BitSight Technologies, Inc. is a cybersecurity ratings company that analyzes companies, government agencies, and educational institutions.[4][5] It is based in Back Bay, Boston.[1][2] Security ratings that are delivered by BitSight are used by banks and insurance companies among other organizations.[6]
The company rates more than 200,000 organizations with respect to their cybersecurity.[7]
History
BitSight was founded in 2011 by Nagarjuna Venna and Stephen Boyer and currently has both United States-based and international employees.[1][2] In 2016, BitSight raised US$40 million in funding in the month of September.[1]
In 2014, BitSight acquired AnubisNetworks, a Portugal-based cybersecurity firm that tracks real-time data threats.[8][9]
Shaun McConnon stepped down as the CEO of BitSight in July 2017 but remains the executive chairman of the board.[13] The CEO position was filled by Tom Turner in 2017,[13] and then by Stephen Harvey in 2020.[3]
In June 2018, BitSight closed $60 million in Series D funding, bringing the company's total funding to $155 million.[14] BitSight's Series D financing was led by Warburg Pincus, with participation from existing investors Menlo Ventures, GGV Capital and Singtel Innov8.[14][15]
In 2018, the company was located in Cambridge but purchased property in order to shift to Back Bay, where BitSight is currently located.[2]Forbes has estimated BitSight's revenue as being $100 million as of 2018.[16]
In 2021, BitSight acquired VisibleRisk, a cyber risk assessment startup company and received a $250 million investment from Moody's Corporation.[17][18]
In 2023, BitSight partnered with Schneider Electric to develop a new way to quantify operational technology risk.[19]
In 2024, Bitsight acquired Cybersixgill, a real-time cyber threat intelligence company. [20]
Services
Organizations purchase BitSight's services in order to understand "security risks associated with sharing sensitive data with business partners."[21][22][23] As of 2018, BitSight serves clients, including Lowe's, AIG, and Safeway.[24][16][25]
BitSight assembles models that produce company ratings, which are based on a scale that enables insurers to rule on the ability of businesses to receive coverage.[26] It produces ratings for 200,000 organizations as of 2020.[7]
With respect to its services, Amy Feldman of Forbes wrote that "Customers pay on a subscription basis with annual fees ranging from a few thousand dollars to analyze a single company to more than $1 million to review thousands of suppliers."[27] Similar to a credit score, BitSight's ratings range from 250 to 900.[28]
^ abcdJon Chesto (17 May 2018). "Investors dump GE shares". The Boston Globe. Retrieved 11 October 2018. Cybersecurity ratings firm BitSight is setting its sights on a move to the Back Bay, to a space that is roughly double the size of its existing headquarters in Cambridge. The venture capital-backed firm has leased 48,000 square feet across two floors in the Prudential Center, at the 111 Huntington Ave. tower owned by Boston Properties. BitSight currently employs about 145 people in Cambridge, but will likely have 170 by January and another 30-plus by the end of next year after it moves to Boston.
^Romo, Vanessa (30 March 2018). "As Atlanta Seeks To Restore Services, Ransomware Attacks Are On The Rise". NPR. Retrieved 10 October 2018. Data compiled by BitSight, a cybersecurity ratings company, is even more staggering. A 2016 report analyzing government, health care, finance, retail, education and utilities concluded that education institutions are most likely to be on the receiving end of a ransomware attack.
^Clarke, Richard (13 June 2017). "Why is it so easy for hackers to infiltrate - our mistakes". Quartz. Retrieved 11 October 2018. BitSight, a Boston firm that ranks companies for their level of cybersecurity, compared five industries: health care, finance, retail, utilities, and federal agencies.
^Lunden, Ingrid (10 July 2018). "BitSight, a provider of security ratings, raises $60M at a valuation of around $600M". TechCrunch. Retrieved 11 October 2018. . Typical customers include large to mid-sized organizations, and while BitSight doesn't provide specific names it says the list includes seven of the top 10 cyber insurers, 20 percent of Fortune 500 companies, and three of the top five investment banks, an impressive list. Others that use these ratings are cyber insurance companies, when devising what kind of rates to charge customers, and also to monitor those customers after they are insured. And they are also used by companies, Turner says, to assess acquisition targets when a company is going through due diligence; or before making investments.
^Zakrzewski, Cat (15 September 2016). "Cybersecurity Ratings Startup BitSight Raises $40M". The Wall Street Journal. Retrieved 10 October 2018. BitSight Technologies Inc. has raised $40 million to provide security ratings. GGV Capital led the Series C round, with participation from existing investors Flybridge Capital Partners, Globespan Capital Partners, Menlo Ventures and the company's chief executive, Shaun McConnon. The venture arms of Comcast Ventures, Liberty Global Ventures and Signtel Innov8 also participated.
