Threatcop Startup Deep Dive: Business Model, Funding, Risks

Startup Deep Dive : Threatcop — Parent Kratikal Tech’s FY26 revenue Rs 36.71 crore and profit after tax Rs 6.14 crore ahead of a Rs 39.69 crore SME IPO

Threatcop is the people security management brand and product suite of Kratikal Tech Ltd, a Noida-based cybersecurity company; it offers security awareness training, phishing simulation and DMARC tools, with overseas subsidiaries Threatcop FZ LLC (UAE) and Threatcop AI Inc (USA).

This Startup Deep Dive explains what Threatcop does, how it makes money, who backs it, how it compares with rivals and what could go wrong, using publicly available information. It is educational and not investment advice. Last updated: October 2026.

Threatcop in Brief

What it is: Threatcop is an Indian Cybersecurity / people security and phishing simulation company based in Noida.
Who it serves: businesses, institutions, consumers, learners and public-sector buyers.
Provides people-centric security: Threatcop Security Awareness Training (TSAT), Threatcop DMARC (TDMARC), Threatcop Phishing Incident Response (TPIR) and Threatcop Learning Management System (TLMS).
Describes itself as a pioneer of the people security management category, using an AAPE (Assess, Aware, Protect, Empower) framework.
Says it has served 750+ enterprises across BFSI, NBFC, fintech, healthcare, telecom, e-commerce and cloud services.
Funding: Parent Kratikal: $1M pre-Series A in 2019 plus earlier angel seed (reported).

Threatcop Quick Facts

Company	Threatcop
Founded	Not disclosed
Headquarters	Noida
Founders	Pavan Kushwaha, Dip Jung Thapa, Paratosh Bansal
Sector	Cybersecurity / people security and phishing simulation
Total funding	Parent Kratikal: $1M pre-Series A in 2019 plus earlier angel seed (reported)
Latest round	Parent Kratikal: Rs 39.69 crore SME IPO (BSE SME) planned
Valuation	Not disclosed
Website	threatcop.com

Figures marked “reported” come from published reports and may differ between sources; “Not disclosed” means no reliable public figure was found.

What Is Threatcop?

Threatcop operates in the Cybersecurity / people security and phishing simulation space in India. Understanding a company like this starts with three questions: who is the customer, what painful problem is being solved, and why the solution is better than the alternatives. The sections below apply that lens to Threatcop.

Provides people-centric security: Threatcop Security Awareness Training (TSAT), Threatcop DMARC (TDMARC), Threatcop Phishing Incident Response (TPIR) and Threatcop Learning Management System (TLMS).
Describes itself as a pioneer of the people security management category, using an AAPE (Assess, Aware, Protect, Empower) framework.
Says it has served 750+ enterprises across BFSI, NBFC, fintech, healthcare, telecom, e-commerce and cloud services.
Operates in India, UAE, Saudi Arabia, Oman, Indonesia and Germany.

The Origin Story of Threatcop

Every company starts from a noticed gap and a team willing to commit to closing it. Strong origin stories are specific: a clear problem, a founding team with relevant skills, and an early product that real customers could test. Founder-market fit, meaning the team’s lived experience or technical depth in the domain, tends to predict how fast a young company learns.

Founders: Pavan Kushwaha, Dip Jung Thapa, Paratosh Bansal.
Threatcop is a brand and business segment of Kratikal Tech Ltd (Kratikal founded 2013, registered office in Noida); figures below labelled parent are Kratikal's.
Press materials name Pavan Kushwaha (CEO), Dip Jung Thapa (COO) and Paratosh Bansal (CTO) as founders of Threatcop.
Kushwaha has said the venture began after a 2012 social media hack he investigated while in college; the early product was a People Risk Assessment Engine.

Key Milestones and Challenges

No startup grows in a straight line. Early years usually involve slow adoption, product rewrites, hiring mistakes and funding gaps. In the Cybersecurity / people security and phishing simulation sector the common turning points are a first paying customer, a regulatory approval, a successful product demonstration or a funding round that lets the team invest ahead of demand. How a team responds to setbacks says more about resilience than any single headline.

2012: Founder's college-era social media hack incident that led to the venture (founder account).
2013: Parent Kratikal founded.
Jan 2017: Parent Kratikal raised undisclosed angel seed funding.
2019: Parent Kratikal raised a $1M pre-Series A led by Gilda VC, Art Venture and Rajeev Chitrabhanu.
21 Dec 2023: Launched a 'People Security' guide at DSCI's AISS 2023 with contributions from 33 Indian security leaders.
FY26 (parent): revenue Rs 36.71 crore, PAT Rs 6.14 crore; SME IPO of Rs 39.69 crore planned, with Rs 23.08 crore earmarked for the Threatcop subsidiaries.

