Cloaked

1.1 Identity and product scope

Cloaked's own current materials describe the company as a privacy-first identity management system rather than a single-point data-removal utility. The product stack now combines masked identities, data-removal workflows, call protection, password management, monitoring, and private-payment functionality, with the current public surfaces still marking Cloaked Pay as limited access or beta rather than broad GA. The onboarding guide also shows that the product is meant to work across mobile, web, browser-extension, and Mac contexts, which matters because the value proposition is ongoing identity-layer replacement rather than one-time cleanup. The enterprise site extends the same logic into workforce protection by positioning exposed employee identity data as reconnaissance material that can enable impersonation and unauthorized account access.[CO001, CO002, CO003, CO004, CO005, CO014]

1.2 Leadership, capital visibility, and governance

Public leadership disclosure in the assigned pool is narrow and founder-centric. The clearest named roles still come from the 2023 launch release, which identifies Arjun Bhatnagar as CEO and Abhijay Bhatnagar as President; that same release also anchors the last directly verifiable investor list in this chapter's evidence set. A later commercially affiliated review still describes Cloaked as founded in 2020 by the same brothers and headquartered in New York, which helps corroborate identity but does not solve the refresh-era disclosure gap around current valuation, financing mix, debt, or board composition. In practice, the company remains visibly founder-led, while outside readers still need a current cap-table and governance packet before treating the public record as a reliable diligence baseline.[CO007, CO008, CO013, CO015]

1.3 Scale signals, external challenge points, and milestone readout

Cloaked's current homepage markets large usage totals, including 170+ million calls screened, 19+ million accounts masked, and 3.3+ billion broker records removed. Those company-reported activity metrics indicate usage but do not substitute for disclosed paying-customer, revenue, or retention figures. The Google Play listing describes removal from 120+ brokers, while the homepage uses a broader 1,000+ sites formulation. Security.org further says only 350+ of those advertised sites are actual data brokers or people-search sites, underscoring that the three quantities use different denominators and should not be treated as interchangeable. A commercially affiliated review also flags that VoIP-based alias numbers may be rejected by some services and cannot place 911 calls. The net read is a product with clear public activity and feature breadth, but one that still asks investors to bridge disclosure gaps without audited public operating data.[CO009, CO010, CO011, CO012, CO015]

1.4 Exhibits

2.1 Market boundary and substitutes

The investable market is narrower than cybersecurity as a whole and broader than data-broker removal alone. Cloaked bundles two linked jobs: preventing new exposure through masked contact details and reducing existing exposure through removals, monitoring, and recovery support. Adjacent functions such as VPN, password management, dark-web alerts, scam-call screening, and identity-theft insurance strengthen the bundle but should not be counted as wholly incremental addressable spend when buyers already purchase them separately. The relevant substitutes are manual opt-outs, browser or carrier controls, standalone privacy tools, password managers, and broader identity-protection suites. This boundary avoids counting enterprise network security, credit monitoring, antivirus, or the entire identity-theft market as directly addressable Cloaked spend.[CM001, CM002, CM003, CM006, CM010, CM012]

2.2 Sizing without false precision

The assigned evidence does not contain an independent market estimate with a stated methodology, geography, period, and category definition, so a monetary TAM/SAM/SOM would be false precision. The defensible sizing lens is therefore a sequence of progressively narrower scopes: a broad privacy problem, the bundled consumer category, the currently supported United States and Canada footprint, paid household plans, the new enterprise employee-protection motion, and Cloaked's reported foothold. Company-reported operating counters demonstrate activity, not market size or recurring revenue. TechCrunch's greater-than-350,000 paying customer figure and Cloaked's greater-than-400,000-user community figure also use different denominators and should not be merged into one growth series.[CM004, CM013, CM014, CM015, CM016]

2.3 Buyers, users, payers, and adoption paths

Consumer adoption starts with an individual or household paying a recurring subscription to reduce unwanted exposure, calls, and account-level data leakage. The product's individual, couple, and family packaging makes the household the practical budget owner, while the end users experience aliases, removals, and alerts. Enterprise adoption is structurally different: the employer pays, employees receive protection, and a CISO or security team evaluates workforce exposure and aggregate risk. Public evidence establishes the enterprise use case but not pricing, contract value, procurement duration, renewal behavior, or budget classification. That makes the enterprise segment strategically relevant but not yet quantifiable as a serviceable revenue pool.[CM004, CM005, CM007, CM008]

