Reken

• Google and Apple are both reported to be working on on-device AI phishing detection, so either could bundle similar on-device protection into products buyers already use.
• Reken has named no customer since coming out of stealth, so the Fortune 500 testing it describes cannot be checked through a reference call.
• Reken has published no performance benchmark or independent evaluation, so a buyer cannot compare Northstar's accuracy against the rivals Fortune names.
• Northstar blocks threats rather than raising alerts for investigation, which makes false-positive handling material, and no error rate appears in the reviewed record.
• The cross-organization half of the Reken Network depends on a customer's suppliers, partners and customers also using Reken, and no organization inside that network appears in the reviewed record.

Reken targets the moment an employee has to judge whether a message is real. Its problem page argues that attackers blend malicious actions into normal behavior, leaving threat detection caught between false positives and false negatives. The same page argues that phishing training does not work and that deepfake detection rarely settles the question, because legitimate content is now often AI-generated too.

Independent sources quantify both halves of that argument. Fortune reports that the FBI's Internet Crime Complaint Center logged $20.9 billion in cybercrime losses in 2025, a 26% rise, and added AI-related crime as a category it had not reported before. An MIT CSAIL event page describes a study, presented by a University of Chicago researcher, that ran an 8-month randomized experiment across more than 19,500 employees and concluded that common anti-phishing training programs are unlikely to offer significant protective value.

The buyer is an institution. The early-access form asks for a name, title, organization and work email, and Fortune reports that the program opened to corporations, government agencies and universities. Reken's product page carries an endorsement from Jim Routh, a former chief information security officer at American Express and MassMutual, which aims the pitch at the security office. [s4, s7, s12, s6, s3]

Reken describes its architecture on its own pages. The Reken Private Core is an on-device subsystem with three named components: Model Zero, which combines proprietary models Reken trains with ensemble learning to analyze incoming data, a Trust Sensor that verifies human activity on outgoing communication, and an API that lets applications connect to the core. The vendor says those models run on average devices without GPUs.

Northstar applies that core to messages as they arrive. The product page says it blocks threats instead of generating alerts for investigation, works inside email, direct messages and group chat, and needs no server integration. Fortune reports that the central research problem was making the models fast enough on standard corporate laptops to block a threat in real time.

No independent measurement of the product appears in the reviewed record. Biometric Update reports that the company has published no performance benchmarks, no customer case studies and no independent evaluations of detection accuracy. Reken's own navigation offers a problem page, a platform page, a product page and an about page, and exposes no documentation, API reference or self-serve test path. [s2, s3, s7, s8]

Reken's differentiator is where the analysis happens. Fortune reports that competitors such as Abnormal and Doppel also use AI to analyze communications, and that most of them transmit data to cloud-based services. Reken runs its models on the device instead, and Fortune reports Ghosemajumder's argument that sending data to the cloud adds breach risk and lag.

Reken is not alone in that placement. Fortune reports that Google and Apple are both said to be working on AI-powered phishing detection that would run on device, the same placement Reken presents as its edge, and that neither has rolled out a product yet. If either ships it, a buyer has one fewer reason to buy the capability separately.

The Reken Network is the one documented mechanism that could get harder to match as adoption grows. The platform page says organizations using Reken join a network without exchanging confidential data or configuring anything between them, and Fortune describes suppliers and partners joining a widening protected circle as they adopt Northstar. No organization inside that network appears in the reviewed sources, so Reken has not yet shown the adoption that argument needs. [s7, s2, s3]

Reken offers Northstar through an early-access application. The form asks for a name, title, organization and work email, and Fortune reports that the program opened to corporations, government agencies and universities. The reviewed pages offer no trial and no self-serve purchase alongside that form, which makes this an enterprise qualification motion.

The commercial proof on the record is an endorsement. Reken's product page quotes Jim Routh, a former chief information security officer at American Express, DTCC, Aetna/CVS Health and MassMutual, saying there is nothing like this available to CISOs. Reken told Fortune it had tested the product in Fortune 500 environments and would not name them.

