QuoIntelligence
Provides finished cyber-threat and unified-risk intelligence to organizations across Europe.
Website: https://quointelligence.eu/
Cover Block
From the public record
| Field | Value |
|---|---|
| Name | QuoIntelligence |
| Tagline | Provides finished cyber-threat and unified-risk intelligence to organizations across Europe. [Tech.eu, April 2026] |
| Headquarters | Frankfurt, Germany [Startbase, October 2026] |
| Founded | 2020 [Startbase, Unknown] |
| Stage | Series A [Tech.eu, April 2026] |
| Business Model | SaaS |
| Industry | Security |
| Technology | AI / Machine Learning |
| Geography | Western Europe |
| Growth Profile | Venture Scale |
| Founding Team | Solo Founder [Crunchbase] |
| Founder | Marco Riccardi [Crunchbase] |
| Funding Label | Series A |
| Total Disclosed Funding | Approximately $7,900,000 [The SaaS News] |
Links
From the public record
- Website: https://quointelligence.eu/
- LinkedIn: https://www.linkedin.com/company/quointelligence
- Careers: https://jobs.quointelligence.eu/
The Short Version
PUBLIC QuoIntelligence sells analyst-produced cyber threat and unified risk intelligence to European organizations, and it merits investor attention now because it has paired a fresh Series A with a product pitch that aligns closely with rising European compliance and resilience requirements such as NIS2 and DORA [Tech.eu, April 2026] [QuoIntelligence, April 2026]. Founded in Frankfurt in 2020, the company is led by founder and CEO Marco Riccardi, with public sources consistently identifying him as the sole founder and placing the business in Germany from inception [Startbase] [Crunchbase].
The product thesis is relatively clear even where verification is still uneven: QuoIntelligence positions Mercury as a platform that combines cyber threat intelligence with digital, geopolitical, physical, and compliance risk analysis, while its commercial wedge is "finished" intelligence for customers that do not want to build a full in-house analyst function [Vestbee, April 2026] [Tech.eu, April 2026]. Public materials also point to an AI-facing interface, Agent Karla, and to API access within Mercury, but most detailed capability claims remain company-described rather than independently validated [QuoIntelligence] [Research.com, 2026] [The AI World].
Riccardi's prior role as Head of Intelligence Operations at QuoScient gives the founding story some domain continuity, which matters in a category where trust, analyst quality, and workflow fit tend to matter at least as much as model architecture [Crunchbase]. The broader team's institutional experience is referenced in press coverage, but the public record in the source set is still thin on named operator depth beyond the founder [Startbase, April 2026].
On funding, the company disclosed a €5 million seed in July 2023 and a €7.3 million Series A in April 2026 led by Elevator Ventures with participation from BMH, eCAPITAL, and support from Mercurius Private Equity, while later coverage reported an additional investment from Christian Lindner without disclosing amount or valuation [QuoIntelligence, July 2023] [QuoIntelligence, April 2026] [Startbase, October 2026]. The business model is SaaS, but several traction datapoints, including claimed zero churn in 2025 and sharply higher customer lifetime value since 2023, are still best treated cautiously because they are derived from company-linked or lightly corroborated reporting rather than multi-source operating disclosure [Startbase, April 2026] [QuoIntelligence, April 2026].
Over the next 12 to 18 months, the key watchpoints are whether QuoIntelligence can translate regulatory tailwinds and the ENISA contract into broader enterprise adoption, whether partner-led distribution produces repeatable sales efficiency, and whether product differentiation holds as more security vendors fold AI interfaces into threat and risk workflows [QuoIntelligence, February 2025] [Startbase, April 2026] [The AI World]. The setup is promising, but the next leg of proof needs to come from independently visible customer expansion and clearer evidence that the company's finished-intelligence model scales beyond founder-led credibility and compliance-driven demand [Tech.eu, April 2026] [Vestbee, April 2026].
Single-source, plausible -- Core company identity, founder, and financing are corroborated by multiple public sources, but material product-detail and traction claims rely partly on company statements.
