Mirato
Mirato is a Tel Aviv-based AI and NLP platform for Third-Party Risk Management. The company automates TPRM assessments for financial institutions and government, pre-answering up to 93% of due-diligence questionnaires and providing continuous monitoring across structured and unstructured data sources.
- Company typePrivate
- Founded2018
- HeadquartersTel Aviv, Israel
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Mirato does
Mirato is a Tel Aviv, Israel-based software company that sells an AI- and Natural Language Processing-powered Third-Party Risk Management (TPRM) Intelligence Platform to enterprise and government buyers. The platform ingests structured data (questionnaire responses, subscription ratings from providers such as BitSight, Rapid Ratings, and Interos) and unstructured data (SOC reports, penetration test results, policies, BC/DR plans, ISO certifications, DPAs) to validate third-party controls, surface concentration and fourth-party risk, and pre-answer up to 93% of due-diligence questionnaires. Core modules include the TPRM Intelligence Platform, Questionnaire Killer©, the Mitigation Planning Module, Risk Board, and Concentration Risk Hunter, delivered as a SaaS solution with API-based integration into existing GRC, procurement, and contract systems.
The platform is sold primarily through direct enterprise sales with multi-year SaaS contracts and a 'by the drink' usage tier; a managed-services option is offered through partner channels, and the Questionnaire Killer module can be white-labeled into existing TPRM platforms. Mirato targets financial institutions as its primary vertical (commercial banks, retail banks, capital markets) and has expanded go-to-market into government, energy, technology, manufacturing, aerospace & defense, automotive, and consumer goods. The company is ISO 27001 certified, operates dedicated private-cloud instances per client, and maintains a US headquarters in Dover, Delaware alongside its Tel Aviv international headquarters.
Mirato was founded in 2018 by Aki Eldar (CEO) and Etai Hochman (CTO), with co-founders who previously built and exited companies acquired by Microsoft and Cisco. The company has raised at least $9 million across disclosed 2021 funding rounds from Serendipity Capital, Grove Ventures, Joule Ventures, iAngels, The Group Ventures, and Amex Ventures (American Express). Headcount is reported in the 11-50 range. The company has received industry recognition including Risk.net's 2023 'Best use of NLP' award, IDC 'Vendor to Watch' (2022), and Gartner's vendor innovation recognition (2021).
Mirato firmographics
Firmographics- Name
- Mirato
- Legal name
- Mirato Ltd
- Website
- https://mirato.com
- Company type
- Private
- Founded year
- 2018
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Mirato is a Tel Aviv-based AI and NLP platform for Third-Party Risk Management. The company automates TPRM assessments for financial institutions and government, pre-answering up to 93% of due-diligence questionnaires and providing continuous monitoring across structured and unstructured data sources.
- Ownership category
- akta.pro rank
Mirato industry classification
Industry- Product category
- Third-Party Risk Management Software
- NAICS
- Other Computer Related Services (541519), Computer Systems Design and Related Services (54151)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Third-Party/Vendor Risk & Due Diligence (TPRM, continuous monitoring) (FSAGAFAJ)
- akta.pro secondary industries
- Third-Party/Vendor Risk Management (TPRM/VRM) (HDADAIAE), Third-Party/Vendor Risk Management (TPRM) & Due Diligence (BPAKADAH)
Keywords
Where Mirato is headquartered
LocationHeadquarters
- HQ city
- Tel Aviv
- HQ country
- Israel
- HQ region
- Middle East
Offices2 records
Markets served
Mirato business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- SaaS Subscription: Software as a Service technology with flexible licensing options. Includes enterprise model for large scale usage across all functionality, third parties and business processes, as well as 'by the drink' for more specific and focused use cases.
