CyberGRX vs Duckie

About

CyberGRX is a Denver-based third-party cyber risk management company that operates a risk exchange where vendors complete one comprehensive security assessment that is shared with all requesting enterprises, eliminating the redundant process where each enterprise customer sends separate questionnaires to the same vendor. Enterprises using CyberGRX access their vendors' pre-completed risk profiles from the exchange, supplemented by the company's predictive analytics that model risk for vendors who have not completed assessments. This network effect creates value for both sides: vendors escape the burden of answering hundreds of similar questionnaires per year, while enterprise risk teams get more comprehensive, standardized vendor profiles faster. CyberGRX's predictive risk model uses external signals including threat intelligence and financial data to assess vendors who have not yet joined the exchange. Founded in 2015, CyberGRX raised over $97M from investors including Bessemer Venture Partners, AXA Venture Partners, and MassMutual Ventures. It was acquired by ProcessUnity in 2022, combining CyberGRX's exchange network with ProcessUnity's GRC workflows.