DeNexus
DeNexus provides an AI-driven cyber risk quantification platform that translates OT cybersecurity exposure into financial metrics (AEL, VaR) for industrial operators and cyber insurers across power, energy, manufacturing, and data center sectors.
- Company typePrivate
- Founded2019
- HeadquartersBoston, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What DeNexus does
DeNexus is a private cybersecurity company founded in 2019 that builds the DeRISK platform for industrial operational technology (OT) cyber risk quantification. The company's core technology is the proprietary URMS (Unified Risk Management System) engine, which combines AI/ML with probabilistic inference to convert OT cyber exposure into financial risk metrics — Annual Expected Loss (AEL), Value at Risk (VaR), and loss exceedance curves — calibrated against 300+ real industrial deployments and integrating 50+ external and internal data sources through connectors with the major OT security platforms (Dragos, Claroty, Nozomi Networks, Forescout, Tenable, Palo Alto Networks, Fortinet). The product portfolio comprises three modules — DeRISK CRQ for portfolio-level risk quantification, DeRISK QVM for financially-ranked vulnerability management with patent-pending AI-powered CVE-to-ATT&CK mapping, and the newly launched DeRISK UWA Agentic, an agentic AI underwriting platform that delivers full actuarial output in 10-20 minutes versus 10-30 hours of manual assessment — supported by a Knowledge Center data foundation and Risk Management Services.
DeNexus serves two primary customer segments: industrial operators in power generation, energy transmission and distribution, manufacturing, data centers, and transportation, who use the platform for board-level risk reporting, mitigation ROI justification, and CVE prioritization; and cyber insurers, reinsurers, and brokers, who use the UWA Agentic platform for submission triage and underwriting automation. Named customers include Apex Clean Energy, EDF, Clearway, GridSecurity, and Chaucer Group, with the platform deployed across 200+ sites in the US, UK, and Europe. The GTM motion is enterprise field sales targeting CISOs, CFOs, COOs, and Chief Risk Officers.
The company has raised approximately $33 million in cumulative disclosed funding across seed, SAFE, and Series A rounds since 2019, with the $17.5 million Series A in October 2024 led by Punja Global Ventures and joined by AXA XL, Prosegur/SegTech, and HCS Capital. Pricing is quote-based for the CRQ/QVM subscription tiers, while UWA Agentic is publicly priced at $500 per submission with volume discounts and Enterprise tier custom pricing. The headquarters is reported as both Sausalito, California (per company disclosures) and Boston (per firmographic data), with the Sausalito address appearing more frequently in primary sources.
DeNexus firmographics
Firmographics- Name
- DeNexus
- Legal name
- DeNexus, Inc.
- Website
- https://denexus.io
- Company type
- Private
- Founded year
- 2019
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- DeNexus provides an AI-driven cyber risk quantification platform that translates OT cybersecurity exposure into financial metrics (AEL, VaR) for industrial operators and cyber insurers across power, energy, manufacturing, and data center sectors.
- Ownership category
- akta.pro rank
DeNexus industry classification
Industry- Product category
- OT Cyber Risk Quantification Software
- NAICS
- Security Systems Services (except Locksmiths) (561621), Insurance Carriers and Related Activities (524)
- SIC
- Services-Computer Programming Services (7371)
- akta.pro primary industry
- OT Threat Detection & Monitoring (NDR/IDS for ICS) (HDADAJAF)
- akta.pro secondary industries
- Cyber Risk Management Services (Pre-Breach Services bundled with Insurance) (FSAJAOAO), Critical Infrastructure / OT & Industrial Cyber Coverage (FSAJAOAM)
Keywords
Where DeNexus is headquartered
LocationHeadquarters
- HQ city
- Boston
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
DeNexus business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations
Revenue model
- SaaS Subscription - DeRISK Platform: Cloud-based SaaS platform delivered via subscription model. Multiple deployment options including SaaS (AWS), On-Prem (AWS/Azure/GCP), and API access. Three commercial tiers: Standard, Professional, and Enterprise with single-tenant option.
