ThreatCaptain
ThreatCaptain is a Greenville, South Carolina-based SaaS platform that translates cyber risk into financial impact for Managed Service Providers, combining a Financial Impact Simulator, Insurance Health Score, and the Beakon AI assistant across Find, Win, and Grow workflows.
- Company typePrivate
- Founded2022
- HeadquartersGreenville, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What ThreatCaptain does
ThreatCaptain, Corp. is a privately held, Greenville, South Carolina-based software company that builds a cyber risk quantification and revenue platform purpose-built for Managed Service Providers (MSPs). The platform is organized as three workflow suites — Anchor (find / lead generation via an ICP Lead Discovery Engine, Lead-Gen Website Widget, and AI-assisted outreach), First Mate (win / the core platform with the MSP Command Center, Business Risk Assessments, Risk Likelihood Analysis, Cyber Financial Impact Analysis, Insurance Health Score, and Financial Impact Simulator), and Admiral (grow / client retention via Service Catalog Builder, Executive Reports, built-in CRM, and Threat Intelligence Feed) — with the Beakon AI assistant sitting across all three to translate technical cyber risk into business and financial language for MSP sales conversations. The Financial Impact Simulator and Risk Likelihood Analysis are grounded in third-party industry datasets and frameworks (IBM Cost of a Data Breach, Verizon DBIR, MITRE ATT&CK, CIS Controls, NIST, CMMC), and the platform integrates bi-directionally with ConnectWise PSA and HubSpot CRM, supports white-label client-facing outputs, and is built on a multi-tenant architecture that lets a single MSP manage its entire client book from one account.
The company makes money primarily through recurring subscriptions and usage-based add-ons across its three suites, with publicly listed base pricing of $0/month per suite and metered overages on additional MSP team seats ($25-35/mo each), ICP lead credits ($29 per 50), and client profiles ($25/mo each); an Early Access Offer of $199/mo is available for Anchor Suite sign-ups in June/July 2026 ahead of the Gen IV Platform's August 2026 general-availability launch. ThreatCaptain monetizes the MSP channel both directly (per-seat subscriptions, usage credits, NFR licenses for evaluation) and indirectly through white-label/partner enablement that lets MSPs resell ThreatCaptain-powered reports, proposals, and QBRs to their own end clients. Its go-to-market is hybrid: a sales-assisted motion for MSP partner onboarding (book-a-demo, "Talk to Our Team"), a PLG/self-serve entry tier (Anchor Suite at $0/month), and event- and channel-driven credibility plays (ConnectWise IT Nation PitchIT finalist, IT Nation Podcast, SCRA grant funding, CRN earned media). The company is backed by the South Carolina Research Authority (SCRA grants), SC Launch, Inc., Founderville VC, and Blu Venture Investors — Cyber, with total disclosed funding of approximately $1.1M across four tranches in 2024-2025. ThreatCaptain advertises SOC 2 Type II, HIPAA, and CMMC compliance posture and reports 70% year-over-year growth in 2026.
ThreatCaptain firmographics
Firmographics- Name
- ThreatCaptain
- Legal name
- ThreatCaptain, Corp.
- Website
- https://threatcaptain.com
- Company type
- Private
- Founded year
- 2022
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- ThreatCaptain is a Greenville, South Carolina-based SaaS platform that translates cyber risk into financial impact for Managed Service Providers, combining a Financial Impact Simulator, Insurance Health Score, and the Beakon AI assistant across Find, Win, and Grow workflows.
- Ownership category
- akta.pro rank
ThreatCaptain industry classification
Industry- Product category
- MSP Cybersecurity Sales Enablement Software
- NAICS
- Computer Systems Design Services (541512), Computer Systems Design and Related Services (54151)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Security Operations Center (SOC) as a Service (BPAEADAB)
- akta.pro secondary industries
- Remote Monitoring & Management (RMM) Services (BPAEABAA), Fraud Risk & Financial Crime Controls Advisory (BPAKADAL)
Keywords
Where ThreatCaptain is headquartered
LocationHeadquarters
- HQ city
- Greenville
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
ThreatCaptain business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure
Revenue model
- First Mate Suite (Core Platform) Subscription: Recurring subscription for the core ThreatCaptain platform sold on a per-seat basis (5 MSP team seats included, +$35/mo per additional seat), with unlimited clients included. This is the "Win" suite of the revenue engine.
