Cyber risk is increasingly treated as a financial issue. Boards want to know how much a cyber incident could cost the company, how it could affect earnings, and whether current security spending is justified.

Yet many organizations still measure cyber risk through periodic reviews. These assessments are often conducted once or twice a year, supported by consultants and spreadsheet models. By the time the report reaches senior leadership, the company’s systems may have changed and new threats may have emerged. The way risk is measured does not always match how quickly it evolves.

This gap is where Quantara AI is positioning its new platform. Quantara AI, a Boise-based cybersecurity startup, has introduced what it describes as the industry’s first persistent AI-powered cyber risk solution. The system is designed to run continuously rather than rely on occasional assessments.

The company’s core argument is straightforward: not every security weakness carries the same financial consequence. Instead of ranking issues only by technical severity, the platform analyzes active threats, identifies which company systems are exposed, and estimates how much money a successful attack could cost. It uses statistical models, including Value at Risk (VaR), to calculate potential losses. It also estimates how specific security improvements could reduce that projected loss.

The timing aligns with a broader market shift. International Data Corporation (IDC) projects that by 2028, 40% of enterprises will adopt AI-based cyber risk quantification platforms. These tools convert security data into financial estimates that can guide budgeting and investment decisions. The forecast reflects growing pressure on security leaders to present risk in terms that boards and regulators understand.

Traditional compliance and risk management systems often focus on meeting regulatory standards. Vulnerability management programs typically score weaknesses based on technical characteristics. Consultant-led risk studies provide detailed analysis, but they are usually performed at set intervals. In fast-changing threat environments, that model can leave decision-makers working with outdated information.

Quantara’s platform attempts to replace that periodic process with continuous measurement. It brings together threat data, internal system information and financial modeling in one system. The goal is to show, at any given time, which specific weaknesses could lead to the largest financial losses.

Cyber risk quantification as a concept is not new. What is changing is the expectation that these calculations be updated regularly and tied directly to financial decision-making. As cyber incidents carry clearer monetary consequences, companies are looking for ways to measure exposure with greater precision.

The broader question is whether enterprises will shift fully toward continuous, AI-driven risk analysis or continue relying on periodic external assessments. What is clear is that cybersecurity discussions are moving closer to financial reporting — and tools that estimate potential loss in dollar terms are becoming central to that shift.

‍