MasterCard acquires RiskRecon, a startup that had raised $40M to make cybersecurity risk assessments of third party vendors from publicly available data
Ron Miller / TechCrunch :
Context & Ripple Effects
RiskRecon's sale to Mastercard caps a short arc: the startup had raised a $25M Series B led by Accel just over a year earlier to scale its SaaS platform, which scores third-party vendors' cybersecurity posture using publicly available data rather than questionnaires.
For Mastercard, this is the opening move in a security-acquisition sequence that later included CipherTrace's crypto AML analytics and culminated in the $2.65B purchase of threat-intelligence firm Recorded Future — a deliberate build-out of data-driven risk capabilities around its payments network.
First-order effects
- Mastercard gains an external-facing vendor-risk scoring product it can attach to its bank and merchant relationships, while Accel and RiskRecon's other backers exit after roughly $40M of total funding.
Second-order effects
- Standalone third-party risk-assessment vendors now compete against a buyer that can bundle their category of service into payments contracts, pressuring pricing across the vendor-risk market.
Third-order effects
- If the CipherTrace and Recorded Future follow-ons are any guide, the pattern points toward payment networks consolidating security intelligence in-house, turning network operators into suppliers of cyber-risk data rather than just transaction processors.
The trend: Payment networks are acquiring security-analytics companies to convert their transaction data position into a broader cyber-risk intelligence business.