- Per-Submission Pricing - UWA Agentic: DeRISK UWA Agentic sold at $500 per submission with volume pricing available. Professional tier includes insurer framework and report calibration. Enterprise tier includes single-tenant deployment, API integration, and custom rule book.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Pay-as-you-go | Standard Triage - $500 per submission with volume pricing available |
| Subscription | Pay-as-you-go | Professional Peer Review - Insurer framework + report calibration |
| Subscription | Multi-year contract | Enterprise Bind + API - Single-tenant with dedicated governance |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels7 records
DeNexus product offering
Product offeringCore offering
DeNexus provides an evidence-based, end-to-end cyber risk quantification and management platform (DeRISK) for industrial operators and cyber insurers managing Operational Technology (OT) and Cyber-Physical Systems. The platform translates OT cyber exposure into financial risk metrics—Annual Expected Loss (AEL) and Value at Risk (VaR)—at facility and portfolio levels, ranks vulnerabilities by expected loss reduction rather than CVSS severity, and automates cyber insurance underwriting with agentic AI, reducing assessment time from 10-30 hours to 10-20 minutes.
Product overview
DeNexus offers a platform-plus-modules architecture centered on the DeRISK platform for industrial OT cyber risk. The portfolio consists of three interconnected modules: DeRISK CRQ (Cyber Risk Quantification) for translating OT exposure into AEL/VaR financial metrics; DeRISK QVM (Quantified Vulnerability Management) for ranking CVEs by expected loss reduction rather than severity; and DeRISK UWA Agentic (Underwriting Workflow Augmentation) for AI-driven cyber insurance underwriting. All three modules share the same URMS quantification engine (calibrated on 300+ deployments), a common set of OT security connectors (Dragos, Claroty, Nozomi, Forescout, Tenable, PANW, Fortinet), and a unified evidence base — enabling the Quantify → Reduce → Transfer operating model. Supporting the core platform are the DeNexus Knowledge Center (external and internal OT data foundation) and Risk Management Services (consulting and advisory). The platform supports SaaS (AWS) and On-Prem deployment (AWS/Azure/GCP), with API extensibility at the Enterprise tier.
Differentiator
Problem solved
Functional benefit
Brands
- DeRISK: Industrial cyber risk quantification and management platform for OT environments, including CRQ (Cyber Risk Quantification), QVM (Quantified Vulnerability Management), and UWA (Underwriting Workflow Augmentation) products.
Products and services
- DeRISK CRQ (Cyber Risk Quantification)
Quantifiable outcome
- 46% increase in annual expected loss accuracy after incorporating hidden vulnerabilities
- +5 more outcomes
Companies that use DeNexus
Customer profileNamed customers5 records
Segments5 records
Ideal customer profiles3 records
DeNexus technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration7 records
AI capability7 records
Feature6 records
DeNexus partnerships and signals
Strategic signalPartnerships
Eight partnerships are on record, tiered flagship and core.
- Chaucer GroupflagshipNamed reference customer and early adopter of DeRISK UWA Agentic. Chaucer Group Cyber Analyst Christopher Norwood provides testimonial and case study reference for the platform. Represents the insurance carrier perspective on product development.
- DragoscoreConnector partner integrated with DeRISK platform. Dragos OT security data feeds into DeRISK CRQ and QVM for vulnerability assessment and risk quantification.
- ClarotycoreConnector partner integrated with DeRISK platform. Claroty's xDome platform provides OT network visibility and vulnerability data for DeRISK QVM integration.
- Nozomi NetworkscoreConnector partner integrated with DeRISK platform. Nozomi Networks OT visibility and threat detection data feeds into DeRISK risk quantification engine.
- ForescoutcoreConnector partner integrated with DeRISK platform. Forescout's OT asset discovery and visibility data integration for risk analysis.
- TenablecoreConnector partner integrated with DeRISK platform. Tenable OT/ICS vulnerability assessment data feeds into DeRISK QVM.
- Palo Alto Networks (PANW)coreConnector partner integrated with DeRISK platform. PANW security data integration for comprehensive risk assessment.
- FortinetcoreConnector partner integrated with DeRISK platform. Fortinet OT security solutions integration for network and security monitoring data.
Scale indicators10 records
Recent moves6 records
Expansion highlights7 records
DeNexus competitors and assessment
Company assessmentEmerging players
- Kovrr: Cyber risk quantification vendor offering financial loss modeling for enterprise and insurance customers. Comparable as a CRQ competitor, though Kovrr is more IT-centric versus DeNexus's OT specialization.
