What Todyl does

Todyl, Inc. is a Denver, Colorado-based cybersecurity company founded in 2015 that delivers a single, cloud-native platform unifying SASE (Secure Access Service Edge), SIEM, MXDR, SOAR, Endpoint Security (EDR/NGAV), and GRC into one agent and one management interface. The platform is built on multi-cloud infrastructure across AWS, GCP, and Azure and is centered on two proprietary AI-driven components: the Detection & Analysis Engine (a multi-tier behavioral analytics and correlation layer covering endpoints, network, identity, and Microsoft 365/Teams telemetry) and Janus, an agentic AI security analyst that conducts autonomous incident investigations, correlates threat intelligence and CVE data, and produces natural-language explanations. The GRC module supports automated compliance mapping across CIS V8.1, CMMC, HIPAA, NIST CSF, and NIST SP 800-171, and the company has extended the platform with the Todyl Assurance Marketplace, integrating cyber insurance (SPECTRA), risk assessment (Optimize Cyber), and channel partners (GTIA) directly into MSP workflows.

Todyl sells exclusively through channel partners—Managed Service Providers (MSPs) and Value-Added Resellers (VARs)/Solution Providers—and explicitly states it "never competes with our partners." Its GTM is built around dedicated Customer Success, Account, and Security Manager roles, deal registration, lead protection, market development funds, the Todyl University training program, the Todyl Partner Community, and a tiered Partner Program that was revamped in September 2024. End-customers are predominantly SMB and mid-market businesses reached through this channel network, with vertical-specific motions in healthcare, financial services, manufacturing, education, and the Defense Industrial Base (CMMC). Pricing is quote-based and not publicly disclosed; revenue is generated via annual recurring subscriptions to the unified platform, managed service tiers (MXDR, Managed GRC), marketplace transactions, and channel enablement services.

Todyl has raised approximately $81.8 million in disclosed venture funding across four rounds through 2024, including a $28 million Series A in March 2022 led by Anthos Capital and a $50 million Series B in February 2024 led by Base10 Partners, with participation from StoneMill Ventures and TechOperators. The company was ranked No. 89 on the 2025 Deloitte Technology Fast 500 with 1,093% revenue growth from 2021 to 2024 and No. 8 in the security industry sublist on the 2025 Inc. 5000. Notable enterprise validation includes RSA selecting Todyl to replace incumbent solutions and power its own Security Operations Center in January 2026, and the company was named to CRN's 2026 Security 100 list with two executives (Darrin Swan and Ken Patterson) named to the 2026 Channel Chiefs list. Leadership includes founder and CEO John Nellen, VP of Sales Darrin Swan, Director of Channel and Community Ken Patterson, Director of MXDR Josh Rykowski, and Field CISO Andrew Scott (formerly of Leidos, CrowdStrike, and IBM).

Name

Todyl

Legal name

Todyl, Inc.

Website

https://todyl.com

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

101–250 employees

Short description

Todyl is a Denver-based cybersecurity company that delivers a single-agent unified platform consolidating SASE, SIEM, MXDR, SOAR, endpoint security, and GRC. It sells exclusively through MSP and VAR channel partners to SMB and mid-market businesses.

Ownership category

akta.pro rank

Product category

Cybersecurity Platform (Unified SASE/SIEM/MXDR/SOAR/Endpoint/GRC)

NAICS

Custom Computer Programming Services (541511), Computer Systems Design and Related Services (54151), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)

SIC

Services-Computer Integrated Systems Design (7373), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Managed OT Security Services (MSSP/MDR for ICS/OT) (HDADAJAN)

akta.pro secondary industries

Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD), OT Asset Discovery, Inventory & Vulnerability Management (HDADAJAE)

Keywords

• Unified cybersecurity platform
• Managed detection response
• Secure access service edge
• Endpoint detection platform
• Governance risk compliance