Threatcop Funding and Investors

Funding history shows how much outside confidence a company has attracted and how long it can operate before needing more capital. Figures below are reported and may differ between sources; valuation figures are estimates unless the company has confirmed them.

Parent Kratikal, Jan 2017: undisclosed seed from angels.
Parent Kratikal, 2019: $1M pre-Series A led by Gilda VC, Art Venture and Rajeev Chitrabhanu.
Parent Kratikal IPO: fresh issue of up to 30,00,000 shares, issue size Rs 39.69 crore, price band Rs 128-135; Rs 23.08 crore for investment in Threatcop FZ LLC and Threatcop AI Inc and Rs 9.23 crore for product development.

How Does Threatcop Make Money? (Business Model)

A business model describes who pays, how often and how much it costs to serve them. Strong models show repeat usage, improving margins with scale and acquisition channels that do not depend only on paid spend. Weak models show one-off sales, rising costs and growth that stops when spending stops. For companies selling to businesses, institutions, consumers, learners and public-sector buyers, sales cycles and contract size matter as much as headline growth.

Enterprise software subscriptions for awareness training, phishing simulation and DMARC, with custom quote-based pricing and a free trial.
Parent also sells services (VAPT, red teaming, GRC, virtual CISO) through its other segment with the AutoSecT platform.
Growth strategy centres on overseas subsidiaries in UAE and the USA.

The Numbers: Threatcop Financials

Financial figures show whether growth is turning into a self-sustaining business. Small and private companies often disclose little, so any number below is included only if it was found in public reporting.

Parent Kratikal FY24: revenue Rs 13.01 crore, PAT Rs 3.20 crore.
Parent Kratikal FY25: revenue Rs 20.85 crore, PAT Rs 3.81 crore.
Parent Kratikal FY26: revenue Rs 36.71 crore, PAT Rs 6.14 crore.
Threatcop-only revenue is not separately disclosed in sources read.

Market Opportunity for Threatcop

Market size is easy to exaggerate, so a useful approach separates the total market from the portion a company can realistically reach with its current product and distribution. The main forces behind demand in this sector are rising digital adoption, cloud and mobile penetration, growing enterprise technology spending, government digitisation programmes and a deep pool of engineering talent. Each of these widens the opportunity, but capital efficiency and execution decide who captures it.

Security awareness and phishing simulation market dominated globally by KnowBe4, Proofpoint and similar vendors.
Indian regulated sectors (BFSI, NBFC, fintech) are the core customer base.

Technology and Product at Threatcop

Technology is rarely the whole moat, but it drives speed, cost and customer experience. A practical way to assess it is to separate the capability the company controls from the commodity infrastructure it rents. In this sector the important factors are product quality, data and integration depth, security, scalability and the speed of shipping improvements.

AI-driven phishing simulation and awareness platform with DMARC protection and incident response tooling.

Team and Culture at Threatcop

Teams are the most important and least measurable asset of a young company. Look at how complementary the founders’ skills are, how deep the second layer of leadership is, and how the company hires and retains specialists. Culture shows up in small repeated behaviours: how quickly bad news travels upward and whether commitments to customers are kept.

Pavan Kushwaha, CEO; Dip Jung Thapa, COO; Paratosh Bansal, CTO (as named in a press release).
Kratikal says it has over 200 cybersecurity professionals.

Threatcop Competitors: Competitive Landscape

A fair competitive analysis names direct rivals, adjacent players who could move into the space, and the customer’s default alternative. Durable advantages include proprietary data or technology, licences and approvals, brand trust, switching costs and cost leadership.

Competitor	How it differs
KnowBe4	Global security awareness and phishing simulation leader
Proofpoint	Named as a top competitor by a product insights page
SANS Institute	Named as a training competitor
Cofense	Phishing simulation and response platform

Risks and Challenges for Threatcop

Threatcop financials are not reported separately from Kratikal.
Competes with much larger global vendors.
Heavy dependence on IPO proceeds to fund overseas expansion.
Some data providers conflict on size and location details.
Competition: low barriers to entry and well-funded rivals can compress pricing and slow growth.
Funding risk: technology businesses often burn cash before reaching profit and depend on investor appetite.

Risk is not a reason to avoid a company; it is a reason to price it correctly and to monitor the right indicators over time. Regulation in this sector is shaped by data protection rules under the Digital Personal Data Protection Act, sector regulators, consumer protection law and IT rules.

Threatcop Growth Outlook: What to Watch

IPO proceeds are planned to fund overseas sales and marketing and product development.
Parent revenue grew from Rs 13.01 crore (FY24) to Rs 36.71 crore (FY26).
Key indicators: recurring revenue, customer retention, gross margin, customer acquisition cost and runway.
Funding position: Whether Threatcop can reach its next milestone before needing new capital.
Regulation: Changes from data protection rules under the Digital Personal Data Protection Act, sector regulators, consumer protection law and IT rules.

