How Resilience Raised $225M For A New Cyber Risk Model

Your Cyber Strategy Is Wrong. It’s A Business Problem, Not An IT Problem.

Most founders treat cybersecurity as a compliance checkbox and a cost center. You buy some software, you tell your biggest customers you have it, and you hope you don’t get hit. If you do, you have cyber insurance to clean up the mess. This model is broken.

It’s reactive, expensive, and fails to address the core issue: cyber risk is a fundamental business risk, just like supply chain risk or currency risk. It belongs in the CFO’s office, not just the server room.

Vishaal “V8” Hariprasad raised over $225 million because he understood this distinction. His company, Resilience, was built on a simple but powerful premise: what if you could change the economics of cyber risk? Instead of just paying out after a disaster, what if you could actively make the disaster less likely to happen? This is the story of how he did it.

From The Bronx to The NSA: Forging A Founder’s Insight

Your unique background is your greatest fundraising asset. For V8, his journey from the South Bronx, where community and shared survival were daily realities, to becoming a military pilot, to serving in the Air Force and at the National Security Agency (NSA) gave him a perspective on adversaries that few founders possess.

Inspired by the planes flying over his neighborhood, his initial passion was aviation. But the events of 9/11 redefined his concept of service. Defending the "digital skies" became his mission. At the NSA, he wasn’t just a tech operator; he was on the front lines of cyber warfare, learning how adversaries think, operate, and exploit weaknesses. He saw firsthand that security wasn’t just about better technology, but about strategy, incentives, and understanding the human element.

This experience became the bedrock of his conviction: you can’t win by building a taller wall. You win by making it too expensive and complicated for the attacker to bother trying.

The First Attempt and The Critical Pivot: From Arceo to Resilience

Resilience wasn’t born fully formed. The initial company, Arceo AI, had a logical but ultimately limited vision: connect a company's security tools, people, and processes to improve its "cyber hygiene." The plan was to sell this platform to the insurance industry, helping them better underwrite risk.

After raising an impressive $37M Series A led by Lightspeed Venture Partners, V8 and his team hit a wall. They realized that trying to drive innovation from outside the insurance industry was slow and inefficient. The carriers they wanted to sell to were conservative and not structured to adopt a new, proactive model overnight.

The Common Founder Mistake: Selling to a Value Chain Instead of Owning It

Many founders try to sell a tool to a legacy industry. The problem is that your potential customers are often the ones with the most to lose from true innovation. You are asking them to change their business model to accommodate your product. The smarter, albeit harder, path is often to disrupt the value chain itself.

The pivot was transformative. Instead of selling to the insurance industry, they decided to become the insurer. Rebranded as Resilience, the company’s new mission was to integrate risk quantification, security controls, and insurance into a single, seamless solution. They wouldn’t just pay a claim; they would be a partner in making the client unbreachable.

How "Integrated Cyber Risk" Actually Works

This isn't just a marketing slogan. It’s a fundamentally different business model. Here’s a tactical breakdown:

Old Model (Traditional Insurance): A company fills out a 100-question form about its security. The insurer uses this static data to generate a premium. If the company is breached, the insurer pays the claim. The relationship is transactional and adversarial. · New Model (Resilience): The process starts with a deep, data-driven analysis of the client’s actual security posture. Resilience helps them quantify their specific risk in financial terms (e.g., "A ransomware attack on this division would cost you $15M"). Then, they provide a clear, prioritized roadmap to reduce that risk. The insurance policy is the final piece—a financial backstop—but the core service is ongoing risk management.

Think of it like this: a traditional fire insurer asks if you have sprinklers. An integrated risk manager installs, monitors, and maintains the sprinklers for you, and the insurance is cheaper because they know the system works.

Lessons in Fundraising and Storytelling

Raising over $225M required more than a good idea; it required world-class storytelling and disciplined fundraising.

1. Sell a New Category, Not a Better Mousetrap

V8 wasn’t pitching a better cyber insurance company. He was pitching the end of the traditional cyber insurance model. By framing Resilience as the pioneer of the "integrated cyber risk" category, he could justify a venture-scale valuation. He wasn’t capturing 5% of an existing market; he was creating a new one worth billions.

Your pitch deck needs to tell this story in 15-20 slides. Start with the broken status quo, introduce the inevitable future, and then position your company as the only one credible enough to build it.

2. Master the Valuation Tightrope

The article mentions the need to balance investor expectations with realistic projections. This is a critical balancing act for founders. Raising at too high a valuation can feel like a win, but it sets you up for a brutal down round if you don’t grow into it.

Common Mistake: You raise a seed round at a $20M post-money valuation with $10k in monthly recurring revenue. To justify a 2-3x step-up for your Series A, you’ll need to hit milestones that may be impossible. You’ve created your own death trap. It’s better to take a slightly lower valuation and build a track record of beating expectations.

3. Anchor The "Why" In Your Personal Story

Investors don’t just buy a spreadsheet; they buy a founder’s conviction. V8’s story wasn’t just a fun anecdote; it was the entire basis for the company’s existence. His time at the NSA gave him the non-obvious insight that drove the entire business model. Without that story, Resilience is just another software company. With it, it’s a mission led by one of the few people in the world qualified to see it through.

Operating a Global, Remote-First Company

Resilience operates as a globally distributed team. This is a superpower for talent acquisition but a challenge for culture and cohesion. The source mentions "frequent gatherings and clear communication." Here’s what that means in practice:

Intentional Communication: You can’t rely on hallway conversations. This means religious documentation, disciplined use of tools like Slack and Asana, and scheduled, recurring all-hands meetings where the strategy is repeated until everyone can recite it. · Empathy Across Time Zones: Acknowledge that your team in London is finishing their day as your team in California is just starting. Rotate meeting times. Set clear service-level agreements (SLAs) for responses so no one feels pressured to be online 24/7. · Budget for Human Connection: Remote-first doesn’t mean remote-only. Budget real money ($3k-$5k per employee per year) for travel. Bring the entire company together at least once a year. Host functional offsites for engineering, sales, etc. These moments of connection fuel the long stretches of remote work.

How To Apply This To Your Startup This Week

Re-read your pitch deck. Does it sell a feature or a fundamental shift in the economics of your market? If you sell project management software, are you selling better Gantt charts or a new way for companies to ship products twice as fast with half the budget? · Write down your "founder story." Draw a direct line from your unique life experience to the unique insight behind your company. Why are you the only person who could build this? Practice telling it. · Audit your risk model. What are the top 3 existential risks to your business? Now, re-frame them as financial numbers for your board. Instead of "we might get hacked," calculate "a breach of our customer database would cost us an estimated $2M in churn and legal fees." · If you’re remote, schedule one "culture" activity. This could be a virtual team lunch (with a food stipend) or planning a small, in-person offsite for a specific team. Be intentional about building connection.