Global segment ranking · Cybersecurity › Operations
The world’s most valuable threat intelligence startups
Companies that watch threats and attackers outside their customers’ networks: threat intelligence platforms and feeds, dark-web and leaked-credential monitoring, digital risk protection against phishing sites and impersonation, external attack surface and internet-scanning intelligence, and security ratings of third parties. Ranked worldwide by AI-estimated valuation, with listed threat intelligence companies shown in grey at their market value for reference. The market sets the value; AI models estimate it.
Key metrics for this segment: key milestone. Figures as published by each company or the press, dated, not recalculated. The AIs weigh them alongside funding history and comparables.
Not in this segment. Listed, so not ranked: S2W (shown in grey), BrandShield and Cognyte; Tenable, Rapid7 and Qi An Xin are listed and mainly elsewhere. Bought by a group: Recorded Future and RiskRecon (Mastercard), Cybersixgill (Bitsight), ThreatConnect (Dataminr), ThreatQuotient (Securonix), Cyberint (Check Point), IntSights (Rapid7), Digital Shadows (ReliaQuest), Axur (Infoblox), Expanse (Palo Alto Networks), Intrigue (Google), PhishLabs (Fortra), Interpres (CyberProof), ZeroFox (Haveli), DomainTools (Battery Ventures), Horangi (Bitdefender). In other segments: Anomali, Sekoia, Hunters and BlueVoyant under Detection & response; Red Sift and Knownsec under Network security; application scanners (Detectify) and pentest automation (Pentera, FireCompass) are outside this segment. A company appears in one segment only. Method
The segment at a glance
36companies ranked
10companies on the radar
11countries in the ranking
6listed benchmarks
Sources: Company announcements, TechCrunch, SecurityWeek, SiliconANGLE, Calcalist, Globes, Les Echos, Entrackr, AVCJ, 36Kr, Korea Economic Daily, and market data for listed companies. Intention counters will be shown above a threshold of amount and number of Backers.
Rankings by region
Filter the ranking and the Radar. Ranks stay worldwide. Regional pages: Asia · Europe · Middle East & North Africa · North America.Global ranking · Threat intelligence
Snapshot12 Oct 2026A snapshot taken on 12 Oct 2026
This ranking shows the startups as they stood on 12 Oct 2026. Funding rounds, valuations and other events announced after that date are not included yet. They will be taken into account in the next edition, scheduled for 15 Apr 2027.
Spotted a more recent round? Tell us →First edition: no movements yet.
This ranking shows the startups as they stood on 12 Oct 2026. Funding rounds, valuations and other events announced after that date are not included yet. They will be taken into account in the next edition, scheduled for 15 Apr 2027.
Spotted a more recent round? Tell us →First edition: no movements yet.
