Stoïk: Difference between revisions
Content deleted Content added
Created page with "{{Section separator}} == Company profile == 🏢 '''Formation and structure.''' Stoïk SAS (SIREN 900 293 887) is a French privately held Société par Actions Simplifiée founded in 2021 and headquartered at 4 rue Euler, 75008 Paris.<ref name="pappers_stoik">{{cite web |title=Société STOIK (900293887) : Chiffre d'affaires, statuts, extrait d'immatriculation |url=https://www.pappers.fr/entreprise/stoik-900293887 |publisher=Pappers}}</ref> The company operates as a cyb..." |
No edit summary |
||
Line 1:
{{Infobox company
| name = Stoïk
| legal_name = Stoïk SAS
| logo = stoïk-logo.jpg
| logo_size =
| logo_alt =
| logo_caption =
| image =
| image_size =
| alt =
| caption =
| type = Private
| exchange =
| ticker =
| isin =
| lei =
| founded = 2021
| headquarter = Paris, France
| domicile =
| regulator = ACPR
| ultimate_parent =
| shareholders = Alven Capital, Andreessen Horowitz (a16z), Munich Re Ventures, Opera Tech Ventures, Impala, Anthemis Group, Tokio Marine HCC International, CYBICA
| key_people = Jules Veyrat (CEO), Alexandre Andreini (Risk Director), Nicolas Sayer (Technical/Product Director), Philippe Mangematin (Insurance Director)
| num_employees = ~130
| segments = Cyber Insurance (MGA), Cybersecurity Services
| products = Cyber insurance policies, Stoïk Protect (continuous monitoring platform), Stoïk MDR (Managed Detection & Response), CERT-Stoïk (incident response)
| distribution = Insurance brokers, Bancassurance (BNP Paribas)
| competitors = Coalition, At-Bay, Resilience, Cowbell
| market_share_rank =
| financial_year = 2022
| market_cap =
| revenue = €621,000
| operating_income = −€3.13 million
| ebitda = −€3.09 million
| net_income = −€3.01 million
| total_assets = €14.3 million
| net_debt =
| equity = €10.9 million
| operating_margin =
| roe =
| ratings =
| footnotes = Financials based on French GAAP (filed accounts of Stoïk SAS, 2022). Gross Written Premium managed on behalf of carrier partners was ~€50 million in 2025 (most recent disclosed operating metric). Total venture funding raised to date: ~€70 million.
}}
== Executive summary ==
🎯 The following ten-point summary distills the key findings from a comprehensive profile of Stoïk, a French cyber-insurtech MGA that combines insurance underwriting, cybersecurity monitoring, and incident response into an integrated service for European SMEs.
* '''Company profile:''' Stoïk SAS was founded in 2021 in Paris as a Managing General Agent blending cyber insurance with technology-driven risk management, and by early 2026 it protects over 10,000 companies across six European countries through a network of more than 2,000 broker partners. The company is led by four co-founders — Jules Veyrat (CEO), Alexandre Andreini, Nicolas Sayer, and Philippe Mangematin — whose backgrounds span cybersecurity consulting, fintech engineering, and actuarial science at Swiss Re. The group structure includes the parent holding (Stoïk SAS), an operating brokerage arm (Stoïk France SAS), a dedicated incident response unit (Stoïk CERT SAS), a German branch (Stoïk GmbH), and a Belgian subsidiary (CyberContract) acquired in September 2025. Approximately €70 million in venture funding has been raised from a cap table that mixes top-tier VCs (Andreessen Horowitz, Alven) with strategic insurance investors (Tokio Marine HCC, Munich Re Ventures) and the Veyrat family office (Impala). Stoïk's stated mission — "to be the CISO of Europe" — captures its ambition to act as the outsourced cybersecurity function for SMEs that lack in-house expertise.
* '''Business model:''' Stoïk operates as an MGA/technology hybrid that does not carry insurance risk on its own balance sheet but underwrites policies on behalf of a panel of rated carriers including Tokio Marine HCC (A+), Swiss Re (AA), and Axeria (A−). Revenue derives primarily from commissions on gross written premium, supplemented by potential profit-sharing if loss ratios remain favorable, while the bundled cybersecurity services — Stoïk Protect, Stoïk MDR, and CERT-Stoïk — are provided at no extra charge to align prevention incentives with underwriting profitability. Distribution is 100% intermediated through insurance brokers and the BNP Paribas bancassurance network, a strategic choice made after an early pivot away from direct sales that turned potential competitors into distribution allies. Coverage limits reach €10 million per policy for companies with up to €1 billion in revenue, with guarantees spanning first-party incident response, business interruption, cyber extortion, third-party liability, and newer add-ons like CEO fraud and cloud overbilling. The integration of AI-driven risk assessment, continuous dark-web monitoring, and a 24/7 in-house CERT team creates a closed-loop model where incident data feeds back into underwriting improvements.