Taxonomy Snapshot
| Axis | Value |
|---|---|
| Stage | Series A |
| Business Model | SaaS |
| Industry / Vertical | Security |
| Technology Type | AI / Machine Learning |
| Geography | Western Europe |
| Growth Profile | Venture Scale |
| Founding Team | Solo Founder |
| Funding | Series A, total disclosed about $7.9 million |
The Company in Brief
PUBLIC
QuoIntelligence presents as a Europe-focused cyber-threat-intelligence company built around a plain proposition: many organizations need analyst-grade intelligence, but do not have the staff or budget to run a full internal capability. The company was founded in Frankfurt in 2020, and Crunchbase identifies Marco Riccardi as founder and CEO [Crunchbase]. On its website, QuoIntelligence describes itself as a cyber threat intelligence partner, with headquarters in Frankfurt and a product line centered on threat intelligence services for European organizations [QuoIntelligence, Unknown].
The chronology that can be established from primary public sources is still relatively short, but it is clear enough to sketch the operating arc. QuoIntelligence announced a EUR 5 million seed financing in July 2023, then announced a EUR 7.3 million Series A in April 2026 to support sales, product development, and team expansion [QuoIntelligence, July 2023] [QuoIntelligence, April 2026]. The company website also shows an active hiring motion, including a fully remote Senior Account Executive role in the Netherlands, which is consistent with a business still building commercial coverage rather than one moving into a maintenance phase [QuoIntelligence, Unknown].
Single-source, plausible -- Grounded primarily in Crunchbase and company website materials, with chronology corroborated across multiple company pages but limited independent primary documentation in this section.
What They Have Built
MIXED QuoIntelligence is selling analysis, not raw feeds, and that distinction matters for how the product should be read. Public descriptions position the company around "finished" intelligence, meaning analyst-curated output intended for organizations that do not want, or cannot justify, a full in-house threat-intelligence team [Tech.eu, April 2026]. Its Mercury platform is described as combining digital-risk protection, cyber-threat intelligence, and analysis of geopolitical, physical, and compliance risks [Vestbee, April 2026], while the company says the product is built for European customers facing ISO 27001, NIS2, and DORA requirements, with customer intelligence data kept within the European Union [QuoIntelligence, April 2026].
The product surface appears broader than a classic threat-intelligence dashboard. Company materials describe Threat Intelligence as-a-Service, regulatory-ready reporting for DORA, and a unified cyber-risk-intelligence layer [QuoIntelligence]. Third-party coverage adds that Mercury offers API access for integrations, uses encryption and industry-standard security measures, and includes in-app assistance and documentation, although those implementation details come from a review-style source rather than primary technical documentation [Research.com, 2026]. The company also markets Agent Karla, or KARLA, as a 24/7 analyst-style interface that lets users ask plain-language questions about threats, regulation, geopolitical events, and sector-specific risks, powered by Mercury [QuoIntelligence] [The AI World].
What is visible in public evidence is a product thesis that sits between managed intelligence services and software. The stronger, independently repeated claim is the wedge around analyst-produced, decision-ready intelligence for European mid-market and regulated buyers [Tech.eu, April 2026] [Vestbee, April 2026]. The weaker claims are around product depth and technical differentiation, where most specifics remain company-authored and there is no verified public demo in the source set to test workflow quality, data provenance, or model performance directly [QuoIntelligence] [Vestbee, April 2026].
Unconfirmed -- Core product positioning is partially corroborated by Tech.eu and Vestbee, but most feature-level detail in this section remains company-authored, with limited independent technical verification.
Market Size and Demand
PUBLIC The market matters now because European buyers are being pushed to treat cyber-threat intelligence less as a specialist add-on and more as an operating requirement tied to resilience, compliance, and executive decision support [Tech.eu, April 2026] [QuoIntelligence, April 2026].
