Next Peak
Next Peak is a US-based cyber, risk, and resilience consultancy serving global enterprise clients across financial services, critical infrastructure, manufacturing, retail, and healthcare with strategic advisory, resilience services, and the proprietary Geo Cyber Risk Index.
- Company typePrivate
- Founded2021
- HeadquartersSan Antonio, United States
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Next Peak does
Next Peak (legal entity: NEXT PEAK HOLDINGS, LLC) is a US-based, private cybersecurity, risk, and resilience consultancy headquartered in San Antonio with a small team of 11–50 professionals serving global enterprise clients. Co-founded by Dr. Greg Rattray and Jim Cummings — veterans of US Air Force cyber operations and JP Morgan Chase, respectively — the firm is positioned around national-security-grade expertise spanning APT frameworks, White House–level cyber initiatives, and Air Force cyber warfare capabilities.
The firm operates five core service lines: Cybersecurity & Technology Risk, Operational & Cyber Resilience, Third Party Risk Management, Cyber Litigation Support, and Intelligent Cyber Research (ICR). Within ICR, the firm has built the proprietary Geo Cyber Risk Index (GCRI), a framework of 49 indicators across four categories (state cyber risk, criminal cyber risk, socioeconomic & geopolitical risk, and commercial capabilities & cyber literacy gaps) covering 20 countries that represent over 85% of global GDP. The GCRI was first developed in 2022 and underwent a comprehensive refresh ahead of the official ICR launch on September 19, 2025.
Next Peak generates revenue through tailored professional services engagements and, increasingly, research subscriptions via ICR, with pricing not publicly disclosed. The go-to-market is direct enterprise field sales supported by a partnership ecosystem including core partners KROLL and the Cyber Resilience Institute (CRI), alongside TPRA, QED, CDL, and SandTech Solutions. Target segments include Financial Services, Critical Infrastructure & Energy, Manufacturing, Retail, and Healthcare & Medical Technology.
Next Peak firmographics
Firmographics- Name
- Next Peak
- Legal name
- NEXT PEAK HOLDINGS, LLC
- Website
- https://nextpeak.net
- Company type
- Private
- Founded year
- 2021
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Next Peak is a US-based cyber, risk, and resilience consultancy serving global enterprise clients across financial services, critical infrastructure, manufacturing, retail, and healthcare with strategic advisory, resilience services, and the proprietary Geo Cyber Risk Index.
- Ownership category
- akta.pro rank
Next Peak industry classification
Industry- Product category
- Cybersecurity Consulting
- NAICS
- Other Computer Related Services (541519)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH)
- akta.pro secondary industries
- Threat Intelligence Services (BPAEADAC), Critical Infrastructure Protection (CIP) & NERC-CIP Compliance (HDADAJAC)
Keywords
Where Next Peak is headquartered
LocationHeadquarters
- HQ city
- San Antonio
- HQ country
- United States
- HQ region
- North America
Markets served
Next Peak business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Others
Revenue model
- Advisory and Consulting Services: Next Peak provides strategic advisory and operational services in cybersecurity, risk management, and resilience. Services are tailored to client size, industry, and ambitions, meeting cyber and risk maturity needs through flexible propositions.
Go-to-market motion1 record
Distribution channels2 records
Marketing channels4 records
Next Peak product offering
Product offeringCore offering
Next Peak provides strategic advisory and operational services in cybersecurity, risk management, and resilience across five core service lines: Cybersecurity & Technology Risk, Operational & Cyber Resilience, Third Party Risk Management, Cyber Litigation Support, and Intelligent Cyber Research. Its flagship research product, the Geo Cyber Risk Index (GCRI), is a proprietary framework that fuses geopolitical intelligence with cyber threat insight to assess country-level cyber risk for global enterprise clients.
Product overview
Next Peak is a premier cyber, risk, and resilience consultancy offering strategic advisory and operational services. The company provides five core service offerings: Cybersecurity & Technology Risk, Operational & Cyber Resilience, Third Party Risk Management, Cyber Litigation Support, and Intelligent Cyber Research (ICR). Within ICR, the company offers the Geo Cyber Risk Index (GCRI), a data-driven framework that assesses geopolitical cyber risks across countries using 49 indicators, customized to individual client profiles. The services are tailored to clients' company size, industry, and ambitions to meet their cyber and risk maturity needs.
Differentiator
Problem solved
Functional benefit
Products and services
- Cybersecurity & Technology Risk Advisory services for identifying, assessing, and mitigating cybersecurity risks and technology-related threats; targeted at enterprise clients needing strategic cyber risk and control advice.
- Operational & Cyber Resilience Services focused on maintaining business continuity and recovering from cyber incidents through scenario planning, scalable exercises, ransomware preparedness, and AI red teaming / cyber pen testing; targeted at organizations needing operational resilience uplift.
- Third Party Risk Management Assessment and management of risks associated with third-party vendors and supply chain dependencies; targeted at enterprises needing visibility and control over external cyber and operational risk.
- Cyber Litigation Support Expert support for legal proceedings related to cyber incidents, including digital forensics and evidence handling; targeted at law firms, corporate counsel, and organizations involved in cyber-related disputes.
- Intelligent Cyber Research (ICR) Research service that integrates geopolitical intelligence with cyber threat insight, offering offerings such as the Geo Cyber Risk Index; targeted at global organizations needing geopolitical-cyber risk intelligence for strategic decision-making.
