Company record · security vendor
BreachRx CISO: Stephen Garcia
The current Chief Information Security Officer of BreachRx, as tracked by CISO Tribune, is Stephen Garcia, whose appointment was announced in the week of June 10, 2026 (SecurityWeek Industry Moves (week of June 8, 2026)). Read the record. The record entered the Wire on .
Career profile: Stephen Garcia on CISO Spotlights ↗
Tracked by the Wire since June 10, 2026 · 1 recorded move · every claim links to a sourced record · Updated
Where BreachRx appears on the record (40)
Every page on CISO Tribune and its network that carries this company, 40 in all.
- On the Wire
- Career profile
- Compared with (36)
vs Accenture, vs Alphabet, vs Arctic Wolf, vs BlackBerry, vs BlackCloak, vs Booz Allen Hamilton, vs CYPFER, vs Cyrenity, vs D3 Security, vs Deutsche Telekom, vs eSentire, vs FRSecure, vs Hold Security, LLC, vs ICF, vs Indra Group, vs Integrity360, vs Inversion6, vs iVerify, vs Keepnet Labs, vs Kroll, vs Kyndryl, vs Leonardo, vs NCC Group, vs Optiv, vs Parsons, vs Pentio, vs Quorum Cyber, vs Reflex Security, vs Secureworks, vs Semperis, vs ServiceNow, vs Surefire Cyber, vs Sygnia, vs Threat Intelligence, vs Veeam, vs White Hat IT Security
- In the vendor directory (2)
- Incident response vendors: who they are and how CISOs compare them · primary category
- SOC vendors: who they are and how CISOs compare them, from MDR to SIEM · vendor guide
About BreachRx
CISO Tribune's Leadership Bench files BreachRx under Cybersecurity Vendors and North America. The Wire has one security-leadership move at BreachRx on record, announced in the week of June 10, 2026.
Security leadership timeline
What Stephen Garcia has said in public
CISO Tribune's Voices section carries 1 public post or talk by Stephen Garcia. The most recent are listed with their dates.
On expressing gratitude to a colleague for their contribution to an initiative, LinkedIn, October 9, 2026.
Security chiefs at other Cybersecurity Vendors organizations
Other organizations CISO Tribune files under Cybersecurity Vendors with a named security chief on record: those in North America first, in alphabetical order from BreachRx onward.
Chainguard: Quincy Castro, Chief Information Security Officer (CISO).
Checkmarx: Kobi Sivilya, Chief Information Security Officer and Chief Information Officer.
Cognition: Alex Stamos, Chief Information Security Officer.
Concentric AI: Lane Sullivan, Chief Information Security and Strategy Officer.
Cyberhaven: Aman Sirohi, Chief Information Security Officer.
Cylerity: Drew McCombs, Chief Technology Officer and Chief Information Security Officer.
DefenseStorm: William Wetherill, Chief Information Security Officer.
EigenQ: Alexander Truskovsky, Chief Information Security Officer.
What the company sells
BreachRx sells the Rex Platform, which sits above a customer's detection and remediation stack to run the entire business response after a breach through AI-Accelerated Cyber Incident Response Management (CIRM). BreachRx describes itself as the pioneer of Cybersecurity Incident Response Management (CIRM), helping organizations manage cyber incidents as the enterprise-wide risk events they are. BreachRx says incident response, at its most critical moment, is still managed through meetings, messages and disconnected tools that were never designed for an enterprise-wide crisis. BreachRx says modern cyber incidents require cross-functional coordination, speed and documented consistency, which manual processes cannot deliver. BreachRx names SEC, CIRCIA, NYDFS and global mandates, some with one-hour clocks. BreachRx says boards and executives now need a record of who knew what, and when.
The Rex Platform provides a single, out-of-band system for enterprise incident response. The Rex Platform operationalizes incident plans, guides teams through changing conditions and maintains response communications in real time. Rex brings the response together in one shared command center, with clear ownership and a single incident record. Role-based workflows give each participant the right context, tasks, deadlines and decision points. BreachRx says teams can keep every function working from one authoritative incident record as facts change. BreachRx says the platform captures actions and decisions as they happen and maintains a contemporaneous record from escalation through resolution. BreachRx also describes keeping sensitive legal collaboration protected inside the response environment.
