Retail Cyber Intelligence Sharing Center

What Retail Cyber Intelligence Sharing Center does

Retail Cyber Intelligence Sharing Center, operating as RH-ISAC, is a member-driven cybersecurity intelligence sharing community founded in 2014 to serve retail, hospitality, and consumer-facing companies. Headquartered in Vienna, Virginia, with a European office in Deventer, Netherlands, the organization exists to unite the defenses of its member organizations through collaborative threat intelligence sharing designed to mitigate cyber threats targeting consumer data, payment systems, and loyalty programs. Named members include Costco, Kroger, Hyatt, and Crocs, alongside a broader base of enterprise retail and hospitality participants and an Associate tier of cybersecurity solution providers. The organization frames its value proposition as sector-specific early-warning radar that generalist ISACs and commercial threat feeds cannot replicate.

RH-ISAC's core offering is built on MISP (Malware Information Sharing Platform), an open-source threat intelligence platform used to distribute vetted Indicators of Compromise (IOCs), real-time alerts, and contextual threat data across the member community. The product surface spans three membership tiers: Core Membership (for retail and hospitality companies), Associate Membership (for cybersecurity providers serving the sector), and LinkSECURE (for small-to-mid-sized vendors with limited IT resources). Beyond the platform, the organization operates specialized working groups, education and training programs, benchmarking services, and a research publication portfolio anchored by the annual CISO Benchmark Report. Member engagement is driven through an event ecosystem that includes an annual Summit, Black Hat Conference partner events, Regional Workshops, a Fraud Defense Forum, and CISO Events. Marketing and member communications are distributed across LinkedIn, X, Bluesky, and GitHub, alongside content marketing via newsletters, blog posts, and industry reports.

The business model is subscription-based and membership-driven. RH-ISAC generates revenue through tiered annual membership dues, with Core, Associate, and LinkSECURE pricing quote-based and not publicly disclosed. The organization has no public listing, no disclosed parent company, no equity funding rounds, and no recorded M&A activity, operating as an independent industry association. Distribution is exclusively through direct membership sales and a self-serve member portal, with no commercial product resold outside the membership. Revenue mechanics are therefore recurring and predictable by construction, anchored on enterprise retail and hospitality buyers with a long tail of Associate provider members.

Name

Retail Cyber Intelligence Sharing Center

Legal name

Retail Cyber Intelligence Sharing Center

Website

https://r-cisc.org

Company type

Private

Founded year

2014

Operating status

Operating

Headcount range

11–50 employees

Short description

RH-ISAC is a member-driven cybersecurity intelligence sharing community serving retail, hospitality, and consumer-facing companies. Founded in 2014, it operates a MISP-based platform for vetted IOC sharing, real-time alerts, and peer collaboration across three membership tiers.

Ownership category

akta.pro rank

Product category

Cybersecurity Information Sharing and Analysis

NAICS

Business Associations (813910)

SIC

Services-Membership Organizations (8600)

akta.pro primary industry

Identity & Access Management (IAM) Managed Services (BPAEADAE)

Keywords

• Cyber threat intelligence
• Information sharing
• Retail cybersecurity
• Hospitality cybersecurity
• ISAC membership

Headquarters

HQ city

Washington

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Membership Dues: RH-ISAC generates revenue through tiered membership fees. Core Membership for retail and hospitality companies, Associate Membership for cybersecurity solutions providers, and LinkSECURE for small-to-mid-sized vendors with limited IT resources. Each tier provides different levels of access to threat intelligence, collaboration tools, and peer networks.

Go-to-market motion2 records

Distribution channels4 records

Marketing channels6 records

Core offering

RH-ISAC operates a membership-based cyber intelligence sharing community for retail, hospitality, and consumer-facing companies. Members exchange vetted Indicators of Compromise (IOCs) via a MISP-based sharing platform, receive real-time alerts, and collaborate through specialized working groups. The organization sells three membership tiers (Core Membership, Associate Membership, and LinkSECURE) that grant tiered access to threat intelligence, peer collaboration, benchmarking, education, and discounts.

