Sued Safe Security June 2024 over trade secrets, settled into research collaboration Oct 2025 |
| Balbix | gaining on | Absorbed via acquisition Nov 2025, converting a Gartner MQ Visionary rival into an internal asset |
| Kovrr, Black Kite, CyberSaint | contesting | Direct CRQ and TPRM peers competing in a still-forming, consolidating category as of mid-2026 |
Questions people ask
- Is Safe Security profitable?
- No audited financials are public. Safe Security claims triple-digit revenue growth for three consecutive years as of August 2025, but this is a vendor-claimed figure, not independently verified profitability data. It has raised over $170M in disclosed VC funding through July 2025.
- Who owns Safe Security?
- Safe Security is privately held and VC-backed, not publicly traded. Founded 2012 in India as Lucideus by Saket Modi, Rahul Tyagi and Vidit Baxi, it rebranded to SAFE in February 2021. Investors include Avataar Ventures, Sorenson Capital, BT, and John Chambers as of its July 2025 $70M Series C.
- Could AI replace Safe Security's product?
- Partly. Safe Security already automates vendor risk questionnaires and exposure prioritization using 25 to 100+ AI agents, and its own 'CyberAGI' roadmap (announced July 2025) aims for fully autonomous cyber risk operations, meaning its current dashboard layer is itself vulnerable to foundation-model commoditization.
- Is joining Safe Security risky right now?
- There is real integration risk: Safe Security acquired Balbix in November 2025 and its success in unifying that CTEM stack with existing CRQ/TPRM products is unproven as of mid-2026. It also just settled a trade-secret lawsuit with SecurityScorecard in October 2025.
- Who is Safe Security's biggest competitor?
- CrowdStrike, Tenable and Wiz are adjacent exposure-management giants with no structural barrier to shipping their own cyber risk quantification features. Closer direct peers include Kovrr, Black Kite, CyberSaint and SecurityScorecard, the latter having sued Safe Security in June 2024 over alleged trade-secret theft, settled October 2025.
- How much funding has Safe Security raised?
- Safe Security has raised over $170 million in disclosed funding across multiple rounds: a $33M Series A in July 2021 led by BT, a $50M Series B in April 2023 led by Sorenson Capital, and a $70M Series C in July 2025 led by Avataar Ventures, per SecurityWeek reporting dated August 1, 2025.
Timeline
- 2026-05-28Launched AI Security Posture Management to monitor exposure to ChatGPT, Claude, Copilot
- 2025-11-18Acquired Balbix; founder Gaurav Banga becomes President of CTEM
- 2025-10-17Settled SecurityScorecard trade-secret lawsuit, announced research collaboration instead
- 2025-08-01Reported triple-digit revenue growth for three straight years alongside $70M raise
- 2025-07-31Raised $70M Series C led by Avataar Ventures to build CyberAGI
- 2025-04-22Launched industry's first fully autonomous TPRM platform
- 2024-06SecurityScorecard sued Safe Security over alleged trade-secret theft
- 2023-07-12Acquired RiskLens, gaining FAIR methodology and its practitioner network
- 2023-04-19Raised $50M Series B led by Sorenson Capital
- 2021-02Rebranded from Lucideus to SAFE, moved HQ to Palo Alto
Revision history
26 July 2026
First assessed. Protection under test. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- Fast-Growing Cybersecurity Startup Rebrands as SAFE and Commits to US Growth Plans (2024-07-24)
- Cyber Risk Management Firm Safe Raises $70 Million (2025-08-01)
- Safe Security Acquires RiskLens to Become Undisputed Leader in the $4B Cyber Risk Quantification and Managemen (2023-07-12)
- SAFE acquires Balbix to unify AI-native exposure management and cyber risk quantification (2025-11-18)
- SAFE Launches AI Security Posture Management (AI-SPM) to Manage Enterprise Exposure to Third-Party Generative (2026-05-28)
- SAFE raises $70 million Series C to build CyberAGI, unveils world's first fully autonomous CTEM solution (2025-07-31)
- Safe Security Financials 2026, Revenue, P&L & Cash Flow (2026-05-28)
- Safe Security - Headcount, Funding & Open Jobs (2026-07-08)
- Safe Securities Number of Employees 2026 (2026-06-29)
- Safe Raises $70M Series C to Scale Cyber Risk Management (2025-08-01)
- 2025 Cyber Benchmark: Measured Progress, Persistent Challenges in Corporate Cybersecurity (2026-07-21)
- 2025 in Retrospect: SAFE Steers the Industry Towards Autonomous Cyber Risk Management (2025-12-23)