- Anchor Suite (Lead Generation Engine) Subscription & Add-on: Recurring subscription (standalone $0/month or add-on to First Mate) bundled with monthly ICP lead credits (50 free, +$29 per additional 50 ICP) and seats ($25/mo per additional seat). Early access offer priced at $199/mo for June/July sign-ups.
- Admiral Suite (Client Retention & Expansion) Add-on: Recurring add-on subscription ($0/month baseline) sold on a per-client basis (10 included, +$25/mo per additional client profile) layered on top of First Mate for QBRs, client risk registries, and renewal tracking.
- Usage-Based Credits & Seats: Usage-based revenue from additional ICP lead credits ($29 per 50 ICP), additional MSP team seats ($35/mo each in First Mate; $25/mo each in Anchor), and additional client profiles ($25/mo each in Admiral).
- White-Label / Partner Enablement for MSP Resale: White-labeled experience carried into client-facing touchpoints (proposals, QBR reports, dashboards, widgets) so MSP partners can charge their own clients for ThreatCaptain-powered reports and services, enabling partner-driven revenue multiplication.
- Not-For-Resale (NFR) License (Time-Limited): Time-limited, non-transferable NFR licenses (e.g., 60 days) granted for internal evaluation, demonstration, training, and a first internal business use case. Explicitly excludes direct commercial, client-facing, or revenue-generating activities.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | Anchor Suite (Lead Generation Engine) — $0/month standalone or add-on |
| Per seat | Monthly | First Mate Suite (Core Platform) — $0/month base, per-seat |
| Per seat | Monthly | Admiral Suite (Client Retention & Expansion) — $0/month add-on, per-client |
| Usage-based | Pay-as-you-go | Usage-based add-ons across all suites |
Go-to-market motion4 records
Distribution channels4 records
Marketing channels8 records
ThreatCaptain product offering
Product offeringCore offering
ThreatCaptain is a multi-tenant SaaS sales-enablement and revenue-engine platform purpose-built for Managed Service Providers (MSPs). It combines an AI assistant called Beakon with three workflow suites — Anchor (lead generation), First Mate (core cyber-risk quantification and win), and Admiral (client retention and expansion) — to translate technical cyber risk into financial impact and produce white-labeled proposals, QBRs, and reports. The platform integrates bi-directionally with ConnectWise PSA and HubSpot CRM and is grounded in industry datasets including IBM Cost of a Data Breach, Verizon DBIR, MITRE ATT&CK, CIS Controls, NIST, and CMMC.
Product overview
ThreatCaptain is a single, unified cyber-risk quantification and revenue platform purpose-built for Managed Service Providers (MSPs), organized as a platform-plus-modules architecture. The core First Mate Suite houses the MSP Command Center, Business Risk Assessments, Risk Likelihood Analysis, Cyber Financial Impact Analysis (CFIA), Insurance Health Score, and the Financial Impact Simulator; the Anchor Suite layers on lead generation via the ICP Lead Discovery Engine, Lead-Gen Website Widget, and AI-assisted outreach; and the Admiral Suite delivers client retention and expansion through the Service Catalog Builder, Proposal Builder & Executive Reports, Client & Deal Management (CRM), and the Threat Intelligence Feed. The Beakon AI Assistant sits across all three suites, translating cyber risk into business language and surfacing next-best actions, and the platform integrates bi-directionally with ConnectWise (PSA) and HubSpot (CRM). The announced Gen IV Revenue Engine / Gen IV Platform (August 2026) represents the next-generation release of this architecture.
Differentiator
Problem solved
Functional benefit
Brands
- Beakon: In-product AI "first mate" assistant that translates cyber risk into business/financial language and supports MSPs across the client lifecycle (lead attraction, deal closing, renewal/retention). Marketed as a named, distinct component of the ThreatCaptain platform.