QuoIntelligence is positioned at the intersection of several markets rather than inside one clean Gartner box. The company describes its offer as cyber-threat intelligence and unified-risk intelligence, with Mercury combining digital-risk protection, cyber-threat intelligence, and analysis of geopolitical, physical, and compliance risks [Vestbee, April 2026]. Tech.eu's description of the wedge is narrower and more useful for market framing: QuoIntelligence sells "finished" intelligence, meaning analyst-produced, curated outputs for organizations that do not want or cannot afford to build a full in-house intelligence team [Tech.eu, April 2026]. That places the company adjacent to threat-intelligence platforms, managed intelligence services, digital-risk protection, and a newer compliance-linked risk reporting layer.
There is no cited third-party TAM, SAM, or SOM figure in the available source set, so the safer read is qualitative. The immediate serviceable market appears to be European mid-market and enterprise organizations facing a combination of external threat monitoring needs and new reporting burdens under frameworks such as NIS2 and DORA, which QuoIntelligence explicitly references in its product positioning [QuoIntelligence, April 2026]. The narrower initial wedge is likely firms in regulated or operationally sensitive sectors that lack a mature internal intelligence function, since that is the user pain repeated in independent coverage [Tech.eu, April 2026] [Vestbee, April 2026].
Market signals and adjacent categories
The demand drivers in the record are more concrete than the market sizing. First, regulation is doing part of the sales work. QuoIntelligence says its offering addresses ISO 27001, NIS2, and DORA requirements, and its public commentary argues that NIS2 and DORA have shifted cyber preparedness from optional advantage to baseline expectation for European companies [QuoIntelligence, April 2026] [LinkedIn]. Second, the product is framed as a staffing substitute as much as a software tool. Tech.eu and Vestbee both describe the value proposition as delivering analyst-grade outputs to organizations without the budget or scale to build full internal threat-intelligence teams [Tech.eu, April 2026] [Vestbee, April 2026].
A third driver is buyer preference for regional handling of sensitive data. QuoIntelligence states that customer intelligence data remains within the European Union, which is a commercial detail but also a market signal about procurement priorities in Europe, especially for public-sector and regulated accounts [QuoIntelligence, April 2026]. The ENISA contract, while company-cited and therefore not a clean proxy for broad market share, still suggests that public institutions are procuring this category through formal tenders rather than experimental budgets [QuoIntelligence, February 2025] [Startbase].
| Market angle | What the sources support | Evidence quality |
|---|---|---|
| Threat intelligence as managed output | Buyers can consume analyst-produced "finished" intelligence instead of building internal teams [Tech.eu, April 2026] | YELLOW |
| Unified cyber and broader risk monitoring | Mercury is described as combining cyber, digital, geopolitical, physical, and compliance risk analysis [Vestbee, April 2026] | RED |
| Compliance-linked cyber reporting | Product positioning references NIS2, DORA, and ISO 27001 use cases [QuoIntelligence, April 2026] | RED |
| EU-sensitive procurement posture | Company states customer data remains within the EU; ENISA contract indicates public-sector demand [QuoIntelligence, April 2026] [QuoIntelligence, February 2025] | RED to YELLOW |
The table points to a market that is broad in problem scope but still uneven in proof. The strongest independent signal is demand for outsourced, analyst-produced intelligence, while the broader "unified risk" category relies more heavily on company framing than on third-party market taxonomy [Tech.eu, April 2026] [Vestbee, April 2026].
The adjacent and substitute markets are important because they shape both budget access and competition. On one side, QuoIntelligence overlaps with conventional threat-intelligence platforms that provide feeds, alerts, and investigation tooling. On another, it touches managed security and advisory services, since the core promise is interpretation and actionability rather than raw data alone [Tech.eu, April 2026] [Silobreaker]. The newer extension is into regulatory reporting and governance support, where the product claims around DORA-ready reporting suggest a path into compliance budgets rather than only security operations spend [QuoIntelligence].
Macro conditions in Europe appear supportive, even if the evidence base here is still mostly category-level rather than quantified. Buyers in finance, government, manufacturing, retail, and transportation are operating in a period where cyber incidents, geopolitical volatility, and regulatory scrutiny are converging, and QuoIntelligence's market story is built around that convergence [QuoIntelligence, April 2026] [Vestbee, April 2026]. The commercial question is not whether those pressures exist, but whether customers want one vendor to unify them and whether they will renew on that basis. The public sources support the first point more clearly than the second.
