Resilience

What Resilience does

Resilience is a cyber risk management firm that integrates cyber insurance with proprietary AI-powered risk quantification under an "Insure + Secure" model. Founded in 2016 and headquartered in San Francisco (with operational underwriting presence across the US, Canada, the UK, Ireland, Nordics, Italy, Spain, Germany, Austria, France, and BeNeLux), the company primarily targets mid-market and enterprise organizations with $25M–$10B+ in revenue, including CISO, CFO, and Risk Manager buyers. Its core customer base spans manufacturing, healthcare, financial services, technology services, holding companies, and private equity, with adoption by more than 10% of US-based enterprises earning over $1B in revenue.

The technical core of the offering is the Threatonomics Risk Graph, an AI-powered quantification engine that unifies structured security telemetry, textual threat intelligence, insurance claims records, and financial data into dollar-based risk scores, loss exceedance curves, and ROI-ranked remediation actions. On top of this engine sit two customer-facing software platforms: Resilience Edge, a single-entity Security Investment Prioritization platform with breach and attack simulations powered by AttackIQ; and Resilience Arc, a multi-entity and portfolio risk platform launched in 2026 for holding companies and PE-backed organizations. The in-house Risk Operations Center combines AI capabilities with threat intelligence analysts, claims experts, and risk engineers to deliver proactive vulnerability hunting, expert-triaged notifications, and 24/7 in-house claims handling (sub-15-minute average initial response). These software and managed-service capabilities are tightly coupled with the company's cyber insurance (limits up to $20M, including a $500K eCrime sublimit) and Technology E&O insurance (limits up to $10M) products.

Resilience generates revenue primarily through recurring cyber and Tech E&O insurance premiums, supplemented by subscription software (Edge and Arc) and managed services from the Risk Operations Center. Distribution is multi-channel: direct enterprise sales supported by named regional underwriting leads across 10+ geographies, broker/agent channels, a London wholesale facility via RSA, and a $20M-limit partnership with Lloyd's of London (July 2024) for US clients. Pricing is quote-based and not publicly listed; the company funds growth primarily through its $124M total disclosed funding, including an $80M Series C in November 2021 led by General Catalyst and Corey Thomas (Rapid7), and has executed one disclosed acquisition (BreachQuest, February 2024) to bolster incident response capabilities.

Name

Resilience

Legal name

Resilience

Website

https://cyberresilience.com

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

251–500 employees

Short description

Resilience is a cyber risk management firm that integrates AI-powered risk quantification (Threatonomics Risk Graph) with cyber and Tech E&O insurance, the Edge and Arc software platforms, and a 24/7 in-house Risk Operations Center, serving enterprise and mid-market customers globally.

Ownership category

akta.pro rank

Product category

Cyber Insurance

NAICS

Insurance Carriers (5241), Insurance Carriers and Related Activities (524)

SIC

Fire, Marine & Casualty Insurance (6331), Insurance Agents, Brokers & Service (6411)

akta.pro primary industry

Network Security & Privacy Liability (Third-Party) (FSAJAOAE)

akta.pro secondary industries

Critical Infrastructure / OT & Industrial Cyber Coverage (FSAJAOAM), Social Engineering / Funds Transfer Fraud Coverage (FSAJAOAI), Cyber Business Interruption & Digital Asset Restoration (FSAJAOAG), Cyber Reinsurance (FSAOABAM)

Keywords

• Cyber insurance
• Risk quantification
• Cyber risk management
• Incident response
• Technology E&O

Headquarters

HQ city

New York

HQ country

United States

HQ region

North America

Offices9 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure, Supply Chain

Revenue model

1. Cyber Insurance Premiums: Primary cyber liability premiums on admitted or surplus-lines paper, with limits up to $20M, sold standalone or alongside Tech E&O; underwritten using Resilience's own claims/loss data for risk selection and pricing.
2. Technology Errors & Omissions (Tech E&O) Premiums: Tech E&O premiums for technology services, hardware, data centers, telecoms, software, and web services firms, with limits up to $10M and eligibility for companies with $25M–$10B revenue; recently expanded to UK and Europe.
3. Claims & Incident Response Services: 24/7 in-house incident response, breach coaching, and panel-partner forensic/legal services bundled with cyber insurance policies (and accessible directly); recovery of Funds Transfer Fraud losses via government and bank relationships.
4. Edge & Arc Platform Subscriptions (Security Software): Recurring subscriptions to the Edge security investment prioritization platform (loss exceedance, BAS testing, vendor risk) and the Arc multi-entity portfolio risk platform, sold standalone or paired with insurance.
5. Risk Operations Center & Advisory Services: Continuous threat monitoring, dark-web exposure monitoring, vulnerability hunting, and expert-triage services delivered by the ROC, typically bundled with insurance but also available as a service.

Pricing tiers

Go-to-market motion5 records

Distribution channels6 records

Marketing channels10 records

Core offering

Resilience sells cyber liability insurance and Technology Errors & Omissions coverage (limits up to $20M and $10M respectively), paired with proprietary AI-powered risk-quantification software (Threatonomics Risk Graph, Edge, Arc) and a 24/7 in-house Claims & Incident Response service. The integrated Insure + Secure model is delivered to enterprise and mid-market organizations to translate technical cyber risk into financial risk, prioritize security investments by ROI, and backstop residual exposure with top-rated insurance.