Products and services
- Anchor Suite (Lead Generation Engine) Lead-generation suite for MSPs that discovers ideal-customer-profile prospects by industry, size, and geography; enriches verified decision-maker email and mobile contacts; embeds a white-label Lead-Gen Website Widget on the MSP's site; and powers AI-assisted outreach via the Beakon AI assistant. Sold as a $0/month standalone entry tier or as an add-on to First Mate, with 50 free monthly ICP credits and +$29 per additional 50 ICP credits.
- First Mate Suite (Core Platform) Core platform suite for MSPs that delivers the multi-tenant MSP Command Center, Business Risk Assessments, Cyber Financial Impact Analysis (CFIA), Insurance Health Score, Financial Impact Simulator, and Risk Likelihood Analysis mapped to MITRE ATT&CK and CIS Controls. Priced at $0/month base with 5 MSP team seats included and +$35/month per additional seat, with unlimited end clients included.
- Admiral Suite (Client Retention & Expansion) Client retention and expansion suite for MSPs that supports quarterly business reviews, client risk registries, renewal tracking, Service Catalog Builder, Proposal Builder & Executive Reports, and Client & Deal Management (CRM). Sold as a $0/month add-on to First Mate, priced per client profile with 10 included and +$25/month per additional client.
- ThreatCaptain Platform (Gen IV Revenue Engine) Unified cyber-risk quantification and revenue platform purpose-built for Managed Service Providers, consolidating the Anchor, First Mate, and Admiral Suites with the Beakon AI assistant into a single multi-tenant command center. Translates cyber risk into financial impact for the MSP's find-win-grow client lifecycle, integrates bi-directionally with ConnectWise PSA and HubSpot CRM, and supports white-label client-facing proposals, QBRs, and reports.
Quantifiable outcome
- 70% company growth this year (2026)
- +6 more outcomes
Companies that use ThreatCaptain
Customer profileNamed customers15 records
Segments3 records
Ideal customer profiles1 record
ThreatCaptain technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration2 records
AI capability8 records
Feature11 records
ThreatCaptain partnerships and signals
Strategic signalPartnerships
22 partnerships are on record, tiered core, flagship and minor.
- ConnectWisecoreConnectWise is both a technology integration partner (bi-directional sync with ConnectWise PSA embedded in the ThreatCaptain product) and a GTM/accelerator partner (ThreatCaptain was selected as a finalist in ConnectWise's IT Nation PitchIT Program). The relationship is cross-functional: tech integration + MSP channel validation.
- HubSpotcoreHubSpot is a technology integration partner: ThreatCaptain offers bi-directional sync with HubSpot CRM as part of its core platform (First Mate Suite), letting MSPs pipe client and deal data between the two systems.
- IBM (Cost of a Data Breach)coreIBM's Cost of a Data Breach dataset is one of the trusted industry datasets ThreatCaptain's algorithm is rooted in, powering the Financial Impact Simulator's breach cost modeling across detection, notification, post-breach response, and lost business categories.
- Verizon (DBIR)coreVerizon's Data Breach Investigations Report (DBIR) is one of the trusted industry datasets ThreatCaptain's algorithm is rooted in, providing industry-specific breach likelihood inputs.
- MITRE ATT&CKcoreMITRE ATT&CK framework is one of the trusted industry frameworks ThreatCaptain's Risk Likelihood Analysis maps client defenses against, alongside CIS Controls.
- CIS (Center for Internet Security) ControlscoreCIS Controls is one of the trusted industry frameworks ThreatCaptain's Risk Likelihood Analysis maps client defenses against, alongside MITRE ATT&CK, to estimate breach probability.
- IT Nation (ConnectWise)coreIT Nation (a ConnectWise community) is a GTM/marketing partner: ThreatCaptain was featured on the IT Nation Podcast and was a finalist in the IT Nation PitchIT Program, gaining exposure to the broader MSP channel.
- Cyber SolutionsflagshipAdmiral Status MSP partner ($1M+ ARR in 2025) using ThreatCaptain's Business Risk Assessment across every sales process, with documented outcomes including a $10K engagement, a $3K/month contract at 70% price increase, and over $1M in ARR layered with pen testing. Kylan Cleveland is the named partner contact (Director of Sales).
