ReliaQuest

ReliaQuest is a Tampa-based security operations company, founded in 2007, that has grown into one of the largest independent SOC/MDR (managed detection and response) providers in the market. Its platform, GreyMatter, is built around an integration-first premise: rather than asking customers to rip out their existing SIEM, EDR, cloud, and identity tools, GreyMatter connects to more than 200 different security products, normalizes their telemetry, and layers AI-driven detection, investigation, and automated response on top. That’s paired with a 24/7 human analyst layer, positioning ReliaQuest as a hybrid between a pure-software XDR vendor and a traditional managed security service provider.

The company has scaled aggressively on the back of the SOC consolidation and “tool sprawl fatigue” trend that has pushed many enterprises to look for a unifying detection-and-response layer instead of adding yet another point product. It reported ARR growth of roughly 4x since 2020 and, as of March 2025, had raised over $500M in a single round led by EQT, KKR, and FTV Capital at a $3.4B valuation — formal unicorn status and one of the larger funding events in the security operations space in recent years. ReliaQuest employed roughly 1,100-1,200 people as of 2026, though headcount has declined modestly year-over-year even as revenue has grown, consistent with an efficiency-focused scaling phase common among late-stage security vendors.

ReliaQuest doesn’t publish independent MITRE ATT&CK Evaluation results in the way some EDR-focused vendors do, since GreyMatter is fundamentally an orchestration/detection layer over third-party tools rather than a standalone endpoint sensor; its efficacy case rests more on integration breadth and reported customer retention/growth metrics than on a single standardized benchmark.