Drawbridge

What Drawbridge does

Drawbridge Partners, LLC is a U.S.-domiciled, privately held cybersecurity specialist founded in 2018 and headquartered in Palm Beach Gardens, Florida, with additional offices in New York, Denver, and London. The company is 100% vertically focused on cybersecurity for alternative investment firms—hedge fund managers, private equity sponsors and their portfolio companies, family offices, venture capital, and real estate investment vehicles—explicitly positioning itself against generalist managed service providers and IT resellers to avoid conflicts of interest.

The company's core offering is the proprietary Cyber Risk Intelligence SaaS platform, which combines a Drawbridge Cyber Score, peer benchmarking against 1,200+ alternative investment funds, continuous controls monitoring, remediation tracking, PE portfolio analytics and company-level tracking, regulatory readiness reporting (SEC, DORA, NYCRR Part 500), and board/investor/LP-ready report generation. This platform is paired with a suite of professional services—vulnerability scanning, penetration testing, cybersecurity training and awareness, cybersecurity policies, cloud assessment, tabletop exercises, vendor risk assessment, cyber risk assessment, and AI risk intelligence—that can be purchased standalone, as bolt-ons, or bundled with the platform. A sub-product, DrawbridgeConnect-R, delivers Vulnerability Management as a Service (VMaaS), and the company integrates with CrowdStrike for incident response.

Drawbridge operates a sales-led enterprise GTM with quote-based, annual subscription pricing for the platform alongside professional services revenue. Distribution is exclusively direct to enterprise alternative investment firms across North America and EMEA, supported by content marketing, webinars (including the Cybersecurity 5 in 5 podcast), industry event sponsorship, and PR in outlets such as Finextra, TabbFORUM, and Private Equity Wire. The company received a minority growth equity investment from Long Ridge Equity Partners in 2021 and has achieved SOC 2 Type I (2022) and SOC 2 Type II (2025) certifications. Leadership includes CEO Eric Bernstein, Founder and President Jason Elmer, CISO Simon Eyre, CPTO Nick Pastoressa, and CRO Chris Aronis.

Name

Drawbridge

Legal name

Drawbridge Partners, LLC

Website

https://drawbridgeco.com

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

101–250 employees

Short description

Drawbridge is a privately held cybersecurity specialist serving 1,200+ alternative investment firms—hedge funds, private equity sponsors, family offices, and other alternatives—with a proprietary Cyber Risk Intelligence SaaS platform and bundled advisory services focused exclusively on SEC, DORA, and NYCRR compliance.

Ownership category

akta.pro rank

Product category

Cybersecurity Software / Cyber Risk Management for Alternative Investments

NAICS

Other Scientific and Technical Consulting Services (54169), Other Computer Related Services (541519)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Security Consulting, Risk Assessment & Security Program Design (BPABAMAE)

akta.pro secondary industry

Insider Threat Program Design & Risk Assessments (BPAKADAM)

Keywords

• Alternative investment cybersecurity
• Cyber risk intelligence platform
• Vulnerability management services
• Regulatory compliance cybersecurity
• Private equity cyber oversight

Headquarters

HQ city

Palm Beach Gardens

HQ country

United States

HQ region

North America

Offices4 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Cyber Risk Intelligence Platform Subscription: Drawbridge generates recurring revenue through its proprietary Cyber Risk Intelligence SaaS platform. The platform is subscription-based, providing continuous cyber risk monitoring, assessment, benchmarking, and reporting capabilities to alternative investment firms.
2. Cybersecurity Services: Professional services including vulnerability scanning, penetration testing, cybersecurity training and awareness, cybersecurity policies, cloud assessment, tabletop exercises, vendor risk assessment, cyber risk assessment, and AI risk intelligence. Services are available as standalone solutions, bolt-ons, or bundled with the platform.

Pricing tiers

Go-to-market motion3 records

Distribution channels1 record

Marketing channels7 records

Core offering

Drawbridge provides a proprietary Cyber Risk Intelligence SaaS platform combined with professional cybersecurity services, exclusively for alternative investment firms (hedge funds, private equity, and portfolio companies). The platform enables real-time cyber risk assessment, proprietary Cyber Scoring, peer benchmarking against 1,200+ firms, continuous controls monitoring, remediation tracking, and board/investor-ready reporting. Professional services—vulnerability scanning, penetration testing, training, policies, cloud assessment, tabletop exercises, vendor risk assessment, cyber risk assessment, and AI risk intelligence—are available standalone, as bolt-ons, or bundled with the platform.

Product overview

Drawbridge is a cybersecurity specialist for alternative investment firms, offering a unified platform-plus-services model. The core product is the Cyber Risk Intelligence Platform, a proprietary SaaS platform that provides real-time assessment, monitoring, and improvement of cyber maturity through features including Cyber Scoring, Peer Benchmarking, PE Portfolio Analytics, PE Portfolio Company Tracking, Regulatory Readiness, Remediation Planning, and Reporting. Complementing the platform are standalone professional services: Vulnerability Scanning, Cybersecurity Training and Awareness, Cybersecurity Policies, Cloud Assessment, Penetration Testing, Tabletop Exercise, Vendor Risk Assessment, Cyber Risk Assessment, and AI Risk Intelligence. The company also offers a sub-product called DrawbridgeConnect-R™ for Vulnerability Management as a Service (VMaaS). Services can be used as standalone solutions, bolt-ons to existing programs, or bundled into a holistic framework alongside the platform.