World · 36 ranked companies
| # | Company | Last round · Key metrics | Estimated valuation (AI) · range | Pool of InterestsInterest: a free, non-binding declaration on a company, or on a sector within an area, made during the free phase of a pool. Pool: all the Interests declared on the same target. This column shows the number of Backers and the combined amount of their tickets, to validated members only. Terms for Backers → | BackBacking a startup on Uback (pronounced “you back”) can be done in two ways: Interest · free: a non-binding declaration that signals your demand for a company or a sector. You can move or withdraw it at any time, with up to 5 at once. Intention · coming soon: a paid, confirmed declaration, still non-binding. Once its pool reaches critical mass, it is presented to a company by a partner desk. Neither is an order nor a commitment to invest. Terms for Backers → |
|---|---|---|---|---|---|
| 1 | DataminrReal-time AI platform that detects emerging events, risks and cyber threats from public data sources, alerting corporate security teams, governments and newsrooms, now combined with ThreatConnect's intelligence platform. | Growth round · USD 475M · Mar 2021Close to USD 200M ARR · Mar 2025 | Last known equity round: Growth round · USD 475M · Mar 2021 (Eldridge, Valor Equity Partners); 2025 convertible notes and credit not countedMethod | Be the first | Back |
| 2 | BitsightProvides security ratings and outside-in cyber risk analytics on organisations and their vendors, combined with threat intelligence from the dark web, for risk, insurance and security teams. | Strategic investment · USD 250M · Sep 2021Over 2,300 customers and nearly 500 employees · Sep 2021 | Last known equity round: Strategic investment · USD 250M · Sep 2021 (Moody's)Method | Be the first | Back |
| 3 | SecurityScorecardRates the cybersecurity posture of companies and their suppliers from the outside, scanning internet-facing signals to give third-party risk, insurance and procurement teams A-to-F scores. | Series E · USD 180M · Mar 2021About 17,000 customers worldwide · Mar 2021 | Last known equity round: Series E · USD 180M · Mar 2021 (Silver Lake Waterman, T. Rowe Price, Kayne Anderson Rudnick, Fitch Ventures)Method | Be the first | Back |
| 4 | ThreatBookSupplies threat intelligence feeds and platforms, plus intelligence-driven threat detection products, to Chinese government bodies, banks, energy firms and internet companies, mainly by SaaS subscription. | Series E (with extension) · USD 124M · Mar 2022About 300 large corporate and government customers · Apr 2022 | Last known equity round: Series E (with extension) · USD 124M · Mar 2022 (CITIC PE, CDH Investments, Star Road Ventures); CNY 800M in two tranchesMethod | Not open to BackersCompanies based in mainland China are ranked like any other startup, but Uback does not open pools on them: capital controls and offshore (VIE) structures make minority deals impractical for our Backers. You can still declare an interest in this segment → |
|
| 5 | DoppelDetects and takes down brand impersonation, phishing sites, fake social accounts and deepfake-driven social engineering for enterprises, using AI agents across web, social, ads and telecom channels. | Series C · USD 70M · Nov 2025Enterprise customer base up 400% since 2024; dozens of Fortune 500 customers · Nov 2025 | Last known equity round: Series C · USD 70M · Nov 2025 (Bessemer Venture Partners, Andreessen Horowitz) Published valuation: over USD 600M (reported) (Nov 2025)Method |
Be the first | Back |
| 6 | SpyCloudRecaptures stolen credentials, cookies and identity data from breaches, infostealer malware and criminal forums so enterprises can reset exposed accounts and prevent account takeover and ransomware. | Growth round · USD 110M · Aug 2023Key metrics not disclosed | Last known equity round: Growth round · USD 110M · Aug 2023 (Riverwood Capital)Method | Be the first | Back |
| 7 | CyCognitoDiscovers and tests an organisation's internet-exposed assets from an attacker's perspective, prioritising external attack surface risks for enterprise security teams. | Series C · USD 100M · Dec 2021Key metrics not disclosed | Last known equity round: Series C · USD 100M · Dec 2021 (The Westly Group, Thomvest Ventures, Accel, Lightspeed Venture Partners)Method | Be the first | Back |