Rex AI Maestro coordinates specialized agents that execute tasks, update documentation and support regulatory work as an incident unfolds. Rex AI Maestro is the primary coordinator agent that interprets intent, maintains context and selects specialty agents. Rex uses agentic AI and workflow automation to help teams handle more incidents without scaling human effort at the same rate. Rex AI agents execute repeatable response work across the platform, and people make the consequential decisions.
Out-of-Band Comms gives an enterprise a trusted communications environment when corporate systems are unavailable, compromised or cannot be trusted. BreachRx says ransomware, identity takeover and business email compromise can disrupt the email, chat and conferencing a team uses to run the response. Mail, chat, meetings, Scratch Pad and Mobile Command stay tied to the active incident. The out-of-band environment includes secure video and audio meetings for live incident coordination, with support for privileged meetings, recording and transcription. Secure mobile access lets executives see live incident status, what changed and decision-ready context. Protected workstreams separate sensitive legal discussions from routine operational coordination, while role-based access gives counsel the context they need without exposing the entire incident.
Cyber RegScout maps the incident to 200+ global regulations, and disclosure and escalation deadlines surface in real time. Cyber RegScout can help organizations identify applicable rules, understand notification paths and keep analysis current as facts change. AI Tabletops on Demand help teams exercise more often, retest fixes and carry what they learn into live response workflows. Rex AI builds the scenario and produces the after-action report, inside the same governed environment used for live response.
Rex connects to communication, identity, security operations, notification, automation and ticketing tools. The workflow Rex fits into begins with alerts and findings from XDR, SIEM, SOAR and the rest of the security stack. Rex opens the case, assigns owners and starts the right playbook automatically. Legal, privacy, communications and executives are brought in with role-based tasks. Regulatory, customer and partner notifications are tracked against every deadline. BreachRx says it documents every decision and action automatically, creating an audit-ready record.
Andy Lunsford is CEO and Co-Founder of BreachRx, and has over 15 years of experience in privacy law and commercial litigation. Matt Hartley is Co-Founder and Chief Product Officer of BreachRx. BreachRx says its platform and solution are backed with contractual financial protection. BreachRx says it helps organizations operationalize cybersecurity compliance by connecting planning, response workflows, documentation and reporting in one place.[1][2][3][4][5][6][7][8]
- Categories
- Headquarters
- Not established from our sources
- Founded
- Not established from our sources
- Ownership
- Not established from our sources
- CISO on record
- Stephen Garcia, Chief Information Security Officer (appointment announced in the week of June 10, 2026)
- Website
- breachrx.com
Products and services
Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.
A single, out-of-band system for enterprise incident response.
The Rex Platform operationalizes incident plans, guides teams through changing conditions and maintains response communications in real time. Rex brings the response together in one shared command center, with clear ownership and a single incident record. The Rex Platform sits above the detection and remediation stack to run the business response after a breach.
Rex AI[4]
Maestro coordinates an agentic workforce that executes procedural incident response tasks.
Rex AI Maestro coordinates specialized agents that execute tasks, update documentation and support regulatory work as an incident unfolds. Rex AI Maestro is the primary coordinator agent that interprets intent, maintains context and selects specialty agents. Experts stay focused on decisions that require human judgment.
Out-of-Band Comms[5]
A trusted communications environment for when corporate systems are unavailable, compromised or cannot be trusted.
Mail, chat, meetings, Scratch Pad and Mobile Command stay tied to the active incident. The out-of-band environment includes secure video and audio meetings for live incident coordination, with support for privileged meetings, recording and transcription. Protected workstreams separate sensitive legal discussions from routine operational coordination.
Maps an incident to 200+ global regulations.
Cyber RegScout maps the incident to 200+ global regulations. Disclosure and escalation deadlines surface in real time. Cyber RegScout can help organizations identify applicable rules, understand notification paths and keep analysis current as facts change.
Cyber Incident Response Management (CIRM)
A governed enterprise process for incident response.
