WhiteHawk
WhiteHawk is an ASX-listed cybersecurity exchange and risk management vendor that operates a marketplace and an integrated product suite — Cyber Risk Program, Cyber Risk Radar, and Cyber Analyst PaaS — serving U.S. public sector, academic, and critical infrastructure customers via Carahsoft, with enterprise AI governance added through its Quixxi acquisition.
- Company typePublic
- Founded2015
- HeadquartersPerth, Australia
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What WhiteHawk does
WhiteHawk is a publicly listed (ASX) cybersecurity exchange and risk management vendor founded in 2015 and headquartered in Australia, with U.S. operational presence. The company operates an online marketplace/exchange model where organizations seeking cybersecurity products and services can receive advisory and be matched to vendor offerings, supplemented by an integrated proprietary product suite.
The core product suite comprises three interconnected offerings: the Cyber Risk Program (a comprehensive cyber risk management program with continuous data updates and standardized training modules), Cyber Risk Radar (a continuous threat intelligence and risk monitoring platform), and Cyber Analyst PaaS (a Platform-as-a-Service for cyber education, internships, and research tools). In April 2026, WhiteHawk acquired Sydney-based Quixxi, adding the Quixxi Clarity AI platform for AI model governance, lifecycle management, and regulatory compliance — expanding the company into enterprise AI risk oversight.
WhiteHawk monetizes through subscription-based, recurring revenue across two primary customer segments. The primary vertical is the U.S. public sector — academic institutions, federal/state/local government agencies, and critical infrastructure operators — accessed largely through a Carahsoft channel partnership. The secondary vertical is enterprise customers requiring AI governance and digital risk management, served through the direct exchange platform. Go-to-market combines a channel-led motion (Carahsoft) with direct enterprise sales for the exchange platform, supported by content marketing through the company's blog and website. The company has 11–50 employees and no disclosed revenue or ARR figures.
WhiteHawk firmographics
Firmographics- Name
- WhiteHawk
- Website
- https://whitehawk.com
- Company type
- Public
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- WhiteHawk is an ASX-listed cybersecurity exchange and risk management vendor that operates a marketplace and an integrated product suite — Cyber Risk Program, Cyber Risk Radar, and Cyber Analyst PaaS — serving U.S. public sector, academic, and critical infrastructure customers via Carahsoft, with enterprise AI governance added through its Quixxi acquisition.
- Ownership category
- akta.pro rank
WhiteHawk industry classification
Industry- Product category
- Cybersecurity Risk Management Software
- NAICS
- Computer Systems Design and Related Services (54151), Management Consulting Services (54161)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)
- akta.pro secondary industries
- Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF), Cybersecurity & Identity Consulting (BPAHAEAG)
Keywords
Where WhiteHawk is headquartered
LocationHeadquarters
- HQ city
- Perth
- HQ country
- Australia
- HQ region
- Oceania
Offices1 record
Markets served
WhiteHawk business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Cyber Risk Products and Services: Platform-based offerings including Cyber Risk Radar and Cyber Analyst PaaS distributed through channel partnerships to public sector and enterprise customers.
- AI Governance and Digital Risk Management: Revenue from Quixxi Clarity AI platform providing AI model governance and regulatory compliance services to enterprise customers.
Go-to-market motion2 records
Distribution channels2 records
Marketing channels2 records
WhiteHawk product offering
Product offeringCore offering
WhiteHawk operates an online cybersecurity exchange marketplace where organizational purchasers receive cyber risk advisory and are matched to vendor products. Beyond the marketplace, the company sells its own proprietary platforms: Cyber Risk Program (comprehensive risk management for public sector), Cyber Risk Radar (continuous threat intelligence monitoring), Cyber Analyst PaaS (scalable cyber education and research tools), and the Quixxi Clarity AI Platform (AI model governance and lifecycle management for enterprise environments).
Product overview
WhiteHawk offers a cybersecurity exchange platform with three interconnected products: the Cyber Risk Program provides comprehensive risk management, Cyber Risk Radar delivers continuous threat intelligence monitoring, and Cyber Analyst PaaS enables scalable cyber education and research. Through its partnership with Carahsoft, these offerings target the public sector including academic institutions, state/local governments, and critical infrastructure organizations. The company has also acquired Quixxi Clarity AI to expand into AI governance and digital risk management.
Differentiator
Problem solved
Functional benefit
Brands
- Cyber Risk Radar: Cyber risk monitoring and analytics platform providing continuous data updates and risk insights for organizations.
- Cyber Analyst PaaS
- Cyber Risk Program
Products and services
- Cyber Risk Program A comprehensive cybersecurity risk management program designed for public sector organizations, academic institutions, and critical infrastructure entities. Offers continuous data updates, standardized training, and risk management workflows. Available through Carahsoft for government and academic customers.
- Cyber Risk Radar A cyber risk detection and monitoring platform that provides continuous threat intelligence, risk assessment, and scalable research tools for state and local governments, critical infrastructure organizations, and other public sector buyers.
- Cyber Analyst PaaS A Platform as a Service (PaaS) offering that delivers cyber education, internship programs, and research capabilities. Designed to scale cyber higher education and support workforce development in the public sector. Available through Carahsoft.
- Quixxi Clarity AI Platform An AI model governance, lifecycle management, and regulatory compliance platform for enterprise environments, acquired by WhiteHawk to support AI governance capabilities for enterprise customers.
