Fenix24
Fenix24 provides ransomware recovery, asset intelligence, and managed cyber protection services to enterprise clients in legal, healthcare, financial services, manufacturing, and other regulated sectors across the US, EU, and APAC.
- Company typePrivate
- Founded2022
- HeadquartersChattanooga, United States
- Headcount51–100
- GTM typeB2B
- OfferingServices
What Fenix24 does
Fenix24, operating under Conversant Group, is a Chattanooga-headquartered cyber resilience firm specializing in ransomware recovery, breach restoration, and pre-incident hardening for enterprise customers. Its core service delivers battle-tested recovery specialists for active incidents, claimed to restore operations 53-57% faster than industry averages, with reported experience across 300+ ransomware recoveries including 15+ Fortune 500 companies and 500+ IT security assessments. The company layers a modular "battalion" product set onto this services base: Argos99 is a SaaS asset intelligence and dependency mapping platform ingesting telemetry from 60+ cloud and on-premises data sources; Athena7 provides technical assessments and remediation plans; Grypho5 delivers managed backup, firewall, and endpoint protection; and Securitas Summa bundles all four modules into an assured-recoverability program with a one-hour response SLA and zero-cost recovery guarantee.
Technology capabilities derive from frontline breach work and have been deepened by the 2025 acquisitions of vArmour (application relationship management patents and customer base, integrated into Argos99) and appNovi (network visualization and asset mapping). Fenix24 generates revenue through professional services engagements (incident recovery, assessments, remediation), managed services (Grypho5), and increasingly subscription software (Argos99 standalone SaaS launched March 2026). Pricing is not publicly disclosed; engagements are quote-based enterprise contracts. The company sells primarily through direct enterprise field sales supported by regional Managing Directors across the US, EU, and APAC, supplemented by insurance-channel partnerships (notably AXA XL in North America) and strategic alliances with CrowdStrike and Palo Alto Networks Unit 42 for joint incident response engagements.
Fenix24 targets regulated and high-value verticals including legal (Baker Hostetler, Norton Rose Fulbright), financial services, healthcare, manufacturing, professional services, technology, and cyber insurance carriers, with disclosed outcomes spanning Fortune 100 healthcare providers, global defense contractors, and public-sector recovery engagements. The company is privately held and venture-backed, with Eos Venture Partners (InsurTech-focused) leading a $5 million round in March 2023, and reports awards from Cyber Defense Magazine and Globee Cybersecurity Awards in 2025 and 2026 in categories covering ransomware restoration, breach readiness, cyber resilience, and incident response.
Fenix24 firmographics
Firmographics- Name
- Fenix24
- Legal name
- Fenix24, Inc.
- Website
- https://www.fenix24.com
- Company type
- Private
- Founded year
- 2022
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Fenix24 provides ransomware recovery, asset intelligence, and managed cyber protection services to enterprise clients in legal, healthcare, financial services, manufacturing, and other regulated sectors across the US, EU, and APAC.
- Ownership category
- akta.pro rank
Fenix24 industry classification
Industry- Product category
- Cyber Resilience Services
- NAICS
- Investigation and Security Services (5616), Security Systems Services (56162)
- SIC
- Services-Detective, Guard & Armored Car Services (7381)
- akta.pro primary industry
- Incident Response, Breach Containment & Recovery (BPAKAHAB)
- akta.pro secondary industries
- Cyber Recovery & Ransomware-Resilient Backup Services (BPAEALAG), Business Continuity, Crisis Management & Resilience Planning (BPAKADAI), Immutable Backup, Air-Gap & Ransomware Recovery (HDABAIAJ), Backup, Archiving & Ransomware-Resilient Data Protection (HDADAFAL)
Keywords
Where Fenix24 is headquartered
LocationHeadquarters
- HQ city
- Chattanooga
- HQ country
- United States
- HQ region
- North America
Offices5 records
Markets served
Fenix24 business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Breach Recovery Services: Emergency ransomware rapid recovery and restoration services for organizations under attack. Provides battle-tested recovery specialists to restore operations and protect data during cyber incidents.
- Security Assessments (Athena7): Assessments, strategy and remediation services including Actionable Technical Defense Plans, Ransomware Backup and Resiliency assessments, and customized assessments.
- Asset Intelligence Software (Argos99): SaaS platform providing asset visibility, dependency mapping, and policy drift detection. Originally developed from breach recovery experience.
- Managed Protection Services (Grypho5): Managed backup, firewall, and endpoint management services including 24/7 operations, configuration management, and real-time threat monitoring.
