Report-URI.io Due Diligence
Run due diligence on Report-URI.io: check compliance and get alerts when suppliers change.
United Kingdom · report-uri.io · 11 vendors
Report URI is a cybersecurity platform that helps website operators deploy and monitor cutting-edge browser security controls. It provides real-time monitoring and reporting on security issues detected by web browsers, protecting against data breaches, hacks, and various client-side attacks like Magecart and cross-site scripting. The platform aids in compliance with standards like PCI DSS and offers threat intelligence.
Resilience scores
- Digital Sovereignty: 0
- Digital Resilience: 7
- Financial Resilience: 6
Technology vendors
- Blitz.io — United States
- DigitalOcean, LLC — Technology — United States
- Keybase, Inc. — Technology — United States
- and 8 more
Services catalogue
2 services in catalogue across 2 categories; runs on 11 sub-vendors.
- CSP Reporting
- Report-URI
Insights
Last updated 2026-08-16 · revision 2
11 direct vendors, 139 subvendors
Direct vendors by controlling owner country (sample)
- United States: 10
- Australia: 1
Subvendors by controlling owner country (sample)
- China: 2
- France: 3
- Australia: 3
Compliance
6 in-scope frameworks identified; showing 3.
UK NIS Regulations 2018 — No public evidence
Evidence: https://report-uri.com/security-and-compliance, https://www.legislation.gov.uk/uksi/2018/506/contents/made, https://www.gov.uk/government/publications/cyber-security-and-resilience-bill-policy-statement
ISO 27001 (source) — No public evidence
Evidence: https://report-uri.com/security-and-compliance, https://report-uri.com/, https://cdn.report-uri.com/pdf/Report URI - 2025 Penetration Test Report.pdf
GDPR (source) — Evidence found
Evidence: https://report-uri.com/privacy-policy, https://report-uri.com/security-and-compliance, https://cdn.report-uri.com/pdf/Report URI - Data Protection (1v04).pdf, https://cdn.report-uri.com/pdf/Report URI - Data Protection Analysis (1v5R).pdf, https://ico.org.uk/make-a-complaint/
Financials
Three-year financials
- 2024:
- 2023:
- 2022:
Financial Resilience Score: 6/10
Report URI Ltd. is a UK-based private SaaS company operating in the client-side web security space with a recurring subscription revenue model and a blue-chip customer base including Monzo, NatWest, RBS, Tesco Bank, Square, Okta, Pfizer, Emirates, and NHS England. The business benefits from an inherently high-gross-margin architecture (browser-native CSP reporting rather than agents/proxies) and a significant regulatory tailwind from PCI DSS 4.0 requirements 6.4.3 and 11.6.1 (effective 31 March 2025), which mandate client-side script inventory and integrity monitoring for card-accepting websites. Operating metrics are strong: 42,000+ websites monitored, 700M+ browser events processed daily, and 1,000+ high-traffic paying websites. However, financial resilience cannot be fully assessed because Report URI Ltd. almost certainly files under UK small/micro-entity exemptions, meaning revenue, EBIT, and detailed P&L are not publicly disclosed. The company faces competitive pressure from well-funded vendors including Akamai, Human Security (PerimeterX), Jscrambler, c/side, Feroot, and Cloudflare, all of which can bundle client-side security into broader platforms. Key-person risk around the founder and a small team, along with dependency on CSP and browser-native reporting standards, add further risk. The 2024 governance step-up (appointment of Paul Oggelsby as Chair, plus senior hires in engineering, sales, and marketing) suggests operational maturation but does not substitute for transparent financial disclosure.
Key strengths: Recurring SaaS subscription revenue model with tiered pricing ($54.99–$274.99/month plus Enterprise), Blue-chip enterprise customer base across UK, US, EU, Australia, and Middle East, PCI DSS 4.0 regulatory tailwind (mandatory client-side script monitoring from March 2025), High-margin architecture using browser-native CSP reporting (low marginal cost per customer), Founder-led with recognised industry credibility (Scott Helme, Troy Hunt as investor), Governance maturation in 2024 with Board Chair appointment and senior hires, 10-year operating history with progressive product diversification (CSP, DMARC, Threat Intelligence)
Risk factors: Financial opacity — no public disclosure of revenue, margin, or profitability under UK small/micro-entity exemptions, Key-person risk from small, founder-led team, Competitive pressure from larger vendors (Akamai, Human Security, Jscrambler, Cloudflare, c/side, Feroot), Standards-dependence on CSP and browser-native reporting APIs, Product concentration weighted toward CSP-driven use cases despite diversification efforts, Limited external visibility into cash runway and credit profile
Revenue by geography
- Australia: 0%
- Middle East: 0%
- United States: 0%
- United Kingdom: 0%
- Continental Europe: 0%
Revenue by product/service
- CSP Violation Reporting (core): 0%
- Email Security (DMARC, MTA-STS/SMTP TLS): 0%
- Adjacent Security Reporting (HPKP, Certificate Transparency, COOP/COEP, NEL): 0%
- Active Enforcement Suite (Script Watch, Data Watch, Frame Watch, Policy Watch, Threat Intelligence): 0%
Workforce by country
- United Kingdom: 0
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.