SAFE has agreed to acquire Balbix in a move aimed at building what the firms describe as the industry’s ultimate AI-native cyber risk and exposure platform.
The acquisition brings together two established names in cyber risk. SAFE said the deal will enable the firms to close a longstanding gap between exposure management and risk quantification. No financial terms for the transaction were disclosed.
SAFE provides autonomous cyber risk quantification technology designed to help organisations measure, prioritise, and reduce cyber threats based on real business impact. Balbix specialises in AI-native exposure assessment and automated discovery of vulnerabilities, misconfigurations, and exploitability. The combined platform is expected to offer a unified real-time view of operational exposure mapped directly to quantified business risk.
The companies said their integration will allow organisations to link vulnerabilities, controls, and exposures to actual commercial impact using a single, real-time risk intelligence engine. According to the announcement, this closes one of the most persistent disconnects in cybersecurity — the separation between security operations and risk functions, which historically relied on fragmented data and incompatible workflows. SAFE said this alignment will help enterprises better target remediation, improve resource allocation and track ROI on cybersecurity investments.
Further details underscored how the combined capabilities will support chief information security officers as they shift towards broader enterprise risk leadership roles. The SAFE X mobile app will offer CISOs full visibility over their risk landscape, enabling continuous monitoring as risk is mitigated.
Balbix was recently named a Visionary in the 2025 Gartner Magic Quadrant for exposure assessment platforms. SAFE, recognised by Forrester Research as the category leader in cyber risk quantification, has built specialised AI agents to support continuous cyber, AI, and third-party risk decision-making. Together, the two firms aim to accelerate progress toward Cyber AGI, a future where cyber risk can be managed autonomously.
“Balbix has always helped customers understand what’s exploitable,” Balbix founder and CEO Gaurav Banga said, “With SAFE, we take that capability to an entirely new level. Together, we can tie every exposure to business impact and drive immediate, decisive action. This isn’t incremental – we’re delivering the unified cyber risk platform the industry has been waiting for.”
“This is a gamechanger for the cybersecurity industry,” SAFE co-founder and CEO Saket Modi said, “Our goal from day one has been clear: build CyberAGI – the definitive system of intelligence and action for the modern CISO. We started with risk; Balbix started with exposure. Two companies chasing the same summit from opposite sides. This acquisition brings those missions together and propels us into the future of security operations and cyber risk management, in one unified Agentic-AI platform.”
“I’ve backed both Balbix and SAFE for years, and I’ve seen firsthand how exceptional Gaurav and Saket are,” JC2 Ventures CEO John Chambers said. “Gaurav brings deep technical mastery; Saket brings a bold vision and unmatched execution. Together, they can redefine how cybersecurity risk is managed – from the tactical to the strategic. This combination has all the makings of an industry-shaping moment.”
Molina Healthcare senior director of cyber risk Chris Hornfeldt added, “Balbix gave us the flexibility to pull in data from any source and make sense of it instantly – even when it was messy or unstructured. SAFE adds the quantification layer that turns that intelligence into real business insight. We’ve been waiting for this level of integration. Together, they are building exactly what every CISO needs.”
Keep up with all the latest RegTech news here
Copyright © 2025 RegTech Analyst
Copyright © 2018 RegTech Analyst