2.4 Adoption drivers, constraints, and valuation relevance

Demand is supported by fragmented point solutions, persistent data-broker exposure, and the appeal of preventing disclosure before responding to misuse. Independent testing supplies a tangible outcome: one reviewer reported 40 exposures removed in 16 days, although 22 broker sites remained in progress. Adoption is constrained by workflow friction and category mismatch. The same review found no custom-removal service and reported that many automation packs required confirmations or CAPTCHAs while the app remained open. Buyers seeking credit or financial-account monitoring may instead prefer a broader identity suite. For valuation, the category can support subscription and enterprise expansion narratives, but absent independent market sizing, segment mix, retention, and willingness-to-pay evidence, operating counters should not be converted into revenue or market-share assumptions.[CM001, CM003, CM009, CM010, CM011, CM012, CM013]

2.5 Exhibits

3.1 Competitive landscape and buyer alternatives

Buyers can solve the privacy-exposure problem through several materially different routes: Cloaked's integrated consumer bundle, dedicated removal vendors such as Incogni and Optery, identity-monitoring suites such as Aura, narrower removal specialists such as CrabClear, or manual opt-outs combined with separate alias, password, VPN, and monitoring tools. Cloaked's own history and product pages show a deliberate expansion from masked identities into removal, scam blocking, monitoring, insurance, and payments. That breadth makes the relevant competitive boundary wider than data-removal vendors alone. It also means buyer choice turns on whether consolidation is worth more than specialist depth, transparent removal evidence, or lower entry pricing. Public scale evidence is thin: Cloaked claims more than 400,000 users, while comparable funding and customer-scale data for the alternatives are not established by the assigned evidence.[CP001, CP004, CP005, CP012, CP014, CP015]

3.2 Capability, verification, and trust posture

Cloaked's strongest visible advantage is prevention plus remediation in one product: masked contact details reduce new exposure while removal and monitoring address existing exposure. The assigned comparisons nevertheless expose a trust gap around the removal module. Security.org says its Cloaked assessment relied on published claims rather than a parallel hands-on test and found no independent removal audit; Optery, a direct competitor, likewise emphasizes screenshot-based proof that it says Cloaked lacks. Those observations should not be mistaken for neutral proof of Optery's superiority, but they identify a diligence issue that Cloaked's own feature breadth does not resolve. All About Cookies adds hands-on adverse evidence: it reported mobile glitches and no custom removals, while also crediting Cloaked with broad site coverage and privacy-specific certifications.[CP001, CP002, CP007, CP008, CP009, CP010, CP011, CP012, CP013]

3.3 Pricing and packaging pressure

Published comparisons place Cloaked above removal-only entry plans and above Aura's stated starting price, although the products are not like-for-like. Security.org listed Cloaked's annual Individual plan at $119.99, versus $95.88 for Incogni, while All About Cookies listed Cloaked from $9.99 per month and Aura from $7.00 per month. Optery's own comparison listed a $39 annual Core tier, and CrabClear's review showed how removal specialists can compete on geography, cadence, household coverage, or threat-response workflow rather than bundle breadth. These are list prices reported by publishers or competitors, not realized revenue, retention evidence, or a normalized price per successful removal. Cloaked can defend a premium only when buyers value enough of the bundled tools to avoid separate subscriptions and setup.[CP003, CP006, CP010, CP012, CP014]

3.4 Moat durability and displacement risk

Cloaked's moat appears to be integration and distribution across a recurring privacy workflow, not a publicly demonstrated technical lead in broker removal. A single household or employer relationship can span aliases, removal, call protection, monitoring, passwords, insurance, and emerging payments, which may create convenience switching costs and broader engagement than a specialist product. The same breadth creates execution risk because focused rivals can undercut price, publish more granular removal evidence, or concentrate product resources on one outcome. Multi-homing is also easy in principle: Optery explicitly encourages Cloaked users to run its free report alongside Cloaked. Without independent outcome benchmarks, enterprise renewal evidence, or disclosed channel economics, breadth should be treated as a promising distribution advantage rather than a proven durable moat.[CP005, CP008, CP009, CP011, CP013, CP015, CP016]

3.5 Exhibits

4.1 Revenue model and list pricing

The clearest monetization is a direct consumer membership sold by covered person. An independent review listed Individual, Couple, and Family plans, with monthly or discounted annual billing and the same feature bundle across tiers; this makes household size, rather than feature gating, the visible price discriminator. The same review describes a free personalized risk report before purchase, no free trial, and a 30-day money-back guarantee, indicating a scan-to-subscription acquisition path. Cloaked also operates an enterprise site focused on employee identity exposure, but the assigned evidence gives no seat price, contract term, or realized discount. These are list-price and packaging observations, not evidence of recognized revenue or mix.[CI001, CI002, CI003, CI004, CI005, CI012]