Go-to-market motion2 records
Distribution channels3 records
Marketing channels6 records
Fenix24 product offering
Product offeringCore offering
Fenix24 provides ransomware rapid recovery and restoration services for organizations under active cyber attack, combined with a broader cyber resilience program including asset intelligence (Argos99 SaaS), security assessments (Athena7), managed protection (Grypho5), and a guaranteed recoverability program (Securitas Summa). The company's battle-tested recovery specialists work alongside forensics teams and breach counselors to restore operations 53-57% faster than industry averages, serving enterprises across legal, financial services, healthcare, manufacturing, and defense sectors.
Product overview
Fenix24 offers a platform-plus-modules architecture centered on breach recovery and cyber resilience. The core Fenix24 service provides ransomware rapid recovery and restoration for active cyber incidents. Around this core, four modular 'battalion' offerings extend the platform: Argos99 (asset intelligence and dependency mapping SaaS), Athena7 (assessments and remediation), Grypho5 (managed protection services), and Securitas Summa (comprehensive assured recoverability program combining all modules with a recovery guarantee). Together these products deliver prevention, protection, and recovery guarantee across both peacetime preparation and wartime incident response.
Differentiator
Problem solved
Functional benefit
Brands
- Argos99: Asset intelligence and cyber resiliency SaaS platform providing real-time visibility into organizational assets and dependencies
- Athena7
- Grypho5
- Securitas Summa
Products and services
- Fenix24 Core Recovery Service Ransomware rapid recovery and restoration service providing battle-tested data recovery specialists for the fastest path to restoring operations and protecting data during active cyber incidents. Works in partnership with forensics teams and breach counselors to deliver recovery 53-57% faster than industry averages.
- Argos99 Asset intelligence and cyber resiliency SaaS platform providing full asset visibility, automated dependency mapping, unified insights across tools, and policy drift detection. Ingests telemetry from over 60 cloud and on-premises data sources for real-time organizational asset visibility across on-prem, cloud, and SaaS environments including shadow IT and privileged credentials.
- Athena7 Assessments, strategy and remediation service providing technical defense planning, ransomware backup and resiliency evaluations, and customized security assessments. Evaluates technical controls, cloud exposure, and infrastructure to provide prioritized actionable remediation plans for enterprise organizations.
- Grypho5 Managed protection services including managed backup with immutable storage, managed firewall with continuous optimization, and comprehensive endpoint management with real-time patching and EDR/MDR/XDR monitoring. Defends against threat actors 24/7 through configuration management and real-time threat monitoring.
- Securitas Summa Comprehensive cyber resilience assurance program combining automated infrastructure mapping (Argos99), ongoing managed protection (Grypho5), focused hardening and breach resistance (Athena7), with rapid response and zero-cost recovery guarantee (Fenix24). Provides guaranteed recoverability assurance with one-hour rapid response.
Quantifiable outcome
- 53-57% faster restoration than industry averages
- +5 more outcomes
Companies that use Fenix24
Customer profileNamed customers10 records
Segments7 records
Ideal customer profiles4 records
Fenix24 technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability4 records
Feature5 records
Fenix24 partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered core.
- AXA XLcoreAXA XL launched exclusive cybersecurity assessment services in partnership with Fenix24 for North American cyber insurance clients. Assessments focus on ransomware resilience, firewall security, and identity system protection, available at discounted rates until 2025.
- appNovicoreFenix24 acquired appNovi to enhance capabilities in cyber resiliency, specifically in network visualization and asset mapping. This acquisition aims to improve recovery speed, network security, and compliance for clients.
- vArmourcoreFenix24 acquired vArmour to enhance its Argos99 platform's capabilities for mapping complex enterprise environments. The acquisition integrated vArmour's patents and customer base into Fenix24's cyber resiliency offerings.
- CrowdStrikecoreStrategic partnership where CrowdStrike provides protection, insights, and monitoring services. Fenix24 leverages CrowdStrike's powerful tools during recovery operations, enabling faster response and less downtime (often 50% less compared to full rebuilds).
- Palo Alto NetworkscorePalo Alto Networks' Unit 42 incident response team works with Fenix24 during breach events. Former Fenix24 CISO Heath Renfrow was previously at Palo Alto Networks following acquisition of Crypsis Group.
- Insurance Information Institute (Triple-I)coreJoint report published with Insurance Information Institute analyzing cybersecurity gaps in the insurance sector. The report found that while insurance carriers have invested in cybersecurity, gaps persist in patching frequency, authentication practices, and recovery testing capabilities.
