Fortress Information Security
Fortress Information Security is an Orlando-based cybersecurity company whose AI-powered Fortress Platform delivers Cyber Supply Chain Risk Management (C-SCRM) for U.S. critical infrastructure operators, federal agencies, and defense contractors, combining vendor data exchanges, SBOM/HBOM analysis, and Trusted AI monitoring under NERC CIP and CMMC compliance frameworks.
- Company typePrivate
- Founded2015
- HeadquartersOrlando, United States
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What Fortress Information Security does
Fortress Information Security is a privately held cybersecurity company founded in 2015 and headquartered in Orlando, Florida, that builds the AI-powered Fortress Platform for Cyber Supply Chain Risk Management (C-SCRM). The platform follows a five-step operational model (Identify, Prioritize, Assess, Resolve, Monitor) and is composed of modular components including data exchanges (A2V for vendor intelligence, NAESAD for industry collaboration, Private Catalogs for organization-exclusive insight), a Trusted AI module with AI Monitoring for Vendor Ecosystems and Products, and solution modules spanning C-SCRM, Third-Party Risk Management, Vulnerability Management, Software Supply Chain Security (SBOM/HBOM analysis), Governance Risk and Compliance workflows, and Product Provenance Assessment. Underlying AI capabilities include predictive analytics, natural language processing for vendor assessment, anomaly detection for continuous monitoring, and knowledge retrieval across structured supply chain data formats.
The company primarily serves U.S. critical infrastructure operators (energy, utilities, oil and gas, critical manufacturing) and U.S. federal government agencies and Department of Defense contractors, with additional deployments in Canada and Europe. Penetration metrics include 7 of the top 10 U.S. utilities, 3 of 6 U.S. military branches, and coverage of 40% of the U.S. power grid; government procurement is supported through GSA SCRIPTS and IDIQ contract vehicles. The platform is mapped to NERC CIP (including CIP-013 and CIP-015), CMMC, and NIST SP 800-161 compliance frameworks, providing regulatory workflow automation as a core differentiator against generalist cybersecurity vendors.
Fortress generates revenue through a combination of platform/SaaS subscriptions sold via enterprise field sales, managed services that pair the platform with human expert analysts, and professional services for assessments and remediation. Pricing is quote-based and not publicly disclosed, consistent with multi-year enterprise and government contracts. The company has raised approximately $160 million in cumulative funding across four disclosed rounds, most recently a $125 million strategic investment led by Goldman Sachs Asset Management in April 2022. Headcount is reported in the 101-250 range, and customer renewal rate is reported at 97%.
Fortress Information Security firmographics
Firmographics- Name
- Fortress Information Security
- Legal name
- Fortress Information Security LLC
- Website
- https://fortressinfosec.com
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- Fortress Information Security is an Orlando-based cybersecurity company whose AI-powered Fortress Platform delivers Cyber Supply Chain Risk Management (C-SCRM) for U.S. critical infrastructure operators, federal agencies, and defense contractors, combining vendor data exchanges, SBOM/HBOM analysis, and Trusted AI monitoring under NERC CIP and CMMC compliance frameworks.
- Ownership category
- akta.pro rank
Fortress Information Security industry classification
Industry- Product category
- Cybersecurity Software — Cyber Supply Chain Risk Management (C-SCRM)
- NAICS
- Security Systems Services (except Locksmiths) (561621), Security Systems Services (56162)
- SIC
- Services-Detective, Guard & Armored Car Services (7381)
- akta.pro primary industry
- OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)
- akta.pro secondary industry
- Supply Chain & Firmware Security for Industrial Devices (HDADAJAL)
Keywords
Where Fortress Information Security is headquartered
LocationHeadquarters
- HQ city
- Orlando
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Fortress Information Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Platform/SaaS Subscription: AI-powered platform subscriptions for supply chain cybersecurity and risk management, likely sold as annual or multi-year contracts to enterprise and government customers.
- Managed Services: Human expert managed services combined with AI-powered automation, providing depth at scale for vulnerability management, assessments, and continuous monitoring.
- Professional Services: Assessments, remediation support, and compliance consulting for critical infrastructure and government customers including NERC CIP, CMMC, and NIST SP 800-161 compliance frameworks.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise and Government Plans - Custom Pricing |
Go-to-market motion1 record
Distribution channels2 records
Marketing channels7 records
Fortress Information Security product offering
Product offeringCore offering
Fortress Information Security sells the AI-powered Fortress Platform, a cyber supply chain risk management (C-SCRM) solution that helps enterprises and government agencies identify, prioritize, assess, resolve, and continuously monitor risks across vendors, software, and hardware supply chains. The offering combines the core platform with proprietary data exchanges (A2V, NAESAD, Private Catalogs), Trusted AI monitoring, SBOM/HBOM analysis, and managed and professional services tailored to critical infrastructure and U.S. federal/defense compliance frameworks such as NERC CIP, CMMC, and NIST SP 800-161.
Product overview
Fortress Information Security offers the Fortress Platform as its core AI-powered cybersecurity product, which provides holistic supply chain defense for critical infrastructure organizations and government agencies. The platform operates on a five-step operational model: Identify, Prioritize, Assess, Resolve, and Monitor. The product portfolio includes data exchange modules (A2V for vendor intelligence, NAESAD for industry collaboration, and Private Catalogs for exclusive insights), Trusted AI capabilities for vendor and product risk monitoring, and solution modules spanning C-SCRM, TPRM, Vulnerability Management, Software Supply Chain Security, and GRC. The Fortress Platform delivers verified results of 90% faster risk resolution, 90% lower O&M costs, and 50% reduction in TCO.
