Actfore is a company that offers insurance carriers, legal counsel, and corporations advanced AI/ML-powered data mining solutions to swiftly detect and uncover sensitive information compromised in cyber breaches. Pulse 2.0 interviewed Actfore Founder & CEO Christian Geyer to learn more about the company.
Christian Geyer’s Background
What is Christian Geyer’s background? Geyer said:
“I’m currently the Founder and CEO of Actfore. I have a penchant for hands-on work, whether that’s carpentry, developing innovative technology solutions, or rolling up my sleeves to bring companies from the brink of bankruptcy. I’ve been fortunate in my career—over 18 years driving revenue growth and transforming organizations across markets such as cybersecurity, defense, and data governance—from being a government contractor with the Navy and Marine Corps to serving in executive finance positions with global corporations. In 2016, I led financial and strategic planning for the Crypsis Group, setting it on a course to acquisition by Palo Alto Networks. This experience deepened my expertise and interest in cybersecurity, incident response, and data mining. Navigating diverse industries in Finance and Accounting functions, I’ve always relied on technology and data-informed solutions to drive revenue and business optimization. It’s apropos that I finally ended up founding a tech company focused on data.”
Creating Actfore
What led you to create Actfore? Geyer shared:
“Beginning in 2016, I led the financial and strategic planning for the Crypsis Group, playing a critical role in Palo Alto Networks’ acquisition of the company in late 2020. This was the beginning of my exposure to the growing challenges in cybersecurity, incident response (IR), and data mining.”
“Through my extended network of global law firms, insurance carriers, technologists, cyber security operations, and C-suite officers in security and governance, I repeatedly heard a consistent theme describing their experiences: the breach notification process and the marketplace was too convoluted, with pricing uncertainties, delayed timelines, and egregious inaccuracies in deliverables.”
“From these repeated conversations, and over time, it became clear that the incident response market required an overhaul. So, in 2021, I founded Actfore to revolutionize data mining for cyber breach responses and fill this gap by making the incident response process predictable, cost-effective, and scalable—empowering organizations to recover quickly and mitigate financial strain during a cyber breach. “
Core Services
Can you tell me about Actfore’s core services, products and features? Geyer explained:
“Actfore disrupts the incident response space with the only AI-led technology solution for data mining. We deliver notification lists to clients at unmatched speed, allowing them to navigate complex cyber breach notification timelines and quickly determine how to respond to ransomware payment demands. Using AI and machine learning, Actfore expedites the rapid identification and processing of sensitive data after cyber breaches while minimizing human error. We are redefining the cyber breach response process with technology that enhances the efficiency and accuracy of data processing, at a fraction of the timeline of other providers, transforming the way incident response is managed.”
Differentiation From The Competition
What differentiates the company from its competition? Geyer affirmed:
“Actfore’s data mining solution replaces the traditional expensive, time-consuming, and error-prone manual review processes with AI-powered data extraction and data science expertise. Our technology-first approach drastically reduces the process – from the standard months of manual review down to weeks or even days – ensuring rapid, accurate assessments of compromised information. For example, Actfore recently handled 10 million healthcare records in only 10 weeks, a task that would traditionally require a year of manual review.”
Challenging Aspects Of Three Client Groups
Actfore’s solution essentially has three client groups: Counsel, Insurance, & end-client/victims of cyber breach – what has been the most challenging part of this experience? Geyer acknowledged:
“We founded Actfore due to the gaps within the cyber incident response industry and with the understanding that only technology could meet the needs of our clients. We knew an AI-led solution for data mining was the answer to address our clients’ specific needs.”
“The most challenging aspect of the experience lay in navigating the distinct motivations and priorities of each client group involved in the decision-making process while still staying true to Actfore’s mission to provide a fast, accurate, and transparent solution.”
