Businesses and other large organizations have long been a lucrative and obvious target for cybercriminals, but in recent years – thanks to more sophisticated hacking techniques and the rise of artificial intelligence – small and medium-sized businesses are now very much on the map . Now Chorus — one of the startup creation tools specifically for smaller businesses — is announcing a big round of funding after seeing its recurring revenue grow 300% in the last year. It has raised $100 million in a Series D funding round. Sources close to the deal tell TechCrunch that it is valued at more than $750 million post-money.
Until now, New York-based Coro has focused squarely on the US market – not surprising, given that there are more than 33 million small and medium-sized businesses in that country alone – but with this round, the startup is looking to expand operations internationally, starting with Europe. To that end, it’s notable that the lead investor in this round is One Peak, the UK-based late-stage company focused on enterprise technology. Previous backers Energy Impact Partners and Balderton Capital are also involved.
Coro also plans to use the funding to continue working on its R&D — specifically to bring more and more AI tools to its single platform in order to better match and ideally defeat the capabilities of the most sophisticated malicious hackers.
Research by IBM is appreciated that the average cost of a data breach in 2023 was $4.45 million, and while individual attacks targeting very large organizations may still garner most of the headlines, cybercriminals are increasingly targeting SMBs businesses, applying the law of economies of scale and leveraging one of the biggest trends in business over the past two decades — the rise and dominance of SaaS.
“The barrier to entry for attackers has dropped dramatically over the past two years,” Dror Liwer, the company’s co-founder and CMO, said in an interview. The culprit, he said, is the rise of attack-as-a-service techniques, namely ransomware-as-a-service.
“In the past, to execute a very complex attack, you had to know a lot and the attack itself was very expensive. Today, you can go to a website, upload a listing and hire an attack and chase a market. Thus, the cost of attack has also been reduced tremendously. It means that the ROI of attacking a medium or small business has improved dramatically, because in the past it was very expensive to do that.”
Liwer said in the past it could cost $1 million to gain 100,000 listings because of the reward. Now you can pay $50,000 for multiple listings each, “and still be very, very profitable.”
These statistics are certainly felt by startups. Last year, about 73% of small businesses reported security incidents, according to a survey by Tripwire. And among the small and medium-sized enterprises responding to a survey by DigitalOcean74% named data privacy a top concern.
The opportunity in the SMB security market that Coro has identified is that these businesses typically lack the teams and internal IT budgets to dedicate to building and managing their defenses. Therefore, Coro’s approach has been to create all-in-one platforms that cover the various entry points a criminal might take, including email protection, endpoint protection and cloud protection. It operates in a competitive space. Others in the same category include very large providers such as CrowdStrike to newer startups like CyberSmart and Guardz.
But the growth Coro is seeing particularly in the mid-market (50 to 2,000 employees), using channel partners like ISPs to go to market, is what caught the eye of investors.
“As a growth investor, we look for companies that target large, underserved markets and are in a prime position to dominate that space,” David Klein, co-founder and managing partner of One Peak, said in a statement. “Coro has already achieved phenomenal growth and success in the SME market. We are convinced that Coro has the right technology stack, a world-class management team and unlimited potential to scale the business to the next level. We are excited to partner with Coro to help them realize their vision and support the team in the next leg of their explosive growth.”
For some context on Coro’s valuation: At a time when startups, especially later-stage ones, still struggle to close rounds, Coro — which started as CoroNet on the Disrupt Battlefield stage — is in an annual pace. Its round last year, in April 2023, was $75 million at a $575 million valuation (also after money).
