Safe Security, which trades as SAFE, is a cyber risk management company. It helps CISOs, cyber risk officers and third-party risk teams understand, measure and reduce cyber risk across their own estate and their suppliers, using AI agents to do much of the assessment and follow-up work.
Its SAFE One Platform puts supplier risk, exposure management, AI risk and the financial view of cyber risk in one place, so that the same picture serves the analyst fixing an issue and the board deciding where to invest.
At A Glance
| Vendor | Safe Security (SAFE) |
|---|---|
| Category | Governance, risk and compliance; AI governance |
| Agentic AI | SafeX, CTEM and TPRM AI Co-Workers, MCP servers |
| Customers | T-Mobile, Verizon, Delta, Instacart, Honeywell |
| Market classification | Governance, Risk & Compliance; also AI Governance & Compliance |
What Safe Security Does
Third-party and exposure risk is often managed with security ratings, point-in-time questionnaires and manual follow-ups. These methods are slow, go stale quickly and leave the follow-up work to people. SAFE takes an autonomous approach instead: AI agents gather the evidence, investigate and prioritise findings, chase up suppliers and carry out remediation steps, while every result is expressed in financial terms using the FAIR model. SAFE aligns its methods with open standards from MITRE, the FAIR Institute and NIST, so the risk figures it produces can be compared and defended.
Products
TPRM AI Co-Worker
Third-party risk teams that assess hundreds of suppliers use the TPRM Co-Worker to run the full vendor lifecycle across five phases: intake, due diligence, remediation, continuous monitoring and offboarding. Due diligence merges outside-in intelligence, questionnaires, contracts and SaaS posture into a single score, and monitoring picks up new vulnerabilities, misconfigurations, breaches and other external exposures as they appear.
CTEM AI Co-Worker
For security teams struggling to decide which exposures matter, the CTEM Co-Worker works through the five CTEM phases. It gives unified visibility of exposures, prioritises and validates them, then drives risk reduction and reporting.
AI-SPM
AI-SPM helps organisations get a grip on the AI systems they run and buy. It covers AI bill of materials (AI BOM) analysis, configuration assessment, live activity monitoring, outside-in monitoring and questionnaire assessment.
Cyber Risk Quantification
CRQ is for leaders who need to explain cyber risk to a board. It identifies top risks, benchmarks against peers, supports budget justification and investment prioritisation, and produces executive board reporting, including regulatory and AI risk.
How It Works
SafeX connects to the systems that describe an organisation’s cyber and business reality and maps the relationships between them in its knowledge graph. SafeX is the AI layer under every module. It runs on more than 24 small and large language models and a set of MCP servers. Work is handed to the relevant AI Co-Worker, and in CTEM and TPRM each Co-Worker draws on a swarm of more than 100 specialised agents working in parallel, with each agent handling one narrow task and passing its output to the next.
Agentic AI Capabilities
The TPRM Co-Worker is made up of named agents, each with one job:
| Document Analyzer Agent | Summarises vendor policies, reports, tests and attestations |
|---|---|
| Inline Review Agent | Checks vendor answers against the customer’s standards |
| Vendor Interaction Agent | Follows up with vendors and logs each action |
| Threat Intel Agent | Watches for breaches, leaked credentials, legal events and filings |
| Contract Analysis Agent | Tracks contract expiry and SLAs |
| Fourth-Party Discovery Agent | Monitors downstream dependencies and concentration risk |
| Access Closure Agent | Coordinates access revocation during offboarding |
| Evidence Capture Agent | Compiles the exit record |
Company Background
| Founded | 2012, incubated at IIT Bombay, where it began as an ethical hacking services company |
|---|---|
| Leadership | Saket Modi (Co-founder and CEO), Vidit Baxi (Co-founder and CISO), Rahul Tyagi (Co-founder), Saket Bajoria (Chief Product Officer), Daryle Burt (Chief Revenue Officer) |
| Funding | More than $170 million raised, including a $33 million Series A in 2021 led by British Telecom and John Chambers, a $50 million Series B in 2023 led by Sorenson Capital and a $70 million Series C in 2025 |
| Reach | A reported 10% of the Fortune 500 among its customers |
| Recognition | Included in the Forrester Wave for Cyber Risk Quantification Solutions (Q2 2025), the IDC MarketScape for Worldwide TPRM Software (2026) and the Gartner Magic Quadrant for Exposure Assessment Platforms |
Note: This overview is compiled from Safe Security’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.