Israel-based VisibleRisk, which helps enterprises assess how vulnerable they are to hacking campaigns, raises $25M Series A from Moody's Corp. and Team8 Labs
Maria Deutscher / SiliconANGLE :
Context & Ripple Effects
VisibleRisk's $25M Series A is unusual less for its size than for who wrote the check: [[a:|Moody's Corp., a credit ratings agency]] buying into a startup that scores how exposed enterprises are to hacking campaigns. The strategic logic becomes clear four months later, when Moody's leads BitSight's $250M round at a $2.4B valuation and BitSight turns around and acquires VisibleRisk outright — the Series A was effectively diligence-by-investment ahead of a consolidation play.
First-order effects
- Moody's gains both an equity stake and direct visibility into VisibleRisk's enterprise vulnerability-assessment data, while Team8 Labs adds another portfolio company in its Israeli cybersecurity stable.
Second-order effects
- The investment positions Moody's to consolidate breach-likelihood scoring through BitSight rather than build it internally, folding VisibleRisk into a platform that competes with standalone security-rating vendors.
Third-order effects
- If ratings agencies keep acquiring cyber-risk scorers, external security posture stops being an IT metric and becomes a priced input in credit assessment — with whoever owns the scoring data controlling the standard.
The trend: Financial-data incumbents like Moody's are entering cyber-risk quantification through venture stakes that convert into acquisitions, pulling breach likelihood into the credit-rating apparatus.