ReliaQuest Startup Diligence Report
ReliaQuest may have durable enterprise value if GreyMatter demonstrably reduces security operations cost and response time at scale; private diligence must prove ARR quality, retention, security controls, AI accuracy, and margin economics.
ReliaQuest Startup Diligence Report
Proceed with focused confirmatory diligence. Public evidence supports private-unicorn status, enterprise cybersecurity positioning, and meaningful scale signals, while revenue quality, AI efficacy, customer concentration, sensitive-data controls, and competitive pressure remain key risks.
ReliaQuest's headline valuation is public, but audited financials, cash runway, revenue recognition, debt, and preference stack are not public.
Diligence request: Request audited financials, management accounts, KPI bridge, cash/debt schedules, cap table, and financing documents.
Public sources do not disclose customer-level revenue, churn, gross retention, backlog, or renewal cohorts for ReliaQuest.
Diligence request: Request top-customer revenue, contracts, renewal schedules, cohort retention, pipeline conversion, and independent customer references.
GreyMatter performance claims, agentic AI accuracy, telemetry normalization, and response automation must be independently validated because customer security outcomes are mission-critical.
Diligence request: Run product, architecture, roadmap, security, performance, and win/loss diligence with customer references.
ReliaQuest handles enterprise security telemetry and incident-response workflows, creating privacy, breach, contractual liability, and sector-specific compliance exposure.
Diligence request: Have counsel review regulatory licenses, data/privacy controls, compliance incidents, contracts, insurance, and pending matters.
Public leadership information exists, but full org design, attrition, compensation, succession, and key-person dependency are not public.
Diligence request: Request org chart, HRIS headcount history, attrition, offer acceptance, compensation, option plans, and succession plans.
GreyMatter depends on integrations with customer SIEM, endpoint, identity, email, network, cloud and OT tools; integration quality and vendor API changes can affect outcomes.
Diligence request: Request supplier contracts, platform dependency mapping, resilience testing, insurance coverage, and incident history.
ReliaQuest has a public unicorn valuation anchor, but audited financial statements, revenue quality, cap table, debt, cash runway, and unit economics are not publicly disclosed.
partially verified confidence: medium
Public evidence provides partial signal for annual and quarterly financial information for the past three years, but investment-grade verification requires private company records.
| metric | public signal | verification status | diligence request |
|---|---|---|---|
| Revenue | Company leadership bio claims more than $400M revenue in 2025 | partially_verified | Reconcile to audited revenue, ARR, bookings, collections, and revenue recognition |
| Customers | Company bio claims more than 1,000 customers | partially_verified | Request customer list, contract values, retention and concentration |
| Unit economics | Not disclosed | not_publicly_verifiable | Request gross margin by service/module, cloud/SOC labor costs, CAC payback and support burden |
partially verified confidence: medium
Public evidence provides partial signal for financial projections, but investment-grade verification requires private company records.
not publicly verifiable confidence: low
No complete public evidence was found for capital structure; this remains a data-room and counsel follow-up area.
| stakeholder | public position | diligence caveat |
|---|---|---|
| Brian Murphy | Founder and CEO | Founder ownership, vesting, and voting rights not public |
| KKR, FTV Capital, Ten Eleven Ventures | Investors listed by CB Insights | Security terms, preferences and board rights not public |
| Board members | Some board/investor biographies public on company page | Board control, observer rights and approvals require documents |
partially verified confidence: medium
Public evidence provides partial signal for other financial information, but investment-grade verification requires private company records.
| date | round or signal | lead or participants | amount | post money | source |
|---|---|---|---|---|---|
| 2021-12-01 | CB Insights unicorn list row | KKR; FTV Capital; Ten Eleven Ventures | not disclosed in list row | $3.4B latest listed valuation | CB Insights complete unicorn list |
| 2026 public about page | Company scale statement | Not a financing round | not disclosed | company bio says valuation above $3.4B | ReliaQuest About page |
Public materials describe the GreyMatter agentic AI security operations platform for detection, investigation, response, threat intelligence, phishing defense, automation, and security data integration; pricing depth, margins, product reliability, and roadmap economics require private validation.
