C2 Risk

C2 Risk, founded in 2015 and headquartered in Shoreditch, London, builds a risk management platform originally launched as C2 Cyber and now operating under the C2 Risk brand. Its core product, RiskStore, is a third-party and supply-chain risk management platform that lets organizations assess, remediate and continuously monitor the security posture of vendors and partners, alongside adjacent modules covering privacy, project risk and ESG.

The company’s positioning centers on third-party risk, a category that has grown in priority as regulators and large enterprises push visibility requirements further down the supply chain, and RiskStore has been recognized at the UK’s National Cyber Awards. C2 Risk works with both public and private sector customers in the UK, including through G-Cloud, the UK government’s cloud services procurement framework, giving it a foothold in public-sector vendor risk assessment work.

C2 Risk is a small, UK-focused scaleup that has raised approximately $2 million to date from investors including Grow London, DivisionX Global and Winton Ventures. For CISOs and procurement/GRC teams managing growing vendor ecosystems, particularly in UK public sector and regulated industries, C2 Risk’s combined cyber, privacy and ESG third-party risk platform is a practical consolidation play; its small size and funding base limit its ability to compete with larger, better-capitalized third-party risk management vendors internationally.