- Managed Services: SaaS technology can also be provided as a managed service through partner channel
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Multi-year contract | Enterprise Model |
| Usage-based | Pay-as-you-go | By the Drink |
Distribution channels3 records
Marketing channels5 records
Mirato product offering
Product offeringCore offering
Mirato sells a SaaS-based TPRM Intelligence Platform that uses AI and Natural Language Processing to collect, analyze, and correlate third-party risk data from questionnaires, evidence documents, and external subscription feeds. Its flagship Questionnaire Killer module automatically pre-answers up to 93% of TPRM questionnaires, while the Mitigation Planning Module generates automated remediation plans. The platform is sold primarily to financial institutions and government agencies to replace manual, repetitive TPRM operations with automated control validation and 24/7 monitoring.
Product overview
Mirato offers a TPRM Intelligence Platform architecture consisting of a core AI-powered platform complemented by specialized modules. The core TPRM Intelligence Platform leverages AI and Natural Language Processing (NLP) to collect, analyze, and correlate data from questionnaires, evidence documents, and external sources. Key modules include: Questionnaire Killer© which pre-answers up to 93% of TPRM questionnaires; Mitigation Planning Module for automated remediation planning; Risk Board for centralized risk visibility; and Concentration Risk Hunter for identifying cascading risk effects. The platform operates as a SaaS solution, integrates with existing TPRM systems via API, and is optimized for financial services institutions.
Differentiator
Problem solved
Functional benefit
Brands
- Questionnaire Killer©: AI-powered solution that pre-answers up to 93% of TPRM questionnaires by analyzing third-party documentation using NLP, validating responses with evidence and automating audit trails.
- TPRM Intelligence Platform
- Mitigation Planning Module
Products and services
- TPRM Intelligence Platform Core AI-powered SaaS platform that collects, analyzes, and correlates data from questionnaires, evidence documents, and external sources using NLP/AI to validate controls and provide real-time 24/7 monitoring across all structured and unstructured sources and risk domains. Designed for financial institutions and other enterprises running TPRM programs.
- Questionnaire Killer© AI-powered solution that reads, understands, and correlates information within third-party documents (SOC reports, penetration tests, ISO certifications, BC/DR plans, policies, DPAs) to automatically pre-answer up to 93% of TPRM questionnaires. Works with onboarding, periodic reassessment, and ad-hoc questionnaires; can be offered standalone or integrated with existing TPRM platforms.
- Mitigation Planning Module Module enabling users to quickly build plans to fix and mitigate risk issues emerging from the TPRM due-diligence process. Generates automated mitigation plans addressing failed controls, cyber-attacks, licensing issues, and unplanned external events, with details on deficiencies, roles, responsibilities, steps, and timing — driven by each client's unique TPRM program, risk appetite, and framework requirements.
Quantifiable outcome
- Up to 60% reduction in assessment costs and time
- +4 more outcomes
Companies that use Mirato
Customer profileSegments8 records
Ideal customer profiles2 records
Mirato technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration8 records
AI capability6 records
Feature5 records
Mirato partnerships and signals
Strategic signalScale indicators5 records
Recent moves6 records
Expansion highlights6 records
Mirato competitors and assessment
Company assessmentDirect peers
- Venminder: Venminder is a TPRM-focused platform serving banks, credit unions, and financial services with vendor due diligence, questionnaires, and ongoing monitoring. It is comparable to Mirato in target buyer, core use case, and AI-enabled control validation.
- ProcessUnity: ProcessUnity is a direct TPRM platform competitor offering third-party risk assessment workflows, vendor onboarding, and continuous monitoring for financial institutions. It competes head-to-head with Mirato's TPRM Intelligence Platform for the same bank and capital markets buyer.
- SecurityScorecard: SecurityScorecard provides security ratings and vendor risk monitoring used by financial institutions for third-party cyber risk assessment. It overlaps with Mirato's continuous monitoring and concentration risk capabilities, and increasingly bundles questionnaire workflows.
- Prevalent: Prevalent delivers a TPRM suite with vendor questionnaires, risk assessments, and vendor tiering, similar in buyer profile and use case to Mirato. Both compete for financial services TPRM budget and emphasize questionnaire automation.