Quantifiable outcome
- Scalable research tools for academic institutions, governments, and critical infrastructure
Companies that use WhiteHawk
Customer profileNamed customers4 records
Segments2 records
Ideal customer profiles2 records
WhiteHawk technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability2 records
Feature4 records
WhiteHawk partnerships and signals
Strategic signalPartnerships
Three partnerships are on record, tiered core.
- QuixxicoreWhiteHawk acquired Sydney-based Quixxi, an AI governance and digital risk management company. Quixxi's Quixxi Clarity AI platform provides AI model governance, lifecycle management, and regulatory compliance capabilities for enterprise environments. Deal valued at up to 500 million shares over three years subject to performance conditions.
- Carahsoft Technology Corp.coreWhiteHawk partnered with Carahsoft to distribute its Cyber Risk Program, Cyber Risk Radar, and Cyber Analyst PaaS to the public sector. Carahsoft serves as a technology distributor for government customers including academic institutions, state and local governments, and critical infrastructure organizations.
- EvolvercoreEvolver partnered with WhiteHawk to provide next-generation cyber supply chain risk management services. Evolver developed CLEAR, an AI-powered cybersecurity risk assessment tool leveraging WhiteHawk's platform capabilities for government agencies and regulated industries.
Scale indicators6 records
Recent moves6 records
Expansion highlights5 records
WhiteHawk competitors and assessment
Company assessmentDirect peers
- SecurityScorecard: Provides third-party cyber risk ratings and continuous monitoring for enterprise and government buyers — directly comparable to WhiteHawk's Cyber Risk Radar, with an established exchange/risk-scoring marketplace model.
- Bitsight: Cyber risk management platform offering continuous monitoring and vendor risk management — overlapping closely with WhiteHawk's Cyber Risk Program/Radar offerings for public sector and enterprise customers.
- RiskRecon (a Mastercard company): Third-party cyber risk assessment platform focused on supply chain risk, directly comparable to WhiteHawk's supply chain risk offering delivered through the Carahsoft channel.
Broad incumbents
- Tenable: Large, publicly-traded exposure management and GRC platform; overlaps with WhiteHawk's cyber risk assessment capabilities but operates at much greater scale across enterprise and government.
- Rapid7: Public security analytics and risk management vendor with a GRC-adjacent portfolio; comparable to WhiteHawk's risk/threat intelligence positioning but with broader product breadth.
- RSA Archer (a Dell Technologies business): Long-standing IT GRC platform used by large enterprises and governments — comparable to WhiteHawk's governance/risk posture management ambitions but with established scale.
- ServiceNow GRC / Integrated Risk Management: Enterprise platform with a major GRC module that competes for the same public-sector and enterprise risk/compliance budget as WhiteHawk.
Emerging players
- Cybersixgill: Threat intelligence and dark web monitoring vendor with marketplace-style offerings to public sector and enterprise — comparable niche to WhiteHawk's continuous threat intelligence.
- Safe Security (SAFE): Cyber risk quantification and continuous assessment platform; overlapping risk-scoring and advisory capabilities with WhiteHawk's exchange-style buyer/vendor matching.
Others
- Carahsoft (channel partner): WhiteHawk's primary U.S. public-sector distributor — adjacent rather than competitive; included because channel partners shape WhiteHawk's go-to-market and competitive positioning.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat3 records
Key risks5 records
Key highlights6 records
Customer concentration
WhiteHawk social profiles
Digital presenceWhiteHawk financial estimates
Financial estimateRevenue estimate
Valuation estimate
WhiteHawk leadership team
Management profileNumber of profiles
Profiles6 records
WhiteHawk funding detail
Funding detailFunding overview
Funding rounds1 record
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
WhiteHawk M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about WhiteHawk
What does WhiteHawk do?
WhiteHawk operates an online cybersecurity exchange marketplace where organizational purchasers receive cyber risk advisory and are matched to vendor products. Beyond the marketplace, the company sells its own proprietary platforms: Cyber Risk Program (comprehensive risk management for public sector), Cyber Risk Radar (continuous threat intelligence monitoring), Cyber Analyst PaaS (scalable cyber education and research tools), and the Quixxi Clarity AI Platform (AI model governance and lifecycle management for enterprise environments).
Is WhiteHawk a public or private company?
WhiteHawk is a public company. It is classified as public and is currently operating.
When was WhiteHawk founded?
WhiteHawk was founded in 2015. It employs 11 to 50 people.
Where is WhiteHawk based?
WhiteHawk is headquartered in Perth, Australia, in the Oceania region.
How does WhiteHawk make money?
Two revenue lines are on record. Cyber Risk Products and Services are the primary driver. The others are AI Governance and Digital Risk Management.
Who are WhiteHawk's main competitors?
Direct peers on record are SecurityScorecard, Bitsight and RiskRecon (a Mastercard company). Broad incumbents are Tenable, Rapid7, RSA Archer (a Dell Technologies business) and ServiceNow GRC / Integrated Risk Management. Emerging players are Cybersixgill and Safe Security (SAFE). Carahsoft (channel partner) is listed as an others.
Does WhiteHawk have an API?
No public API is recorded for WhiteHawk.
What industry is WhiteHawk in?
WhiteHawk's product category is Cybersecurity Risk Management Software. Its primary akta.pro industry code is HDAEALAK, IT Governance, Risk & Compliance (IT GRC) Platforms, with a secondary code of BPAHAFAF, Privacy, Data Protection & Cyber Governance (GRC). Its NAICS code is 54151 and its SIC code is 7373.