LocateRisk

Key features

• Passive outside-in scoring from a domain alone
• Attack surface discovery incl. shadow IT of previously acquired units
• KPI-based security rating with peer benchmark
• Longlist screening before the LOI
• Third-party and supply chain dependency mapping
• CVE-based vulnerability detection with remediation priorities
• Scan-to-scan diff for integration and portfolio monitoring

Integrations

• REST API for exporting reports and findings
• PDF/CSV export for data rooms
• MCP interface for external LLMs
• connectors to SIEM platforms such as Sekoia.io
• SSO via Entra ID / SAML

More information

LocateRisk, based in Darmstadt, provides automated, non-invasive external attack surface analysis and security ratings. Any target can be scored passively from its domain alone, without agents, credentials or the target's involvement, so cyber risk becomes measurable before first contact and before data room access. Deal teams use it to pre-screen targets in sourcing, to quantify and price cyber exposure in due diligence, to map third-party dependencies, and to monitor portfolio companies after closing.