/Companies

Kovrr

Founded 2017 · 25 employees on LinkedIn · 10 known investors

Find your way into Kovrr

Sign up to see every warm intro you have to Kovrr

  • Paths you didn't know you had: your email and LinkedIn already hold routes to the Kovrr team. We find them for you
  • 2nd- and 3rd-degree connections: the friend-of-a-friend routes that take hours to manually find through your inbox or LinkedIn
  • Answers now, not in days: momentum is everything in a raise. Skip asking around whether someone knows someone

Days of research, done the moment you sign in, with every route ranked by how warm it is.

Kovrr provides AI-driven cyber risk management and governance solutions that help organizations assess security exposure and business impact through data-driven insights. The platform serves security, risk, and compliance teams at global enterprises seeking continuous risk visibility and intelligence at scale.

Founders & leadership

Kovrr was founded in 2017 by Yakir.

YYakir
SShalom
ShalomChief Product Officer
YGYakir Golan
Yakir GolanCo-founder & CEOBefore starting Kovrr in 2017, he led product marketing and business development at Deep Instinct and worked as an associate at Teuza VC. He previously held product management roles at Dimension4 and Elbit Systems.
SBShalom Bublil
Shalom BublilChief Product Officer & Co-founderHe co-founded the company in 2016, initially serving as CRO before moving into the product leadership role in 2020. His earlier work includes research at Deep Instinct, threat intelligence analysis at Lacoon Mobile Security, and security research in the IDF.

Investors · 10

Also in the syndicate · 1

Banco Sabadell

Funding

SEC filings, press & company announcements

$5.5M disclosed across 1 round · 2019

Source: company announcements and press reports — follow each round's link for the claim.

Company profile

researched Aug 2026

Kovrr is a provider of AI and cyber risk, security, and governance software for global organizations. Its platform helps security, risk, and compliance teams evaluate exposure, quantify potential business impact, and manage risk continuously at scale. The company's newer product line is an AI security and governance platform aimed at what it calls the agentic era: it discovers AI assets across the enterprise, including shadow AI and third-party tools, monitors AI agent behavior and maps agent actions to named users, and enforces adaptive policies through mechanisms such as a browser extension and API connections to network, identity, and cloud controls.

The platform also covers compliance readiness, mapping AI assets to risk scenarios and control frameworks including the EU AI Act, NIST AI RMF, and ISO 42001, and maintaining a risk register. An AI Risk Quantification (AIRQ) engine models financial exposure per AI asset and scenario so remediation can be ranked by potential risk reduction, and board reporting translates AI exposure into exposure, likelihood, and financial impact metrics. Kovrr's earlier and continuing cyber risk quantification (CRQ) line includes top-down scenarios, a cyber risk register with bottom-up scenarios, cybersecurity maturity assessments, portfolio analysis, insurance data insights, and continuous control monitoring.

Founding story

Kovrr was co-founded by Yakir Golan, who serves as CEO after starting his career in Israeli intelligence forces and working in software and hardware design, development, and product management. Co-founder and Chief Product Officer Shalom Bublil served four years in an elite Israeli intelligence unit specializing in cyber, then led threat intelligence and threat modeling at Lacoon Mobile Security and cyber threat intelligence and modeling at Deep Instinct before founding Kovrr.

Business model

Kovrr sells an enterprise software platform covering AI security and governance and cyber risk quantification, engaging customers through demos and direct contact, and also distributes through a tiered partner program (Silver, Gold, Platinum) that gives partners access to its AIRQ and CRQ models, co-marketing, enablement, and, at the top tier, a dedicated account manager.

Traction

The company states its platform is used by global enterprises and cites platform-scale figures including continuous monitoring of more than 10,000 third parties and shadow AI discovery in under five minutes.

Latest developments

Kovrr has extended beyond cyber risk quantification into an AI security and governance platform for agentic AI, including AI asset visibility, adaptive policy enforcement, compliance readiness mapped to the EU AI Act, NIST AI RMF, and ISO 42001, an AI Risk Quantification (AIRQ) engine, third-party AI vendor monitoring, and board reporting.

▸Full profile — market position, technology, go-to-market, geography

Market position

Kovrr positions itself as a provider of AI and cyber risk quantification and governance used by global enterprises, differentiating from GRC tools, EDR, and IAM/network visibility tools by combining AI asset discovery, agent monitoring, policy enforcement, and financially expressed risk modeling in one platform.

The company ties AI governance to insurance-grade financial risk modeling inherited from its cyber risk quantification work, allowing control gaps to be ranked by potential risk reduction and reported to boards in monetary terms, and it combines discovery, continuous third-party AI monitoring, and active enforcement rather than point-in-time questionnaires or manually maintained inventories.

