RiskIQ
RiskIQ was a San Francisco-based cybersecurity company founded in 2009 that provided external attack surface management and digital threat intelligence to enterprise organizations, now acquired by Microsoft and integrated into Microsoft Defender Threat Intelligence.
- Company typePrivate
- Founded2009
- HeadquartersSan Francisco, United States
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What RiskIQ does
RiskIQ was a US-based cybersecurity company founded in 2009 and headquartered in San Francisco, specializing in external attack surface management and digital threat intelligence. Its core product, the RiskIQ Platform, provided organizations with internet-wide visibility to discover and monitor their digital footprint beyond the traditional network perimeter, identify vulnerabilities in internet-facing assets, detect brand impersonation and dark web activity, and prioritize remediation of external threats. The underlying technology combined passive reconnaissance, asset fingerprinting, and threat data aggregation, augmented by AI and machine learning for real-time threat detection against global threat databases.
The company served primarily large enterprise organizations across multiple verticals including Healthcare, Financial Services, Government, and Retail, addressing pain points such as external threat visibility, regulatory compliance, third-party risk, brand protection, and digital risk monitoring. RiskIQ built and expanded its platform through acquisition, acquiring PassiveTotal in 2015 to add adversary infrastructure analysis and Maccabim.com in 2017 to extend asset discovery capabilities, while raising approximately $83M in venture funding across four priced rounds between 2013 and 2020 from investors including Summit Partners, Battery Ventures, Georgian, MassMutual Ventures, and National Grid Partners.
RiskIQ operated as a private company until it was acquired by Microsoft, after which its external threat intelligence capabilities were integrated into Microsoft Defender Threat Intelligence and the broader Microsoft security product portfolio (including Defender XDR, Sentinel, and Security Copilot). The standalone company is no longer operating as an independent entity.
RiskIQ firmographics
Firmographics- Name
- RiskIQ
- Website
- https://riskiq.com
- Company type
- Private
- Founded year
- 2009
- Operating status
- Acquired
- Headcount range
- 101–250 employees
- Short description
- RiskIQ was a San Francisco-based cybersecurity company founded in 2009 that provided external attack surface management and digital threat intelligence to enterprise organizations, now acquired by Microsoft and integrated into Microsoft Defender Threat Intelligence.
- Ownership category
- akta.pro rank
RiskIQ industry classification
Industry- Product category
- Attack Surface Management
- NAICS
- Computer Systems Design Services (541512), Computer Systems Design and Related Services (54151)
- SIC
- Services-Computer Integrated Systems Design (7373), Services-Computer Programming Services (7371)
- akta.pro primary industry
- Attack Surface Management (EASM/CAASM) (HDADAHAC)
- akta.pro secondary industry
- Threat Intelligence Services (BPAEADAC)
Keywords
Where RiskIQ is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Markets served
RiskIQ business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure
RiskIQ product offering
Product offeringCore offering
RiskIQ built an external attack surface management platform that gives organizations internet-wide visibility and cyber threat intelligence to discover, monitor, and protect their digital assets outside the traditional firewall. The platform delivers external threat management capabilities including attack surface management, dark web monitoring, brand impersonation detection, vulnerability discovery and prioritization, and digital risk protection for enterprise security teams.
Differentiator
Problem solved
Functional benefit
Products and services
- RiskIQ Platform Attack surface management platform providing external cybersecurity visibility, threat detection, and digital risk protection.
Companies that use RiskIQ
Customer profileSegments5 records
Ideal customer profiles3 records
RiskIQ technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
RiskIQ partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- MicrosoftcoreMicrosoft acquired RiskIQ to strengthen its cybersecurity portfolio and enhance its external threat intelligence capabilities. The acquisition integrates RiskIQ's attack surface management technology into Microsoft's security suite, including Microsoft Defender Threat Intelligence. RiskIQ's internet-wide visibility and threat intelligence capabilities complement Microsoft's existing security offerings.
