Categories / Cyber Risk Quantification (CRQ)
3 · Charted CourseCyber Risk Quantification (CRQ)
Software that converts cybersecurity exposure into a dollar-denominated financial metric (value-at-risk, annualized loss expectancy, expected financial impact), usually via the FAIR model or similar, so CISOs can justify spend and report risk to the board in financial terms.
Last updated October 12, 2026
By the numbers
- 2011First company in the category
- 2023First acquisition
Stage history
- Charted Courserecorded October 12, 2026
Companies we track
FAQ
What is Cyber Risk Quantification (CRQ)?
Software that converts cybersecurity exposure into a dollar-denominated financial metric (value-at-risk, annualized loss expectancy, expected financial impact), usually via the FAIR model or similar, so CISOs can justify spend and report risk to the board in financial terms.
How mature is the Cyber Risk Quantification (CRQ) category?
We place it in stage 3, Charted Course. The waters are mapped. Multiple competitors, analyst coverage, and a known budget line. Differentiation matters more than education.
How big is the Cyber Risk Quantification (CRQ) market?
Estimates put it at $0.43B-$1.85B (2025). Market sizes vary widely by how analysts draw the category's edges.
When did the Cyber Risk Quantification (CRQ) category start?
The first company we count in the category dates to 2011. The first acquisition was in 2023.
Which Cyber Risk Quantification (CRQ) companies does First to Market track?
.
Building in Cyber Risk Quantification (CRQ)?
Ten questions, about 90 seconds. Benchmark your category against our library of 171 companies across 24 categories, or find the categories that have already been where you are.