No named buyer appears in the reviewed record. Biometric Update reports that Reken has published no customer case studies, and no pilot count, contract or revenue figure appears in the reviewed sources. Investor backing from Greycroft and FPV Ventures is the financial proof on the record, and the record carries no named adoption proof or disclosed commercial result beside it. [s6, s7, s3, s8, s9]

The team is the strongest verifiable thing about Reken. SecurityWeek reports that Shuman Ghosemajumder was Google's global head of product for trust and safety and later head of AI at F5 and CTO at Shape Security, and that Rich Griffiths was VP of product at Shape. Fortune reports that F5 acquired Shape for a billion dollars in 2020, and published a correction clarifying that Ghosemajumder was an early Shape employee rather than a co-founder. An InfoQ podcast published in December 2025 introduced him as one of three keynote speakers at QCon AI that month.

The domain fit is direct. Reken's about page says the co-founders led the creation of Shape Security products that used AI to defend large banks, airlines and federal agencies against bots and cybercrime. That is an institutional buyer overlapping the corporations, government agencies and universities Northstar now serves, though the adversary there was bots using fake accounts and stolen passwords rather than social engineering aimed at people. Ghosemajumder also founded Google's Trust and Safety product group and helped launch Gmail.

Reken now names staff beyond its two founders. Reken's about page names Sébastien Soudan as lead architect and Suraj Venkata Raman as head of design, and a published Reken patent application lists Ghosemajumder, Griffiths, Soudan, Raman and Christian Glauch as inventors. [s10, s7, s5, s13, s11]

Reken's answer to the third-party-risk question is architectural. The platform page says data is kept on the device and confidential content is not sent to third-party clouds or frontier models, which is the structural answer to what a security team would otherwise ask of a product that reads employee messages.

The probed surfaces carry no formal assurance. The trust, security and compliance paths on reken.ai return 404, the trust and security subdomains do not resolve, and a random control subdomain does not resolve either, so the missing subdomains are a real absence rather than a wildcard artifact. No SOC 2, ISO 27001 or FedRAMP reference appears on the home, platform, product, problem, about, signup or privacy pages.

A privacy policy is the one published commitment. It took effect on 2026-07-13, says Reken does not sell or rent personal information, and sets out access, deletion and correction rights for California, EU and UK residents. That is a stated commitment rather than an audited control, so a buyer evaluating a product that reads employee messages has nothing independent to review. [s2, s14, s16, s15, s1, s3, s4, s5, s6]

Add analyzed competitors to compare them side by side with Reken.

Reken addresses organizations whose employees are the target, and it now names the attacks plainly. Biometric Update lists the attacks Northstar detects as phishing, impersonation, business email compromise and other social engineering, and Reken's product page places them inside email, direct messages and group chat. Fortune reports that the early-access program opened to corporations, government agencies and universities, and the application form asks for an organization and a work email, so the served buyer is an institution.

The pitch is aimed at the security office. Reken's product page says Northstar replaces phishing training and blocks threats instead of generating alerts for investigation, and it quotes Jim Routh, a former chief information security officer at American Express, DTCC, Aetna/CVS Health and MassMutual. Both moves address the person who holds the security budget.

Adoption has not narrowed the segment yet. No named customer, design partner or vertical focus appears in the reviewed sources, and Reken told Fortune it had tested the product in Fortune 500 environments without naming them. Whether Reken concentrates on the banks its founders' prior Shape Security products defended, or sells broadly, stays unobservable while the product is in early access.

The shipped architecture is an on-device subsystem Reken calls the Private Core, with three named parts. Model Zero combines proprietary models Reken trains with ensemble learning to analyze incoming data and detect threats. A Trust Sensor uses signals to verify human activity on outgoing communication and transactions, and an API lets any application connect to the core.

The engineering claim is speed on ordinary hardware. The platform page says the models run on average devices without GPUs, and Fortune reports that proving high-quality results on standard corporate laptops, fast enough to block a threat in real time, was the central research problem. Northstar turns that into an active control, blocking threats rather than generating alerts for investigation, and the vendor says it needs no server integration.

Every capability claim traces back to Reken. Biometric Update reports that the company has published no performance benchmarks, no customer case studies and no independent evaluations of how accurately the system detects attacks. A buyer can read a concrete architecture and still cannot see how it performs outside the early-access program.

Entry runs through an application form, which makes this an enterprise qualification motion. The form asks for name, title, organization and work email, and Fortune reports that the program opened to corporations, government agencies and universities. The reviewed pages offer no trial and no self-serve purchase alongside that form.

The commercial proof on the record is an endorsement. Reken's product page quotes Jim Routh, a former chief information security officer at American Express, DTCC, Aetna/CVS Health and MassMutual, saying there is nothing like this available to CISOs. The reviewed record does not identify Routh as a customer, so his endorsement is not a deployment reference.