Scale indicators3 records
Recent moves6 records
Expansion highlights6 records
RiskIQ competitors and assessment
Company assessmentDirect peers
- BitSight: BitSight is a direct peer in attack surface and external risk management, also named alongside RiskIQ as a key ASM market player serving enterprise and third-party risk use cases.
- Tenable: Tenable is a direct competitor in attack surface management and vulnerability management, explicitly listed alongside RiskIQ as a key player in the worldwide ASM Software Market. Both vendors help enterprises discover and monitor internet-facing assets and exposures.
- Qualys: Qualys is a direct peer in attack surface management and vulnerability assessment, also named alongside RiskIQ as a key ASM market player. It offers comparable external-facing asset discovery and threat prioritization capabilities.
- Rapid7: Rapid7 is a direct peer combining attack surface management with vulnerability management and threat intelligence, listed alongside RiskIQ as a key ASM market competitor serving similar enterprise security buyers.
- CrowdStrike: CrowdStrike is a direct peer offering endpoint detection plus external attack surface and threat intelligence through CrowdStrike Falcon Surface and Intelligence products, competing with RiskIQ for enterprise security budgets.
- Recorded Future: Recorded Future is a direct peer in cyber threat intelligence, listed alongside RiskIQ as a key ASM market player. It provides threat intelligence and digital risk protection overlapping with RiskIQ's external threat visibility capabilities.
- SecurityScorecard: SecurityScorecard is a direct peer in attack surface management and third-party risk management, listed as a key player alongside RiskIQ. Both vendors provide external security posture ratings and asset visibility to enterprise customers.
- UpGuard: UpGuard is a direct peer in attack surface management and third-party risk, listed as a key ASM market competitor alongside RiskIQ. It provides external asset discovery and security posture monitoring for enterprises.
Emerging players
- Mandiant (Google Cloud): Mandiant, now part of Google Cloud, overlaps with RiskIQ in threat intelligence and external attack surface capabilities. Its threat intelligence offering is comparable to RiskIQ's external threat intelligence focus, while benefiting from Google's broader platform.
- Cybereason: Cybereason is an emerging player listed alongside RiskIQ in the ASM market, offering endpoint detection with threat intelligence components that partially overlap with RiskIQ's external attack surface and threat intelligence capabilities.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat4 records
Key risks5 records
Key highlights7 records
Customer concentration
RiskIQ social profiles
Digital presenceRiskIQ financial estimates
Financial estimateRevenue estimate
Valuation estimate
RiskIQ leadership team
Management profileNumber of profiles
Profiles8 records
RiskIQ funding detail
Funding detailFunding overview
Funding rounds5 records
Investors6 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
RiskIQ M&A and investment
M&A and investmentM&A2 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about RiskIQ
What does RiskIQ do?
RiskIQ built an external attack surface management platform that gives organizations internet-wide visibility and cyber threat intelligence to discover, monitor, and protect their digital assets outside the traditional firewall. The platform delivers external threat management capabilities including attack surface management, dark web monitoring, brand impersonation detection, vulnerability discovery and prioritization, and digital risk protection for enterprise security teams.
Is RiskIQ a public or private company?
RiskIQ is a private company. It is classified as corporate owned and is currently acquired.
When was RiskIQ founded?
RiskIQ was founded in 2009. It employs 101 to 250 people.
Where is RiskIQ based?
RiskIQ is headquartered in San Francisco, United States, in the North America region.
Who are RiskIQ's main competitors?
Direct peers on record are BitSight, Tenable, Qualys, Rapid7, CrowdStrike, Recorded Future, SecurityScorecard and UpGuard. Emerging players are Mandiant (Google Cloud) and Cybereason.
Does RiskIQ have an API?
No public API is recorded for RiskIQ.
What industry is RiskIQ in?
RiskIQ's product category is Attack Surface Management. Its primary akta.pro industry code is HDADAHAC, Attack Surface Management (EASM/CAASM), with a secondary code of BPAEADAC, Threat Intelligence Services. Its NAICS code is 541512 and its SIC code is 7373.