ZeroRisk lève 10 millions de dollars pour développer sa plateforme de cybersécurité destinée aux commerçants

ZeroRisk raised $10 million in a Series A led by MiddleGame Ventures, with existing investor Elkstone participating, to fund global expansion, product development and operational scaling. The Irish cybersecurity platform, which serves payment providers including Bank of America, Global Payments, Checkout.com and Trust Payments, expects to triple revenue in 2026 as contracted programs deploy. The funding supports ZeroRisk's strategy to expand merchant cyber-risk monitoring and compliance services beyond annual compliance exercises into recurring value-added payment-provider offerings.

Analysis

The investable implication is modest for BAC and GPN: merchant-level cyber-risk tooling can reduce fraud losses, compliance remediation costs and merchant churn, but it is unlikely to alter consolidated earnings near term. The more meaningful mechanism is pricing: acquirers that embed continuous risk monitoring can convert a historically non-revenue compliance burden into a paid merchant service, improving value-added-services mix and potentially reducing sensitivity to commoditized processing yields. GPN has greater strategic relevance because merchant acquiring is more central to its earnings mix; BAC's benefit is primarily risk-control and client-retention optionality.

This also raises the competitive bar for FIS, Fiserv (FI), Adyen (ADYEN) and privately held processors: a scalable third-party security layer reduces the need for each acquirer to build bespoke merchant monitoring internally. However, the company's growth claims remain unverified and a $10m financing round is not evidence of material contract economics, deployment completion, gross retention, or take-rate acceptance by merchants. The likely 1-3 month catalyst is not this financing itself, but disclosures from payment partners showing cyber services attach rates, fraud-loss trends, or incremental recurring revenue.

Contrarian view: investors may overestimate the near-term monetization opportunity. Smaller merchants are price-sensitive, while acquirers may absorb the cost to defend retention rather than pass it through, limiting margin uplift. Over 6-18 months, recurring cyber incidents or stricter card-network/PCI enforcement could shift this from optional add-on to required infrastructure; that would favor processors with large SMB distribution and existing value-added-service sales channels, particularly GPN and FI.

Key Decisions for Investors

• No standalone trade on BAC or GPN from the financing announcement; the disclosed capital raise is immaterial versus public-company scale and lacks independently verifiable contract-value data.
• Maintain GPN as the preferred watch-list beneficiary versus BAC over the next 2-4 quarters: initiate only if management identifies measurable cyber/fraud-service attach-rate growth or recurring-revenue contribution in earnings materials. Thesis is falsified if merchant-services net revenue growth remains weak while value-added-services investment rises, implying cost absorption rather than monetization.
• Monitor a relative-value long GPN / short FIS basket only after evidence that GPN is improving merchant retention or value-added-services mix while FIS reports elevated merchant-risk, implementation, or compliance costs. Target a 6-12 month horizon; avoid entry solely on vendor announcements.
• Set alerts for PCI/card-network rule changes, major SMB payment-security incidents, and processor disclosures of fraud-loss reserves. These are the events most likely to accelerate adoption and rerate merchant-acquiring platforms rather than the vendor's private funding rounds.