Building Trust and Transparency
in Application Security Programs

RiskApp was founded by Matthew Fox and Rafael Carvalho, two security-minded builders who saw a fundamental problem in how organizations handle application security data. Security teams often struggle with fragmented tools, incomplete visibility, and misinterpreted risk—a challenge that slows down decision-making and leaves organizations exposed.

Matt, with years of experience scaling cyber startups, and Rafael, a deeply technical engineer passionate about application security, set out to change that. They built RiskApp to cut through the noise, providing security leaders with actionable insights, better traceability, and the clarity needed to drive AppSec forward.