* '''Performance drivers:''' Gross written premium roughly doubled or tripled each year, reaching approximately €50 million in 2025 with over 10,000 policyholders — a greater-than-200% year-on-year increase — fueled by both geographic expansion and an upmarket shift toward mid-sized companies carrying higher-premium policies. The BNP Paribas partnership, activated in late 2022, proved a decisive distribution accelerator by reaching deep into the long tail of French SMEs, many of them first-time cyber insurance buyers. Stoïk's automated quoting system, which replaced traditional multi-day cybersecurity questionnaires with instant domain scans, dramatically improved broker conversion rates and supported the network's growth from roughly 200 partners in mid-2022 to over 2,000 by early 2026. Although detailed loss ratios remain undisclosed, Stoïk described its portfolio as "profitable" by late 2024, implying a gross loss ratio well below the 50–70% market average for SME cyber, an outperformance it attributes to disciplined risk selection and proactive vulnerability mitigation. On the financial side, filed 2022 accounts show net revenue of €621,000 and a net loss of €3.01 million, reflecting heavy upfront investment in team and platform; the Series C announcement emphasized improving unit economics and a path toward profitability as revenue triples ahead of costs.
* '''Strategic priorities:''' Stoïk's near-term roadmap centers on pan-European expansion at a pace of roughly one new country per year, with Central and Southern Europe (likely Italy, the Netherlands, and Scandinavia) as the next targets — a strategy for which the CyberContract acquisition in Belgium provided a successful buy-and-build template. Product portfolio expansion is well underway: Stoïk MDR extends the company into managed security service territory, Professional Indemnity add-ons broaden per-client revenue, and new coverages for CEO fraud, PCI fines, and cloud overbilling respond to emerging real-world claim patterns. Series C funds are explicitly earmarked for proprietary AI agents spanning risk scoring, incident triage, and claims pattern analysis across a growing dataset of over 10,000 monitored entities. The company plans to scale from 130 to 200 employees in 2026, with aggressive hiring in AI engineering, multilingual cybersecurity analysts, and experienced underwriters for the larger-client segment. Capacity diversification remains a strategic priority: Stoïk may add Lloyd's syndicates, SCOR, or Allianz to its panel and could eventually contemplate creating its own risk-bearing entity.
* '''P&L trends:''' Stoïk's profit-and-loss trajectory follows a classic high-growth startup curve — mounting losses in the early years as the company invested ahead of revenue, followed by rapidly improving margins as commission income scaled. Filed 2022 accounts show personnel costs of €1.88 million (over 300% of that year's revenue), an operating result of −€3.13 million, and EBITDA of −€3.09 million, with minimal depreciation confirming that most development costs were expensed rather than capitalized. By 2025, with GWP at approximately €50 million and net revenue growing more than 200% year on year, the gap between revenue and expenses began narrowing materially, though the company likely remained net-loss as it continued hiring and expanding into new markets. Revenue is recurring in nature — policies renew annually — which provides a growing base of renewal commissions each year, and the broker-intermediated model keeps customer acquisition costs relatively low compared to direct distribution. Management has signaled a path to operational breakeven within two to three years by leveraging the largely fixed cost base against rapidly scaling commission income.
* '''Balance sheet:''' Stoïk's balance sheet is highly liquid and minimally leveraged, dominated by cash from successive equity raises: €3.6 million at end-2021, €13.4 million at end-2022, and estimated at €25–30 million at end-2025 before the Series C injection of €20 million in January 2026. Shareholders' equity grew from €2.93 million in 2021 to €10.9 million in 2022, reflecting the €11 million Series A offset by accumulated losses, and financial autonomy stood at approximately 78% of the total balance sheet. Financial debt was €2.2 million in 2022 (likely a convertible note or venture debt), producing a debt-to-equity ratio of roughly 0.2 — a conservatively capitalized structure. Intangible assets were immaterial through 2022 but are expected to include goodwill from the CyberContract acquisition starting in 2025. As a broker/MGA, Stoïk is not subject to Solvency II capital requirements, though it must maintain ORIAS financial guarantee obligations for handling client premium funds.