“For example, for legal counsel there’s often a dual expectation where one segment values speed and precision to protect clients, while others are accustomed to working with vendors that use off-shore services and send data overseas. With insurance carriers, cost-effectiveness is paramount, since any inefficiency, whether at the firm or with their vendors, is harmful to their bottom line. And for an end client new to the data mining and breach response space, there is a need to educate them on rejecting the flawed status quo in favor of a new and innovative market entrant. These are all challenges Actfore continues to face with clients.”
“Indeed, a go-to-market strategy for multiple audiences can be a balancing act that, at times, can feel overwhelming. Fortunately, as a tech company, Actfore’s technological innovation serves as a strong unifying factor, resonating with even the most diverse of audiences.”
“Today, two years after our first engagement, I constantly remind myself that our motivation to establish a new offering is also our key to any future success. We must continue to invest in R&D, pursue innovation in data science, and stay ahead of the curve.”
Differences Between Markets
Any surprises or specific differences between markets that you’d like to mention? Geyer affirmed:
“We’ve delivered final reports for more than 1,000 global deployments to date. It’s safe to say we’ve experienced a varied breadth of business data. One of the biggest surprises has been the variability in risk tolerance and expectations across different markets. The healthcare and financial sectors, both highly regulated, prioritize security and accuracy but diverge in approach. Healthcare focuses heavily on timelines due to patient privacy concerns, while financial firms are primarily concerned with accuracy and regulatory compliance, driven by the potential for significant penalties.”
“Government clients emphasize strict data handling standards and a need to keep data on-shore. This aligns closely with Actfore’s commitment to security and keeping all operations in-house in the U.S., where our entire process is handled by U.S.-based analysts.”
“On the contrary, in working with clients in the UK and EU, it’s clear that Counsel often needs to justify using Actfore because of our U.S. capabilities and requires approval for cross-border data transfers. To this day, I’m still surprised the U.S. hasn’t adopted similar requirements. U.S.-based vendors frequently ship sensitive data overseas to save pennies per individual notified, yet this choice is a notable security risk, not to mention it often leads to delays and inaccuracies in the breach response process.”
“Across all sectors, however, a common theme emerges despite securing the “doors and windows”—nearly every client holds vast amounts of sensitive, and often very aged, data. This data remains largely untracked and unprotected, like belongings stored in an attic or basement, and poses a risk if left unmanaged. I often wish we could leverage our insights from hundreds of engagements to help clients proactively address this. It’s about encouraging them to organize and secure valuable data—removing outdated files or placing sensitive information in a secure environment—long before a breach occurs.”
Customer Success Stories
When asking Geyer about customer success stories, he highlighted:
“In early 2024, a Fortune 50 healthcare company experienced a major cyber incident impacting 101 million Americans, exposing sensitive records and payment details. Initially, the company, its Am Law 50 legal counsel, and the FBI estimated a breach scope of 5 terabytes across 3.8 million files. However, Actfore’s scan revealed a far larger breach—9.6 terabytes with 10 million compromised files and an additional 52 million files nested in archival formats. With an urgent 10-week deadline, Actfore’s technology-first, on-premises approach enabled rapid, accurate data processing, delivering a tailored report that helped the client and legal counsel quickly address the incident and mitigate further risks.”
Spinning Off From ActiveNav
Actfore recently announced its spin-off from ActiveNav as an independent company, can you tell me more about that – what prompted this move and what it means for your company? Geyer pointed out:
“Actfore spun out of ActiveNav, a data governance company, to focus exclusively on reactive cybersecurity incident response services. Supported by Gresham House Ventures, Actfore’s independence allows it to dedicate resources to incident response and build automation solutions tailored to the evolving needs of the cyber breach response industry. Actfore has a robust foundation with over 1,000 successful global deployments and already actively reinvests profits into R&D to maintain its edge and meet future challenges.”
Funding
How much funding has Actfore received in its latest funding round? Geyer revealed:
“We received a $6 million investment from Gresham House Ventures, the growth capital and private equity arm of Gresham House, the specialist alternative asset management group. This capital raise has been earmarked for continued innovation and software development. Actfore has been cashflow positive since inception in 2022. Our revenue to date is $30 million.”