| 8 | SpurProvides IP address intelligence that identifies VPNs, residential proxies, bots and anonymised infrastructure, helping fraud, trust-and-safety and security teams judge risky traffic. | Growth investment · USD 200M · Jul 2026Key metrics not disclosed | Last known equity round: Growth investment · USD 200M · Jul 2026 (Insight Partners)Method | Be the first | Back |
| 9 | FiligranDevelops OpenCTI, an open-source threat intelligence platform, and OpenAEV for adversary exposure validation, letting security teams centralise, share and act on threat knowledge. | Series C · USD 58M · Oct 2025Tools used by over 6,000 organisations incl. FBI and European Commission · Oct 2025 | Last known equity round: Series C · USD 58M · Oct 2025 (Eurazeo; Deutsche Telekom, Accel, Insight Partners); EUR 49.7MMethod | Be the first | Back |
| 10 | CensysScans the entire internet continuously to map hosts, services and certificates, providing internet intelligence and external attack surface management to security teams and governments. | Series C · USD 50M · Oct 2023180+ paying customers and 350,000 free users · Oct 2023 | Last known equity round: Series C · USD 50M · Oct 2023 (Decibel Partners, GV, Greylock, Intel Capital); USD 25M of debt not countedMethod | Be the first | Back |
| 11 | KELAMonitors cybercrime forums, marketplaces and infostealer markets to deliver dark-web threat intelligence and exposure alerts to enterprises, governments and law enforcement agencies. | Growth investment · USD 50M · May 2018Key metrics not disclosed | Last known equity round: Growth investment · USD 50M · May 2018 (Vector Capital)Method | Be the first | Back |
| 12 | PanoraysAutomates third-party cyber risk management, combining outside-in attack surface scans of suppliers with security questionnaires to rate and monitor vendor risk. | Series B · USD 42M · Sep 2021Key metrics not disclosed | Last known equity round: Series B · USD 42M · Sep 2021 (Greenfield Partners, Aleph, Oak HC/FT)Method | Be the first | Back |
| 13 | OuttakeUses AI agents to detect, investigate and take down impersonation accounts, malicious domains, rogue apps and fraudulent ads targeting brands, executives and agencies. | Series B · USD 40M · Jan 2026ARR up sixfold year-over-year; customers include OpenAI and AppLovin · Jan 2026 | Last known equity round: Series B · USD 40M · Jan 2026 (ICONIQ)Method | Be the first | Back |
| 14 | Hadrian#41 in the NetherlandsMaps companies' internet-facing assets and uses AI agents to test them like a hacker, combining external attack surface management with on-demand automated penetration tests. | Series B · USD 40M · Oct 2026Key metrics not disclosed | Last known equity round: Series B · USD 40M · Oct 2026 (Forgepoint Capital International, Smartfin, HV Capital)Method | Be the first | Back |
| 15 | MemcycoProtects banks and brands against website impersonation and account takeover by detecting spoofed sites in real time and alerting affected users, through an agentless approach. | Series A · USD 37M · Jan 2026Key metrics not disclosed | Last known equity round: Series A · USD 37M · Jan 2026 (E. León Jimenes, NAventures, Pags Group)Method | Be the first | Back |
| 16 | CybelAngelScans the open, deep and dark web to detect leaked data, exposed assets, credentials and brand threats for large enterprises, offering digital risk protection and attack surface monitoring. | Series B · USD 36M · Feb 2020Key metrics not disclosed | Last known equity round: Series B · USD 36M · Feb 2020 (Prime Ventures, Bpifrance, Serena)Method | Be the first | Back |
| 17 | NetcraftDetects and takes down phishing sites, fake shops, malicious apps and other cybercrime targeting brands and governments, drawing on long-running internet surveys and scanning. | Growth equity · USD 100M · Jul 2023Takes down more than 15 million cyberattacks per year · Jul 2023 | Last known equity round: Growth equity · USD 100M · Jul 2023 (Spectrum Equity); first outside fundingMethod | Be the first | Back |
