What Perimeter does

Perimeter (operated by ProcessBolt, Inc.) is a Minneapolis-area, private SaaS company founded in 2017 that provides an AI-powered vendor risk management (VRM) platform purpose-built for regulated industries. The platform unifies six modules — Monitor, Assess, Extract, Verify, Share, and Respond — covering the full third-party risk lifecycle from vendor intake and risk tiering through continuous attack surface monitoring, AI-driven document analysis, real-time validation of vendor attestations, secure document exchange, and automated RFP/assessment response generation. Perimeter's target buyers are organizations with small security teams (typically 1-10 people) that manage hundreds to thousands of third-party vendors under regulatory regimes such as HIPAA, GLBA, FFIEC, NERC CIP, FERPA, DORA, ITAR, and CMMC. Named enterprise customers span healthcare (Orlando Health, Allina Health, Tampa General Hospital), medical technology (Boston Scientific, Medtronic), financial services (Houlihan Lokey, Comvest Advisors), legal (Paul Hastings), logistics (DB Schenker), and other regulated verticals.

The platform's core technology rests on three proprietary capabilities integrated into a single workflow: ThreatScape, which sources its own real-time, first-party attack surface data to score vendor security posture across data, domain, email, and network security; Perimeter AI (DocAI), an agentic engine that interprets vendor documentation with cited 99%+ accuracy and full source provenance; and a continuous validation layer that correlates vendor attestations against observable security data to surface discrepancies. Perimeter operates a software subscription model with monthly and annual billing, supplemented by a Managed VRM Services (MSSP) offering that pairs the platform with dedicated VRM analysts handling vendor communications and assessments day-to-day. A free Breach Difficulty Mini-Assessment tool at /free-report/ serves as a product-led growth entry point. Pricing is quote-based and not publicly disclosed, and onboarding, training, and support are bundled.

Distribution is exclusively direct sales — enterprise field sales plus inside sales for mid-market — with regional application portals for the USA, Europe, and Australia indicating multi-region data hosting. The company is led by co-founders Mike Kelly (CEO, formerly COO of the Minnesota Vikings and partner at Faegre Drinker), Dan Gardner (COO, formerly VP Technology at NetSPI and founder of Renew Data Corp.), and Gaurav Gaur (CTO, formerly VP of Software Development at NetSPI). Perimeter claims 80% reduction in manual work, 85% faster assessment completion, and 5-day time-to-value, holds a 4.8/5 G2 rating, and won three G2 Spring 2025 awards for vendor risk management excellence. Only $470K of disclosed equity funding (a 2018 seed from Matchstick Ventures and Techstars) is on record, indicating the company has scaled primarily through revenue and founder capital rather than institutional venture rounds.

Name

Perimeter

Legal name

ProcessBolt, Inc.

Website

https://perimeter.net

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

Perimeter (ProcessBolt, Inc.) is a Minneapolis-based AI-powered vendor risk management platform serving regulated industries such as healthcare, banking, and utilities, with six integrated modules covering assessment, continuous attack surface monitoring, and AI document intelligence.

Ownership category

akta.pro rank

Product category

Vendor Risk Management Software

NAICS

Computer Systems Design and Related Services (54151), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821), Security Systems Services (56162)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Third-Party/Vendor Risk Management (TPRM/VRM) (HDADAIAE)

akta.pro secondary industry

Cloud Security Services (Posture Mgmt, Workload Protection) (BPAKAHAK)

Keywords

• Vendor risk management
• Third-party risk management
• Attack surface monitoring
• Automated risk assessments
• Vendor compliance software

Headquarters

HQ city

Minneapolis

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Software Subscriptions (SaaS): Perimeter operates on a subscription (SaaS) model, with customers paying recurring fees for platform access. Subscriptions are billed on a recurring and periodic basis, with billing cycles set on a monthly or annual basis depending on the plan selected. Auto-renewal is enabled by default; customers can cancel via account management or customer support. Onboarding, training, and support are included in the subscription price.
2. Managed VRM Services (MSSP): Perimeter offers managed vendor risk services (MSSP) that pair the platform with dedicated VRM analysts who manage assessments day-to-day. This service handles vendor communications, follow-ups, documentation requests, and clarifications, extending the customer's team. The MSSP offering is priced as an add-on or standalone managed service on top of platform subscriptions, with dedicated expert teams assigned to customer accounts.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels8 records

Core offering

Perimeter is an AI-powered, end-to-end vendor risk management (VRM) platform that automates the full third-party risk lifecycle — from vendor intake and tiering through continuous attack surface monitoring, AI-driven document analysis, real-time vendor response validation, secure document sharing, and automated RFP/assessment response generation. The platform is purpose-built for regulated industries (healthcare, financial services, government, legal, manufacturing, education, utilities) with small security teams, delivering 5-day time-to-value and reducing manual VRM work by 80%+.

