Kovrr is a risk software company that helps security leaders find, govern and put a financial value on the risk created by AI and by cyber threats. It is built for CISOs, risk owners and boards who need to explain exposure in money rather than technical scores.
It also serves organisations that want to know which AI tools, models and agents are touching their data.
At A Glance
| Vendor | Kovrr |
|---|---|
| Category | Cyber risk quantification and AI governance |
| Identities covered | AI systems, AI agents and the users behind browser sessions |
| Customers | Next, Waystone, Qiagen, Symplr, Playtech |
| Founded | 2017, Tel Aviv |
| Market classification | Governance, Risk & Compliance; also AI Governance & Compliance |
What Kovrr Does
Boards and executives are being asked to approve AI adoption and security budgets without a clear view of what could go wrong or what it would cost. Kovrr addresses that from two directions. On the AI side it covers the whole cycle of discovering, assessing, quantifying and governing AI risk, so that exposure from AI can be translated into figures that support executive decisions. On the cyber side it gives security leaders monetary measures of risk and maps modelled losses to the terms of their insurance cover. Both rest on the same idea: risk that can be expressed in money can be compared, prioritised and reported to a board.
Products
AI Security And Governance
This suite is for organisations that have lost track of where AI is being used. AI Asset Visibility finds every AI system operating in the business, sanctioned tools and shadow AI alike. AI Risk Quantification (AIRQ) puts a financial value on AI exposure such as model integrity, data exfiltration and availability risks, and AI Compliance Readiness tracks progress against the EU AI Act, NYC Local Law 144, the NIST AI RMF and ISO/IEC 42001. AI Third-Party Risk Management extends the review to AI used by suppliers.
Kovrr Browser Protect
The AI Security Browser Extension deploys onto the browsers people already use and identifies the account behind each session. That ties AI activity in the browser back to a named user.
Cyber Risk Quantification
The CRQ platform is for security leaders who must justify spending and prioritise controls in financial language. It includes Top-Down Scenarios, a Cyber Risk Register, Portfolio Analysis, a Decision Simulator, Insurance Data Insights, Scenario Intelligence, Continuous Control Monitoring and a Reports Hub. Models account for control maturity against NIST CSF 2.0, CIS Controls and ISO 27001, and Continuous Control Monitoring links changes in control effectiveness to the quantified impact on risk.
Risk Advisory Services
For teams without in-house quantification expertise, Kovrr’s advisors offer AI advisory work, a Managed CRQ Program in which they run the quantification programme, event response and support with EU AI Act compliance.
How It Works
Quantification runs thousands of simulations to find the possible outcomes and produce a full risk distribution, with more than 57,000 simulations per analysis. The loss models draw on proprietary cyber insurance claims data, the organisation’s technological footprint and global threat intelligence.
| Component | What it does |
|---|---|
| Signal ingestion | Continuous monitoring takes in live security signals from cloud and security infrastructure, so results stay current. |
| Connected tooling | A CRQ API connects the engine to existing security and GRC tools, and the risk register can link to external workflow applications. |
Identities And Systems Covered
| AI systems | Sanctioned AI tools and shadow AI that touch corporate data, discovered continuously |
|---|---|
| AI agents | Detection of rogue and malicious agents, with every action tied back to a named user |
| User accounts | The account behind each browser session |
| Third parties | AI used by suppliers |
Company Background
| Founded | 2017 |
|---|---|
| Headquarters | Tel Aviv, Israel |
| Founders | Yakir Golan, Shalom Bublil and Avi Bashan |
| Leadership | Yakir Golan, Chief Executive Officer; Shalom Bublil, Chief Product Officer; Shai Yanovski, Chief Technology Officer |
| Scale | More than $527B in reported total exposure under management |
Note: This overview is compiled from Kovrr’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.