Thomas Murray
- Company typePrivate
- Founded1994
- HeadquartersLondon, United Kingdom
- Headcount51–100
- GTM typeB2B
- OfferingServices
Thomas Murray firmographics
Firmographics- Name
- Thomas Murray
- Legal name
- Thomas Murray Network Management Limited
- Website
- https://thomasmurray.com
- Company type
- Private
- Founded year
- 1994
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Ownership category
- akta.pro rank
Thomas Murray industry classification
Industry- Product category
- Risk Intelligence and Analytics
- NAICS
- Portfolio Management and Investment Advice (523940), Other Financial Investment Activities (5239)
- SIC
- Finance Services (6199)
- akta.pro primary industry
- Operational Risk & Controls (RCSA, KRIs, Incident/Loss) (FSACAJAJ)
- akta.pro secondary industries
- Fraud Risk & Financial Crime Controls Advisory (BPAKADAL), Analytics, Risk Models & Factor/Style Indices (FSAFAIAG)
Keywords
Where Thomas Murray is headquartered
LocationHeadquarters
- HQ city
- London
- HQ country
- United Kingdom
- HQ region
- Europe
Offices5 records
Markets served
Thomas Murray business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D
Revenue model
- Risk Assessments: Thomas Murray provides written risk assessments of post-trade counterparties and financial market infrastructures. The Analytical Code of Conduct states 'Thomas Murray receives compensation for its analytical and research services, including for Risk Assessments. Such compensation is typically paid by the client of the service provider or via a subscription to Thomas Murray's analytical and research services.' This indicates a subscription-based model where clients (both service providers being assessed and subscribing institutions) pay for ongoing access to risk intelligence.
- Orbit Risk Platform Subscriptions: Access to the Orbit Risk platform (Orbit Diligence, Orbit Intelligence, Orbit Security) is provided through client subscriptions, with Single Sign-On for existing clients and questionnaire respondent portals for service providers.
- Cyber Risk Advisory Services: Specialized cybersecurity services for private equity including M&A due diligence, pre-deal monitoring, portfolio company monitoring, incident response, and 24/7 support. Delivered through Thomas Murray Cyber division.
Go-to-market motion1 record
Distribution channels3 records
Marketing channels10 records
Thomas Murray product offering
Product offeringCore offering
Thomas Murray provides global risk intelligence, analytics, and assessments for financial institutions, anchored by its AI-powered Orbit Risk Platform comprising Orbit Diligence (AI-assisted RFPs and DDQs), Orbit Intelligence (real-time third-party risk monitoring), and Orbit Security (automated cyber risk management). The firm sells proprietary Risk Assessments, Risk Grades, and ongoing monitoring services covering custodians, central securities depositories, and financial market infrastructures. It also delivers specialized cyber risk advisory for private equity and regulatory compliance services for DORA, NIS2, and UCITS frameworks.
Product overview
Thomas Murray is a post-trade infrastructure specialist and global risk intelligence firm offering a unified platform-plus-services architecture. The core offering is the Orbit Risk Platform—an AI-powered suite comprising Orbit Diligence (AI-assisted due diligence and DDQ automation), Orbit Intelligence (real-time third-party risk monitoring), and Orbit Security (automated cyber security posture monitoring)—supplemented by the OrbitAI capability for AI-driven analysis. Thomas Murray also provides specialized services including Digital Asset Custodian Monitoring (DACM), Cybersecurity for Private Equity, Bank Network Management, Operational Due Diligence, FMI Advisory, and regulatory compliance solutions for DORA and NIS2. The company maintains proprietary risk data covering 150 central securities depositories and financial market infrastructures across 100 countries, publishing approximately 3,000 newsflashes annually.
Differentiator
Problem solved
Functional benefit
Brands
- Orbit Risk: AI-powered risk assessment and due diligence platform covering Orbit Diligence, Orbit Intelligence, and Orbit Security modules for banks, investors, and corporations.
- Orbit Diligence
- Orbit Intelligence
- Orbit Security
- OrbitAI
- Thomas Murray Cyber
- Digital Asset Custodian Monitoring (DACM)
Products and services
- Orbit Risk Platform AI-powered risk assessment, due diligence, and cyber security platform for the investment industry, blending proprietary technology with industry expertise and global coverage across 100+ countries. Used by banks, investors, and corporates.
