ZeroRisk raises $10 million to scale merchant cybersecurity platform

ZeroRisk raised $10 million in Series A funding led by MiddleGame Ventures, with Elkstone participating, to fund global expansion, product development and deployments across major payment providers. The merchant cybersecurity platform already works with Bank of America, Global Payments, Checkout.com and Trust Payments, and expects 2026 revenue to triple as contracted programs enter deployment. The funding supports ZeroRisk's effort to scale risk-monitoring, compliance and remediation services for payment providers' merchant portfolios.

Analysis

For BAC and GPN, the economic value is less about incremental cybersecurity spend and more about whether merchant-risk tooling lowers loss rates, support costs and PCI/compliance friction while creating attach-rate revenue from remediation services. At their scale, even a modest reduction in merchant fraud/chargeback exposure or manual review workload can be meaningful operationally, but a $10m vendor financing round is not evidence that those savings have been realized. The nearer competitive implication is for merchant-acquiring platforms: differentiated cyber tooling can support retention among higher-risk SMB cohorts, where switching costs are otherwise low and servicing costs are high.

The relevant public-market read-through is stronger for GPN than BAC because merchant-services execution and value-added-services penetration are more central to GPN's valuation and margin narrative. However, third-party orchestration also risks commoditizing a capability that acquirers may prefer to own; payments platforms such as FIS, FI, ADYEN.AS and Block (XYZ) could respond through internal product development, acquisitions, or bundled security pricing. This is a 6-18 month product/retention issue rather than a near-term earnings driver; the press-release claim of rapid revenue growth is private-company guidance and cannot yet validate deployment quality, merchant adoption, or unit economics.

Contrarian view: the funding may signal that acquirers are outsourcing non-core compliance workflows precisely because merchant economics remain under pressure, not because they are prepared to pay materially more for cyber services. If cyber products are bundled at low or zero price to protect payment volume, the benefit accrues to retention but not necessarily processor revenue. A sustained rise in SMB fraud losses, card-network compliance requirements, or disclosed value-added-services penetration would make the thesis investable; absent those data, this is an operational watch item rather than a catalyst.

Immediate market impact should be negligible. Over the next 1-3 months, monitor GPN disclosures for merchant-services churn, chargeback/fraud expense, and product attach rates; over 6-18 months, the key test is whether cyber-service distribution expands gross-margin dollars rather than simply adding implementation and support expense.

Key Decisions for Investors

• No standalone trade on the financing announcement; maintain neutral BAC and GPN exposure until an earnings release quantifies merchant cyber-service revenue, fraud-loss reduction, or retention improvement.
• For an existing GPN long, add only on evidence that value-added-services growth is accelerating while merchant-services margins hold; use a guidance cut to transaction revenue or margin as thesis falsification, since security bundling could become a cost of retention.
• Create a watchlist pair: long GPN versus short FIS only if GPN demonstrates measurable merchant-service attach-rate expansion and FIS does not disclose a comparable merchant-risk offering over the next two reporting cycles. Target a 6-12 month horizon; exit if GPN's merchant churn or adjusted operating-margin guidance deteriorates.
• Monitor FIS, FI, ADYEN.AS and XYZ for merchant cybersecurity partnerships or acquisitions. A broad industry bundling response would weaken any differentiation premium for GPN and make the development sector-neutral.