Competitors and alternatives
The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of BreachRx's categories, then alphabetical. A list from the record, never a ranking.
On incident response and forensics, BreachRx competes with CYPFER, Kroll, Surefire Cyber, Sygnia, Accenture, Alphabet, Arctic Wolf, BlackBerry, BlackCloak, Booz Allen Hamilton and 27 more.
Recent news
Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.
June 25, 2026
BreachRx announced the launch of the Rex Platform, an agentic AI incident command center. BreachRx[10]
June 16, 2026
BreachRx announced that Phil Venables, a Partner at Ballistic Ventures, has joined its Board of Directors. BreachRx[9]
References
Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.
- [1]breachrx.comBreachRx · breachrx.com · published August 18, 2026 · Tier A: the company, a regulator or a filing
- [2]BreachRx | Cyber Incident Response ManagementBreachRx · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
- [3]About BreachRx | Cybersecurity Incident Response ManagementBreachRx · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
- [4]Rex Platform | Incident Command Center for Enterprise Response | BreachRxBreachRx · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
- [5]Out-of-Band Communication for Cyber Incident Response | BreachRxBreachRx · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
- [6]BreachRx | Glossary | Cybersecurity Compliance RequirementsBreachRx · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
- [7]BreachRx | CIRM Solution | Cyber regulatory intelligence for IRBreachRx · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
- [8]BreachRx | Glossary | What is a Cybersecurity ComplianceBreachRx · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
- [9]BreachRx Appoints Phil Venables to Board of Directors as AI Attack Era Redefines Enterprise Incident ResponseBreachRx · published June 16, 2026 · Tier A: the company, a regulator or a filing
- [10]BreachRx Launches Rex Platform as AI Pushes Cyber Incidents Beyond Human ScaleBreachRx · published June 25, 2026 · Tier A: the company, a regulator or a filing
Last verified November 2, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.
Recorded September 27, 2026, expanded November 5, 2026 from the references above.
Work for BreachRx? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.
Questions CISOs ask about BreachRx
- Who is the CISO of BreachRx?
- Stephen Garcia is the current Chief Information Security Officer of BreachRx on CISO Tribune's record, appointed in the week of June 10, 2026.
- How many security-leadership moves has CISO Tribune tracked at BreachRx?
- CISO Tribune has tracked 1 move at BreachRx since June 10, 2026.
- When was Stephen Garcia appointed at BreachRx?
- Stephen Garcia's appointment as Chief Information Security Officer of BreachRx was announced in the week of June 10, 2026, per SecurityWeek Industry Moves (week of June 8, 2026).
- Who are the security chiefs at other Cybersecurity Vendors organizations?
- On CISO Tribune's record they include Quincy Castro at Chainguard, Kobi Sivilya at Checkmarx, Alex Stamos at Cognition and Lane Sullivan at Concentric AI.
- Has Stephen Garcia spoken or written publicly?
- CISO Tribune's Voices section carries 1 public post or talk by Stephen Garcia, the most recent dated October 9, 2026.
- What does BreachRx sell?
- BreachRx sells Rex Platform, Rex AI, Out-of-Band Comms, Cyber RegScout and Cyber Incident Response Management (CIRM). Rex Platform: A single, out-of-band system for enterprise incident response. Rex AI: Maestro coordinates an agentic workforce that executes procedural incident response tasks. Out-of-Band Comms: A trusted communications environment for when corporate systems are unavailable, compromised or cannot be trusted. Cyber RegScout: Maps an incident to 200+ global regulations.
- Who does BreachRx fit?
- From its own pages, BreachRx sells mainly to organizations whose incidents reach beyond the security team into the wider business. BreachRx names security, legal, privacy, IT, communications and executives as the groups that get a coordinated way to prepare for incidents, run live response and document decisions. BreachRx positions the Rex Platform above a customer's detection and remediation stack. Legal counsel is also a named audience, with role-based access to the context counsel need.
- How does CISO Tribune file BreachRx?
- CISO Tribune files BreachRx under Incident response and forensics.
Related guides
CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.