Retail & Hospitality ISAC

What Retail & Hospitality ISAC does

Retail & Hospitality ISAC (RH-ISAC) is a non-profit Information Sharing and Analysis Center founded in 2014 that operates a sector-specific cybersecurity intelligence community for retail, hospitality, gaming, travel, food retail, and consumer-facing companies. The organization serves nearly 400 core member companies and over 5,000 cybersecurity professionals, including 25% of the world's top 250 retailers, 9 of the top 10 hotel brands, and 9 of the top 10 fast-food restaurant chains. Its core technology stack is built around a curated MISP (Malware Information Sharing Platform) instance where every IOC and TTP is vetted by in-house analysts and enriched with sector-specific context, delivered to members via API integration, an MSSP channel, or manual pulls. Members also access a Member Exchange portal for working groups, a threat intelligence library, and event management, plus a dedicated Slack workspace with dozens of specialized real-time channels for peer collaboration.

RH-ISAC monetizes primarily through tiered annual membership fees. Core Membership for retail and hospitality companies ranges from $550 (under $100M revenue) to $44,000 (over $20B revenue), with unlimited user credentials per company. Associate Membership for cybersecurity solution providers has two tiers: $15,000 (Community Services) and $30,000 (Intelligence Partner), with the higher tier adding working group presentations, CTI collaboration, training exercises, and joint research. LinkSECURE is a separate program for small-to-mid-sized vendors that provides guided implementation of CIS Critical Security Controls with dedicated success managers. The organization supplements fee revenue with event sponsorships, a portfolio of nearly 50 annual events including the annual Cybersecurity Summit, regional workshops worldwide, Fraud Defense Forums, CISO Forums, and monthly threat briefings, and partnerships with trade associations (NRF, RILA, Retail Council of Canada, American Gaming Association) and Critical Providers (Google Cloud, Microsoft, Palo Alto Networks). Government coordination with CISA, FBI, and DHS is a distinctive element of its intelligence distribution and incident response role.

The organization is governed by a board composed of CISO representatives from member companies, led by President Suzie Squier, and operates with 11–50 employees from headquarters in Vienna, Virginia, and a European office in Deventer, Netherlands. Its competitive position rests on network effects among a critical mass of large enterprise members, a unique threat data corpus sourced from members and partners, and an ecosystem of technology and government integrations that would be difficult to replicate.

Name

Retail & Hospitality ISAC

Legal name

Retail & Hospitality Information Sharing and Analysis Center

Website

https://rhisac.org

Company type

Private

Founded year

2014

Operating status

Operating

Headcount range

11–50 employees

Short description

RH-ISAC is a non-profit cybersecurity sharing community serving nearly 400 retail, hospitality, and consumer-facing member companies and 5,000+ professionals, operating a vetted MISP threat intelligence platform, peer Slack channels, working groups, and a global events program.

Ownership category

akta.pro rank

Product category

Cybersecurity Information Sharing and Analysis

akta.pro primary industry

Identity & Access Security Services (IAM, PAM, Zero Trust) (BPAKAHAI)

Keywords

• Threat intelligence sharing
• Cybersecurity information sharing
• Retail cybersecurity community
• Hospitality cyber intelligence
• ISAC membership services

Headquarters

HQ city

Vienna

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Core Membership Fees: Annual membership fees for retail and hospitality companies based on corporate revenue tiers. Fee provides unlimited user credentials for the organization. Revenue tiers range from $550 for companies under $100M revenue to $44,000 for companies over $20B revenue.
2. Associate Membership Fees: Annual membership fees for cybersecurity solution providers. Tier 1 (Community Services) at $15,000 provides visibility, thought leadership opportunities, and discounted sponsorships. Tier 2 (Intelligence Partner) at $30,000 adds working group presentations, CTI collaboration, training exercises, and joint research.
3. LinkSECURE Program: Program for small-to-mid-sized vendors to strengthen cybersecurity maturity using CIS Critical Security Controls. Guided implementation with dedicated success managers, with no explicit membership fee disclosed.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels14 records

Core offering

RH-ISAC is a non-profit cybersecurity sharing community (Information Sharing and Analysis Center) that enables retail, hospitality, and consumer-facing companies to share sector-specific threat intelligence and collaborate on cyber defense. Its core offering centers on the MISP Threat Intelligence Platform, through which vetted Indicators of Compromise (IOCs) and adversary TTPs are ingested by members via API, supplemented by Slack-based real-time peer collaboration channels, the Member Exchange portal, working groups, intelligence reports, events, and benchmarking.

