Honored, Grateful, and Looking Ahead: Axio Named a Leader in The Forrester Wave™ CRQ Solutions

 

We’re deeply honored to be named a Leader in The Forrester Wave™: Cyber Risk Quantification Solutions, Q2 2025. This report evaluates the 10 vendors that matter most in the CRQ space today—and we’re proud to be among the top three recognized with the highest distinction.

We’re even prouder to be the only Leader to retain this position from the previous Wave analysis.*

Thank you to Forrester and analyst Cody Scott for your continued attention to this evolving and important market. We know how much effort goes into this research, and we’re grateful for your thoroughness and insight.

From Vision to Practice

When Scott Kannry and I co-founded Axio ten years ago, we saw a clear need: cybersecurity leaders needed better tools to understand, communicate, and manage cyber risk. We believed then—and even more so now—that decisions about risk should be based on data, not gut instinct or generic heatmaps.

Today, Axio customers use our CRQ solution not just for investment decisions, but to model the impact of mergers, new business lines, and organizational change. Our most forward-leaning users are quantifying risks from wildfires and physical sabotage alongside cyber threats—and even using their models to shape public policy.

The shift is real: from red-yellow-green to dollars and cents. From qualitative guesswork to quantitative clarity.

The Next Ten Years

We see this recognition as a milestone—but not a finish line.

Looking ahead, our commitment is simple: keep pushing boundaries. We’re investing heavily in AI and automation to reduce friction in onboarding and continuously improve model fidelity. Axio is already known for getting teams from zero to quant in minutes—with full transparency and control. But we’re not stopping there.

Expect richer outputs, smarter integrations, and intelligent automation to support the classic CRQ use cases—and unlock new ones we haven’t imagined yet.

Dropping the “C”?

As for the future of CRQ itself? Here’s my hope: that it becomes simply risk quantification.

Sometimes, we put “cyber” in front of everything—and in doing so, we unintentionally isolate ourselves. But the truth is, many of the controls we justify using CRQ protect the enterprise from more than just cyber perils. Resilience is holistic. Risk is interconnected. Let’s meet our colleagues in operations, finance, and beyond where they are—and speak a common language.

Modeling, simulation, and quantification will be even more essential a decade from now. With or without the “C.”

To Our Peers, and Our People

We offer our sincere congratulations to the other vendors named in the Wave—and especially to our fellow Leaders, Safe and KPMG. My friend James Hanbury and his team at KPMG are doing yeoman’s work to expand market awareness. Keep leading the charge, James.

We look forward to working alongside all of you to continue maturing the field and building confidence in risk decisions everywhere.

And finally—to our incredible team at Axio: thank you. You do more than build a great product. You help realize our vision of protecting critical infrastructure and doing well by doing good. You are my second family.

Here’s to the next chapter.

 

–Dave White, President and Co-Founder

 

*Note: Safe Security purchased RiskLens and The FAIR Institute shortly after the last publication; RiskLens was a leader in the prior publication.