4.2 Public traction and revenue quality

Cloaked says it has more than 400,000 users and reports substantial cumulative activity: more than 170 million calls screened, 19 million accounts masked, and 3.3 billion records removed. Those counters indicate product usage, but they are not revenue, ARR, paid subscribers, or current-period volume, and the sources do not provide denominators or cohort dates. Coverage quality also needs reconciliation. Cloaked markets removal from more than 1,000 sites, while Security.org says only 350-plus are data brokers or people-search sites and the balance are general company or retailer sites; it also notes the coverage has not been independently audited. The counters therefore support adoption signals, not durable revenue quality.[CI006, CI007, CI008, CI009, CI010, CI011]

4.3 Cost structure and unit-economics gaps

The bundle requires more than static software access: call screening, account masking, recurring broker-site removal, monitoring, and an enterprise exposure-control motion all imply ongoing service and infrastructure work. Public activity volumes do not disclose the unit cost of those obligations, the share handled automatically, insurance economics, communications charges, support labor, or broker-removal exception handling. The assigned evidence contains no gross margin, CAC, payback period, churn, retention, net revenue retention, contribution margin, or realized price data. As a result, neither the scaling advantage of the software components nor the potential margin drag from service-intensive components can be quantified. The diligence package should separate consumer and enterprise cohorts and reconcile every operating metric to billings and recognized revenue.[CI007, CI008, CI009, CI010, CI011, CI012, CI016]

4.4 Capital adequacy and financial verdict

Third-party sources agree that Cloaked completed a large 2026 financing, but not on a clean underwriting denominator. Venture Capital Tracker describes $375 million of mixed equity/growth funding in March 2026, reports $375 million of total disclosed equity funding, and says the valuation is not public. Tracxn instead reports $404 million of total funding across three rounds. These figures may reflect different dates, instruments, or inclusion rules; funding raised must not be treated as cash on hand or runway. With no cash balance, burn, debt terms, preference stack, committed uses, or next-round trigger in the assigned sources, capital adequacy remains unknown. The financial verdict is therefore research-more: visible monetization and usage are encouraging, but revenue quality, margin path, and financing dependency cannot yet be underwritten.[CI013, CI014, CI015, CI016]

4.5 Exhibits

5.1 Product surfaces and customer workflow

The product is best understood as a privacy workflow rather than a single point tool. A user can replace a real email address or phone number with a Cloaked identity, receive communications in dedicated inboxes, ask the service to remove already-exposed records, screen unwanted calls, monitor breach signals, and use supporting VPN, password, and insurance features. That breadth is visible on current company surfaces and is also acknowledged by a competitor review, but breadth should not be mistaken for equal depth across modules. The enterprise surface applies the same prevention logic to employee contact data as an input to social-engineering risk. Public materials describe the workflow clearly, while providing little outcome evidence that isolates the incremental benefit of each module.[CE001, CE002, CE003, CE009, CE013]

5.2 Operating architecture and dependencies

Public evidence supports a layered operating model: browser, web, and mobile clients sit above identity generation and communications routing; broker-removal operations and monitoring services address existing exposure; call screening and insurance support address ongoing incidents. A favorable affiliate review describes client-side encryption, zero-knowledge access, and per-user databases, but the assigned evidence contains no first-party technical documentation, cryptographic design, service-level objectives, status history, or independent penetration-test report. The architecture map therefore distinguishes observed product surfaces from reported controls and does not infer implementation details that the public sources do not disclose.[CE002, CE006, CE011, CE012]

5.3 Maturity, deployment, support, and roadmap

Cloaked says the platform exited beta in October 2023, and current App Store metadata shows an actively updated iPhone application. Distribution spans a web dashboard, browser extensions, and iOS and Android apps according to a September 2026 review. Operationally, data removal is not instantaneous: that review says successful takedowns generally begin within about fourteen business days after paid activation, with repeat work required when listings return. Product maturity is uneven. Cloaked Pay is still described as beta or invite-only, and cancellation can make communications identities unusable for calls and texts, increasing switching work for customers who have adopted them broadly.[CE005, CE006, CE007, CE008, CE014, CE015]