Single-source, plausible -- Section uses two independent third-party sources for market framing, chiefly Tech.eu and Vestbee, but several important demand and category claims rely on company statements or company-linked coverage [Tech.eu, April 2026] [Vestbee, April 2026] [QuoIntelligence, April 2026].
Who Else Is Fighting for This
MIXED QuoIntelligence appears to sit between classic threat-intelligence vendors and broader risk platforms, with its clearest public positioning built around analyst-produced "finished" intelligence for European organizations that do not want to staff a full internal intelligence function [Tech.eu, April 2026] [Vestbee, April 2026].
The public record is thin on directly named rivals, so the competitive map has to be drawn from category boundaries rather than a clean peer set. On one side are established cyber-threat-intelligence platforms, the most concrete named reference in the source set being Silobreaker, which defines "finished intelligence" as the output of the intelligence cycle for decision-makers [Silobreaker]. That matters because QuoIntelligence is not claiming to replace raw feeds with more raw feeds. It is selling interpretation, packaged for buyers in finance, government, manufacturing, retail, and transportation that may need intelligence coverage without hiring a large analyst bench [Tech.eu, April 2026] [QuoIntelligence, July 2023].
The adjacent category is broader unified-risk software, where the company says Mercury combines digital-risk protection, cyber-threat intelligence, and analysis of geopolitical, physical, and compliance risks [Vestbee, April 2026]. If that product description holds in practice, QuoIntelligence is competing not only with threat-intel specialists but also with governance, risk, and compliance tools, plus managed-security and advisory substitutes that help companies interpret NIS2 and DORA obligations [QuoIntelligence, April 2026]. The substitute set is important because a mid-market European buyer may not run a formal vendor bake-off between two threat-intelligence products. The real comparison may be between QuoIntelligence, an MSSP, an advisory firm, or an internal compliance-led workflow.
Its edge today looks more regulatory and operating-model driven than purely technical. Public materials repeatedly tie the product to EU data residency, ENISA credentials, and DORA and NIS2 readiness, while Tech.eu and Vestbee both describe the commercial wedge as curated intelligence for organizations that lack in-house teams [Tech.eu, April 2026] [Vestbee, April 2026] [QuoIntelligence, April 2026]. The ENISA contract, reported at EUR 1.4 million over four years, is the strongest public signal that the company can clear institutional procurement hurdles in Europe [QuoIntelligence, February 2025] [Startbase]. That edge could prove durable if regulation keeps pushing buyers toward auditable, Europe-based vendors, but it is also perishable. Larger incumbent security platforms and consultancies can usually add compliance packaging faster than younger companies can build distribution.
The main exposure is that QuoIntelligence does not appear, from the public record, to own a category-defining channel or proprietary network effect. Silobreaker, as a named adjacent vendor in the source set, benefits from being already recognized around the intelligence workflow itself [Silobreaker]. By contrast, QuoIntelligence's claims around zero churn in 2025, sixfold customer lifetime value growth since 2023, and broad sector reach are still company-led or lightly corroborated, which limits visibility into how strong the moat really is [Startbase, April 2026] [QuoIntelligence, April 2026]. If buyers decide they want deep workflow integration, global telemetry, or a larger installed base, incumbents with broader platforms may hold an advantage that a Europe-first specialist cannot quickly neutralize.
Over the next 18 months, the most plausible competitive outcome is a sorting by buyer need rather than a single category winner. QuoIntelligence is well placed if regulation continues to pull mid-market and public-sector European buyers toward managed, analyst-curated intelligence with local data handling, in which case QuoIntelligence is a credible winner if DORA and NIS2 compliance budgets keep expanding [QuoIntelligence, April 2026] [Tech.eu, April 2026]. A plausible loser if buyers instead consolidate around larger intelligence or risk suites is the narrower standalone "finished intelligence" layer, where even a respected adjacent name like Silobreaker could be pressured if procurement shifts from specialist point solutions to broader compliance and security stacks [Silobreaker]. The open question is whether QuoIntelligence can turn its regulatory fit into a repeatable distribution advantage before better-capitalized platforms make the same European packaging claims.