partially verified confidence: medium
Public evidence provides partial signal for description of each product, but investment-grade verification requires private company records.
| product | audience | public evidence | verification status |
|---|---|---|---|
| GreyMatter Agentic AI SecOps platform | Enterprise security operations teams | Homepage and platform pages | verified |
| Universal Translator / data normalization | Customers with fragmented security tools | Platform page references normalizing telemetry and data source independence | verified |
| SOAR, automation, containment, mobile response | SOC teams needing rapid response | Platform page describes containment and automation | verified |
| Attack surface, dark web/digital risk, phishing defense | Enterprise threat intelligence and exposure teams | Homepage/menu product taxonomy | verified |
| offer | public price or model | evidence | gap |
|---|---|---|---|
| Enterprise platform subscription / managed security operations | Not publicly listed | No public price schedule found on reviewed pages | Request ACV, modules, implementation, renewal and discount data |
| Agentic AI and automation modules | Not publicly listed | Product modules public; packaging/pricing private | Request price book, gross margin by module and SLA credits |
| Professional services / incident response / onboarding | Not publicly listed | Operations-heavy product surface suggests service components | Request services attach rate, utilization and margin |
Public customer or use-case signals exist, but top-customer revenue, churn, renewal, backlog, and customer concentration are not public.
partially verified confidence: medium
Public evidence provides partial signal for top customers by application, but investment-grade verification requires private company records.
| customer or segment | use case | public evidence | verification status |
|---|---|---|---|
| Fortune 500 enterprises | AI-driven SOC / security operations | Homepage section says AI trusted by the Fortune 500 | partially_verified |
| Donnelly Financial Solutions | Threat containment improvement case study | Homepage links DFIN case-study title | partially_verified |
| More than 1,000 customers | Customer count scale | Company leadership bio claim | partially_verified |
| Top revenue customers | Revenue concentration | Not publicly disclosed | not_publicly_verifiable |
partially verified confidence: medium
Public evidence provides partial signal for strategic relationships, but investment-grade verification requires private company records.
| partner | nature | public evidence | gap |
|---|---|---|---|
| KKR, FTV Capital, Ten Eleven Ventures | Investors / board network | CB Insights and company leadership page | Investor rights and board controls private |
| Security technology integrations | SIEM, endpoint, identity, email, cloud and OT tool ecosystem | Platform page references existing security operations tech stack | Integration contracts and API dependencies private |
| Customer security teams | Co-managed operations and incident workflows | Company product positioning | SLA obligations and liability private |
not publicly verifiable confidence: low
No complete public evidence was found for revenue by customer; this remains a data-room and counsel follow-up area.
not publicly verifiable confidence: low
No complete public evidence was found for significant relationships severed within the last two years; this remains a data-room and counsel follow-up area.
partially verified confidence: medium
Public evidence provides partial signal for top suppliers, but investment-grade verification requires private company records.
| supplier or dependency | role | public evidence | concentration risk |
|---|---|---|---|
| Customer security tools and data sources | Telemetry and response integrations | Platform page stresses integration with existing tech stack | Vendor API changes and data quality can affect outcomes |
| AI model and cloud infrastructure | Agentic AI processing and platform hosting | AI platform marketed; underlying vendors not disclosed | Request model governance, cloud vendor and failover details |
| Global SOC/operations talent | Human-in-the-loop expertise and customer support | Operations centers listed on company page | Hiring and retention risk across regions |
ReliaQuest competes in a market where technical differentiation and distribution claims need buyer references and win/loss data.
partially verified confidence: medium
Public evidence provides partial signal for competitive landscape by market segment, but investment-grade verification requires private company records.