* '''Cash flow and liquidity:''' Operating cash flow has been negative each year, with the 2022 capacité d'autofinancement recorded at −€2.98 million, roughly aligning with the net loss and partially offset by a small working capital benefit from negative BFR. Financing activities have been the dominant cash source: the seed and Series A together produced approximately €14.8 million in 2022 inflows, followed by the €10 million extension in 2023 and the €25 million Series B in 2024. The CyberContract acquisition in 2025 represented the largest investing outflow, though the deal's partly equity-based structure (with founders joining Stoïk's cap table) conserved cash. With the Series C added, Stoïk's cash position could reach approximately €45–50 million, providing several years of runway even before considering the trajectory toward operating breakeven. The Series C press release explicitly noted the raise was calibrated not to exceed actual needs, signaling capital discipline and confidence in reaching key milestones with existing resources.
* '''Risk and compliance:''' Stoïk operates at the intersection of insurance, cybersecurity, and multi-country regulation, facing risks that span underwriting quality, systemic cyber events, GDPR data handling, capacity-partner dependency, and distribution concentration around BNP Paribas. Cyber accumulation risk — a single widespread event hitting many insureds simultaneously — is mitigated by monitoring portfolio concentration, capping per-risk exposure, and relying on top-rated reinsurers (Tokio Marine HCC, Swiss Re) to absorb catastrophic losses. Regulatory compliance extends across ORIAS and ACPR oversight in France, EU passporting for cross-border operations, NIS2 obligations as a potential managed security service provider, DORA requirements via financial-sector partnerships, and AML/CFT sanctions screening for ransomware payment scenarios. Competition is intensifying as U.S. MGAs like Coalition eye European expansion, while Stoïk's defenses rest on first-mover entrenchment, local broker relationships, and multi-country presence. The CyberContract integration introduces typical M&A execution risks around culture alignment, platform migration, and capacity-panel transition from Euromex to Stoïk's main carriers.
* '''Governance and ESG:''' Stoïk is incorporated as a French SAS with a board that includes representatives from Alven, a16z, Munich Re Ventures, and Opera Tech Ventures, supplemented by informal advisory from Henri de Castries (former AXA CEO). Founders and employees are incentivized through BSPCE stock options, and no secondary sales have been reported, signaling full alignment with long-term value creation. On the social dimension, Stoïk's core mission produces positive externalities by democratizing enterprise-grade cyber protection for small firms that otherwise could not afford a CISO — the company cites statistics that 60% of attacked SMEs go bankrupt. Governance benefits from the regulated-industry context: external audits, board-level compliance scrutiny, and careful handling of ethically sensitive areas such as ransom payments aligned with French LOPMI law enforcement requirements. Environmental impact is minimal given the digital-services nature of the business, though formalized ESG reporting may become necessary as Stoïk approaches CSRD employee and revenue thresholds projected for late 2026.
* '''Capital actions and timeline:''' Stoïk has raised approximately €70 million across five rounds — seed (€3.8 million, January 2022), Series A (€11 million, June 2022, led by a16z), bridge (€10 million, September 2023), Series B (€25 million, October 2024, led by Alven with Tokio Marine HCC as new strategic investor), and Series C (€20 million, January 2026, co-led by Impala and Opera Tech) — with no major investor exits and all rounds constituting primary capital. The September 2025 acquisition of CyberContract in Belgium, Stoïk's first M&A transaction, was executed largely through an equity swap that conserved cash, added 1,000 policyholders and 150 broker partners, and is expected to triple the Belgian portfolio within 18 months. The cap table now balances financial VCs seeking high-growth returns with strategic insurance investors providing capacity alignment and the Veyrat family office supplying patient capital — a combination that may afford Stoïk more freedom to pursue its long-term "CISO of Europe" vision without premature exit pressure. Plausible exit scenarios include an IPO on Euronext Paris around 2027–2028 or a strategic acquisition by a partner like Tokio Marine or Munich Re. From conception in late 2020 through early 2026, Stoïk has evolved from a four-person startup into a six-country, 10,000-client, €50-million-GWP platform — executing on schedule and building the foundation for what could become one of Europe's standout insurtech success stories.
More details are in the following sections.
{{Section separator}}
== Company profile ==
| |||