5.4 Differentiation, trust, and technical risk

Cloaked's most distinctive product thesis is preventive compartmentalization: aliases can limit how one merchant's leak connects to a user's underlying identity. The same model creates dependencies on routing availability, VoIP acceptance, and the customer's ability to migrate accounts before cancellation. A competitor-authored comparison argues that monitoring and financial-protection depth trail fuller identity-protection suites, while an affiliate review flags 911 and verification-service limitations for virtual numbers. Publicly repeated certification claims are positive signals, not a substitute for current audit reports or control scope. Mixed third-party reports on Call Guard and inconsistent broker-count claims make performance telemetry, support data, and assurance documents priority diligence items.[CE004, CE009, CE010, CE011, CE012, CE016]

5.5 Exhibits

6.1 Customer segments and buying logic

Cloaked serves at least two distinct buying contexts. Consumers and families buy a bundled privacy membership for masked contact details, data removal, call screening, monitoring, insurance, VPN access, and password management; availability is currently framed around the United States and Canada. Enterprise messaging instead addresses employers and security teams seeking to reduce the exposed personal information attackers can use against employees. The independent review evidence suggests that frequent alias use is the clearest consumer buying reason, whereas a buyer focused only on data removal may prefer a specialist. Public evidence does not disclose segment revenue, plan mix, enterprise seat count, or payer-level economics, so the relative commercial value of these segments remains unknown.[CU007, CU008, CU009, CU010]

6.2 Adoption scale and trajectory

Current public surfaces indicate substantial use, but the metrics are not a comparable cohort or time series. Company-issued recruiting copy says more than 600,000 paying members use Cloaked. The official About page separately says the community exceeds 400,000 users, while the homepage reports more than 19 million accounts masked, 170 million calls screened, and 3.3 billion broker records removed. These figures use different units, have no common observation period, and do not disclose active-user definitions or unique customer denominators. They therefore demonstrate claimed operating scale, not independently verified customer growth, retention, or per-member engagement.[CU001, CU002, CU003, CU004, CU005]

6.3 Customer proof, outcomes, and durability

The strongest named public proof in the assigned evidence consists of consumer testimonials selected for Cloaked's homepage. Those testimonials describe fewer spam calls, removal of exposed information, and reduced stress, but they do not provide deployment dates, baseline measurements, or independently audited outcomes. Third-party reviewers report similar themes: aliases and spam reduction are common positives, while removal can take weeks, records may reappear, and some services reject VoIP numbers. This is useful product-fit evidence but not a retention dataset. No reviewed source discloses NRR, GRR, churn, renewal rates, contract length, cohort curves, satisfaction methodology, or support-resolution performance.[CU006, CU010, CU011, CU012, CU014, CU015, CU016]

6.4 Expansion paths and concentration risk

Cloaked's apparent expansion path runs from a consumer's first exposure scan or alias through broader use of removal, call screening, monitoring, and family coverage; the company is also positioning an enterprise product around employee privacy as a security control. That creates plausible cross-sell and B2B expansion surfaces, but the evidence does not show actual conversion rates, enterprise production deployments, procurement duration, annual contract value, or renewals. Cancellation may also create switching friction because a reviewed source reports that calls and texts through existing identities stop after cancellation. Without customer-level revenue or contract disclosure, top-customer, channel, and partner concentration cannot be quantified and should remain explicit diligence items.[CU007, CU008, CU013, CU016]

6.5 Exhibits

7.1 Risk ranking and decision frame

The highest residual exposure is the gap between the breadth implied by an all-in-one privacy platform and the narrower protection documented by reviewers. SecurityHero reports no credit monitoring, financial-account monitoring, or independently verified dark-web detection, while Proton describes verification and call-filtering limitations around phone aliases. Those gaps matter because the product handles contact, credential, identity, and payment-adjacent workflows: a failure can interrupt access as well as reduce protection. The ranking below therefore treats unsupported assurance as uncertainty, not as proof of a breach or violation. High-severity risks require contractual, technical, or operating evidence before investment; medium risks require monitorable remediation milestones and owner-level accountability.[CR001, CR002, CR003, CR004, CR011, CR014]

7.2 Regulatory, legal, and assurance exposure

The public evidence establishes explicit boundaries but not a complete compliance posture. Cloaked's feature page limits availability to the United States and Canada and states that the services must not be used for FCRA purposes. Public descriptions of data-removal coverage also diverge materially: the company advertises more than 1,000 people-search sites and brokers, Proton reports more than 400 brokers, and Batten reports more than 140. These may reflect different definitions, products, or vintages, but the denominator is not reconciled. Insurance language also varies by consumer and enterprise context. None of those discrepancies proves non-compliance; together they make claim substantiation, policy scope, and current assurance documentation gating diligence items.[CR005, CR009, CR012, CR013, CR015, CR016]