Product overview

RH-ISAC is a non-profit cybersecurity sharing community (Information Sharing and Analysis Center) for retail and hospitality sectors, not a traditional software product company. The organization's core offerings include the MISP Threat Intelligence Platform for vetted IOC sharing via API integration, the Member Exchange collaboration portal, and Slack-based peer collaboration channels. Supporting products include a comprehensive Intelligence Reports Suite (daily, weekly, monthly, and ad hoc reports), over 20 Working Groups organized by domain and special interest, annual Events and Training programs (Cybersecurity Summit, Regional Workshops, CISO Forum), and the annual CISO Benchmark Report produced with IANS Research. Members also receive Dedicated CTI Analyst Consultation as part of their membership. Membership tiers include Core Membership for retail/hospitality companies, Associate Membership for cybersecurity solution providers, and LinkSECURE for smaller vendors.

Differentiator

Problem solved

Functional benefit

Brands

• LinkSECURE: A membership program for small-to-mid-sized vendors and service providers with limited IT or cyber resources to strengthen their cybersecurity maturity.
• RH-ISAC Cybersecurity Summit

Products and services

• Core Membership Annual membership for retailers, restaurants, hotels, gaming, consumer products, and other consumer-facing companies providing access to the MISP Threat Intelligence Platform with vetted IOCs and TTPs, the Member Exchange portal, Slack collaboration channels, intelligence reports, working groups, events, benchmarking, and dedicated CTI analyst consultation.
• Associate Membership Annual membership for cybersecurity solution providers offered in two tiers: Tier 1 Community Services ($15,000) with company listing, lead generation offers, thought leadership, and discounted sponsorships; Tier 2 Intelligence Partner ($30,000) adds working group presentations, CTI collaboration, training exercises, and joint research/RFI support.
• LinkSECURE Program A program for small-to-mid-sized vendors and service providers with limited IT or cybersecurity resources that uses the CIS Critical Security Controls framework to strengthen cybersecurity maturity, offering guided implementation and dedicated success managers.
• MISP Threat Intelligence Platform A curated threat intelligence platform built on MISP that delivers vetted Indicators of Compromise and adversary TTPs directly into members' existing security tools via API, eliminating manual data retrieval and providing sector-specific context.
• Member Exchange Portal and Slack Collaboration A centralized collaboration platform and dedicated Slack instance providing peer-to-peer Q&A, working group access, threat intelligence library, events calendar, and dozens of specialized channels for real-time reactions to breaking news, threat actors, fraud, and incident response.
• Events and Training Programs Annual Cybersecurity Summit, regional workshops held globally, Fraud Defense Forums, CISO Forums, monthly threat briefings, and Capture-the-Flag/tabletop exercises, totaling nearly 50 events per year across online and in-person formats.
• CISO Benchmark Report An annual benchmark publication jointly produced with IANS Research that surveys more than 200 CISOs in retail and hospitality on InfoSec budgets, staffing, priorities, and initiatives.

Quantifiable outcome

• Real-time alerts sent to specific companies on threats targeting their organization
• +4 more outcomes

Named customers20 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

13 partnerships are on record, tiered core and minor.