- Orbit Diligence AI-assisted due diligence module enabling scalable RFPs and DDQs with a library of off-the-shelf questionnaires and risk frameworks. Used by service providers and institutional clients for evaluation and selection processes.
- Orbit Intelligence Real-time third-party risk monitoring platform with threat monitoring, newsflashes, critical alerts, and portfolio risk dashboards. Provides continuous intelligence on global banks, custodians, CSDs, and FMIs.
- Orbit Security Automated third-party cyber security posture monitoring with continuous risk scores, data-driven analytics, and sector benchmarking. Used by organizations to optimize cybersecurity and compliance.
- Digital Asset Custodian Monitoring (DACM) Comprehensive risk oversight service for digital asset custody operations, monitoring custodians across cybersecurity, asset safety, asset servicing, operational risk, and financial stability. Used by asset owners and investors evaluating digital custodians.
- Cybersecurity for Private Equity Cyber risk services for private equity firms covering M&A due diligence, pre-deal monitoring, portfolio monitoring, and 24/7 incident response. Used by 8 of the 10 largest PE funds by AUM.
- Bank Network Management Global market intelligence and counterparty risk management service for banks, covering cash correspondent relationships and banking network oversight. Used by global banks managing correspondent and counterparty exposures.
- Cash Correspondent Monitoring Monitoring service for cash correspondent banking relationships and counterparty risk. Used by banks to track exposure across their correspondent network.
- Custody Selection & Oversight Custodian selection and oversight service for asset owners, including RFPs and service provider evaluation. Used by pension funds, insurance companies, and endowments selecting and monitoring custodians.
- Operational Due Diligence Operational due diligence service for evaluating and monitoring external fund managers and service providers. Used by asset owners to oversee outsourced investments.
- Digital Asset Market Information (DAMI) Digital asset market intelligence covering 18 key jurisdictions and 100 markets, providing regulatory, technological, and institutional developments. Used by FMIs, regulators, and investors tracking the digital asset ecosystem.
- FMI Advisory Financial market infrastructure advisory service for monitoring systemic risk and enhancing oversight. Used by central counterparties, CSDs, payment systems, and regulatory bodies.
- DORA Managed Service Managed service for Digital Operational Resilience Act (DORA) compliance, including assessments and regulatory support. Used by EU financial entities meeting DORA regulatory obligations.
- NIS2 Directive Compliance Advisory service for Network and Information Systems Directive (NIS2) compliance requirements. Used by organizations subject to NIS2 regulatory obligations.
- UCITS Compliance Eligible markets solution for UCITS and FCA COLL compliance for regulatory obligations. Used by fund managers requiring eligible markets assessments.
- Pre-Deal Monitoring Light-touch cyber monitoring of potential acquisition targets using external attack surface monitoring and dark web monitoring. Used by private equity firms evaluating M&A targets pre-deal.
- M&A Due Diligence Cyber due diligence service for M&A covering IP, regulatory governance, data protection, and information security. Used by private equity firms conducting M&A cyber assessments.
- Portfolio Monitoring Continuous cyber monitoring of portfolio companies with periodic risk assessments and remediation recommendations. Used by private equity firms to oversee portfolio cyber risk.
- First and Final 100 Days Post-acquisition cyber vigilance and remediation service during the critical first and final 100 days of ownership. Used by private equity firms supporting portfolio companies during ownership transitions.
Quantifiable outcome
- Trusted by global banks representing 80% of assets under custody worldwide
- +5 more outcomes
Companies that use Thomas Murray
Customer profileNamed customers9 records
Segments5 records
Ideal customer profiles4 records
Thomas Murray technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability8 records
Feature5 records
Thomas Murray partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Indeval (S.D. Indeval Institución para el Depósito de Valores)coreThomas Murray and Indeval collaborated to launch MyIndeval, a client portal powered by Thomas Murray's market intelligence. The platform provides comprehensive CSD risk assessments on Indeval and international depositories (DTC, Euroclear) to Mexican clients. It delivers market profiles for Mexico, US, UK, Spain, Japan, and Ireland, enhancing transparency and supporting international engagement with the Mexican market.
Scale indicators11 records
Recent moves6 records
Expansion highlights6 records
Thomas Murray competitors and assessment
Company assessmentDirect peers
- SecurityScorecard: SecurityScorecard delivers continuous third-party cyber risk ratings directly comparable to Orbit Security's automated risk scoring and sector benchmarking.
