What CISO Global does

CISO Global (NASDAQ: CISO), headquartered in Scottsdale, Arizona, is a publicly traded provider of cybersecurity consulting and managed security services founded in 2019 (originally as Cerberus Cyber Sentinel Corporation, renamed in 2023). The company operates a "program-first" model that combines expert-led managed services with four proprietary software platforms: Argo Security Management (a SaaS dashboard that aggregates security data across the client's environment), CHECKLIGHT® (ML-based endpoint protection backed by a $1.5M breach warranty, originating from the SB Cyber Technologies acquisition), CISO Edge (a cloud-first Secure Service Edge platform providing ZTNA, CASB, RBI, and cloud firewall), and TiGRIS (a FedRAMP-authorized GRC platform operated by wholly owned subsidiary TalaTek).

The company generates revenue across four streams: recurring managed cybersecurity services (24/7 SOC monitoring, MDR, XDR, SIEM, SOCaaS, incident response, vulnerability management), software subscriptions for the four proprietary platforms, professional services (risk assessments, pen testing, vCISO, compliance consulting), and compliance-as-a-service programs. It serves over 600 clients across regulated verticals — healthcare, energy and utilities, financial services, federal government/DoD contractors, state/local/tribal government, and M&A due diligence — supported by deep compliance expertise across 60+ frameworks (HIPAA, CMMC, FedRAMP, FISMA, NERC CIP, SOC 2, PCI DSS, NIST, ISO 27001, GDPR). TalaTek's status as a Cyber AB-authorized C3PAO and FedRAMP 3PAO is a rare credential that enables direct federal/defense certification revenue.

CISO Global has grown aggressively via M&A — completing at least 17 acquisitions since founding (including VelocIT, Arkavia Networks, and SB Cyber Technologies), with offices in Arizona, Virginia, New Jersey, and Santiago, Chile. Recent strategic moves include a $9M debt-to-preferred restructuring (August 2025), a $15M B. Riley Securities Preferred B financing, and the January 2026 launch of CyberSimple® for the dental vertical via a TeleDental.com partnership targeting ~190,000 US practices. The company reports positive EBITDA in 2024, but LTM revenue declined ~12% to ~$27.7M with Q3 2025 revenue of $20.34M, while operating losses narrowed materially (Q3 2025 loss of $6.67M, a $5.98M YoY improvement). It currently faces a Nasdaq minimum bid price non-compliance notice with until June 29, 2026 to regain compliance.

Name

CISO Global

Legal name

CISO Global, Inc.

Website

https://ciso.inc

Company type

Public

Founded year

2019

Operating status

Operating

Headcount range

101–250 employees

Short description

CISO Global is a Scottsdale, Arizona-based publicly traded (NASDAQ: CISO) managed cybersecurity services and software provider serving over 600 clients across healthcare, energy, financial, federal/DoD, and government verticals with a FedRAMP-authorized GRC platform, ML-backed endpoint protection, and compliance expertise across 60+ frameworks.

Ownership category

akta.pro rank

Product category

Managed Cybersecurity Services and Compliance Software

NAICS

Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (54151), Security Systems Services (56162), Computer Systems Design and Related Services (5415)

SIC

Services-Computer Integrated Systems Design (7373), Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

akta.pro secondary industries

Security Operations Center (SOC) & Remote Video Guarding (VSOC) (BPABAMAF), Security Management Platforms Integration (PSIM/SOC, Command & Control) (BPAKAGAH), IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)

Keywords

• Managed cybersecurity services
• Endpoint protection software
• Governance risk compliance
• Incident response services
• Penetration testing services

