Risk Ledger Raises £24 Million to Expand Its Supply Chain Security Network

Key points

• Risk Ledger raised £24 million (about $32.3 million) in a Series B funding round, bringing its total funding to £33.8 million (about $45 million).
• Axiom Equity led the round, with returning backer Mercia Ventures also participating.
• More than 16,000 organisations across finance, government, insurance, and critical national infrastructure have joined the Risk Ledger network.
• The company plans to use the money to grow its network, add AI-powered review tools, and expand into the United States.
• Risk Ledger was founded in 2018 and is headquartered in London.

Supply chains are a headache in cybersecurity. A hospital, a bank, or a government agency might have excellent security itself but still get hurt because one of its suppliers, a small software vendor or a cleaning company with building-access systems, got broken into. Risk Ledger was built to address exactly that problem.

The company's approach is straightforward. Every supplier on the platform fills out a standardised security questionnaire and keeps it updated. Every organisation that buys from that supplier can then read the answers. Think of it as a shared, living report card, visible to everyone in the network rather than locked in one company's filing cabinet.

Why does this matter to ordinary people?

It matters because supply chain attacks have repeatedly hit services that ordinary people depend on. When a little-known software vendor gets broken into, hospitals lose patient records, banks freeze online services, and retailers leak customer payment details. Sharing supplier security information across a network means problems surface faster, before criminals get the chance to move further up the chain.

Risk Ledger calls this model "Active Supply Chain Security," the idea being that organisations defend together rather than each one quietly assessing the same suppliers in isolation and never comparing notes.

Axiom Equity's founding partner Jonathan Organ said the network becomes more valuable the bigger it grows, which is a real dynamic in platforms of this type: the thousandth organisation to join gets more useful intelligence than the tenth did.

The fresh capital will go toward three things. First, recruiting more organisations to the network. Second, deepening the risk intelligence those members share with each other. Third, building AI tools, meaning software that uses machine learning to read and score supplier assessments automatically, so human reviewers spend time on genuine red flags rather than routine paperwork.

The company also plans a US expansion, reported by SecurityWeek, which is a significant step given that American financial services and government agencies have their own strict third-party risk rules to satisfy.

For anyone working in procurement, compliance, or IT at an organisation that relies on outside vendors, the broader trend here is worth watching. Regulators in the UK, EU, and US are tightening rules around supplier security. Platforms that make assessments sharable rather than siloed are becoming a practical answer to those requirements.

If you work for a supplier and your customers start asking you to join a shared security platform, treat the questionnaire seriously. Incomplete or out-of-date answers are increasingly a reason buyers walk away.