Headquarters

HQ city

Denver

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations

Revenue model

1. Subscription-based platform licensing (via channel partners): Todyl sells unified cybersecurity platform subscriptions (SASE, SIEM, MXDR, Endpoint Security, SOAR, GRC) on a recurring basis exclusively through MSP and VAR channel partners. Pricing is quote-based and not publicly disclosed (Request Pricing). The platform is delivered as a single-agent solution with multi-tenant architecture. Includes 24/7 SOC-backed MXDR services bundled or add-on.
2. GRC Software and Managed GRC Services: Todyl GRC product generates revenue through subscriptions and managed service tiers covering automated compliance mapping, security assessments, policy documentation, framework support (CIS V8.1, CMMC, HIPAA, NIST CSF), and cyber insurance/warranty facilitation via SPECTRA.
3. Todyl Assurance Marketplace transactions: Curated marketplace where vetted security vendors (Optimize Cyber, GTIA, SPECTRA) integrate directly into the platform workflow across Assess, Strengthen, Validate, and Assure stages. Generates revenue through partner integration and transaction facilitation for MSP compliance, validation, and cyber insurance proof workflows.
4. Channel partner services (training, enablement, MDF): Includes Todyl University training access, dedicated Customer Success/Account/Security Managers, deal registration, lead protection, market development funds (MDF), sales and marketing support, and Partner Advisory Council programs as part of the channel partner program.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels9 records

Core offering

Todyl sells a single, cloud-delivered unified cybersecurity platform that consolidates SASE, SIEM, MXDR, SOAR, Endpoint Security (EDR/NGAV), and GRC into one agent and one management interface, sold exclusively through MSP and VAR channel partners to SMB and mid-market end customers. The platform includes the Detection & Analysis Engine for behavioral analytics, the Janus agentic AI for incident investigation, 24/7 SOC-backed MXDR, automated compliance mapping for frameworks like CIS, CMMC, HIPAA, and NIST, and the Todyl Assurance Marketplace that integrates cyber insurance and risk assessment partners.

Product overview

Todyl delivers a single, cloud-native, unified security platform (the Todyl Unified Platform) rather than a collection of separate point products. The platform consolidates multiple security disciplines into one integrated system: SASE (Secure Access Service Edge), SIEM, MXDR (Managed Extended Detection and Response), Endpoint Security (EDR/NGAV), GRC (including Security Assessments and Managed GRC), and SOAR, all of which feed into the centrally positioned Detection & Analysis Engine. The Janus AI Agent sits on top of this stack as an agentic AI security analyst, providing autonomous multi-step investigations, threat intelligence and CVE enrichment, and natural-language explanations. The Todyl Assurance Marketplace extends the platform with integrated cyber insurance/warranty and risk assessment partners, enabling customers to move from security posture to binding coverage within the same workflow. Together, the platform modules, the Detection & Analysis Engine, Janus, and the Assurance Marketplace form a tightly integrated offering delivered to MSP, MSSP, and mid-market customers.

Differentiator

Problem solved

Functional benefit

Brands

• Janus: Todyl's agentic AI for incident investigation, providing natural-language interaction, threat intelligence enrichment, and CVE context within cases on the Todyl platform.
• Todyl Assurance Marketplace
• Todyl Partner Program
• Todyl Community

Products and services

• Todyl Unified Platform
• SASE (Secure Access Service Edge) Network security module of the Todyl platform providing secure access capabilities for distributed users and locations, replacing legacy RDP/VPN approaches.
• SIEM (Security Information and Event Management) Cloud-native SIEM capability of the Todyl platform, ingesting and correlating telemetry from endpoints, network, identity, and cloud sources to surface security events.
• MXDR (Managed Extended Detection and Response) Managed detection and response service built on the Todyl platform, combining 24x7 SOC monitoring, threat hunting, and incident response.
• Endpoint Security (EDR/NGAV) Endpoint detection and response (EDR) and next-generation antivirus (NGAV) module providing continuous endpoint protection and telemetry into the Detection & Analysis Engine.
• GRC (Governance, Risk and Compliance) Governance, Risk and Compliance module within the Todyl platform, including Security Assessments and Managed GRC capabilities for organizations to meet regulatory and framework requirements.
• SOAR (Security Orchestration, Automation and Response) SOAR capability added to the Todyl unified platform in December 2025, enabling automated response workflows and orchestrated actions across the integrated security stack.
• Detection & Analysis Engine Central analytics layer of the Todyl platform providing entity baselining, behavioral analytics, anomaly detection, and correlation across endpoints, network, identity, and Microsoft 365/Teams telemetry.
• Janus AI Agent Agentic AI security analyst that performs autonomous multi-step incident investigations, correlates threat intelligence and CVE/vulnerability data, and produces natural-language explanations and customer-ready summaries.
• Todyl Assurance Marketplace In-platform marketplace that integrates cyber insurance/warranty providers (e.g., SPECTRA) and risk assessment partners (e.g., Optimize Cyber) so customers can move from security posture to binding coverage within a single workflow.
• Security Assessments Assessment capability within the Todyl GRC module that supports frameworks such as CIS V8.1, CMMC, HIPAA, NIST CSF, and NIST SP 800-171, providing visibility into an organization's security posture.
• Managed GRC Managed Governance, Risk and Compliance service delivered on the Todyl platform, supporting compliance with common regulations and security frameworks out-of-the-box.

