ZeroRisk, a cybersecurity startup operating from Ireland and the United States, has raised $10 million in Series A funding led by MiddleGame Ventures, with participation from existing investor Elkstone, according to an announcement made September 9. The company has built a platform focused specifically on cybersecurity risk across merchant portfolios owned by banks, payment processors and payment facilitators, a comparatively narrow but consequential niche within the broader fintech security landscape.
Traditional merchant-security programmes across the payments industry have historically centred on periodic compliance exercises, such as scheduled audits against payment card industry standards, rather than continuous, real-time risk monitoring. ZeroRisk's core thesis is that this periodic compliance model has become insufficient given the speed and sophistication of modern threats facing payment ecosystems, arguing that payment providers instead need continuous visibility into risks such as stolen credentials, vulnerable merchant websites, fraud schemes and compromised connected devices operating within their merchant networks.
The distinction between point-in-time compliance checks and continuous risk monitoring has become increasingly significant as payment fraud techniques have grown more sophisticated, often exploiting vulnerabilities that emerge between scheduled audit cycles rather than during them. Banks and payment processors bear substantial financial and reputational liability when merchants within their portfolios suffer breaches, making tools that can surface emerging risks in real time an increasingly valuable addition to existing compliance infrastructure rather than a replacement for it.
ZeroRisk's Irish base positions it within Europe's growing fintech and cybersecurity cluster, which has benefited from the country's favourable regulatory environment for financial services companies and its role as a European base for numerous global payments and technology firms. The dual Ireland-US operational structure allows the company to serve both European payment processors navigating evolving EU cybersecurity and payments regulation, and the larger American payments market where merchant portfolio risk management remains a persistent operational challenge for banks of all sizes.
The participation of MiddleGame Ventures, a fund focused specifically on financial infrastructure investments, reflects growing specialist investor interest in the narrower but structurally important category of payments-adjacent cybersecurity, an area that has historically received less dedicated venture attention than more visible consumer-facing fintech categories, despite its critical role in the overall integrity of digital payment systems.
As payment volumes continue to grow globally and fraud techniques evolve in sophistication, specialised risk-monitoring platforms like ZeroRisk are likely to become an incre
asingly standard component of how banks and payment processors manage merchant portfolio risk, particularly as regulators in both Europe and the United States continue tightening expectations around real-time fraud detection and merchant due diligence obligations.
ZeroRisk's focus also highlights an increasingly important distinction within fintech cybersecurity between protecting a platform's own infrastructure and protecting the broader ecosystem of merchants and partners operating on top of it, a distinction that has taken on growing regulatory significance as payment networks face mounting pressure to demonstrate systemic risk management extending beyond their own direct operations.
The company's positioning also reflects a broader European fintech security trend, in which specialist vendors increasingly compete not on breadth of feature set but on deep domain expertise within a narrowly defined risk category, a strategy that has proven effective for a number of recent European cybersecurity exits and continues to attract dedicated specialist investor interest.
ZeroRisk's next growth phase is expected to focus on expanding its customer base among mid-sized regional banks and payment processors in both Europe and the United States, a segment that has historically had less dedicated access to sophisticated merchant-risk tooling compared with the largest global payment networks.