Product overview

Perimeter offers a unified vendor risk management (VRM) platform with six integrated modules covering the complete VRM lifecycle: Monitor (continuous attack surface monitoring), Assess (automated risk assessments), Extract (AI-powered document intelligence), Verify (real-time threat validation), Share (secure document exchange), and Respond (automated RFP/assessment responses). The platform is purpose-built for regulated industries with small security teams, delivering real-time visibility, AI-powered automation, and validated vendor risk assessment. Onboarding, training, and support are included in pricing with a time-to-value as fast as five days.

Differentiator

Problem solved

Functional benefit

Products and services

• Perimeter VRM Platform Central unified platform providing end-to-end vendor risk management lifecycle coverage for enterprises in regulated industries. Integrates all six modules (Monitor, Assess, Extract, Verify, Share, Respond) into a single source of truth, enabling real-time visibility, automated assessments, and continuous monitoring across the entire vendor ecosystem.
• Perimeter Monitor Continuous vendor risk monitoring module providing real-time attack surface data and 24/7 threat detection for enterprise VRM teams. Sources proprietary data internally to calculate vendor risk scores across data security, domain reputation, email security, and network security, with immediate alerts for adverse changes.
• Perimeter Assess Automated vendor risk assessment platform powered by Perimeter AI. Automates assessments from document intake to validation, with agentic AI reading across multiple documents and citing every answer to its source. Includes pre-assessment vendor intake and tiering, real-time ThreatScape validation, and post-assessment risk remediation tracking.
• Perimeter Extract AI-powered document intelligence module that interprets vendor responses and documentation. Extracts insights from policy documents and SOC 2 reports with high confidence and provides precise source citations for all outputs.
• Perimeter Verify Real-time vendor threat intelligence and validation module that continuously monitors vendor external attack surfaces and compares findings against vendor responses. Exposes gaps between what vendors claim and their actual security posture.
• Perimeter Share Secure document exchange hub for centralized storage and sharing of corporate security documentation. Enables preemptive sharing of security information with customers, partners, or prospects with time-bound access controls and complete audit trails.
• Perimeter Respond Automated RFP and assessment response module that cuts response time by 85% through AI-assisted automation. Auto-generates assessment and RFP responses using AI and past answers, supporting Excel, Word, PDF, and browser-based formats.
• Managed Vendor Risk Services (MSSP) Managed Third-Party Risk Management (TPRM) service combining the Perimeter platform with dedicated security experts who manage vendor assessments day-to-day, including vendor communication management, consistent program quality, and faster turnaround times without adding internal headcount.

Quantifiable outcome

• 80% reduction in manual work and vendor response time
• +4 more outcomes

Named customers14 records

Segments12 records

Ideal customer profiles11 records

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability8 records

Feature7 records

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• SecurityScorecard: SecurityScorecard is the largest pure-play TPRM/VRM platform, combining proprietary attack surface ratings with vendor risk assessments and questionnaires. It is the closest direct competitor to Perimeter across the same regulated buyer segments and uses a similar attack-surface-plus-assessment data model.
• Bitsight: Bitsight pioneered security ratings and continuous monitoring for vendor risk and is widely adopted by financial services and healthcare enterprises. It directly competes with Perimeter's ThreatScape-style external monitoring and offers comparable board-level reporting.
• UpGuard: UpGuard combines external attack surface monitoring with vendor risk questionnaires and a Trust Page for proactive security sharing. Its product scope and target buyer overlap closely with Perimeter's six-module VRM platform.
• RiskRecon (Mastercard): RiskRecon, now part of Mastercard, provides continuous third-party cyber risk monitoring and assessments, with deep penetration in financial services. It directly competes with Perimeter's Monitor and Verify modules using similar externally-sourced attack surface data.
• ProcessUnity: ProcessUnity offers a TPRM workflow platform with vendor onboarding, assessments, and continuous monitoring, and acquired CyberGRX. It overlaps with Perimeter's Assess and Verify modules for enterprise buyers standardizing vendor risk workflows.
• Prevalent: Prevalent delivers TPRM solutions combining vendor assessments, network threat intelligence, and remediation tracking. It serves many of the same regulated verticals (financial services, healthcare, legal) targeted by Perimeter.
• Panorays: Panorays provides AI-powered vendor security risk management combining external attack surface scans with automated questionnaires and remediation. Its product positioning, particularly around AI-driven questionnaire automation, directly parallels Perimeter's Assess, Extract, and Respond modules.
• Whistic: Whistic pioneered the proactive Trust Catalog model for vendor security sharing, combined with TPRM assessments. It directly overlaps with Perimeter's Share module and broader VRM workflow for mid-market and enterprise buyers.
• Venminder: Venminder is a TPRM platform with deep specialization in financial services, offering vendor assessments, monitoring, and managed services. It overlaps with Perimeter's MSSP offering and is a strong peer within community banks and credit unions — a stated Perimeter ICP segment.

Broad incumbents

• OneTrust: OneTrust is a broad privacy, governance, and TPRM platform that bundles vendor risk modules alongside consent, privacy, and ethics tooling. It overlaps with Perimeter across vendor assessments and questionnaires, but competes from a much wider portfolio rather than VRM specialization.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/channel/UCNJA1FYJ-eGJvb1qm46CBEg

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds2 records

Investors2 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Perimeter