Bringing New Capabilities To A Market Where It Did Not Exist
How do you describe the challenge of bringing a new capability to market where it didn’t exist before? Geyer emphasized:
“Bringing a new capability to a market where it didn’t exist is challenging as it requires extensive education, establishing trust, and demonstrating the solution’s value. Despite knowing you have a game-changing product, it takes time to overcome skepticism and showcase the benefits and proven results. Meeting with analysts and industry thought leaders is key to creating awareness and interest.”
“In addition, having a competitive technological edge can promise growth, but it will not guarantee adoption. Part of the challenge is that founders need to be realistic in their expectations on market adoption when it comes to innovation. For example, to use Moore’s framework from “Crossing the Chasm,” most of the market does not fall in the “early adopter” category. Instead, they fall into the “early majority,” “late majority,” or “laggards” category. Expecting accelerated growth and adoption as a completely new product or offering on the backs of your technological prowess alone may lead to disappointment. Market education is necessary for accelerated growth, and we have invested in strategies to address that key component.”
“Also, a curious dynamic that surprises many – especially those unfamiliar with the incident response industry – is how late automation is coming to the incident response space. The market for cyber incident response, ironically enough, can maintain a conservative posture. While technology is the bread and butter in cyber, we are dealing with highly sensitive situations and data in this industry. While automation is a no-brainer for the vast majority of the world these days, manual methods are an acceptable standard in incidence response. The propensity to adapt to new solutions is not always there when the stakes are high. We took a different approach, developing automation solutions tailored to the evolving needs of the market.”
Defining A New Industry
What are the challenges of defining a new industry or capability while sustaining accelerated growth? What can you share from this experience for other founders in a similar situation? Geyer replied:
“Defining a new industry or capability while sustaining accelerated growth is a balancing act that requires clear vision, adaptability, and a relentless focus on value creation. It’s crucial to have a strong foundation and remain true to core principles that lead you to innovate (or found the company) in the first place, even as demand grows.”
“For tech founders, it’s easy to underestimate the effort. Technology naturally lends itself to value creation, but you need more to define a new market. Defining a new industry takes strategic planning, patience, and persistence. With a clear mission and a grounded vision, growth follows.”
“And finally, prioritize a talented, mission-driven team. Success in a new industry isn’t just about the product; it’s about the people driving it forward.”
Advice For Founders Bringing Change To A Market
What are your recommendations for founders who are bringing radical change to a market? Geyer pointed out:
“For those aiming to bring radical change to a market, I recommend thoroughly understanding your market’s pain points and directly addressing these concerns with your solution. Communicate your solution’s value clearly, build trust through transparency, and consistently demonstrate results. Again, it’s important to have face time with the right people who can help you spread awareness of why this change is necessary and why you are the right person or company to do it.”
Advice For Founders Looking To Achieve Accelerated Growth
What advice do you have for startup founders or C-Suite who want to achieve accelerated growth? Geyer advised:
“For startup founders and C-suite leaders aiming for accelerated growth, I recommend prioritizing the use of technology to create efficiencies and clarity in workflows. They should consider leveraging tech solutions to streamline processes, automate repetitive tasks, and gather real-time insights that will enable their team and/or product to stay adaptable. This will also allow their team to focus on what really matters, including high-impact initiatives and driving rapid progress. I would also advise that early wins can sometimes be a double-edged sword. The journey for accelerated growth can be fraught with distractions, and early wins can often distract from the main strategy. Speaking from experience, focusing on long-term value rather than short-term wins can build greater trust and velocity.”
Future Company Goals
What are some of the company’s future company goals? Geyer concluded:
“Actfore will continue to prioritize disrupting data mining for breach notifications with AI-led solutions and will continue its commitment to innovation, rapid growth, and proven impact in the incident response space. Our mission is to provide as many individuals as possible with the most secure (and on-shore) handling of their sensitive information after a cyber incident.”