- BitSight: BitSight is a security ratings and TPRM platform heavily used by banks; Mirato actually integrates BitSight data but BitSight's own workflow and questionnaire products overlap as competitors for the same vendor risk buyer.
- OneTrust (GRC / Third-Party Risk): OneTrust offers a broad trust intelligence platform with a TPRM module targeting banks and large enterprises. It overlaps directly with Mirato in vendor risk, questionnaires, and continuous monitoring, though OneTrust covers a much wider GRC/privacy scope.
- Diligent (Galvanize / GRC): Diligent's Galvanize (formerly ACL) GRC suite includes vendor risk and third-party risk modules sold heavily into financial services. The integrated GRC positioning competes with Mirato's standalone TPRM intelligence layer at large bank accounts.
Broad incumbents
- RSA Archer: RSA Archer is a long-standing enterprise GRC platform with vendor risk capabilities used by large financial institutions. It competes with Mirato for the strategic TPRM platform seat at tier-1 banks, though it is a broader GRC suite.
- ServiceNow Integrated Risk Management (IRM): ServiceNow's IRM/TPRM module is sold to large banks as part of its broader GRC platform. It is an incumbent enterprise alternative to Mirato for institutions that prefer to consolidate risk tooling onto a single vendor platform.
Emerging players
- Whistic: Whistic is a modern TPRM platform with AI-assisted questionnaire automation, targeting similar mid-market and enterprise buyers to Mirato. It is comparable as an emerging, AI-native TPRM challenger with overlapping questionnaire and continuous monitoring capabilities.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Mirato social profiles
Digital presenceMirato compliance and trust
Trust signalCompliance1 record
Mirato financial estimates
Financial estimateRevenue estimate
Valuation estimate
Mirato leadership team
Management profileNumber of profiles
Profiles8 records
Mirato funding detail
Funding detailFunding overview
Funding rounds2 records
Investors7 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Mirato M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Mirato
What does Mirato do?
Mirato sells a SaaS-based TPRM Intelligence Platform that uses AI and Natural Language Processing to collect, analyze, and correlate third-party risk data from questionnaires, evidence documents, and external subscription feeds. Its flagship Questionnaire Killer module automatically pre-answers up to 93% of TPRM questionnaires, while the Mitigation Planning Module generates automated remediation plans. The platform is sold primarily to financial institutions and government agencies to replace manual, repetitive TPRM operations with automated control validation and 24/7 monitoring.
Is Mirato a public or private company?
Mirato is a private company. It is classified as venture growth investor backed and is currently operating.
When was Mirato founded?
Mirato was founded in 2018. It employs 11 to 50 people.
Where is Mirato based?
Mirato is headquartered in Tel Aviv, Israel, in the Middle East region.
How does Mirato make money?
Two revenue lines are on record. SaaS Subscription is the primary driver. The others are managed Services.
Who are Mirato's main competitors?
Direct peers on record are Venminder, ProcessUnity, SecurityScorecard, Prevalent, BitSight, OneTrust (GRC / Third-Party Risk) and Diligent (Galvanize / GRC). Broad incumbents are RSA Archer and ServiceNow Integrated Risk Management (IRM). Whistic is listed as an emerging player.
Does Mirato have an API?
Yes. Mirato uses APIs to push or pull virtually any information within a TPRM environment. The platform can integrate with existing software solutions, information sources, and partners internally and externally. This enables seamless data exchange with risk platforms, shared drives, contract repositories, procurement systems, GRC tools, financial solutions, external subscription feeds, and threat intelligence providers. The API capabilities eliminate the 'swivel chair' effect and ensure process integrity.
What industry is Mirato in?
Mirato's product category is Third-Party Risk Management Software. Its primary akta.pro industry code is FSAGAFAJ, Third-Party/Vendor Risk & Due Diligence (TPRM, continuous monitoring), with a secondary code of HDADAIAE, Third-Party/Vendor Risk Management (TPRM/VRM). Its NAICS code is 541519 and its SIC code is 7372.