- Axio: Cyber risk quantification and exposure management platform using the FAIR methodology. Comparable as a CRQ competitor serving enterprise and insurance segments with overlapping financial cyber risk output.
Direct peers
- Claroty: Leading OT/ICS cybersecurity platform providing asset discovery, vulnerability management, and network segmentation. Directly comparable as a primary OT security data source that DeNexus integrates with and competes against for industrial cybersecurity budget.
- Nozomi Networks: OT and IoT visibility and threat detection platform used by industrial operators and critical infrastructure. Comparable as both an integration partner for DeRISK and a competing cybersecurity platform for OT environments.
- Dragos: OT-native cybersecurity platform with threat detection, vulnerability management, and incident response for industrial control systems. Directly comparable as OT security stack competitor and DeRISK data integration partner.
- CyberCube: Cyber risk analytics platform purpose-built for the insurance industry, providing portfolio-level cyber risk modeling. Highly comparable as a competitor in the cyber insurance analytics segment that DeNexus targets with DeRISK UWA Agentic.
Broad incumbents
- Tenable: Large-scale vulnerability management vendor with Nessus and OT/ICS assessment capabilities. Comparable as both a DeRISK data source (Tenable OT integration) and a broader incumbent that could bundle risk quantification into its enterprise platform.
- Forescout: Device visibility and control platform with OT/ICS coverage. Comparable as a DeRISK integration partner and as a broader cybersecurity incumbent in the same industrial customer accounts.
- Bitsight: Cyber risk ratings and exposure management platform used by insurers and enterprises. Comparable as a broader cyber risk management incumbent with insurance and enterprise distribution.
- SecurityScorecard: Cybersecurity ratings and risk quantification platform serving enterprises, insurers, and brokers. Comparable as an incumbent competitor in board-grade cyber risk reporting and insurance underwriting workflows.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
DeNexus social profiles
Digital presenceDeNexus financial estimates
Financial estimateRevenue estimate
Valuation estimate
DeNexus leadership team
Management profileNumber of profiles
Profiles5 records
DeNexus funding detail
Funding detailFunding overview
Funding rounds8 records
Investors8 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
DeNexus M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about DeNexus
What does DeNexus do?
DeNexus provides an evidence-based, end-to-end cyber risk quantification and management platform (DeRISK) for industrial operators and cyber insurers managing Operational Technology (OT) and Cyber-Physical Systems. The platform translates OT cyber exposure into financial risk metrics—Annual Expected Loss (AEL) and Value at Risk (VaR)—at facility and portfolio levels, ranks vulnerabilities by expected loss reduction rather than CVSS severity, and automates cyber insurance underwriting with agentic AI, reducing assessment time from 10-30 hours to 10-20 minutes.
Is DeNexus a public or private company?
DeNexus is a private company. It is classified as venture growth investor backed and is currently operating.
When was DeNexus founded?
DeNexus was founded in 2019. It employs 11 to 50 people.
Where is DeNexus based?
DeNexus is headquartered in Boston, United States, in the North America region.
How does DeNexus make money?
Two revenue lines are on record. SaaS Subscription - DeRISK Platform is the primary driver. The others are per-Submission Pricing - UWA Agentic.
Who are DeNexus's main competitors?
Emerging players on record are Kovrr and Axio. Direct peers are Claroty, Nozomi Networks, Dragos and CyberCube. Broad incumbents are Tenable, Forescout, Bitsight and SecurityScorecard.
Does DeNexus have an API?
Yes. Extensible API available at Enterprise tier deployment. API-connected into carrier underwriting workflows for automated integration. Supports data ingestion (PDF, XLSX, CSV, DOCX, Images, JSON/XML formats) as part of the DeRISK UWA Agentic pipeline. Developer documentation is at www.denexus.io.
What industry is DeNexus in?
DeNexus's product category is OT Cyber Risk Quantification Software. Its primary akta.pro industry code is HDADAJAF, OT Threat Detection & Monitoring (NDR/IDS for ICS), with a secondary code of FSAJAOAO, Cyber Risk Management Services (Pre-Breach Services bundled with Insurance). Its NAICS code is 561621 and its SIC code is 7371.