Differentiator
Problem solved
Functional benefit
Products and services
- Fortress Platform
Quantifiable outcome
- 90% faster risk resolution
- +7 more outcomes
Companies that use Fortress Information Security
Customer profileNamed customers7 records
Segments3 records
Ideal customer profiles2 records
Fortress Information Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability6 records
Feature7 records
Fortress Information Security partnerships and signals
Strategic signalScale indicators12 records
Recent moves6 records
Expansion highlights6 records
Fortress Information Security competitors and assessment
Company assessmentDirect peers
- Prevalent: Prevalent offers a TPRM platform focused on vendor assessments, risk intelligence, and remediation workflows. It directly overlaps Fortress's TPRM and SBOM-adjacent capabilities and competes for similar regulated buyer budgets.
- Interos: Interos is a leading AI-driven supply chain risk management platform that maps and continuously monitors multi-tier supplier ecosystems. It is the most direct head-to-head competitor to Fortress in the C-SCRM category for both commercial and government buyers.
- ProcessUnity: ProcessUnity provides a TPRM workflow platform for vendor onboarding, assessments, and continuous monitoring, commonly evaluated against Fortress for third-party risk programs at financial services and critical infrastructure firms.
- SecurityScorecard: SecurityScorecard provides enterprise risk ratings and third-party risk management used by large enterprises and government agencies. It competes with Fortress on the TPRM and supply-chain risk visibility layer, particularly for Fortune 500 buyers.
- Bitsight: Bitsight is a cyber risk management and TPRM platform that delivers security ratings, vendor risk assessments, and attack surface analytics. It is highly comparable to Fortress on third-party risk scoring and is a frequent alternative evaluated alongside C-SCRM platforms.
Broad incumbents
- Recorded Future (Mastercard): Recorded Future, now part of Mastercard, delivers threat intelligence including supply-chain and third-party risk signals. It is a broader incumbent in threat intel but overlaps Fortress on nation-state supply-chain threat visibility for critical infrastructure and government.
- RiskRecon (Mastercard): RiskRecon, acquired by Mastercard, provides continuous third-party cyber risk monitoring and ratings for enterprise vendor ecosystems. It is a comparable incumbent in the TPRM category with strong financial-services penetration overlapping Fortress's buyer base.
- CrowdStrike: CrowdStrike is a leading endpoint and extended detection platform that has expanded into TPRM, supply-chain security, and Falcon for IT/OT. It is a broad incumbent whose growing supply-chain offerings compete with Fortress for enterprise security budget.
- Tenable: Tenable is a major exposure management and vulnerability management platform with industrial cybersecurity offerings (Tenable OT) used by critical infrastructure operators. It overlaps Fortress on vulnerability management and asset-level supply chain risk visibility.
Emerging players
- Whistic: Whistic is a vendor security assessment network enabling proactive sharing of security documentation between vendors and customers. It overlaps with Fortress's A2V/NAESAD-style data exchange concept and competes for the same proactive TPRM budget.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Fortress Information Security social profiles
Digital presenceFortress Information Security compliance and trust
Trust signalCompliance1 record
Fortress Information Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Fortress Information Security leadership team
Management profileNumber of profiles
Profiles6 records
Fortress Information Security funding detail
Funding detailFunding overview
Funding rounds4 records
Investors10 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Fortress Information Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Fortress Information Security
What does Fortress Information Security do?
Fortress Information Security sells the AI-powered Fortress Platform, a cyber supply chain risk management (C-SCRM) solution that helps enterprises and government agencies identify, prioritize, assess, resolve, and continuously monitor risks across vendors, software, and hardware supply chains. The offering combines the core platform with proprietary data exchanges (A2V, NAESAD, Private Catalogs), Trusted AI monitoring, SBOM/HBOM analysis, and managed and professional services tailored to critical infrastructure and U.S. federal/defense compliance frameworks such as NERC CIP, CMMC, and NIST SP 800-161.
Is Fortress Information Security a public or private company?
Fortress Information Security is a private company. It is classified as venture growth investor backed and is currently operating.
When was Fortress Information Security founded?
Fortress Information Security was founded in 2015. It employs 101 to 250 people.
Where is Fortress Information Security based?
Fortress Information Security is headquartered in Orlando, United States, in the North America region.
How does Fortress Information Security make money?
Three revenue lines are on record. Platform/SaaS Subscription is the primary driver. The others are managed Services and professional Services.
Who are Fortress Information Security's main competitors?
Direct peers on record are Prevalent, Interos, ProcessUnity, SecurityScorecard and Bitsight. Broad incumbents are Recorded Future (Mastercard), RiskRecon (Mastercard), CrowdStrike and Tenable. Whistic is listed as an emerging player.
Does Fortress Information Security have an API?
No public API is recorded for Fortress Information Security.
What industry is Fortress Information Security in?
Fortress Information Security's product category is Cybersecurity Software — Cyber Supply Chain Risk Management (C-SCRM). Its primary akta.pro industry code is BPAKAHAN, OT/ICS & Critical Infrastructure Cybersecurity Services, with a secondary code of HDADAJAL, Supply Chain & Firmware Security for Industrial Devices. Its NAICS code is 561621 and its SIC code is 7381.