Single-source, plausible -- Competitive analysis is grounded in Tech.eu, Vestbee, QuoIntelligence materials, and Silobreaker category definitions, but the source set names very few direct competitors and several operating claims remain company-led.
Opportunity
PUBLIC
The prize here is a chance to become a European system of record for cyber-threat and unified-risk intelligence at the moment regulation is turning intelligence from a discretionary spend into an operating requirement for a broader set of mid-market and enterprise buyers [QuoIntelligence, April 2026] [Tech.eu, April 2026].
The most credible upside case is not that QuoIntelligence becomes a generic security vendor. It is that the company becomes the default outsourced intelligence layer for European organizations that need analyst-grade threat, compliance, and geopolitical context but do not want to staff a full in-house function [Tech.eu, April 2026] [Vestbee, April 2026]. That outcome is reachable, at least directionally, because the company already frames its product around "finished" intelligence rather than raw feeds, says its data remains within the European Union, and ties its value proposition to concrete frameworks such as NIS2 and DORA [Tech.eu, April 2026] [QuoIntelligence, April 2026]. The ENISA contract matters in that context. A four-year, €1.4 million award does not by itself prove broad commercial scale, but it does suggest that at least one EU-level institution found the service credible in a formal procurement process [QuoIntelligence, February 2025] [Startbase].
The paths to outsized scale are visible even if the evidence base remains early and partly company-supplied.
| Scenario | What happens | Catalyst | Why it's plausible |
|---|---|---|---|
| Regulatory operating layer | QuoIntelligence becomes a recurring intelligence and reporting layer for firms adapting to NIS2 and DORA, especially those without mature internal intelligence teams | Compliance deadlines and board-level demand for regulatory-ready reporting tied to cyber risk [QuoIntelligence, Unknown] [QuoIntelligence, April 2026] | The company explicitly positions its product around DORA, NIS2, and ISO 27001 needs, and third-party coverage says its wedge is serving organizations that cannot justify building full internal analyst teams [Tech.eu, April 2026] [QuoIntelligence, April 2026] |
| Embedded European intelligence platform | Mercury evolves from analyst service into an embedded platform via API integrations, letting partners and customers build workflows on top of QuoIntelligence outputs | Adoption of Mercury's API access and adjacent products such as KARLA [Research.com, 2026] [The AI World] | Public descriptions already point to API access, a unified Mercury platform, and an always-on interface in KARLA, which together support a platform, not just services, reading [Vestbee] [Research.com, 2026] [The AI World] |
| Institutional trust anchor | Public-sector wins and regulated-industry references make QuoIntelligence a preferred vendor for critical sectors across Europe | Additional public tenders or repeat institutional contracts following ENISA [QuoIntelligence, February 2025] [Startbase] | The ENISA contract provides one verified proof point, and the company states it already serves finance, government, manufacturing, retail, and transportation customers across Europe [QuoIntelligence, April 2026] [QuoIntelligence, July 2023] |
The compounding logic is straightforward if execution holds. One institutional win improves credibility in the next procurement cycle, which helps land more regulated accounts; more accounts create a wider base of threat, compliance, and geopolitical workflows to refine analyst output; that makes the product more useful across sectors; and better retention economics create room to invest in sales and product depth. There are early hints of that loop starting: the company reported customer lifetime value up nearly sixfold since 2023, while Startbase reported zero customer churn in 2025, and the Series A is earmarked for sales, product development, and team expansion [QuoIntelligence, April 2026] [Startbase, April 2026]. Those are still weakly corroborated operating metrics, so they should be treated as directional rather than settled fact, but they are at least consistent with an improving repeat-revenue motion.