7.3 Operational, quality, and security execution

Phone masking is the clearest operational fault line. Proton says Cloaked uses VoIP numbers that may fail SMS verification at finance apps, government portals, and other services, and that inactive numbers can be recycled unless locked. Batten separately warns that alias numbers cannot place emergency calls. These are workflow constraints, not evidence of a platform-wide outage, but they can create support load, failed onboarding, or user lockout if the product is treated as a primary line. Product breadth adds execution risk: Cloaked Pay is described as beta or invite-only, and independent verification of dark-web detection is not present in the assigned evidence. Mitigation maturity should be judged from test results, incident history, and support metrics rather than feature-page availability.[CR001, CR002, CR003, CR004, CR011, CR014, CR016]

7.4 Dependencies, monitoring indicators, and thesis-break triggers

Cloaked's value proposition creates a concentrated dependency: aliases used across many accounts remain tied to Cloaked's infrastructure, so a shutdown, prolonged outage, loss of number inventory, or abrupt pricing change can force users to update external accounts. Enterprise positioning also depends on telecom acceptance, data-broker response, and insurance partners whose performance is not controlled solely by Cloaked. The thesis should break if verified removal coverage remains irreconcilable, critical workflows repeatedly reject aliases, portability and continuity testing cannot meet contractual recovery objectives, material security findings remain open past agreed deadlines, or policy documents do not support marketed insurance and compliance boundaries. Monthly monitoring should track alias-delivery success, verification rejection, removal aging, incident severity, support backlog, partner concentration, and policy exceptions.[CR006, CR007, CR008, CR010, CR012, CR013, CR015]

7.5 Exhibits

8.1 Decision and price discipline

The appropriate public-evidence recommendation is research-more, not buy or pass. Cloaked reports substantial usage and activity across paying members, masked accounts, screened calls, and removed records, while the latest financing gives the company resources to keep expanding. Those signals support continued diligence, but they do not establish revenue quality, retention, margins, or an investable entry price. The post-money valuation, equity-versus-growth-capital split, preference stack, and return structure remain undisclosed in the retained sources. Any investment decision should therefore be conditional on a data-room bridge from operating activity to recurring revenue and on a complete capitalization schedule.[CV007, CV008, CV009, CV015, CV016]

8.2 Financing context without false precision

SecurityWeek reported a $375 million Series B and growth-financing package and more than $400 million raised in total. Tech Funding News separately reported that the valuation and allocation between equity and growth capital were not disclosed, while describing General Catalyst's Customer Value Fund as acquisition financing intended to reduce equity dilution. FundedIQ records only the $375 million round and explicitly excludes undisclosed amounts, which helps explain why public totals differ. Its broad information-technology round-size median shows that the financing is unusually large, but it is not a comparable-company valuation benchmark and cannot support a post-money estimate.[CV001, CV002, CV003, CV004, CV005, CV006]

8.3 Bull, base, and bear underwriting

The bull case requires the company-reported scale indicators to convert into durable paid retention and enterprise expansion at attractive contribution margins. The base case assumes the financing supports product and go-to-market execution, but keeps valuation unscored until revenue quality and financing terms are verified. The bear case centers on high acquisition spend, weak retention, feature or geography constraints, and customer friction when cancelling or migrating aliases. None of the three cases can carry a defensible dollar valuation range from the assigned public evidence; each instead defines the evidence and downside triggers required before price can be underwritten.[CV004, CV009, CV010, CV011, CV012, CV014, CV015]

8.4 Exit readiness and final diligence asks

Cloaked's enterprise positioning creates a plausible second growth vector beyond consumer subscriptions, but the retained enterprise page provides neither customer outcomes nor contract economics. Exit readiness therefore cannot be assessed from public product breadth or financing size alone. Priority diligence should obtain audited revenue and gross-margin history, cohort retention by plan, consumer acquisition payback, enterprise bookings and renewals, cash burn, debt or growth-financing covenants, liquidation preferences, and the fully diluted capitalization table. Thesis-break triggers are a material down round, retention deterioration after acquisition spending, financing covenants that subordinate new equity, or an inability to reconcile company-reported member and activity metrics to billings.[CV003, CV004, CV007, CV013, CV015]

8.5 Exhibits