Scale indicators9 records
Recent moves7 records
Expansion highlights6 records
Fenix24 competitors and assessment
Company assessmentBroad incumbents
- Arctic Wolf: Arctic Wolf provides managed detection and response (MDR) and security operations services to mid-market and enterprise customers. It is a broader incumbent that competes in adjacent managed protection services similar to Fenix24's Grypho5 offering.
- Mandiant (Google Cloud): Mandiant is a leading global incident response and cyber threat intelligence firm, now part of Google Cloud. It is comparable as a broader incumbent offering frontline IR and recovery services that overlap with Fenix24's breach recovery practice, but at significantly larger scale.
- Kroll Cyber Risk: Kroll's Cyber Risk practice provides incident response, breach notification, and digital forensics services to enterprises globally. It overlaps with Fenix24's breach recovery and IR offerings as a broader incumbent in cyber recovery services.
- Palo Alto Networks Unit 42: Unit 42 is Palo Alto Networks' threat intelligence and incident response unit that responds to major breaches and partners with Fenix24 on recovery engagements. It is a broader incumbent that competes for the same Fortune 500 IR and recovery work.
- CrowdStrike Services: CrowdStrike's professional services arm provides incident response, recovery, and proactive services through its Falcon platform. It is a strategic Fenix24 partner but also a broad incumbent that competes in adjacent incident response and recovery retainers.
Emerging players
- Cymulate: Cymulate provides breach and attack simulation and continuous security validation. It overlaps with Fenix24's Athena7 assessment and Grypho5 managed protection capabilities around validating cyber resilience posture for enterprise customers.
- BreachQuest: BreachQuest is an incident response firm focused on digital forensics, breach response, and ransomware recovery for SMB and mid-market enterprises. It is comparable to Fenix24's recovery practice at a smaller scale and adjacent customer segment.
- Axio: Axio provides cyber risk quantification and resilience assessment tools used by insurers and large enterprises. It is comparable to Fenix24's Athena7 and Securitas Summa cyber resilience assurance programs serving similar insurance-driven buyer personas.
- Black Kite: Black Kite is a third-party cyber risk and ransomware resilience rating platform used by insurers and enterprises. It is comparable to Fenix24's Athena7 assessments and Argos99 asset intelligence capabilities focused on insurance-driven validation.
Direct peers
- Coveware: Coveware is a ransomware incident response and recovery firm that helps organizations negotiate with threat actors and restore operations post-breach. It is directly comparable to Fenix24's core breach recovery and restoration service.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks5 records
Key highlights7 records
Customer concentration
Fenix24 social profiles
Digital presenceFenix24 financial estimates
Financial estimateRevenue estimate
Valuation estimate
Fenix24 leadership team
Management profileNumber of profiles
Profiles15 records
Fenix24 subsidiaries and ownership
Company hierarchySubsidiaries7 records
Fenix24 funding detail
Funding detailFunding overview
Funding rounds1 record
Investors2 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Fenix24 M&A and investment
M&A and investmentM&A2 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Fenix24
What does Fenix24 do?
Fenix24 provides ransomware rapid recovery and restoration services for organizations under active cyber attack, combined with a broader cyber resilience program including asset intelligence (Argos99 SaaS), security assessments (Athena7), managed protection (Grypho5), and a guaranteed recoverability program (Securitas Summa). The company's battle-tested recovery specialists work alongside forensics teams and breach counselors to restore operations 53-57% faster than industry averages, serving enterprises across legal, financial services, healthcare, manufacturing, and defense sectors.
Is Fenix24 a public or private company?
Fenix24 is a private company. It is classified as venture growth investor backed and is currently operating.
When was Fenix24 founded?
Fenix24 was founded in 2022. It employs 51 to 100 people.
Where is Fenix24 based?
Fenix24 is headquartered in Chattanooga, United States, in the North America region.
How does Fenix24 make money?
Four revenue lines are on record. Breach Recovery Services are the primary driver. The others are security Assessments (Athena7), asset Intelligence Software (Argos99) and managed Protection Services (Grypho5).
Who are Fenix24's main competitors?
Broad incumbents on record are Arctic Wolf, Mandiant (Google Cloud), Kroll Cyber Risk, Palo Alto Networks Unit 42 and CrowdStrike Services. Emerging players are Cymulate, BreachQuest, Axio and Black Kite. Coveware is listed as a direct peer.
Does Fenix24 have an API?
No public API is recorded for Fenix24.
What industry is Fenix24 in?
Fenix24's product category is Cyber Resilience Services. Its primary akta.pro industry code is BPAKAHAB, Incident Response, Breach Containment & Recovery, with a secondary code of BPAEALAG, Cyber Recovery & Ransomware-Resilient Backup Services. Its NAICS code is 5616 and its SIC code is 7381.