- Geo Cyber Risk Index (GCRI) A framework of 49 indicators that assess the risk of a company operating in a given country based on its geopolitical and cyber environment, customized to each client's unique industry, home country, and business profile; targeted at multinational enterprises needing country-level cyber risk benchmarking.
Companies that use Next Peak
Customer profileNamed customers3 records
Segments4 records
Ideal customer profiles4 records
Next Peak technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature1 record
Next Peak partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered core and minor.
- CRI (Cyber Resilience Institute)coreFeatured as a partnership logo on Next Peak's website, indicating a collaborative relationship in cyber resilience research and expertise sharing.
- TPRA ConsultantminorThird Party Risk Association consultant partner featured in Next Peak's partnership ecosystem.
- QEDminorPartnership logo displayed on Next Peak's website indicating collaborative relationship in cyber risk services.
- CDLminorPartnership logo displayed on Next Peak's website indicating collaborative relationship.
- SandTech SolutionsminorPartnership logo displayed on Next Peak's website indicating collaborative relationship in cyber solutions.
- KROLLcoreKROLL partnership featured prominently on Next Peak's website, indicating a significant collaborative relationship in cyber risk and resilience consulting services.
Scale indicators2 records
Recent moves6 records
Expansion highlights5 records
Next Peak competitors and assessment
Company assessmentDirect peers
- Mandiant (Google Cloud): Mandiant is a leading cyber threat intelligence and incident response advisory firm (now part of Google Cloud) that competes head-to-head with Next Peak's cyber advisory, threat analysis, and resilience services for enterprise and government clients.
- GuidePoint Security: GuidePoint Security is a cybersecurity services firm delivering risk advisory, threat intelligence, and resilience services to mid-market and enterprise customers, comparable in scope and buyer profile to Next Peak's core services.
- Kroll: Kroll is a global risk and cyber resilience consultancy offering cyber risk assessments, incident response, and litigation support — the same end-to-end mix Next Peak provides, and already a core distribution partner.
- CrowdStrike Services: CrowdStrike's services arm delivers incident response, proactive assessments, and cyber risk advisory to enterprises and governments, mirroring Next Peak's combination of threat-led advisory, pen testing, and resilience offerings.
- Palo Alto Networks Unit 42: Unit 42 is Palo Alto Networks' threat intelligence and incident response consulting arm, offering cyber risk advisory, threat assessments, and resilience services that directly overlap with Next Peak's Cybersecurity & Technology Risk and ICR offerings.
- Recorded Future (Mastercard): Recorded Future is a threat intelligence platform that combines open-source, dark web, and geopolitical telemetry, overlapping directly with Next Peak's Geo Cyber Risk Index and Intelligent Cyber Research positioning.
- Bishop Fox: Bishop Fox is a cybersecurity consultancy specializing in offensive security, red teaming, and adversary simulations — closely comparable to Next Peak's AI red teaming, pen testing, and operational resilience services for enterprise clients.
Emerging players
- Flashpoint: Flashpoint is a threat and geopolitical intelligence provider combining deep/dark web data with analyst-driven insights, making it a comparable emerging player to Next Peak's ICR/GCRI offering for enterprises needing integrated cyber-geopolitical risk views.
Broad incumbents
- Booz Allen Hamilton: Booz Allen Hamilton is a large government and commercial cyber consulting practice with deep national-security credentials, competing for the same federal and Fortune 500 risk advisory mandates that Next Peak's co-founder pedigree targets.
- Optiv: Optiv is a large cybersecurity solutions integrator offering advisory, risk, and managed security services across enterprise customers, competing for many of the same board-level cyber risk and resilience mandates as Next Peak.
Market position
Strengths5 records
Weaknesses4 records
Competitive moat3 records
Key risks5 records
Key highlights6 records
Customer concentration
Next Peak social profiles
Digital presenceNext Peak financial estimates
Financial estimateRevenue estimate
Valuation estimate
Next Peak leadership team
Management profileNumber of profiles
Profiles3 records
Next Peak funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Next Peak M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Next Peak
What does Next Peak do?
Next Peak provides strategic advisory and operational services in cybersecurity, risk management, and resilience across five core service lines: Cybersecurity & Technology Risk, Operational & Cyber Resilience, Third Party Risk Management, Cyber Litigation Support, and Intelligent Cyber Research. Its flagship research product, the Geo Cyber Risk Index (GCRI), is a proprietary framework that fuses geopolitical intelligence with cyber threat insight to assess country-level cyber risk for global enterprise clients.
Is Next Peak a public or private company?
Next Peak is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Next Peak founded?
Next Peak was founded in 2021. It employs 11 to 50 people.
Where is Next Peak based?
Next Peak is headquartered in San Antonio, United States, in the North America region.
How does Next Peak make money?
One revenue line is on record: advisory and Consulting Services.
Who are Next Peak's main competitors?
Direct peers on record are Mandiant (Google Cloud), GuidePoint Security, Kroll, CrowdStrike Services, Palo Alto Networks Unit 42, Recorded Future (Mastercard) and Bishop Fox. Flashpoint is listed as an emerging player. Broad incumbents are Booz Allen Hamilton and Optiv.
Does Next Peak have an API?
No public API is recorded for Next Peak.
What industry is Next Peak in?
Next Peak's product category is Cybersecurity Consulting. Its primary akta.pro industry code is BPAKAHAH, Governance, Risk & Compliance (GRC) Advisory & Assessments, with a secondary code of BPAEADAC, Threat Intelligence Services. Its NAICS code is 541519 and its SIC code is 7373.