Industry Context: Where Threatcop Fits

India's technology startup ecosystem is one of the largest in the world, supported by cheap data, a large base of smartphone users, digital public infrastructure and a deep engineering talent pool. Companies now build for education, software, mobility, logistics, agriculture, defence, media and more, selling both to Indian customers and abroad.

Durable technology companies usually combine a clear customer problem with repeatable distribution and disciplined unit economics. Growth funded only by spending tends to fade, while products that customers keep using and paying for build compounding advantages.

For readers new to this field, a useful habit is to separate announcements from evidence. A plan, a partnership or a funding headline describes intent, while a delivered product, a paying customer or an audited financial statement describes results. Comparing the two over time shows how reliably a company turns promises into outcomes.

Bull Case and Bear Case for Threatcop

An investment thesis is a short, testable statement of why a company could become far more valuable, together with what evidence would prove it wrong. The points below are general to this sector and are not forecasts for Threatcop.

Bull case

A large and growing base of digital users and businesses expands the addressable market.
Recurring revenue and strong retention can compound growth.
Selling into global markets widens the opportunity beyond India.

Bear case

Heavy competition can compress pricing and margins.
Dependence on external funding can force painful cost cuts.
Regulation or platform changes can disrupt a product quickly.

Lessons Founders and Investors Can Take from Threatcop

Studying a company in the Cybersecurity / people security and phishing simulation space offers lessons that go beyond any single firm. The points below are general lessons for the sector and are not claims about Threatcop.

Solving a clear, frequent customer problem matters more than adding features.
Retention and repeat usage are better health signals than sign-ups.
Disciplined spending extends runway and keeps options open when funding tightens.
Distribution, not just product quality, decides who wins in crowded markets.
Building trust through data protection and reliability is part of the product.

How to Evaluate Threatcop as a Startup

Customer clarity: Can Threatcop name its customer and the problem it solves in one sentence?
Evidence of demand: Look for repeat customers, signed contracts or measurable usage rather than announcements alone.
Economics: Check whether margins improve as volume grows.
Execution: Compare announced timelines with what has actually been delivered.
Funding runway: Estimate how long current capital lasts at the present spending rate.
Regulatory standing: Confirm required approvals are in place.
Customer concentration: Check whether a few customers account for most of the revenue.
Management depth: Look for experienced leaders beyond the founders and a stable core team.

The Takeaway

Threatcop is part of India’s growing Cybersecurity / people security and phishing simulation ecosystem. The useful lesson from studying it is the discipline of asking structured questions about customers, economics, advantage and resilience. Companies that answer them well, repeatedly and under pressure are the ones that endure. Readers should treat any single report, ranking or funding headline as one input among many, and should re-check key facts against recent company announcements. Because public information on young companies is often limited, patience in verifying claims is part of good analysis. Public sources can also describe the same company in different ways, so it is worth checking dates, definitions and whether a figure refers to revenue, total income or transaction value, and whether it covers one entity or a wider group, before drawing conclusions. Small differences in rounding, currency conversion or reporting periods can also change how a figure reads. Comparing the same figure across several recent reports helps show whether it is stable or has changed over time. This article is educational and is not investment advice.

Clear customers and repeat demand matter more than announcements.
Regulation and capital needs shape how fast a startup in this sector can grow.
Track a few leading indicators over time rather than one headline metric.

Threatcop FAQs: Frequently Asked Questions

What is Threatcop?

Threatcop is the people security management brand and product suite of Kratikal Tech Ltd, a Noida-based cybersecurity company; it offers security awareness training, phishing simulation and DMARC tools, with overseas subsidiaries Threatcop FZ LLC (UAE) and Threatcop AI Inc (USA). It is profiled in the Startup Deep Dive series, which explains business model, funding, competitors and risks.

Who founded Threatcop?

Threatcop was founded by Pavan Kushwaha, Dip Jung Thapa, Paratosh Bansal.

How much funding has Threatcop raised?

Parent Kratikal: $1M pre-Series A in 2019 plus earlier angel seed (reported). Funding figures are reported and may differ between sources, so readers should check the latest company announcements.

How does Threatcop make money?

Threatcop earns revenue from its Cybersecurity / people security and phishing simulation products and services sold to businesses, institutions, consumers, learners and public-sector buyers. The exact revenue mix is described in the business model section and is not fully disclosed publicly.

Who are the competitors of Threatcop?

Reported rivals include KnowBe4, Proofpoint, SANS Institute, Cofense. See the competitor comparison above for how they differ.

What are the main risks for Threatcop?

Main risks include competition: low barriers to entry and well-funded rivals can compress pricing and slow growth, funding and capital needs, competition and regulation by data protection rules under the Digital Personal Data Protection Act, sector regulators, consumer protection law and IT rules. This is educational content, not investment advice.

Source

Source: Publicly available data, published reports, industry research, and other credible sources.