| competitor | segment | product overlap | target differentiator | source basis |
|---|---|---|---|---|
| CrowdStrike | XDR/MDR/security operations | Detection/response and managed security outcomes | ReliaQuest emphasizes tool-agnostic GreyMatter and agentic teammates | Analyst market mapping |
| Palo Alto Cortex XSIAM/XSOAR | AI-driven SecOps and automation | SOC automation, response and data correlation | ReliaQuest markets integration with existing customer tools | Analyst market mapping |
| Splunk / Microsoft Sentinel / Arctic Wolf | SIEM/SOC/MDR | Security analytics and managed operations | GreyMatter agentic AI and security operations platform | Analyst market mapping |
| axis | target position | competitor pressure | evidence |
|---|---|---|---|
| AI efficacy | Claims 6 agentic personas, 200+ skills, 400 AI tools | High; vendors converge on AI SOC automation | Homepage claims need independent test data |
| Integration breadth | Tool-agnostic security operations stack positioning | High; SIEM/XDR incumbents own major data planes | Platform page |
| Enterprise credibility | Company claims Fortune 500 trust and 1,000+ customers | High; large cyber vendors have broad enterprise channels | Company pages |
Public go-to-market evidence shows positioning and channels, while CAC, pipeline, sales productivity, quota attainment, and channel mix remain private.
partially verified confidence: medium
Public evidence provides partial signal for strategy and implementation, but investment-grade verification requires private company records.
| channel | region or buyer | public evidence | gap |
|---|---|---|---|
| Enterprise direct sales | Global enterprise SOC/CISO buyers | Request-demo motion and enterprise positioning | ACV, sales cycle, quotas and win rates private |
| Customer stories/resource marketing | Security practitioners and executives | Resource center and homepage case-study links | Pipeline attribution private |
| Investor/board enterprise network | Large enterprises | KKR/FTV/Ten Eleven board/investor network public | Partner-sourced revenue private |
partially verified confidence: medium
Public evidence provides partial signal for major customers, but investment-grade verification requires private company records.
partially verified confidence: medium
Public evidence provides partial signal for principal avenues for generating new business, but investment-grade verification requires private company records.
| signal | public evidence | diligence implication | gap |
|---|---|---|---|
| Agentic AI positioning | Homepage headline and platform pages | Differentiation claim in crowded SecOps market | Performance evidence and buyer conversion private |
| Gartner Magic Quadrant promotional link | Navigation references ReliaQuest named a Visionary in cyberthreat intelligence technologies | Analyst-relations GTM signal | Underlying report details not reviewed |
| Customer outcome story | DFIN containment case-study title on homepage | Outcome-led selling | Independent reference and contract economics private |
not publicly verifiable confidence: low
No complete public evidence was found for sales force productivity model; this remains a data-room and counsel follow-up area.
not publicly verifiable confidence: low
No complete public evidence was found for ability to implement marketing plan with current and projected budgets; this remains a data-room and counsel follow-up area.
Public product and technical materials show active R&D, but roadmap cost, staffing, IP ownership, and technical debt need private diligence.
partially verified confidence: medium
Public evidence provides partial signal for description of r&d organization, but investment-grade verification requires private company records.
| name or role | function | public background | source |
|---|---|---|---|
| Brian Foster | Product development and technical operations | Company page says he oversees product development and technical operations | ReliaQuest About page |
| Joe Partlow | CTO / R&D | Company page says he works on data ingestion/analytics at scale, DFIR automation and generative AI | ReliaQuest About page |
| Jason Pfeiffer | Strategy / product and security operations background | Company page lists incident response, security operations and product management leadership | ReliaQuest About page |
partially verified confidence: medium
Public evidence provides partial signal for new product pipeline, but investment-grade verification requires private company records.