| 18 | CybleRuns an AI-driven threat intelligence platform covering dark-web monitoring, brand protection, attack surface and vulnerability intelligence for enterprises and government agencies. | Series B · USD 30.2M · Nov 2023Key metrics not disclosed | Last known equity round: Series B · USD 30.2M · Nov 2023 (Blackbird Ventures, Summit Peak Ventures, King River Capital); USD 24M plus USD 6.2M extensionMethod | Be the first | Back |
| 19 | CywareBuilds threat intelligence management and collaboration software that lets enterprises, ISACs and government agencies share, enrich and operationalise threat intelligence across security teams. | Series C · USD 30M · Jun 2023Key metrics not disclosed | Last known equity round: Series C · USD 30M · Jun 2023 (Ten Eleven Ventures, Advent International, Zscaler)Method | Be the first | Back |
| 20 | FlareMonitors the clear and dark web, illicit Telegram channels and infostealer logs for leaked credentials and exposed data, giving security teams prioritised external threat exposure alerts. | Series B · USD 30M · Dec 2024Key metrics not disclosed | Last known equity round: Series B · USD 30M · Dec 2024 (Base10 Partners; Fonds de solidarité FTQ, Inovia Capital, White Star Capital); CAD 42.5MMethod | Be the first | Back |
| 21 | CloudSEKMonitors dark web, leaked credentials, brand impersonation and external attack surfaces for enterprises, using AI models to predict and prioritise threats before they reach the organisation. | Series B · USD 29M · Jan 2026More than 300 enterprise customers (Jan 2026) · Jan 2026 | Last known equity round: Series B · USD 29M · Jan 2026 (Commvault, Connecticut Innovations, MassMutual Ventures); USD 19M (B1) plus USD 10M (B2)Method | Be the first | Back |
| 22 | SOCRadarCombines threat intelligence, dark-web monitoring, brand protection and external attack surface management in one SaaS platform sold to enterprises and through channel partners. | Series B · USD 25.2M · May 2024600+ paid customers and 25,000+ freemium users in 150+ countries (May 2024) · May 2024 | Last known equity round: Series B · USD 25.2M · May 2024 (PeakSpan Capital, Oxx)Method | Be the first | Back |
| 23 | EclecticIQProvides a threat intelligence platform and endpoint-linked analytics that help governments, defence organisations and large enterprises collect, analyse and act on cyber threat intelligence. | Series C · USD 24M · Dec 2020Key metrics not disclosed | Last known equity round: Series C · USD 24M · Dec 2020 (Ace Management, Arches Capital, Quest for Growth); EUR 20MMethod | Be the first | Back |
| 24 | Black KiteProvides third-party cyber risk intelligence, rating vendors' security posture, ransomware likelihood and compliance from outside-in data for supply-chain risk teams. | Series B · USD 22M · Oct 2021Key metrics not disclosed | Last known equity round: Series B · USD 22M · Oct 2021 (Volition Capital)Method | Be the first | Back |
| 25 | UpGuardOffers third-party risk management and external attack surface monitoring, scoring vendors' internet-facing security and detecting data leaks for security and procurement teams. | Series B · USD 17M · Aug 2016Key metrics not disclosed | Last known equity round: Series B · USD 17M · Aug 2016 (Square Peg Capital, IAG, Pelion Venture Partners)Method | Be the first | Back |
| 26 | Allure SecurityDetects and removes online brand impersonation, fake websites, scam ads and disinformation using autonomous AI agents combined with human analysts, for consumer brands and financial institutions. | Series B · USD 17M · Mar 2026Key metrics not disclosed | Last known equity round: Series B · USD 17M · Mar 2026 (Riverside Acceleration Capital, Curql, Glasswing Ventures)Method | Be the first | Back |
| 27 | BforeAIPredicts and blocks malicious domains and phishing infrastructure before attacks launch, using behavioural AI on internet registration data, with takedown services for brands. | Series A · USD 15M · Apr 2024Key metrics not disclosed | Last known equity round: Series A · USD 15M · Apr 2024 (SYN Ventures)Method | Be the first | Back |
