RANE Network

RANE Network

Steve Roycroft founded RANE Network in 2014, building an expert-network business focused exclusively on enterprise risk. The firm grew out of a view that corporate security, compliance, and resilience teams needed curated access to practitioners — former intelligence analysts, cybersecurity operators, geopolitical forecasters — rather than broad market-research platforms. RANE, which stands for Risk Assistance Network + Exchange, was acquired by Onclusive in 2021, a deal that folded its risk-intelligence capabilities into a larger media-monitoring and PR-software platform. RANE operates as a subscription intelligence service, not a consulting firm or broker-dealer. Its core product is an expert-call network paired with curated briefings: clients pay for access to vetted specialists and a feed of risk assessments covering geopolitical flashpoints, supply-chain disruptions, cyber threats, and physical security incidents. The network draws practitioners from government, military, law enforcement, and corporate security backgrounds. Coverage extends across North America, Europe, the Middle East, and Asia-Pacific, with a particular density in Washington, DC, New York, and London. RANE does not manage investment capital — its revenue model is enterprise SaaS with a recurring seat-license structure. The firm's scale as a standalone entity was modest prior to its acquisition; Onclusive did not break out RANE revenue in public filings. Team size is not publicly disclosed. RANE maintained an office in New York and, at various points, had a presence in London. In November 2021, RANE was acquired by Onclusive, a media-intelligence firm backed by STG, with the stated goal of integrating risk briefings into corporate communications workflows. What distinguished RANE structurally was its narrow focus on verifiable practitioner credentials. Unlike generalist expert networks that recruit broadly for management-consulting-style calls, RANE applied a compliance-grade screening process — background checks, credential verification, and ongoing quality monitoring — because its clients used the insights to inform security decisions and regulatory filings. That screening infrastructure made it a compliance-additive vendor for heavily regulated sectors such as financial services and healthcare, where sourcing unvetted external expertise carries governance risk.