Technology

Kovrr's cyber risk quantification methodology combines continuously updated external data (vulnerabilities and exploits, cyber events, threat intelligence, third-party service outages, and cyber insurance loss intelligence) with organization-specific inputs such as attack surface, technology profile, existing security controls, and IT infrastructure. It computes an inherent (baseline) risk level, generates a bespoke catalog of plausible events for the organization, and runs Monte Carlo simulations of the upcoming year 25,000 times to produce loss forecasts, breaking financial damage into components such as lost income, data recovery, forensics, monitoring services, extortion payments, and regulatory fines, with support for custom loss components. On the AI side, the AIRQ engine applies the same insurance-grade modeling approach to AI-specific scenarios, and asset discovery uses a browser extension plus direct API integrations. Models are calibrated using real-world events, threat intelligence, and firmographic data from millions of companies.

Go-to-market

Direct enterprise sales supported by self-serve two-minute guided product demos, personalized demo requests, content such as practitioner guides, and a tiered global partner program with co-branded marketing and enablement resources.

Security, risk, and compliance teams at global enterprises, including CISOs, AI risk committees, and boards of directors; partner-side customers span insurance, financial services, and healthcare.

Geography

Kovrr states it serves global enterprises and partners across industries and geographies; its leadership team has Israeli backgrounds, including service in Israeli intelligence units.

Compiled by commissioned research from 6 cited public sources — announcements, filings, and press listed under research sources below.

Key figures

latest reported
Monte Carlo simulations per annual loss forecastJan 2026$25K
Third parties continuously monitoredJan 202610,000 vendors
Time to uncover shadow AIJan 2026< 5 minutes

Company-reported or press-reported figures, each dated to when it was claimed — not independently audited.

Founder mafia

2 people who came through Kovrr went on to found or lead other companies.

Related companies · 10

CyberSaint SecurityCyberSaint offers CyberStrong, an AI-native platform that automates cybersecurity control assessments and quantifies cyber risk in financial terms for enterprises. It serves CISOs, executives, and boards by harmonizing compliance frameworks (NIST, CIS, ISO), monitoring controls, and modeling risk using methods like FAIR and NIST 800-30.
MetricStreamMetricStream provides a cloud-based GRC (governance, risk, and compliance) platform with AI-driven capabilities for risk assessment, compliance management, audit, cyber risk, and resilience. The platform serves risk assessors, compliance leaders, auditors, and cyber risk experts across over 1 million professionals in 35+ countries.
UpguardUpGuard provides a platform for managing cybersecurity risk, including third-party vendor and supply chain risk assessment. It is aimed at organizations seeking to evaluate and monitor the security posture of their vendors.
BitSight TechnologiesBitsight provides a cyber risk intelligence platform that monitors entities across the internet to identify vulnerabilities and emerging threats in real time. The platform serves security, risk, and governance teams with threat context, vulnerability prioritization, and compromised credential detection to help organizations remediate exposures before attacks occur.
Sentinel OneSentinelOne provides an AI-powered cybersecurity platform for enterprises that integrates endpoint protection, threat detection, and incident response capabilities. The company serves large enterprises, including many Fortune 500 organizations, to protect against cyber threats at scale.
Safe SecuritySAFE Security provides a cyber risk management platform tailored to retailers, offering continuous visibility into cyber and third-party risk across e-commerce, physical stores, cloud environments, and vendors. Its offering for retail includes autonomous third-party risk management to help protect revenue, customer data, and brand reputation.
Trend MicroTrendAI (Trend Micro) provides enterprise cybersecurity through its TrendAI Vision One platform, which unifies endpoint, network, cloud, and identity security with XDR visibility, threat intelligence, and AI-focused threat protection. It serves enterprise customers across 185 countries, including hybrid cloud, virtualized data center, and modern SOC environments.
SprintoSprinto is a compliance and governance, risk, and compliance (GRC) platform that automates security compliance across 200+ frameworks such as SOC 2, ISO 27001, HIPAA, GDPR, and PCI DSS. It serves companies from Series A to enterprise, covering compliance, vendor risk, AI governance, and audit preparation through integrations with cloud, identity, HR, and SaaS systems.
CyberSierraSingapore-based Cyber Sierra builds agentic AI governance, risk and compliance software for regulated enterprises.
Security ScorecardSecurityScorecard provides third-party risk management (TPRM) software using AI to help organizations identify, monitor, and mitigate cybersecurity risks across their supply chain and vendor networks. The platform serves enterprises managing extended supply chain security risks.

Companies working in the same space as Kovrr.

▸Research sources · 6

primary sources listed

6 public sources were cited for this profile; the first-party ones are listed here.

Frequently asked questions

What does Kovrr do?
Kovrr provides an AI and cyber risk platform that quantifies exposure in financial terms and governs enterprise AI use.
Who founded Kovrr?
Kovrr was founded by Yakir in 2017.
Who are Kovrr's investors?
Kovrr's investors include Founders Factory, Gaingels, Kickstart Innovation, Mana Ventures, Mindset Venture, Mundi Ventures, Ocean Azul Partners, StageOne Ventures and 1 more.
How much funding has Kovrr raised?
Kovrr has disclosed $5.5M raised across 1 round.