| 28 | NisosDelivers managed intelligence services that investigate cyber adversaries, disinformation, insider threats and executive risks, combining analysts with online data collection for enterprises and governments. | Series B · USD 15M · May 2022Q1 bookings up 140% year on year · May 2022 | Last known equity round: Series B · USD 15M · May 2022 (Paladin Capital Group, Columbia Capital, Skylab Capital)Method | Be the first | Back |
| 29 | GreyNoiseOperates a global sensor network that records internet-wide scanning and exploitation traffic, helping security teams filter background noise and spot mass exploitation of new vulnerabilities. | Series A · USD 15M · Jun 2022Key metrics not disclosed | Last known equity round: Series A · USD 15M · Jun 2022 (Radian Capital)Method | Be the first | Back |
| — | S2WListed · KOSDAQ · 488280 | USD 76MMarket cap · Aug 2026Listed company · not ranked | |||
| 30 | BolsterDetects and automatically takes down phishing sites, fake domains, social media impersonation and scam apps for brands, using AI and the CheckPhish scanning engine. | Series B · USD 14M · May 2024Key metrics not disclosed | Last known equity round: Series B · USD 14M · May 2024 (M12 (Microsoft))Method | Be the first | Back |
| 31 | VulnCheckSupplies exploit and vulnerability intelligence feeds that track which flaws are exploited in the wild, helping security vendors, governments and enterprises prioritise remediation. | Series A · USD 12M · Mar 2025Platform used by nearly 7,000 organisations · Mar 2025 | Last known equity round: Series A · USD 12M · Mar 2025 (Ten Eleven Ventures, Sorenson Capital, In-Q-Tel)Method | Be the first | Back |
| 32 | Silent PushMaps attacker infrastructure across the internet in advance, using DNS and hosting data to produce indicators of future attack that block phishing, malware and fraud campaigns early. | Series B · USD 10M · Sep 2025Key metrics not disclosed | Last known equity round: Series B · USD 10M · Sep 2025 (StepStone Group, Ten Eleven Ventures, Knollwood Investment Advisory)Method | Be the first | Back |
| 33 | AI SperaOperates Criminal IP, an internet-scanning search engine that maps exposed assets, malicious IPs and domains, sold by subscription for threat intelligence and attack surface management. | Series A · USD 8.5M · Nov 2024Used by customers in over 150 countries; SaaS subscription model (Nov 2024) · Nov 2024 | Last known equity round: Series A · USD 8.5M · Nov 2024 (KB Investment, JB Investment, Kyobo Life Insurance); KRW 12bnMethod | Be the first | Back |
| 34 | StealthMoleTracks dark-web, Telegram and leaked-credential data with AI to help law enforcement, governments and enterprises in Asia investigate cybercrime and detect breached organisations. | Series A · USD 7M · Mar 2024Key metrics not disclosed | Last known equity round: Series A · USD 7M · Mar 2024 (Korea Investment Partners; Hibiscus Fund, Smilegate Investment)Method | Be the first | Back |
| 35 | CYFIRMAOffers an external threat landscape management platform that combines cyber intelligence, attack surface discovery and digital risk protection, giving enterprises an attacker's-eye view of upcoming threats. | Pre-Series B · USD 5.5M · Apr 2023Key metrics not disclosed | Last known equity round: Pre-Series B · USD 5.5M · Apr 2023 (OurCrowd, L&T Innovation Fund)Method | Be the first | Back |
| 36 | BrandefenseProvides digital risk protection, external attack surface management, supply chain monitoring and threat intelligence, detecting phishing sites, brand abuse and data leaks for enterprises. | Pre-Series A · USD 2.8M · Dec 2023Key metrics not disclosed | Last known equity round: Pre-Series A · USD 2.8M · Dec 2023 (Sabancı Ventures, Vestel Ventures, TTGV)Method | Be the first | Back |
Back · Backing on Uback (pronounced “you back”) means declaring an Interest (free) or an Intention (coming soon). Backing does not mean that this company is raising funds or that a shareholder is selling shares, and it is not a commitment to invest. Any deal, through a funding round or a sale by an existing shareholder, is handled by a partner desk: the Fundraising Desk of the country for a round, the Secondary Sales Desk assigned to the company for a sale. · Terms
Corporate investor? Back the startups of your own segment
No ranked company in this region yet: see the Radar.