Product overview

RH-ISAC operates as a membership-based cybersecurity intelligence sharing community for retail, hospitality, and consumer-facing companies. The organization offers three membership tiers (Core Membership, Associate Membership, and LinkSECURE) that provide access to shared threat intelligence platforms, peer collaboration channels, working groups, education and training, benchmarking services, and member discounts. The core offering centers on a collaborative sharing platform where members exchange vetted IOCs and real-time alerts. The organization also produces research publications including the annual CISO Benchmark Report.

Differentiator

Problem solved

Functional benefit

Brands

• LinkSECURE: Membership tier for small-to-mid-sized vendors with limited IT resources looking to strengthen their cybersecurity maturity.

Products and services

• Core Membership Full membership tier for retail and hospitality companies providing access to shared threat intelligence, vetted IOCs shared via MISP, real-time alerts, peer collaboration channels, working groups, education and training, benchmarking, and member discounts.
• Associate Membership Membership tier for cybersecurity solution providers offering specialized tools or insights for the retail and hospitality sector, providing market access to the community and the ability to contribute threat intelligence.
• LinkSECURE Specialized membership program for small-to-mid-sized vendors serving retail and hospitality that have limited IT resources and want to strengthen their cybersecurity maturity through the RH-ISAC community.

Quantifiable outcome

• Members report transformed threat-visibility capabilities through peer network access
• +2 more outcomes

Named customers4 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Scale indicators2 records

Recent moves5 records

Expansion highlights5 records

Broad incumbents

• ThreatConnect: Threat intelligence operations platform serving enterprises and ISACs, offering intel aggregation, automation, and sharing — directly competes for the same threat-intel tooling budget that funds RH-ISAC memberships.
• Recorded Future: One of the largest commercial threat intelligence providers, offering machine-speed intelligence that partially substitutes for community-shared intel — a broad incumbent competing for the same enterprise cybersecurity budget.
• Anomali: A commercial threat intelligence platform that aggregates and operationalizes intel feeds for enterprises — overlaps with RH-ISAC's intelligence distribution function but as a paid commercial vendor rather than a community-association.

Direct peers

• Health-ISAC: Health Information Sharing and Analysis Center applies the same membership-based threat-intel sharing model for the healthcare sector, with comparable working groups, real-time alerts, and tiered membership structures.
• IT-ISAC: Information Technology ISAC serves the IT sector using the same ISAC structure — vetted member community, sector-specific threat intelligence, and trusted peer sharing — making it a structurally identical peer to RH-ISAC.
• Downstream Natural Gas ISAC: Operates as a sector-specific ISAC for the downstream natural gas industry, sharing cyber threat intelligence across operators via trusted community protocols — a direct structural peer to RH-ISAC in energy.
• Auto-ISAC: Automotive ISAC operates as a sector-specific threat intelligence sharing community for the automotive industry, paralleling RH-ISAC's vertical-specialized ISAC model in retail and hospitality.
• E-ISAC: Electricity Information Sharing and Analysis Center provides threat intelligence sharing for the North American electricity sector, using the same membership community model and information sharing protocols as RH-ISAC.
• FS-ISAC: The Financial Services Information Sharing and Analysis Center operates the same ISAC model as RH-ISAC, sharing cyber threat intelligence across its financial services member base via a vetted community and structured sharing protocols.

Others

• National Council of ISACs: The umbrella organization that coordinates the various sector ISACs including RH-ISAC — relevant as the parent coordinating body that links RH-ISAC into the broader cross-sector threat sharing ecosystem.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/retailcisc
• GitHubgithub.com/RH-ISAC
• LinkedInlinkedin.com/company/retail-hospitality-isac

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Retail Cyber Intelligence Sharing Center