Quantifiable outcome

• 1,093% revenue growth from 2021 to 2024 (Deloitte Fast 500)
• +8 more outcomes

Named customers13 records

Segments8 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability8 records

Feature7 records

Partnerships

15 partnerships are on record, tiered core, flagship and minor.

• Optimize CybercoreStrategic or Co-development Partner · 26 April 2026Optimize Cyber is integrated into the Todyl Assurance Marketplace to help MSPs meet security proof, compliance, and cyber insurance requirements. Part of the curated ecosystem of vetted security vendors across Assess, Strengthen, Validate, and Assure stages.
• GTIAcoreStrategic or Co-development Partner · 26 April 2026GTIA is integrated into the Todyl Assurance Marketplace as part of the curated ecosystem of vetted security vendors. Helps MSPs deliver stronger assurance outcomes across the Assess, Strengthen, Validate, and Assure stages.
• IRONSCALEScoreStrategic or Co-development Partner · 21 April 2026IRONSCALES is a strategic partner that delivered keynote at Todyl's 2026 Partner Summit. Featured as an ecosystem partner with an active strategic partnership alongside RSA.
• Next DimensioncoreChannel Partner/ Reseller/ Distributor · 19 February 2026Next Dimension partnered with Todyl to implement a unified cybersecurity platform aimed at mid-market companies. MSP consolidated its security stack onto Todyl's platform to reduce investigation time and operational friction while scaling services for clients.
• RSA SecurityflagshipStrategic or Co-development Partner · 21 January 2026RSA, the security-first identity leader, selected Todyl to protect RSA's commercial and corporate environments and power its Security Operations Center, replacing incumbent solutions with Todyl's fully unified threat, risk, and compliance management platform. The collaboration also includes work on a Global Identity Intelligence Report. RSA is both a customer and a strategic partner — keynoted Todyl's 2026 Partner Summit and is featured in IRONSCALES/Todyl ecosystem.
• SPECTRAflagshipStrategic or Co-development Partner · 2 April 2025Todyl and SPECTRA announced a strategic partnership to revolutionize cyber insurance solutions for MSPs and their clients. SPECTRA is integrated into the Todyl Assurance Marketplace across Assess, Strengthen, Validate, and Assure stages. The partnership provides MSPs with rapid, no-fee certification process for qualified Todyl partners, marketplace access to A+ insurance policies and flexible cyber warranty tiers, and streamlined claims processes. Todyl has existing certification agreements with SPECTRA as a cyber risk assessment partner.
• 3RTminorChannel Partner/ Reseller/ Distributor · 1 January 20253RT is a Todyl MSP partner, with Sean Walmer (Director of Cybersecurity at 3RT) quoted praising the platform: "Just do it. It's incredibly easy to get pushed out. It's easy to sell. It makes sense to customers and it's been a real game changer for us. It practically sells itself."
• Forthright Technology PartnersminorChannel Partner/ Reseller/ Distributor · 1 January 2025Forthright Technology Partners announced a security practice (Forthright Cyber) enabled by Todyl. Frank Merino (COO) quoted: "We announced Forthright Cyber last year and it's truly only been possible because of our partnership with Todyl... You guys are my team and I love that."
• CMIT SolutionsminorChannel Partner/ Reseller/ Distributor · 1 January 2025CMIT Solutions is a Todyl MSP partner. John Cannata (President) quoted praising Todyl's single-product, single-agent, single-pane-of-glass approach and great support team.
• AWS (Amazon Web Services)coreTechnology or Integration · 1 January 2025Todyl is hosted on AWS as one of its cloud system providers. AWS provides infrastructure security (ISO 27001, SOC2, FedRAMP, DoD CSM, PCI DSS certified), while Todyl secures the workload deployed on this infrastructure.
• Google Cloud Platform (GCP)coreTechnology or Integration · 1 January 2025Todyl is hosted on Google Cloud Platform as one of its cloud system providers for production environment with multi-datacenter and multi-AZ redundancy.
• Microsoft AzurecoreTechnology or Integration · 1 January 2025Todyl is hosted on Microsoft Azure as one of its cloud system providers for production environment with multi-datacenter and multi-AZ redundancy.
• Todyl Revamped Partner Program (Channel Program)flagshipChannel Partner/ Reseller/ Distributor · 10 September 2024Todyl launched a revamped Partner Program in September 2024 with assigned Customer Success Manager, Account Manager, and Security Manager roles, comprehensive sales and marketing support, MDF, Todyl University training, Partner Advisory Council, and tiered benefits. The program follows Todyl's $50 million Series B funding round directed toward platform R&D and partner enablement.
• AvatarminorChannel Partner/ Reseller/ Distributor · 10 September 2024Avatar is a Todyl MSP partner. Jason Wright (CEO) quoted on the revamped Partner Program: "Partnering with Todyl has transformed the way we approach cybersecurity for our clients. The level of support and resources provided through their partner program has not only strengthened our security offerings but also significantly boosted our revenue and client satisfaction."
• TeamLogicIT DenverminorChannel Partner/ Reseller/ Distributor · 10 September 2024TeamLogicIT Denver is a Todyl MSP partner. Danielle Kazoroski (Owner and VP of Operations) quoted on selecting Todyl due to comprehensive security platform and dedicated GTM resources.