• Retail Council of Canada (RCC)coreStrategic or Co-development Partner · 13 March 2026Strategic partnership announced March 13, 2026 to strengthen cybersecurity across the Canadian retail sector. Collaboration provides RCC members with access to RH-ISAC's cybersecurity resources including regional workshops in Vancouver and Toronto, real-time threat intelligence, and complimentary trial memberships. Partnership addresses growing complexity of cyber threats facing Canadian retailers including AI-driven attacks and exploitation of common business tools.
• Google CloudcoreStrategic or Co-development PartnerCritical Provider partner dedicated to RH-ISAC, its board of directors, and general membership as strategic partners working to develop cybersecurity maturity in retail and commercial services industries.
• MicrosoftcoreStrategic or Co-development PartnerCritical Provider partner providing advanced services, trainings, and capabilities to support RH-ISAC's mission in retail and hospitality cybersecurity.
• Palo Alto NetworkscoreStrategic or Co-development PartnerCritical Provider partner supporting RH-ISAC with security expertise and capabilities for the retail and hospitality sector.
• IANS ResearchcoreStrategic or Co-development PartnerResearch Partner supporting benchmarks, surveys, and requests for information (RFIs), providing domain knowledge and advanced analysis in published reports. Jointly produced the 2026 CISO Benchmark Report with RH-ISAC.
• National Retail Federation (NRF)coreStrategic or Co-development PartnerTrade association partner providing cybersecurity content and education to membership. Partnership includes presentations, publications, industry trends briefings, and access to RH-ISAC events.
• Retail Industry Leaders Association (RILA)coreStrategic or Co-development PartnerTrade association partner collaborating on cybersecurity content and member education initiatives.
• Cybersecurity & Infrastructure Security Agency (CISA)coreStrategic or Co-development PartnerGovernment partner providing federal law enforcement and security agency access. RH-ISAC serves as conduit to CISA for incident response coordination and threat intelligence sharing.
• Federal Bureau of Investigation (FBI)coreStrategic or Co-development PartnerLaw enforcement partner for incident response coordination and intelligence sharing related to cyber threats affecting retail and hospitality sectors.
• Department of Homeland Security (DHS)coreStrategic or Co-development PartnerGovernment partner providing access to federal homeland security resources and coordination for cyber incident response.
• National Council of ISACs (NCI)minorStrategic or Co-development PartnerCross-sector sharing forum partner enabling coordination across different ISACs for broader threat intelligence sharing.
• Cloud Security AllianceminorStrategic or Co-development PartnerCybersecurity association partner providing cloud security expertise and collaborative initiatives.
• RSA ConferenceminorStrategic or Co-development PartnerConference partnership for cybersecurity knowledge sharing and industry engagement.

Scale indicators8 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• FS-ISAC (Financial Services Information Sharing and Analysis Center): The leading sectoral ISAC for the financial services industry, operating the same member-funded intelligence-sharing model with curated threat data, working groups, and a global events calendar. FS-ISAC is the closest functional analog to RH-ISAC and serves as the benchmark for the ISAC business model.
• Health-ISAC (H-ISAC): Health-sector ISAC offering community-based threat intelligence sharing for hospitals, pharma, and healthcare payers using a similar model of curated intelligence, working groups, summits, and tiered membership. Direct peer in structure and service offerings.
• MS-ISAC (Multi-State Information Sharing and Analysis Center): ISAC serving U.S. state, local, tribal, and territorial governments, operated by the Center for Internet Security. Operates a comparable intelligence-sharing, member-funded model with a MISP backbone, working groups, and operational coordination with CISA.
• Auto-ISAC: Information sharing and analysis center for the automotive industry with a comparable membership-funded structure, sector-specific threat intelligence, working groups, and CISO-level engagement. Direct operational analog focused on a different vertical.
• Aviation ISAC: Sectoral ISAC for the aviation industry providing threat intelligence sharing, analysis, and incident response coordination to airlines, airports, and aviation stakeholders. Operates under the same member-funded intelligence-sharing model as RH-ISAC.
• E-ISAC (Electricity Information Sharing and Analysis Center): ISAC serving the North American electricity sector, operated by NERC. Provides threat intelligence, analysis, and incident response coordination to utilities using a member-funded model analogous to RH-ISAC's operations in retail/hospitality.
• ONG-ISAC (Oil & Natural Gas ISAC): Sectoral ISAC for the oil and natural gas industry, providing intelligence sharing and analysis to energy operators. Operates with a similar member-funded, threat-intelligence-driven model serving critical infrastructure operators.
• IT-ISAC (Information Technology ISAC): ISAC for IT industry vendors and service providers, operating the same intelligence-sharing framework with curated threat data and analyst enrichment. Direct structural peer serving an adjacent vertical of large technology providers.
• National Council of ISACs (NCI): The umbrella organization for U.S. sectoral ISACs that facilitates cross-sector information sharing. RH-ISAC is a member of NCI; the council itself is a peer in coordinating intelligence flows that RH-ISAC both consumes and contributes to.

Emerging players

• Cyber Threat Alliance (CTA): Non-profit intelligence-sharing organization founded by cybersecurity vendors (Palo Alto Networks, Cisco, Fortinet, etc.) that pools threat data across vendor telemetry. Operates a similar intelligence-pooling mission but is vendor-led rather than end-user-led like RH-ISAC.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/rh_isac
• GitHubgithub.com/RH-ISAC
• LinkedInlinkedin.com/company/retail-hospitality-isac
• Facebookfacebook.com/retail.hospitality.isac

Revenue estimate

Valuation estimate

Number of profiles

Profiles18 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Retail & Hospitality ISAC