Ranking in descending order of AI-estimated valuation, based on public information, with no human intervention on the order. The valuations, ranges and brackets shown are editorial estimates produced by AI, purely indicative and imperfect by nature: neither a financial valuation, nor an offer, nor investment advice. Only the market sets a company’s value, through a funding round or a sale. Ranking established by Claude (Anthropic) from public information, following the published rules. A consensus of several AIs will apply from 1 December 2026. Eligibility: at least $1M raised in equity, non-listed company, main activity in this segment (threat intelligence). Country shown is the country of main operations. Request a correction
Get every new ranking
New entries, exits and movements, at every edition.
No data passed on to third parties. See our Privacy policy.
How to read this ranking
Rank
Companies are ranked by AI-estimated valuation, highest first. The market sets the value; AI models estimate it.
Estimate
An AI-estimated valuation, its uncertainty range and its order of magnitude. Indicative, and imperfect by nature.
- Hundreds of k$
- Millions $
- Tens of M$
- Hundreds of M$
- Unicorn
- Decacorn
- Hectocorn
Challengers
A registered company raising funds that is not in the ranking will be able, for a fee, to appear in a separate list labelled “Challengers”, for a set period, with a memo available to verified Backers. The listing has no effect on the ranking. Not open yet.
Sponsored space · no Challenger listed yet
Radar · known eligible companies, not ranked
Sorted by date of last round, with no judgement and no AI call.
- Searchlight Cyber · United Kingdom · EuropeJan 2024; amount and stake not disclosedBack
- Tianji Youmeng · China · AsiaNov 2022; about CNY 100M, exact amount not disclosedNot open to BackersCompanies based in mainland China are ranked like any other startup, but Uback does not open pools on them: capital controls and offshore (VIE) structures make minority deals impractical for our Backers.
You can still declare an interest in this segment → - Huashun Xin'an · China · AsiaApr 2022; several hundred million yuan, exact amount not disclosedNot open to BackersCompanies based in mainland China are ranked like any other startup, but Uback does not open pools on them: capital controls and offshore (VIE) structures make minority deals impractical for our Backers.
You can still declare an interest in this segment → - Silobreaker · United Kingdom · EuropeJan 2022; amount not disclosedBack
- 00sec · China · AsiaNov 2021; tens of millions of yuan, exact amount not disclosedNot open to BackersCompanies based in mainland China are ranked like any other startup, but Uback does not open pools on them: capital controls and offshore (VIE) structures make minority deals impractical for our Backers.
You can still declare an interest in this segment → - Team Cymru · United States · North AmericaAug 2021; amount and stake not disclosedBack
- Flashpoint · United States · North AmericaJul 2021; amount not disclosedBack
- Intel 471 · United States · North America2021; amount not disclosedBack
- Constella Intelligence · United States · North AmericaOct 2020; raised as 4iQ before its merger with Alto Analytics; amount not confirmedBack
- Group-IB · Singapore · AsiaAug 2016; 20% in total, amount not disclosed; ownership changed in 2023Back
No company on the radar in this region yet.
Listed benchmarks
Not ranked: no intention is possible on a listed company.
- S2W · South KoreaKOSDAQ · 488280 · USD 76M (Aug 2026)
- Tenable · United StatesNasdaq · TENB
- Rapid7 · United StatesNasdaq · RPD
- Qi An Xin · ChinaShanghai STAR · 688561
- Cognyte · IsraelNasdaq · CGNT
- BrandShield · IsraelLondon (AIM) · BRSD
Sources and method for this segment
Calendar. Global segment rankings are published twice a year. Next edition: April 15, 2027.
Eligibility. At least $1M raised in equity, non-listed company, main activity in this segment (threat intelligence). A company appears in one segment only.
Sources. Company announcements, TechCrunch, SecurityWeek, SiliconANGLE, Calcalist, Globes, Les Echos, Entrackr, AVCJ, 36Kr, Korea Economic Daily, and market data for listed companies.