Innovation intelligence brief
Innovation intelligence brief
Cyber risk analytics for insurance companies and enterprises.
What became of it
Reviewed · Low confidence · Last verified 2026-10-17
As catalogued
Cyber risk analytics platform (iRisk) that assesses and quantifies an organisation's cyber risk in financial terms, aimed at insurers' cyber underwriting and at enterprises' third-party risk management.
2026 reality
The website is live under the title 'C2SEC - Unified Security Posture Management'. Database profiles describe a small private company (founded 2016, 1-25 employees, about USD 1.5M raised; CEO Chengyun Chu) whose iRisk platform runs non-intrusive scans and authorised penetration tests, translates cyber risk into financial metrics, and serves enterprises as well as insurance agents, brokers and carriers for risk assessment, underwriting and aggregated risk management.
Public messaging now centres on enterprise security posture management (external attack surface, cloud/SaaS and third-party security); database profiles indicate the insurance use case (underwriting and accumulation risk) remains part of the offer. The company last reported funding of USD 1.49M in 2019.
small security-posture and cyber-risk-scoring vendor competing with much larger players (BitSight, SecurityScorecard); relevance to insurers is as a cyber risk data source.
Third taxonomy
REVIEW · Confirmed the live website exposes only the title 'Unified Security Posture Management' and that only database profiles (PitchBook, G2) describe the iRisk insurance use case; changed maturity from established to unclear because no clients, traction or post-2019 activity is evidenced.
Documented evidence
Homepage
Homepage
Research interpretation
Classification paths, as catalogued, connect this example to the original insurance digitalization research models.