DeNexus
A Sausalito-based cyber risk quantification vendor specializing in operational technology and industrial environments, backed by insurer AXA XL and deployed at over 200 sites.
Visit Website ↗ + Add to CompareOverview
DeNexus provides a cyber risk quantification and management platform, DeRISK, purpose-built for operational technology (OT) environments across energy, manufacturing, transportation, data centers, and other critical infrastructure sectors. Rather than adapting generic enterprise cyber risk quantification tools to industrial settings, DeNexus models risk specifically against OT asset types, industrial control system architectures, and the actuarial/insurance data needed to translate technical exposure into financial risk figures.
Founded in 2019 by CEO Jose Seara and headquartered in Sausalito, California, DeNexus has grown to roughly 44 employees and reports deployments at more than 200 industrial sites across the United States, United Kingdom, and Europe. The company raised $17.5 million in a Series A round announced in October 2024, led by Punja Global Ventures with participation from insurer AXA XL, along with Prosegur/SegTech and HCS Capital — a notable detail given AXA XL’s own commercial interest in cyber risk pricing for industrial clients.
DeNexus was named winner of the Most Innovative Cyber Risk Quantification category in Cyber Defense Magazine’s 2024 InfoSec Innovator Awards. Third-party data aggregators report varying cumulative funding totals (from roughly $20 million to $28.6 million) depending on which earlier seed-stage rounds are included; this profile uses the $17.5 million Series A figure, which is independently corroborated across multiple trade press sources, as the verified headline number. No independent audit of DeRISK’s risk-model accuracy was found; the 200-plus site deployment figure is company-reported.
Innovation Matrix Assessment
DeNexus has expanded DeRISK beyond generic OT risk scoring into sector-specific offerings (manufacturing, transmission and distribution) and CISA CPG 2.0-aligned reporting, showing steady platform development, though as a specialized 44-person company its release pace cannot match larger GRC vendors.
Founded in 2019 with roughly 44 employees, over $17.5M raised, and deployments reported at 200-plus industrial sites across three continents, DeNexus has reached meaningful operational scale for a specialized OT risk quantification vendor within about six years.
A $17.5M Series A in October 2024 with strategic backing from global insurer AXA XL, plus a 2024 industry innovation award, signal strong and recent institutional and market validation.
Purpose-building cyber risk quantification around OT/industrial asset models rather than adapting generic enterprise CRQ tools is a genuinely differentiated approach, addressing a segment (industrial cyber risk, tied to insurance underwriting) that generalist GRC platforms handle poorly.
The reported 200-plus site deployment figure and backing from an insurer with direct financial interest in risk-pricing accuracy (AXA XL) lend some credibility, but this remains company-reported; no independent audit of DeRISK's risk-quantification accuracy was found.
As OT/industrial systems face growing attack activity and insurers increasingly require quantified cyber risk data to underwrite industrial clients, purpose-built OT cyber risk quantification is an increasingly relevant and underserved need.
Why CISOs Should Care
For a CISO or risk officer at an industrial or critical infrastructure operator needing to translate OT cyber exposure into dollar figures for the board or insurers, DeNexus offers a risk model built specifically for industrial asset types rather than a generic enterprise risk tool retrofitted for OT.
What Makes It Different
DeNexus models risk using OT-specific asset and threat data rather than adapting IT-centric cyber risk quantification frameworks, and has built a direct relationship with an insurer (AXA XL) as both investor and data/validation partner.
The Matrix Verdict
62/100 — INCREMENTAL INNOVATOR
A credible, well-backed specialist in a narrow but increasingly important niche -- OT-specific cyber risk quantification tied to insurance underwriting -- with real deployment scale, though its risk-model accuracy remains company-asserted rather than independently audited.
Editorial Note: Claims vs. Verified Findings
Financial figures cross-checked: the $17.5M Series A (October 2024) is independently corroborated across PR Newswire, SecurityInfoWatch, Reinsurance News, and DeNexus's own announcement. Unresolved discrepancy flagged: third-party aggregators (Tracxn, ZoomInfo) report differing cumulative total-funding figures (approximately $20.1M to $28.6M across 2-5 rounds), likely reflecting inconsistent treatment of an earlier seed round; this profile uses the verified $17.5M Series A as the primary funding figure rather than picking one aggregator's total. The 200-plus site deployment count is a vendor-reported figure, not independently audited.
Sources
Alternatives to DeNexus
Vanta
Continuous automated compliance monitoring platform that replaces manual audit evidence-gathering with live, integration-based control checks.
AuditBoard (rebranded Optro)
Connected-risk platform for audit, SOX, risk, and compliance, recently rebranded from AuditBoard to Optro under an AI-agent-driven repositioning.
Arcova
Cybersecurity advisory and managed services firm, rebranded from MorganFranklin Cyber, offering GRC, IAM, OT security, and a cloud-based…
Level 6 Cyber
CISO ReviewedContinuous decision-intelligence platform (LISN) that replaces point-in-time security audits with a live digital twin of a CISO's program.
Credo AI
AI governance platform that discovers, assesses, and continuously monitors enterprise AI systems and agents against regulations like the…
Drata
Continuous compliance automation platform, Vanta's closest direct competitor, covering SOC 2, ISO 27001/42001, HIPAA, PCI DSS, DORA, and…