Headquarters

HQ city

Scottsdale

HQ country

United States

HQ region

North America

Offices4 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Managed Cybersecurity Services: Recurring managed security services including 24/7 SOC monitoring (SOCaaS), Managed Detection & Response (MDR), Managed SIEM, Managed XDR, patch and vulnerability management, incident response, and secure managed IT. Delivered as ongoing subscriptions or contractual arrangements, forming the core recurring revenue base.
2. Software Subscriptions (CHECKLIGHT®, Argo, CISO Edge, TiGRIS): Proprietary software platforms sold on a subscription basis. CHECKLIGHT® provides endpoint protection with a $1.5M warranty. TiGRIS is a FedRAMP-authorized GRC platform. Argo Security Management provides unified security visibility. CISO Edge provides cloud security. The company is actively transitioning toward a software-led recurring revenue model with higher margins.
3. Professional Services: Expert-led cybersecurity and compliance consulting services including risk assessments, audit and compliance assessments (HIPAA, CMMC, FedRAMP, SOC 2, NIST, etc.), penetration testing, vCISO services, tabletop exercises, incident response retainers, C3PAO certification assessments, and security awareness training. Delivered as project-based or retainer engagements.
4. Compliance as a Service: Managed compliance programs that help organizations maintain ongoing compliance across multiple frameworks (HIPAA, CMMC, FedRAMP, NERC CIP, SOC 2, etc.). Includes gap assessments, policy development, evidence management, annual affirmations, and continuous monitoring through TiGRIS GRC platform. Typically delivered as part of managed service engagements.

Pricing tiers

Go-to-market motion2 records

Distribution channels6 records

Marketing channels6 records

Core offering

CISO Global delivers a unified cybersecurity program that combines expert-led managed security services with four proprietary AI-powered software platforms: Argo Security Management (unified SaaS dashboard), CHECKLIGHT (warrantied endpoint protection), CISO Edge (cloud-first Secure Service Edge), and TiGRIS (FedRAMP-authorized GRC platform). The offering spans 24/7/365 SOC monitoring, MDR/XDR/SIEM, incident response, vulnerability management, penetration testing, and advisory/compliance services across 60+ frameworks including CMMC, FedRAMP, HIPAA, NERC CIP, and SOC 2.

Product overview

CISO Global offers a platform-plus-modules architecture combining expert-led managed cybersecurity services with a suite of four proprietary enterprise software products. The software portfolio comprises Argo Security Management (a SaaS security management dashboard that aggregates data across the entire environment), CHECKLIGHT (warrantied endpoint protection using ML-based threat detection), CISO Edge (cloud-first Secure Service Edge platform), and TiGRIS (FedRAMP-authorized GRC platform). These software products are supported by managed service offerings spanning Risk & Compliance (60+ frameworks), Managed Cybersecurity (MDR, XDR, SOCaaS, SIEM, incident response), Secure IT & Architecture (firewall, DPaaS, remediation), and Security Testing & Training (pen testing, Red/Purple Team, awareness training). The company also offers verticalized solutions for dental practices (CyberSimple powered by CHECKLIGHT) and serves industries including healthcare, energy/utilities, financial, federal/DoD, and M&A due diligence.

Differentiator

Problem solved

Functional benefit

Brands

• CHECKLIGHT: Endpoint protection technology providing continuous threat detection with up to $1.5 million warranty.
• Argo Security Management
• CISO Edge Cloud Security Platform
• TiGRIS
• MVP (Managed Vulnerability Program)
• DPaaS (Data Protection as a Service)