Differentiator

Problem solved

Functional benefit

Brands

• DrawbridgeConnect-R: A Vulnerability Management as a Service (VMaaS) platform that continuously analyzes and provides comprehensive vulnerability scanning, remediation and reporting.

Products and services

• Cyber Risk Intelligence Platform Proprietary SaaS platform built exclusively for alternative investment firms that enables real-time cyber risk assessment, proprietary Cyber Scoring, peer benchmarking against 1,200+ peer funds, continuous controls monitoring, remediation progress tracking, regulatory readiness reporting, and board/investor/LP-ready reports.
• DrawbridgeConnect-R™ Vulnerability Management as a Service (VMaaS) platform that continuously analyzes and scans firm systems for vulnerabilities, providing remediation guidance and reporting.
• Vulnerability Scanning Continuous scanning of firm systems to deliver up-to-date vulnerability information with accurate, unbiased, near real-time risk assessment and severity analysis.
• Cybersecurity Training and Awareness Employee education and phishing awareness training programs that teach teams to spot cyber attacks and recognize phishing attempts, including attack simulations.
• Cybersecurity Policies Development of comprehensive written cybersecurity policies including Written Information Security Policy (WISP) and Incident Response Plans (IRP) with documented security protocols and data handling guidelines.
• Cloud Assessment Evaluation of cloud infrastructure security posture and controls to ensure appropriate protection of data and systems in cloud environments.
• Penetration Testing Internal and external penetration testing services that simulate attacker behavior to evaluate the strength of IT environments and identify vulnerabilities.
• Tabletop Exercise Simulated cybersecurity incident exercises led by Drawbridge experts to help key stakeholders practice roles and responses, identifying procedural gaps in incident response plans.
• Vendor Risk Assessment Rigorous evaluation process of third-party vendors' cybersecurity measures to ensure partners adhere to industry standards and pose no undue risks.
• Cyber Risk Assessment Comprehensive questionnaire-based assessment evaluating all aspects of a client's security program including data security, policies, account security, access control, training, and employee onboarding/offboarding procedures.
• AI Risk Intelligence Specialized service helping firms prepare for regulatory reviews, manage AI-related risks, ensure data privacy, and achieve compliance when implementing AI within regulated environments.

Quantifiable outcome

• 90% of Drawbridge clients improved their Cyber Score within 12 months
• +2 more outcomes

Named customers2 records

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability3 records

Feature8 records

Partnerships

One partnership is on record.

• CrowdStrikecoreTechnology or Integration · 11 December 2018Drawbridge partnered with CrowdStrike to provide incident response and proactive services within the Drawbridge Cybersecurity offering. The partnership was designed to address heightened scrutiny from investors and regulators requiring alternative investment firms to have strong cybersecurity programs. CrowdStrike provides incident response capabilities complementing Drawbridge's platform and consulting services.

Scale indicators4 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• BlueVoyant: BlueVoyant provides managed detection and response and third-party cyber risk management with a strong financial services vertical. It is comparable to Drawbridge as a cybersecurity specialist selling bundled platform + services to financial institutions.
• Bridewell: Bridewell is a UK-based cybersecurity services and consulting firm with a notable financial services practice. Comparable to Drawbridge as a specialist cybersecurity advisor serving regulated financial firms in the UK and EMEA.
• NetSPI: NetSPI is a penetration testing and vulnerability management specialist with strong financial services exposure. Comparable to Drawbridge in offering enterprise-grade offensive security testing and vulnerability scanning as standalone or bundled services.
• Bishop Fox: Bishop Fox is an offensive security firm offering penetration testing, red teaming, and attack surface management to enterprise clients including financial services. Comparable to Drawbridge in delivering high-touch cybersecurity testing and advisory services.

Broad incumbents

• Trustwave: Trustwave is a large, established cybersecurity and managed security services provider serving financial services and other regulated industries. Comparable to Drawbridge in offering vulnerability management, penetration testing, and consulting, but operating at a much broader scale.
• ReliaQuest: ReliaQuest delivers security operations platform and managed detection & response, with a strong presence in financial services. Comparable to Drawbridge in providing outsourced cyber operations and platform-based visibility, though at a much larger scale.
• Arctic Wolf: Arctic Wolf is a security operations vendor offering managed detection and response plus a security posture management platform. Comparable to Drawbridge as a subscription + advisory cybersecurity provider to mid-market and enterprise firms including financial services.
• Optiv: Optiv is a large cybersecurity solutions integrator delivering advisory, managed security, and integration services across industries including financial services. Comparable to Drawbridge in delivering cybersecurity consulting and managed services, but as a much broader incumbent.

Emerging players

• Schellman: Schellman is a niche cybersecurity assessment and compliance firm (SOC 2, ISO 27001, HITRUST) serving financial and technology clients. Comparable to Drawbridge's compliance and regulatory readiness capabilities, though without the proprietary SaaS platform layer.
• SecurityScorecard: SecurityScorecard provides external cyber risk ratings and vendor risk management, used heavily by financial services for third-party risk. Comparable to Drawbridge in providing continuous external cyber scoring and benchmarking used in due diligence and vendor risk workflows.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/drawbridgepartnersllc
• Xx.com/drawbridgecyber

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Drawbridge