- Bitsight: Bitsight is a leading cyber security ratings provider overlapping directly with Thomas Murray's Orbit Security module and underlying risk-score methodology.
- ProcessUnity: ProcessUnity is a third-party risk management platform; its TPRM capabilities compete directly with Orbit Diligence and Orbit Intelligence workflows.
- Eastnets (SWIFT Watch / Compliance): Eastnets provides SWIFT-related compliance, sanctions screening and correspondent-banking risk solutions that overlap with Thomas Murray's Cash Correspondent Monitoring and Bank Network Management services.
- Bureau van Dijk (Moody's): Bureau van Dijk, a Moody's company, provides corporate data and counterparty intelligence that competes directly with Thomas Murray's custodian/FMI counterparty due diligence and risk profiling.
Broad incumbents
- MSCI (RiskMetrics): MSCI offers market and counterparty risk analytics (RiskMetrics) that compete with Thomas Murray at the institutional analytics layer, with broader portfolio- and market-risk coverage.
- S&P Global Market Intelligence: S&P Global Market Intelligence delivers financial market data, counterparty intelligence and ratings that overlap with Thomas Murray's institutional customer monitoring — a scaled incumbent operating across broader asset classes.
- Moody's Analytics (Ratings): Moody's provides credit ratings, risk analytics and KYC/counterparty data at global scale via Bureau van Dijk and broader ratings offerings, sitting as a broader incumbent to Thomas Murray's narrower custody/FMI niche.
- Wolters Kluwer (OneSumX for Finance): Wolters Kluwer's OneSumX for Finance provides regulatory reporting, capital and liquidity compliance, overlapping with Thomas Murray's DORA/NIS2/UCITS regulatory compliance services.
Regional players
- DTCC (Operational Risk/Data Services): The Depository Trust & Clearing Corporation operates US-centric post-trade infrastructure and risk data services that overlap with Thomas Murray's CSD/FMI coverage; both serve the same institutional user base across an overlapping but not identical geography.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Thomas Murray social profiles
Digital presenceThomas Murray compliance and trust
Trust signalCompliance4 records
Thomas Murray financial estimates
Financial estimateRevenue estimate
Valuation estimate
Thomas Murray leadership team
Management profileNumber of profiles
Profiles11 records
Thomas Murray subsidiaries and ownership
Company hierarchySubsidiaries4 records
Thomas Murray funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Thomas Murray M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Thomas Murray
What does Thomas Murray do?
Thomas Murray provides global risk intelligence, analytics, and assessments for financial institutions, anchored by its AI-powered Orbit Risk Platform comprising Orbit Diligence (AI-assisted RFPs and DDQs), Orbit Intelligence (real-time third-party risk monitoring), and Orbit Security (automated cyber risk management). The firm sells proprietary Risk Assessments, Risk Grades, and ongoing monitoring services covering custodians, central securities depositories, and financial market infrastructures. It also delivers specialized cyber risk advisory for private equity and regulatory compliance services for DORA, NIS2, and UCITS frameworks.
Is Thomas Murray a public or private company?
Thomas Murray is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Thomas Murray founded?
Thomas Murray was founded in 1994. It employs 51 to 100 people.
Where is Thomas Murray based?
Thomas Murray is headquartered in London, United Kingdom, in the Europe region.
How does Thomas Murray make money?
Three revenue lines are on record. Risk Assessments are the primary driver. The others are orbit Risk Platform Subscriptions and cyber Risk Advisory Services.
Who are Thomas Murray's main competitors?
Direct peers on record are SecurityScorecard, Bitsight, ProcessUnity, Eastnets (SWIFT Watch / Compliance) and Bureau van Dijk (Moody's). Broad incumbents are MSCI (RiskMetrics), S&P Global Market Intelligence, Moody's Analytics (Ratings) and Wolters Kluwer (OneSumX for Finance). DTCC (Operational Risk/Data Services) is listed as a regional player.
Does Thomas Murray have an API?
No public API is recorded for Thomas Murray.
What industry is Thomas Murray in?
Thomas Murray's product category is Risk Intelligence and Analytics. Its primary akta.pro industry code is FSACAJAJ, Operational Risk & Controls (RCSA, KRIs, Incident/Loss), with a secondary code of BPAKADAL, Fraud Risk & Financial Crime Controls Advisory. Its NAICS code is 523940 and its SIC code is 6199.