LocateRisk

LocateRisk grew out of a 2018 hackathon hosted by Sparkassen Versicherung, a large German insurer, and has since built a combined external attack surface management (EASM) and vendor risk management (VRM) platform aimed at the DACH region (Germany, Austria, Switzerland). The product automatically discovers an organization’s internet-facing digital assets without requiring any installation, checks them against nine vulnerability categories, and continuously re-scans for changes, producing prioritized remediation guidance rather than a raw vulnerability list.

The company’s customer base spans small and mid-sized businesses up through KRITIS operators (Germany’s designation for critical infrastructure entities) and ministries, and by the company’s own account it serves over 1,000 organizations in the DACH region — a customer count that, if accurate, would represent meaningful market penetration in a regionally focused category. LocateRisk won the ATHENE Startup Award for “Best Cybersecurity Startup 2024 DACH” at it-sa, Europe’s largest IT security trade show, and placed second in WirtschaftsWoche’s Best of Technology Award 2024 — both independently judged industry recognitions rather than self-reported claims.

For CISOs and risk managers at German-speaking-market organizations, particularly those subject to KRITIS obligations or managing vendor risk across a supply chain, LocateRisk offers a regionally focused, no-install alternative to larger international EASM/VRM platforms, with the it-sa award serving as one of the more concrete independent validations in this batch of profiles.