^Woodward, Curt (15 September 2016). "BitSight raises $40M to expand IT security ratings software". The Boston Globe. Retrieved 10 October 2018. Investors are pouring another $40 million into BitSight Technologies Inc., a Cambridge startup that analyzes Internet traffic to generate the equivalent of a credit score for a company's risk of cybersecurity attacks.
^Kuchler, Hannah (8 January 2017). "Insurers tap cyber security ratings to limit liabilities". Financial Times. Bitsight recently announced a fundraising of $40m, led by GGV Capital, as it expands to cater for insurers' desire to know more about the security weaknesses of their potential — and existing — customers.
^ abO'Brien, Kelly J. (30 July 2017). "Longtime cybersecurity exec to step down as BitSight CEO". Boston Business Journal. Retrieved 11 October 2018. He's adamant that he's not retiring, but after leading three Massachusetts cybersecurity companies to $1 billion worth of total exit value and a fourth to the verge of an IPO, Shaun McConnon is done being a CEO at his latest company. McConnon will step down as CEO of Cambridge-based cybersecurity ratings company BitSight Technologies Inc. on July 1, but will stay on as the executive chairman of BitSight's board. BitSight's chief operating officer Tom Turner will take over as top executive.
^ abLunden, Ingrid (10 July 2018). "BitSight, a provider of security ratings, raises $60M at a valuation of around $600M". TechCrunch. Retrieved 10 October 2018. BitSight, which provides an ongoing, changing "risk security posture" of some 1,200 organizations, has raised $60 million in a Series D round led by Warburg Pincus, funding that it will use to expand its risk management solutions — specifically in areas like analytics — and overall business development. This brings the total raised by BitSight to $155 million. Tom Turner, BitSight's CEO, said the company was not disclosing its valuation with this round, but he hinted that it was ten times more than the company's valuation at its Series A. That round, according to figures from PitchBook, was at $60 million post-money, meaning that the company is now valued at around $600 million. Others in this round include Menlo Ventures, GGV Capital and Singtel Innov8, all previous investors.
^Jim Finkle, Bill Rigby (15 September 2016). "Cyber-ratings firm BitSight raises $40 million, GGV Capital leads round". Reuters. Retrieved 11 October 2018. BitSight Technologies, a firm that sells cyber security ratings on businesses to insurers, said on Thursday that it has closed $40 million in series C funding, in a round led by GGV Capital. Previous investors that joined the round include Flybridge Capital Partners, Globespan Capital Partners, Menlo Ventures and Shaun McConnon.
^ abFeldman, Amy (14 December 2016). "Meet The 72-Year-Old 'Whiz Kid' Behind Cybersecurity Startup BitSight". Forbes. Retrieved 11 October 2018. FORBES estimates BitSight's revenues will reach $50 million in 2017 and $100 million in 2018, when McConnon hopes to take the company public. He expects it to be profitable by 2019.
^Schoenberg, Carter (16 January 2018). "Cyber insurance in the 2018 regulatory landscape". CSO. Retrieved 11 October 2018. Some firms have tools for existing clients or potential clients to measure how good of a risk they are. Some firms are using BitSight or similar technologies.
^Olcott, Jacob (12 February 2015). "Q&A: BitSight Technologies' new VP of business development talks cybersecurity". Boston Business Journal. Retrieved 11 October 2018. This is Olcott's sixth week at BitSight Technologies, a four-year-old company that rates businesses on their cyber security performance — which has proven to be an essential service for organizations looking for third-party vendors they can trust.
^Yakowicz, Will (19 September 2017). "In an Era of Major Hacks, Cyber Insurance May Be the Industry's Riskiest Bet Yet". Inc. Retrieved 11 October 2018. But that long history of data on past catastrophes does not exist in the cyber insurance policy world, says Stephen Boyer, the CTO and co-founder of risk-rating company BitSight, a company that assesses company risk for cyber policies written by AIG, Travelers, and others.
^Woodward, Curt (15 September 2016). "BitSight raises $40M to expand IT security ratings software". The Boston Globe. Retrieved 11 October 2018. BitSight customers, which include Lowe's, Ferrari, and The Hartford, use the startup's security ratings when they're deciding whether to do business with another company – buying its products, making an acquisition offer, or writing an insurance contract, Turner said.