Product overview

Resilience delivers a unified cyber risk management offering that combines insurance, software, and managed services into a single integrated Insure + Secure / cyber risk quantification platform. The core engine is the Threatonomics Risk Graph, an AI-powered quantification model that translates technical security risk into financial risk. On top of this engine sit the customer-facing modules: Resilience Edge (Security Investment Prioritization) for dollar-based cyber action plans and breach & attack simulations; and Resilience Arc (Multi-Entity & Portfolio Risk) for continuous, automated risk assessments across subsidiaries, holding companies, and PE-backed portfolios. The Risk Operations Center (ROC) operates as a managed center of excellence that combines threat intelligence, claims data, and security engineering to triage findings and drive financially prioritized remediation. These software and managed-service capabilities are tightly coupled with the company's insurance products — Cyber Insurance and Technology E&O — and its in-house 24/7 Claims & Incident Response team. Vertical-specific bundles such as the Private Equity Cyber Risk Program extend the Arc platform with bespoke insurance endorsements.

Differentiator

Problem solved

Functional benefit

Brands

• Edge: Cyber risk management platform (Resilience Edge) that provides financially prioritized cyber risk management, security investment prioritization, and loss exceedance modeling.
• Arc
• Threatonomics Risk Graph
• Risk Operations Center

Products and services

• Cyber Insurance Cyber liability insurance product with limits up to $20M on primary or excess paper, including 24/7 in-house claims management, proactive threat monitoring via the Risk Operations Center, integrated breach & attack simulations, and bundled eCrime coverage up to $500K (2x typical market). Sold standalone or alongside Tech E&O to enterprise and mid-market customers.
• Technology E&O Technology Errors & Omissions professional liability coverage tailored for technology companies (MSP/MSSP, consulting, software, hardware, data centers, telecom, web services). Offers $10M limits for both primary and excess placements, comprehensive professional liability coverage with endorsements integrated into the policy form, and eligibility for organizations with $25M–$10B revenue.
• Claims & Incident Response 24/7 in-house Claims and Incident Response team providing rapid expert support to contain threats, guide recovery, and minimize business disruption. Features under-15-minute average initial response time, ransomware negotiation expertise (e.g., 67% reduction in one engagement), recovery of Funds Transfer Fraud losses via bank and government relationships, and a vetted world-class claims panel.
• Resilience Edge (Security Investment Prioritization) Software platform (Resilience Edge) that prioritizes security investments with the highest impact on risk reduction and loss prevention. Includes Loss Exceedance Curve modeling over a three-year horizon, dollar-based cyber action plans, breach & attack simulations powered by AttackIQ, expert-verified findings from the Risk Operations Center, vendor risk reports, and State-of-Your-Risk board reporting.
• Resilience Arc (Multi-Entity & Portfolio Risk) Software platform (Resilience Arc) that provides ongoing, dollar-based risk assessments for entire organizations across every subsidiary and business unit. Continuously monitors and quantifies cyber exposure across corporate ecosystems, leveraging proprietary risk models informed by insurance claims data and real-world threat intelligence. Suited to multi-entity organizations, holding companies, and PE-backed portfolios.
• Risk Operations Center (ROC) Managed center of excellence that combines cyber threat intelligence, claims expertise, and risk engineering to help CISOs remediate the most financially damaging threats. Delivers proactive vulnerability hunting, expert-triaged critical notifications, financially prioritized remediation, attack-surface and dark-web exposure scanning, and acts as a strategic partner prioritizing risks most likely to cause material loss.
• Private Equity Cyber Risk Program Vertical program that combines the Resilience Arc risk management platform with bespoke insurance endorsements to help private equity firms manage cyber exposure across portfolio companies from acquisition through exit. Provides immediate coverage for new acquisitions, transition services agreement support, and continuous portfolio-level vulnerability monitoring.

Quantifiable outcome

• More than $1 billion reduction in collective extreme cyber loss exposure for Edge customers between 2023 and 2026
• +9 more outcomes

Named customers11 records

Segments10 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

AI capability9 records

Feature6 records

Partnerships

Eleven partnerships are on record, tiered core, supporting and acquired (not active partnership).

