supply chain cyber risk start-up · Cybersecurity

Risk Ledger

A London start-up whose platform helps companies manage cyber risk across their suppliers.

About Risk Ledger

Risk Ledger helps organisations stay safe from cyber attacks that come through the companies they work with. Most firms depend on dozens or hundreds of suppliers, and a weak spot at one supplier can let attackers in. Risk Ledger built a platform where a company and its suppliers connect and share information about their security, so risks are visible in one place instead of buried in long questionnaires and spreadsheets.

The company was founded in 2018 by Haydn Brooks, who is chief executive, and Daniel Saul. Brooks has said he started it to fix the poor results and wasted effort in third-party risk management, which means checking how safe a firm's suppliers are. It is headquartered in London. Risk Ledger describes itself as a small but impactful team, and its own site says it is growing its London-based team.

Its stated mission is to change how organisations handle cyber security and risk in their supply chains by "building a global network of connected organisations", so they can defend as one: detecting, responding to and ultimately preventing attacks in real time. It also cites that over 60% of data breaches happen through the supply chain. It says its success is driven by transparency and collaboration, and has described moving supplier checks from a reactive admin chore to active cyber defence.

The platform is a dynamic network model, with an adaptive risk insight framework and an assessment framework. Customers use it to assess supplier security, streamline regulatory reporting, standardise onboarding of new suppliers, understand risk in the suppliers of suppliers (called nth-party risk) and manage supply chain breaches. It serves five communities: public sector, critical national infrastructure, financial services, insurance and technology. It offers free tools including a Supply Chain Risk Exposure Assessment and a Supplier Criticality Matrix, and has won TechUK and Cyber UK awards, as it lists itself.

On working there, the company's own claims stress openness and collaboration, autonomy, flexibility and regular socials. Listed benefits include EMI stock options, private health insurance, a 34-inch monitor and learning resources. It says it does not mind how much experience applicants have and looks for technology and business "doers and leaders". Its hiring process is a 20-minute call, a face-to-face interview with the CEO and a meeting with the whole team. Roles named include product, design, business development, marketing, sales, engineering and security operations. We found no formal graduate scheme.

What they do

Key facts

Website: riskledger.com

Start your career at Risk Ledger

PURPOSE helps school and university students explore 62 sectors and over 1,000 entry-level careers in the UK, then connects them directly with employers.

Explore PURPOSE