The size of the win depends on which identity wins out. If QuoIntelligence remains primarily a high-trust intelligence service with software wrappers, the upside is meaningful but narrower. If it becomes a software-led platform for unified risk intelligence in Europe, the ceiling changes. RocketReach lists 41 employees and $6.3 million in revenue, though both figures are lightly verified and should be handled carefully [RocketReach]. Using that revenue figure only as a rough starting point, a business that compounds into a durable, compliance-linked intelligence platform could plausibly support a valuation in the low hundreds of millions of dollars at mature software multiples, or more if growth remains strong and retention is as high as the company suggests (scenario, not a forecast) [RocketReach] [QuoIntelligence, April 2026]. The core reason is simple: regulation can widen the buyer base, institutional references can lower customer-acquisition friction, and a platform layer can make the business look more like infrastructure than project work.
Inferred, not confirmed -- This section relies on a mix of independent coverage and company-reported claims, with the upside framing partly dependent on single-source or company-supplied evidence such as retention, customer lifetime value, and product positioning [Tech.eu, April 2026] [Vestbee, April 2026] [QuoIntelligence, April 2026] [QuoIntelligence, February 2025] [RocketReach].
Sources
From the public record
[Tech.eu, April 2026] QuoIntelligence raises €7.3M Series A to deliver 'finished' threat intelligence at scale | https://tech.eu/2026/04/27/quointelligence-raises-eur73m-series-a-to-deliver-finished-threat-intelligence-at-scale/
[QuoIntelligence, April 2026] QuoIntelligence Closes EUR 7.3 Million Series A to Scale Unified Risk Intelligence Across Europe | https://quointelligence.eu/2026/04/quointelligence-closes-eur-7-3-million-series-a-to-scale-unified-risk-intelligence-across-europe/
[Crunchbase] QuoIntelligence - Crunchbase Company Profile & Funding | https://www.crunchbase.com/organization/quointelligence/
[Vestbee, April 2026] German startup QuoIntelligence secures €7.3M to scale risk intelligence in Europe | https://www.vestbee.com/insights/articles/quo-intelligence-secures-7-3-m
[Research.com, 2026] QuoIntelligence Review 2026: Pricing, Features, Alternatives | https://research.com/
[The AI World] QuoIntelligence | https://theaiworld.com/
[Startbase, April 2026] QuoIntelligence secures EUR 7.3 million Series A investment | https://www.startbase.com/news/quointelligence-sichert-sich-73-mio-euro-series-a/
[QuoIntelligence, July 2023] QuoIntelligence Secures EUR 5 Million Seed Financing | https://quointelligence.eu/2023/07/quointelligence-secures-eur-5-million-seed-financing/
[QuoIntelligence, February 2025] QuoIntelligence signs €1.4 million ENISA contract to provide threat intelligence services | https://quointelligence.eu/2025/02/quointelligence-signs-e1-4-million-enisa-contract-to-provide-threat-intelligence-services/
[Silobreaker] Finished intelligence | https://www.silobreaker.com/
[Startbase, October 2026] Christian Lindner Invests in Frankfurt-Based Cybersecurity Startup QuoIntelligence | https://www.startbase.com/news/christian-lindner-investiert-in-frankfurter-cybersecurity-startup-quointelligence/
[QuoIntelligence] QuoIntelligence - Your Cyber Threat Intelligence Partner | https://quointelligence.eu/
[Startbase] Christian Lindner Invests in Frankfurt-Based Cybersecurity Startup QuoIntelligence | https://www.startbase.com/news/christian-lindner-investiert-in-frankfurter-cybersecurity-startup-quointelligence/
[The SaaS News] QuoIntelligence Raises €7.3 Million in Series A Funding | https://www.thesaasnews.com/
[Research.com, 2026] Research.com | https://research.com/
[The AI World] The AI World | https://theaiworld.com/
[LinkedIn] QuoIntelligence | LinkedIn | https://www.linkedin.com/company/quointelligence
Articles about QuoIntelligence
- QuoIntelligence Sells Finished Intelligence to a Regulated Europe — The Frankfurt startup is betting that analyst-curated reports and an AI interface can serve a market newly mandated by NIS2 and DORA.