Scale indicators10 records

Recent moves7 records

Expansion highlights7 records

Direct peers

• Huntress: Huntress is an MSP-focused managed cybersecurity platform providing EDR, MDR, and security awareness training sold exclusively through the channel. Like Todyl, it targets SMB and mid-market via MSPs with a single-platform consolidation thesis, making it the closest direct competitor in channel-first cybersecurity.
• Blackpoint Cyber: Blackpoint Cyber is an MSP-exclusive MDR and endpoint security provider with a similar channel-only GTM motion. It competes directly with Todyl's MXDR and Endpoint Security modules for the same MSP partner base serving SMB clients.
• Arctic Wolf: Arctic Wolf delivers MDR, managed risk, and managed cloud monitoring via a channel-friendly partner program targeting mid-market. It overlaps with Todyl's MXDR and SIEM modules and is frequently evaluated head-to-head by MSPs seeking consolidated security operations.
• SentinelOne: SentinelOne is an endpoint/XDR platform with a Singularity platform that has expanded into SIEM and cloud security. It is one of the most direct competitors to Todyl's Endpoint Security and Detection & Analysis Engine modules, and increasingly competes for the same MSP-driven mid-market deals.
• ConnectWise: ConnectWise provides PSA, RMM, and now integrated cybersecurity solutions (ConnectWise MDR, SaaS Security) sold through MSPs. As a platform deeply embedded in MSP workflows, it competes for the same security wallet share Todyl targets, with the advantage of being the system of record for many Todyl-eligible MSPs.

Broad incumbents

• CrowdStrike: CrowdStrike's Falcon platform offers endpoint, XDR, SIEM (LogScale), identity, and cloud security — and is sold through a broad MSP/MSSP channel. As a much larger incumbent, it competes with Todyl at the platform level and Andrew Scott (Todyl Field CISO) is a former CrowdStrike executive, illustrating the talent flow.
• Palo Alto Networks: Palo Alto Networks offers Prisma SASE, Cortex XSIAM (SIEM/XDR), and Prisma Cloud as a broad security platform with growing MSP channel programs. It is the most direct broad-incumbent competitor to Todyl's unified SASE+SIEM+MXDR thesis.
• Kaseya (Datto): Kaseya owns Datto and a portfolio of MSP-focused security products including Datto EDR, SaaS Defense, and RocketCyber. As the largest MSP platform consolidator, it competes with Todyl in offering integrated endpoint and security solutions bundled into a broader MSP suite.

Emerging players

• Coro: Coro is an all-in-one SMB cybersecurity platform combining endpoint, email, network, and cloud security with an MSP-friendly GTM. It competes with Todyl for SMB-focused MSPs seeking simplified, consolidated security stacks.
• NinjaOne: NinjaOne is an MSP-focused endpoint management and security platform with strong RMM roots and growing security capabilities. While not as deep in MXDR/SIEM as Todyl, it competes for the same MSP wallet and is often a "good enough" alternative for security-light deployments.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat7 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/todylprotection
• Facebookfacebook.com/todylprotection
• LinkedInlinkedin.com/company/todyl

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Funding overview

Funding rounds4 records

Investors5 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Todyl