- Novus InsightflagshipAdmiral Status MSP partner ($1M+ ARR in 2025) integrated ThreatCaptain into its vCIO program, landing $80K+ in services revenue in the first 3 months. Greg Bugbee (CISO) and Rocky Bragg (Security Architect) are named partner contacts.
- Framework ITflagshipFlagship MSP partner; Olivia Anderson (Principal, Managed IT Partnerships) is a named testimonial contact. Framework IT closed $69,000 of net new MSP MRR using ThreatCaptain and is featured in a case study on anchoring proposals in financial impact.
- BC NetworkscoreMSP partner; Dave B. (CEO) and Steven Hansen (Senior Account Manager) are named partner contacts. BC Networks uses ThreatCaptain almost daily and cites it as giving them a "true offer" to bring to clients.
- ARKcoreMSP partner; Danny Glassman (VP of Sales), Tyler Yeager (Account Executive), and Margaret Debiec (Account Executive) are named partner contacts, with multiple case studies on building long-term roadmaps and adding services naturally.
- DS Tech (New Charter Technologies)flagshipMSP partner; Josh Marenger (Vice President, CISSP/CISM) is the named partner contact. DS Tech used ThreatCaptain during a credit union tabletop exercise to model control failures that revealed ~$950K in financial exposure.
- PTGcoreMSP partner; Kayla Lange (Account Executive) and Zach Allen are named partner contacts, with case studies on pilot proof of value and using ThreatCaptain in quarterly territory reviews.
- CoursercoreMSP partner; Kelly Looney (Lead Sales Engineer) is the named partner contact, with a case study on aligning internally before taking solutions up the chain.
- TekRescueminorMSP partner; Debbie Bryan (Chief Operating Officer) is the named partner contact, with a case study on standing out in competitive sales situations.
- Triad InfoSecminorMSP partner; Jason Rorie (SecX, C|CISO, CISA) is the named partner contact; uses ThreatCaptain in live risk demos to financially validate cyber risk in vCISO engagements.
- CrushableminorMSP partner; Brad Hamlet is the named partner contact; used a 5-minute ThreatCaptain downtime model to close $250K in hospital ARR.
- Rutter TechnologiesminorMSP partner; Ellen Sofronas is the named partner contact; uses ThreatCaptain to lead insurance and risk conversations with clients.
- CMIT Solutions of GreenvilleminorMSP partner; John Boyette is the named partner contact; uses ThreatCaptain to lead client conversations around business language and trust.
- ROC Business TechnologiesminorMSP partner; Ryan Ousey is the named partner contact, featured in a partner testimonial video.
- NetranomminorMSP partner cited in CRN coverage of the ThreatCaptain Gen IV Revenue Engine launch, providing a customer testimonial on success with the platform.
Scale indicators10 records
Recent moves6 records
Expansion highlights5 records
ThreatCaptain competitors and assessment
Company assessmentBroad incumbents
- Bitsight: Bitsight is an established security ratings and cyber risk analytics platform that scores organizational security posture and financial exposure — broader than ThreatCaptain but operating in the same cyber-risk-translation category, with an MSSP program serving similar buyer personas.
- Tenable: Tenable is an established vulnerability management and cyber risk platform (Nessus, Tenable One) with exposure analytics that quantify risk for enterprises and MSPs — a broad incumbent whose exposure quantification overlaps with ThreatCaptain's likelihood and impact modeling.
- SecurityScorecard: SecurityScorecard provides security ratings, risk quantification, and cyber insurance analytics to enterprises and their service providers — a broad incumbent in the same CRQ space, with an MSSP partner program that targets the same MSP channel ThreatCaptain serves.
- NinjaOne: NinjaOne is an established endpoint management and RMM platform purpose-built for MSPs, increasingly layering in security and risk analytics — a broad incumbent whose MSP-only positioning overlaps with ThreatCaptain's ICP and could expand into the same risk-translation category.