• Lloyd's of LondoncoreChannel Partner/ Reseller/ DistributorPartnership announced July 2024 to raise cyber insurance limits for US clients to $20 million via the Lloyd's market. Provides distribution capacity for primary and excess cyber placements to Resilience's US customer base.
• RSAcoreChannel Partner/ Reseller/ DistributorExpanded partnership to underwrite US-based risks from London, offering a wholesale market facility to US clients with $75M–$10B revenue that prefer London market execution. Supports clients with risks in the UK and EU.
• CrowdStrikecoreStrategic or Co-development PartnerProject QuiltWorks partnership announced May 2026, extended to include cyber insurance industry leaders Coalition, Liberty Mutual Insurance, Lockton, Resilience, and Marsh. The framework combines AI-driven vulnerability discovery (using AI models from Anthropic and OpenAI) with actuarial expertise, underwriting intelligence, and financial protection to address frontier AI cyber risk.
• CoalitioncoreStrategic or Co-development PartnerActive participant in CrowdStrike's Project QuiltWorks framework alongside Resilience, Liberty Mutual Insurance, Lockton, and Marsh. Coalition's general manager of security, Tim MalcomVetter, commented on the joint approach to coordinate remediation before attacks lead to financial loss.
• Liberty Mutual InsurancecoreStrategic or Co-development PartnerActive participant in CrowdStrike's Project QuiltWorks framework as a cyber insurance leader, bringing underwriting and financial protection expertise for frontier AI risk alongside Resilience.
• LocktoncoreStrategic or Co-development PartnerActive participant in CrowdStrike's Project QuiltWorks framework as a leading broker alongside Resilience, contributing underwriting intelligence and distribution.
• MarshcoreStrategic or Co-development PartnerActive participant in CrowdStrike's Project QuiltWorks framework as a leading broker/consultant alongside Resilience, contributing actuarial and risk expertise for frontier AI cyber insurance products.
• AttackIQcoreTechnology or IntegrationPowers the Breach & Attack Simulations (BAS) module of Resilience Edge, allowing customers to test cybersecurity defenses against the latest adversarial campaigns and validate controls.
• AnthropicsupportingTechnology or IntegrationProvides AI models used in CrowdStrike's Project QuiltWorks framework, in which Resilience participates as an insurance partner for frontier AI risk.
• OpenAIsupportingTechnology or IntegrationProvides AI models used in CrowdStrike's Project QuiltWorks framework, in which Resilience participates as an insurance partner for frontier AI risk.
• BreachQuestacquired (not active partnership)Strategic or Co-development PartnerBreachQuest was acquired by Resilience in February 2024 to enhance incident response capabilities against rising Business Email Compromise (BEC) threats and reduce financial losses linked to cyber threats. Listed here as a recent acquisition rather than an active external partnership.

Scale indicators12 records

Recent moves10 records

Expansion highlights7 records

Direct peers

• Coalition: Coalition is the closest direct competitor to Resilience, offering cyber insurance combined with continuous attack surface monitoring and incident response for SMBs and mid-market enterprises. Both firms pioneered the "active insurance" model integrating security telemetry with underwriting, and Coalition participates alongside Resilience in CrowdStrike's Project QuiltWorks.
• At-Bay: At-Bay is a cyber insurtech that combines cyber and tech E&O insurance with security monitoring and risk analytics for SMB and mid-market customers. It competes head-to-head with Resilience on the integrated insurance-plus-security proposition and on broker-distributed cyber capacity.
• Beazley: Beazley is a specialty insurer with a leading cyber and tech E&O practice serving mid-market and large enterprises globally. It directly competes with Resilience in cyber liability underwriting and incident response services, particularly in the UK and US markets.
• Corvus Insurance: Corvus Insurance is a cyber insurtech using data-driven underwriting and proactive security scanning to underwrite SMB and mid-market cyber risks. It is comparable to Resilience in combining cyber insurance with proprietary risk analytics and a broker-led distribution model.

Broad incumbents

• Chubb: Chubb is a global P&C and specialty insurer with broad cyber liability offerings for enterprises across geographies. As a large incumbent, it competes with Resilience on capacity and broker relationships while offering cyber as part of a wider commercial insurance portfolio rather than a specialized focus.
• AIG: AIG is a global insurance incumbent offering cyber liability, tech E&O, and related coverages as part of its broad commercial lines portfolio. It overlaps with Resilience in cyber underwriting for large enterprises and provides comparable distribution through major brokers.
• Travelers: Travelers is a major US P&C insurer with a growing cyber practice serving middle-market and enterprise customers. It competes with Resilience on cyber liability capacity, claims service, and broker distribution in the US, but cyber is one of many lines in its broader portfolio.
• Munich Re: Munich Re is one of the world's largest reinsurers and provides significant cyber reinsurance capacity to primary insurers, including via partnerships and Lloyd's syndicates. As Resilience grows primary cyber writings and depends on reinsurance partners, Munich Re is a structural comparables and counterparty in the same cyber risk-transfer chain.
• Tokio Marine HCC: Tokio Marine HCC is a specialty insurance group with cyber and professional liability offerings for technology and professional services firms. It competes with Resilience on tech E&O and cyber coverage and serves similar mid-market and enterprise customer segments through brokers.

Others

• AttackIQ: AttackIQ is a breach and attack simulation (BAS) platform provider that powers the BAS module embedded inside Resilience Edge. While not a competitor, it is a direct technology partner and adjacency whose breach simulation capabilities underpin a key Resilience product feature.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• Xx.com/ResilienceSays
• YouTubeyoutube.com/@Cyber.Resilience
• LinkedInlinkedin.com/company/resilience-cyber

Revenue estimate

Valuation estimate

Number of profiles

Profiles22 records

Subsidiaries1 record

Funding overview

Funding rounds4 records

Investors8 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Resilience