Products and services

• Argo Security Management A proprietary SaaS-based security management platform that aggregates and curates security data in real time from a client's entire environment, including network assets, deployed cyber tools, SOC services, vulnerability management, and managed IT data. Generates individual risk profiles per network asset to prioritize threats based on asset value. Integrates with Azure Sentinel, AlienVault, Chronicle SOAR, SentinelOne, Microsoft Defender, Stellar Cyber, Nessus, KnowBe4, ZenGRC, and Autotask.
• CHECKLIGHT Security Monitoring A warrantied endpoint protection software backed by a $1,500,000 breach warranty that uses next-generation signature, behavior, and machine learning algorithms to continuously scan and protect endpoints. Specializes in kill chain methodology for zero-day virus protection, recognizes known/unknown malware and malware-less attacks (WMI, PowerShell, VBA), and works across Windows, MacOS, and Linux with minimal system resources.
• CISO Edge Cloud Security Platform A cloud-first Secure Service Edge platform providing integrated security connecting users to cloud and web-based services. Capabilities include Threat-informed Cloud Firewall as a Service (FaaS), Zero Trust Network Access (ZTNA), Remote Browser Isolation, Threat Intelligence Services, and Cloud Access Security Broker (CASB). Centralizes security stack for policy enforcement regardless of user location.
• TalaTek Intelligent Governance and Risk Integrated Solution (TiGRIS) A FedRAMP-authorized SaaS GRC platform combining proven processes with expert guidance for managing risk lifecycles, continuous monitoring, and streamlined compliance assessments. Integrates People, Process, and Technology to automate GRC activities and measure risk holistically across technical, operational, and management controls. Supports COBIT, CSF, FedRAMP, FISMA, GDPR, HIPAA, NERC CIP, NIST, PCI, and RMF frameworks.
• Managed Cybersecurity Services (MDR, XDR, SOCaaS, Managed SIEM) A broad suite of expert-led managed cybersecurity services delivered as a unified program, including 24/7 Security Operations Center monitoring, Managed Detection and Response (MDR), Managed SIEM, SOC as a Service (SOCaaS), Extended Detection and Response (XDR), incident response, and vulnerability management. Delivered as recurring subscriptions for enterprise clients.
• Risk & Compliance Services Advisory, audit, and compliance services covering over 60 frameworks including HIPAA, CMMC, FedRAMP, NERC CIP, SOC 1/2/3, ISO 27001/27002, GDPR, CCPA, FISMA, NIST, and PCI DSS, delivered by seasoned compliance and security experts. Includes vCISO services, managed GRC, and risk assessments.
• Secure Managed IT & Architecture Services End-to-end network and device management solutions including Managed Firewall Services, Data Protection as a Service (DPaaS), Vulnerability Remediation, and Secured Managed Services (SMS) designed to harden infrastructure and maintain security over time.
• Security Testing & Training Services Penetration testing services, attack simulation exercises (Red Team, Purple Team), and security awareness training programs designed to increase cybersecurity readiness and resiliency for client organizations.
• Managed Vulnerability Program (MVP) Patch and vulnerability management service that identifies, prioritizes, and remediates vulnerabilities across the IT environment as part of the managed cybersecurity offering.
• Incident Response Services Expert-led cybersecurity incident response service providing rapid evaluation, containment, eradication, and recovery from cyber attacks including ransomware, breaches, and advanced persistent threats, delivered by certified analysts from the U.S.-based SOC.
• CMMC and FedRAMP Assessment Services (via TalaTek) Official CMMC Level 2 certification assessments conducted by Cyber AB-authorized C3PAO TalaTek, plus FedRAMP Third-Party Assessment Organization (3PAO) readiness assessments, security assessment planning, execution, and annual assessments for DoD contractors and federal agencies.

Quantifiable outcome

• 93% client retention rate
• +7 more outcomes

Named customers7 records

Segments9 records

Ideal customer profiles7 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration162 records

AI capability7 records

Feature5 records

Partnerships

Three partnerships are on record, tiered core and minor.