- ConnectWise: ConnectWise is the dominant PSA/RMM platform for MSPs and a ThreatCaptain technology and GTM partner (bi-directional PSA integration, IT Nation PitchIT). Its broader portfolio (Sell, Manage, Automate) places it as a broad incumbent whose roadmap could compete with ThreatCaptain's MSP revenue engine.
- Kaseya: Kaseya is a broad MSP platform offering RMM, PSA, security, and business management tools (VSA, BMS, Datto) — an incumbent that could bundle cyber risk quantification features into its platform, competing with ThreatCaptain for the same MSP-IT-channel wallet.
Direct peers
- Axio: Axio is a cyber risk quantification platform that translates cyber risk into financial impact for enterprises and their service providers, using industry data (IBM Cost of a Data Breach, etc.) — a directly comparable offering to ThreatCaptain's Financial Impact Simulator and Insurance Health Score.
- Safe Security (SAFE): Safe Security delivers breach likelihood scoring and cyber risk quantification grounded in industry data, including an MSSP program that lets service providers deliver CRQ to clients — directly comparable to ThreatCaptain's Financial Impact Simulator and MSP multi-tenant delivery model.
- Balbix: Balbix provides cyber risk posture management and quantification, scoring breach likelihood and financial exposure across an organization's attack surface — overlapping directly with ThreatCaptain's Risk Likelihood Analysis and Cyber Financial Impact Analysis features.
- QuoteWerks: QuoteWerks is a sales quoting and proposal platform built specifically for MSPs and IT service providers, used to create and present client-facing proposals — directly comparable to ThreatCaptain's Proposal Builder and white-label client-facing documents in the MSP sales-enablement workflow.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
ThreatCaptain social profiles
Digital presenceThreatCaptain compliance and trust
Trust signalCompliance3 records
ThreatCaptain financial estimates
Financial estimateRevenue estimate
Valuation estimate
ThreatCaptain leadership team
Management profileNumber of profiles
ThreatCaptain funding detail
Funding detailFunding overview
Funding rounds4 records
Investors3 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
ThreatCaptain M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about ThreatCaptain
What does ThreatCaptain do?
ThreatCaptain is a multi-tenant SaaS sales-enablement and revenue-engine platform purpose-built for Managed Service Providers (MSPs). It combines an AI assistant called Beakon with three workflow suites — Anchor (lead generation), First Mate (core cyber-risk quantification and win), and Admiral (client retention and expansion) — to translate technical cyber risk into financial impact and produce white-labeled proposals, QBRs, and reports. The platform integrates bi-directionally with ConnectWise PSA and HubSpot CRM and is grounded in industry datasets including IBM Cost of a Data Breach, Verizon DBIR, MITRE ATT&CK, CIS Controls, NIST, and CMMC.
Is ThreatCaptain a public or private company?
ThreatCaptain is a private company. It is classified as venture growth investor backed and is currently operating.
When was ThreatCaptain founded?
ThreatCaptain was founded in 2022. It employs 1 to 10 people.
Where is ThreatCaptain based?
ThreatCaptain is headquartered in Greenville, United States, in the North America region.
How does ThreatCaptain make money?
Six revenue lines are on record. First Mate Suite (Core Platform) Subscription is the primary driver. The others are anchor Suite (Lead Generation Engine) Subscription & Add-on, admiral Suite (Client Retention & Expansion) Add-on, usage-Based Credits & Seats, white-Label / Partner Enablement for MSP Resale and not-For-Resale (NFR) License (Time-Limited).
Who are ThreatCaptain's main competitors?
Broad incumbents on record are Bitsight, Tenable, SecurityScorecard, NinjaOne, ConnectWise and Kaseya. Direct peers are Axio, Safe Security (SAFE), Balbix and QuoteWerks.
Does ThreatCaptain have an API?
No public API is recorded for ThreatCaptain.
What industry is ThreatCaptain in?
ThreatCaptain's product category is MSP Cybersecurity Sales Enablement Software. Its primary akta.pro industry code is BPAEADAB, Security Operations Center (SOC) as a Service, with a secondary code of BPAEABAA, Remote Monitoring & Management (RMM) Services. Its NAICS code is 541512 and its SIC code is 7372.