The launch itself was the go-to-market event. Fortune covered it as an exclusive on 13 July 2026, Biometric Update wrote it up two days later, and Reken issued its own wire release naming Greycroft, FPV Ventures and the rest of its seed investors. Those are launch-cycle signals, and no named customer, pilot count or revenue figure appears in the reviewed sources.

Reken publishes no price. The reviewed pages carry no tier, rate or charging unit, and the route to the product runs through the early-access application. That is consistent with qualifying early adopters before publishing a commercial model, and the reviewed record does not show Reken's commercial terms.

One cost argument is already on the record. The platform page says local models require zero additional AI token costs, because inference happens on the device rather than against an outside model provider. Fortune reports Ghosemajumder's related claim that sending data to the cloud adds breach risk and lag for users.

The eventual unit will show what Reken believes buyers pay for. Charging per protected user or device would frame Northstar as workforce protection, while charging applications for Private Core access through the API would frame the platform as infrastructure. The reviewed record does not show which Reken will choose.

Delivery is software that runs on the user's own device. The Private Core executes local models on the machine, and the Northstar page says protection is immediately effective with no server integration required, so the deployment the vendor describes happens on the endpoint.

Reken presents the on-device design as an operational advantage. Data stays on the device, inference happens near real time without GPUs, and the platform page says the design minimizes Internet-exposed attack surface and avoids sending confidential data to third-party clouds or frontier models. Those are architecture claims a security review would test, and no independent operational evidence appears in the reviewed record.

Blocking raises the reliability bar. Northstar blocks threats inside email and chat rather than generating alerts for investigation, so a false positive would interrupt real communication. No error rate or tuning control appears in the reviewed record, so a buyer cannot size that risk before deploying.

Reken's answer to the third-party-risk question is architectural. The platform page says data is kept on the device and confidential content is not sent to third-party clouds or frontier models, which is the structural answer to what a security team would otherwise ask of a product that reads employee messages.

The probed surfaces carry no formal assurance. The trust, security and compliance paths on reken.ai return 404, the trust and security subdomains do not resolve, and a random control subdomain does not resolve either, so the missing subdomains are a real absence rather than a wildcard artifact. No SOC 2, ISO 27001 or FedRAMP reference appears on the home, platform, product, problem, about, signup or privacy pages.

A privacy policy is the one published commitment. It took effect on 2026-07-13, says Reken does not sell or rent personal information, and sets out access, deletion and correction rights for California, EU and UK residents. That is a stated commitment rather than an audited control, so a buyer evaluating a product that reads employee messages has nothing independent to review.

Reken now presents a platform with an application on top of it. The Private Core is the subsystem, the Reken API is the vendor's stated path for any application to connect to it, and Northstar is its first application, so the platform claim has named parts and a working example.

The ecosystem around it is undocumented beyond Reken. No third-party application, integration or partner appears in the reviewed sources, and Fortune reports that letting outside developers build on the Private Core is something Reken plans. What a buyer can observe is a vendor platform serving its own first application.

The Reken Network is the compounding claim, and no member appears in the record. The platform page says organizations using Reken join the network without exchanging confidential data or configuring anything between them, and Fortune describes suppliers and partners joining a widening protected circle as they adopt Northstar. No organization inside that network appears in the reviewed sources, so the network is a stated mechanism rather than a demonstrated one.

The team is the company's strongest verifiable asset, and the record is now both first-party and independent. Reken's about page says the co-founders led the creation of Shape Security products that used AI to defend large banks, airlines and federal agencies, and that Ghosemajumder founded Google's Trust and Safety product group and helped launch Gmail. SecurityWeek independently corroborates their senior Shape roles and Ghosemajumder's Google trust-and-safety leadership, and an InfoQ podcast published in December 2025 introduced him as one of three keynote speakers at QCon AI that month.

Fortune corrected one detail of that record in public. Its story states that F5 acquired Shape Security for a billion dollars in 2020, and its correction says Ghosemajumder was an early Shape employee rather than a co-founder. SecurityWeek reports that Rich Griffiths was VP of product at Shape.

Reken now names staff beyond its two founders. Its about page names Sébastien Soudan as lead architect and Suraj Venkata Raman as head of design, and a published Reken patent application lists Ghosemajumder, Griffiths, Soudan, Raman and Christian Glauch as inventors.