| project | status | public evidence | verification status |
|---|---|---|---|
| GreyMatter Agentic Teammates | Publicly marketed | Homepage states 6 agentic personas, 200+ skills, 400 AI tools | partially_verified |
| Universal Translator and data normalization | Publicly marketed | Platform page describes normalization and telemetry unification | partially_verified |
| Containment automation and mobile response | Publicly marketed | Platform page describes containment and mobile app response | partially_verified |
| Roadmap cost and AI model validation | Private | Not publicly verifiable | not_publicly_verifiable |
Leadership and selected headcount signals are public; full org chart, compensation, attrition, equity incentives, and key-person dependencies are private.
partially verified confidence: medium
Public evidence provides partial signal for organization chart, but investment-grade verification requires private company records.
partially verified confidence: medium
Public evidence provides partial signal for historical and projected headcount by function and location, but investment-grade verification requires private company records.
| period | public headcount or signal | function or region | source |
|---|---|---|---|
| 2026 public page | More than 1,200 team members | Tampa HQ; Tampa, Las Vegas, Salt Lake City, Dublin, London, Pune operations centers | ReliaQuest About page |
| 2025 company claim | More than 1,000 customers and more than $400M revenue in 2025 | Global customer base | ReliaQuest About page |
| Projection | Not publicly disclosed | SOC operations, engineering, sales and support | Data-room request |
partially verified confidence: medium
Public evidence provides partial signal for senior management biographies, but investment-grade verification requires private company records.
| name | role | public tenure or background | diligence gap |
|---|---|---|---|
| Brian Murphy | Founder and CEO | Founder/CEO; company claims bootstrapped startup to $3.4B+ valuation | Founder ownership, employment terms and succession |
| Colin OConnor | President of Field Operations | Company page says he runs GTM and joined as sales intern in 2008 | Sales leadership capacity and incentive plan |
| Scott Dussault | Chief Financial Officer | Company page lists prior CFO/COO roles at Workhuman, Nasuni and Demandware | Finance controls, audit readiness and debt oversight |
| Joe Partlow | Chief Technology Officer | Company page lists 30+ years information security experience | R&D roadmap, AI governance and key-person dependency |
not publicly verifiable confidence: low
No complete public evidence was found for compensation arrangements; this remains a data-room and counsel follow-up area.
not publicly verifiable confidence: low
No complete public evidence was found for incentive stock plans; this remains a data-room and counsel follow-up area.
not publicly verifiable confidence: low
No complete public evidence was found for significant employee relations problems, past or present; this remains a data-room and counsel follow-up area.
| name or group | role | departure signal | diligence request |
|---|---|---|---|
| Executive departures | Management | No comprehensive turnover register reviewed | Request departures, regretted attrition, litigation and retention plan |
| Security operations staff | SOC / technical operations | Not publicly disclosed | Request attrition by role/site and capacity model |
not publicly verifiable confidence: low
No complete public evidence was found for personnel turnover; this remains a data-room and counsel follow-up area.
Public legal and regulatory sources reviewed do not provide enough evidence to clear litigation, IP, privacy, export-control, insurance, or material-contract diligence.
not publicly verifiable confidence: low
No complete public evidence was found for pending lawsuits against the company; this remains a data-room and counsel follow-up area.
| case | court or forum | status | source or request |
|---|---|---|---|
| No specific material pending case identified in reviewed public sources | Not comprehensive | not_publicly_verifiable | Counsel docket search required |
not publicly verifiable confidence: low
No complete public evidence was found for pending lawsuits initiated by company; this remains a data-room and counsel follow-up area.
| defendant or matter | court or forum | status | source or request |
|---|---|---|---|
| No company-initiated litigation schedule publicly available | Not comprehensive | not_publicly_verifiable | Request litigation schedule from counsel |
not publicly verifiable confidence: low
No complete public evidence was found for environmental and employee safety issues and liabilities; this remains a data-room and counsel follow-up area.
not publicly verifiable confidence: low
No complete public evidence was found for material patents, copyrights, licenses, and trademarks; this remains a data-room and counsel follow-up area.