• TeleDental.com / DentalChat.comcoreStrategic or Co-development Partner · 15 January 2026CISO Global announced a strategic partnership with TeleDental.com and DentalChat.com to launch CyberSimple® powered by CHECKLIGHT®, a cybersecurity solution specifically designed for dental practices. The collaboration initially extends protection to over 358 dental clinics, with expansion potential across approximately 190,000 U.S. dental practices representing a ~$350 million annual addressable market. The platform provides up to $1.5 million in financial protection against cyber threats while helping dental offices achieve HIPAA compliance.
• Technology Integration Partners (Argo Ecosystem)coreTechnology or IntegrationArgo Security Management platform integrates with and visualizes data from a broad ecosystem of technology partners including Azure Sentinel, AlienVault, Chronicle SOAR (formerly Siemplify), SentinelOne, Microsoft Defender, Stellar Cyber, Nucleus, Nessus, SecPod Technologies, Datto, Veeam, KnowBe4, ZenGRC, and Autotask. These integrations enable comprehensive, real-time security data aggregation across client environments.
• London Fischer LLPminorImplementation/ SI/ Consulting PartnerLondon Fischer LLP serves as the legal partner for CHECKLIGHT® breach claims. CHECKLIGHT® customers with active subscriptions who believe they have been breached can contact London Fischer LLP at a dedicated phone number and email to initiate the claim process. The firm is located at 59 Maiden Lane, New York, NY 10017.

Scale indicators15 records

Recent moves7 records

Expansion highlights6 records

Emerging players

• A-LIGN: A-LIGN is a specialized cybersecurity compliance and audit firm providing SOC 2, ISO 27001, HIPAA, FedRAMP, and CMMC assessments. It is highly comparable to CISO Global's compliance/GRC practice and TalaTek's C3PAO services.

Broad incumbents

• Palo Alto Networks (Unit 42): Palo Alto Networks offers an integrated cybersecurity platform plus Unit 42 managed detection, response, and consulting services. It is a broad incumbent against which CISO Global competes in enterprise MDR/XDR and compliance advisory markets.
• Rapid7: Rapid7 provides security analytics (InsightIDR), vulnerability management, and managed detection/response services. It is a broad incumbent in the same MSSP/analytics ecosystem as CISO Global's managed services and Argo platform.
• CrowdStrike: CrowdStrike is a dominant endpoint and XDR platform that increasingly bundles managed detection/response services (CrowdStrike Falcon Complete). It competes with both CISO Global's CHECKLIGHT endpoint product and its MXDR services, though CrowdStrike operates at much greater scale.

Direct peers

• Expel: Expel is a transparent, tech-forward MDR provider known for its SaaS-based security operations platform. It overlaps directly with CISO Global's MDR/XDR service offerings and shares a similar mid-market customer base.
• Arctic Wolf Networks: Arctic Wolf is a leading pure-play MDR/SOCaaS provider offering 24/7 managed detection, response, and security operations. It is the most direct competitor to CISO Global's managed cybersecurity services line, serving similar mid-market and regulated-industry customers.
• eSentire: eSentire is a pure-play MDR provider with 24/7 SOC, threat hunting, and managed XDR capabilities. It serves a comparable mid-market customer profile and competes head-to-head with CISO Global's managed security services.
• Trustwave: Trustwave is an MSSP and MDR provider offering managed security services plus compliance/GRC advisory (including FedRAMP, PCI QSA, and CMMC-adjacent services). Comparable to CISO Global across both managed services and compliance practice.
• Secureworks (now part of Sophos): Secureworks is a long-established MSSP/MDR provider (now owned by Sophos) offering managed detection, incident response, and compliance services. It is a close comparable in terms of full-spectrum cybersecurity services and federal-sector exposure.
• ReliaQuest: ReliaQuest delivers enterprise-grade MDR and security operations platform (GreyMatter) with a comparable SOC-as-a-service model and threat-detection focus. It competes with CISO Global in mid-to-large enterprise segments across regulated industries.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/CerberusCSC
• YouTubeyoutube.com/@cisoglobalinc
• Facebookfacebook.com/CISOinc
• LinkedInlinkedin.com/company/cisoglobal
• Instagraminstagram.com/cisoglobalinc

Compliance28 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Subsidiaries4 records

Funding overview

Funding rounds6 records

Investors3 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A14 records

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CISO Global