French startup Riot has raised a $30 million Sequence B spherical after reaching $10 million in annual income in 2024. Initially centered on educating workers about cybersecurity dangers, the corporate now desires to go one step additional and nudge workers in order that they reduce their assault floor.
Left Lane Capital is main right this moment’s spherical with current buyers Y Combinator, Base10 and FundersClub collaborating as soon as once more. From what TechCrunch has realized, Riot’s has reached a post-money valuation north of $170 million following the Sequence B spherical.
Riot initially began with faux phishing campaigns. Staff usually obtain emails that appear like actual emails. However they’re designed to trick workers into clicking on the hyperlinks and coming into private data.
This manner, workers be taught that they need to be extra suspicious about incoming emails. Over time, the corporate added different academic content material with a pleasant safety chatbot referred to as Albert. It may be accessed on Slack and Microsoft Groups.
That technique has been working effectively to date, as Riot at the moment interacts with a million workers throughout 1,500 firms. Shoppers embody L’Occitane, Deel, Intercom and Le Monde. (A few years in the past, Riot solely labored with 100,000 employees.)
And but, cyber incidents are nonetheless on the rise with widespread penalties. A latest instance is the Change Healthcare information breach that is affecting 190 million Americans and began with compromised credentials on a client service. An worker reused the identical password for his or her private account and Change Healthcare’s Citrix portal — there was no multifactor authentication on Citrix, both.
That’s why Riot desires to develop past educating workers. “Our job is to take a look at workers’ posture. Do they activate multifactor authentication? Have they got a safe code on their smartphone? Are their privateness settings on LinkedIn not too permissive? There are many issues that workers can put in place that may usually make life tougher for hackers,” Riot founder and CEO Benjamin Netter instructed TechCrunch.
Riot calls its subsequent product an Worker Safety Posture Administration platform. It’s going to develop into a central cockpit to handle safety on the worker’s degree. Whereas there are lots of Posture Administration options, Riot believes workers have been uncared for for too lengthy.
Right here’s the place it would slot in the cybersecurity panorama based mostly on the corporate’s pitch deck:

“What we’re creating with the platform is that we’re going to routinely analyze the staff’ safety … and we’re going to offer a rating, which we’ve referred to as a karma rating, which might be an indicator of the worker’s posture,” Netter stated.
After that, Riot will nudge the worker to alter a setting right here, activate multifactor authentication there. “It’s the little issues you are able to do that may take you a minute or two, and that may mainly make life tough for hackers,” Netter added.
That is going to be an attention-grabbing problem for Riot, as worker safety additionally will depend on their cyber hygiene on private gadgets and providers. Phishing campaigns now additionally occur on WhatsApp. LinkedIn profiles are broadly used for social engineering assaults as effectively.
That’s why this new safety product will look a bit extra like a client product, with good animations and a few gamification options to incentivize you to enhance your safety posture.
“My long-term imaginative and prescient is to construct an worker safety firm and to supply all of the instruments within the worker safety stack. So it’s attainable that at some point we are going to make — I’ll provide you with a foolish instance — an antivirus or a password supervisor,” Netter stated.
However first, with right this moment’s funding spherical, the corporate additionally has additional cash to develop extra quickly. The group plans to open new workplaces in different nations and develop its consumer base to develop these extra refined merchandise.