| asset or right | jurisdiction or scope | public status | diligence request |
|---|---|---|---|
| GreyMatter platform, Universal Translator, AI teammates and security content | Software/IP | Product names and modules public; patents/assignments not fully reviewed | Request IP assignments, patent/trademark search, OSS register and AI/data rights |
| Customer telemetry, detections and threat intelligence data | Data/security/privacy | Operationally material; controls not publicly verified | Request SOC 2/ISO, DPAs, incident logs, data-retention and model-training policies |
not publicly verifiable confidence: low
No complete public evidence was found for insurance coverage and material exposures; this remains a data-room and counsel follow-up area.
not publicly verifiable confidence: low
No complete public evidence was found for material contracts; this remains a data-room and counsel follow-up area.
not publicly verifiable confidence: low
No complete public evidence was found for regulatory agency problems; this remains a data-room and counsel follow-up area.
| agency or regime | relevance | public status | request |
|---|---|---|---|
| Privacy, cybersecurity and breach notification laws | Enterprise telemetry and incident data | No clearance opinion public | Request privacy/security compliance memo and incident history |
| Sector-specific customer regulations | Customers may operate in finance, healthcare, critical infrastructure and government-adjacent sectors | Customer-specific controls not public | Request customer contract compliance matrix and insurance coverage |
| ID | Claim | Status | Sources |
|---|---|---|---|
| EC-001 | CB Insights lists ReliaQuest as a private unicorn at $3.4B. | verified high | SRC-001 |
| EC-002 | ReliaQuest publicly positions GreyMatter as an agentic AI security operations platform. | verified medium | SRC-003 |
| EC-003 | ReliaQuest publicly states scale above $3.4B valuation, 1,200 team members, 1,000 customers, and $400M revenue in 2025. | partially verified medium | SRC-004 |
| EC-004 | ReliaQuest publicly discloses GreyMatter modules and AI automation claims. | verified medium | SRC-003 |
| EC-005 | ReliaQuest publishes customer-oriented proof points but not customer revenue concentration. | partially verified medium | SRC-003 |
| EC-006 | ReliaQuest publishes leadership, headcount, customer count, headquarters, and operations-center information. | verified medium | SRC-004 |
| EC-007 | ReliaQuest competes in security operations against MDR, SIEM, SOAR, XDR, and AI security platforms. | partially verified medium | SRC-003SRC-005 |
| EC-008 | Audited financials, customer concentration, cap table, sales productivity, attrition, and security reports are not publicly verifiable. | not publicly verifiable low | SRC-001SRC-003 |
| EC-009 | Legal, privacy, cyber liability, insurance, IP, and regulatory matters require counsel/security review. | not publicly verifiable low | SRC-008 |
| EC-010 | ReliaQuest appears active and privately held based on current company pages and unicorn-list inclusion. | partially verified medium | SRC-001SRC-003 |
| ID | Publisher | Title | Accessed |
|---|---|---|---|
| SRC-001 | CB Insights | The Complete List Of Unicorn Companies | 2026-06-08 |
| SRC-002 | Wikipedia | List of unicorn startup companies | 2026-06-08 |
| SRC-003 | ReliaQuest | Home | ReliaQuest GreyMatter | 2026-06-08 |
| SRC-004 | ReliaQuest | ReliaQuest About Us | 2026-06-08 |
| SRC-005 | ReliaQuest | ReliaQuest GreyMatter Agentic AI Security Operations Platform | 2026-06-08 |
| SRC-006 | ReliaQuest | ReliaQuest Resource Center / customer stories | 2026-06-08 |
| SRC-007 | ReliaQuest | ReliaQuest Leadership page | 2026-06-08 |
| SRC-008 | ReliaQuest / public web | Public legal/regulatory source review placeholder | 2026-06-08 |
This report is a public-evidence diligence snapshot, not investment advice. Important financial, legal, technical, and contractual facts remain non-public and should be verified directly with management and primary documents before any investment decision.