NSS Labs
NSS Labs is an independent cybersecurity product testing and validation company serving enterprises, security vendors, and service providers. Its Minion platform delivers AI-enabled continuous control validation across firewalls, SSE, SD-WAN, ZTNA, AI security, and post-quantum cryptography.
- Company typePrivate
- Founded2007
- HeadquartersAustin, United States
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What NSS Labs does
NSS Labs is an independent cybersecurity product testing and validation company headquartered in Austin, Texas. Originally founded in 2007 by Vikram Phatak and operated as NSS Labs, Inc. through 2020, the business re-emerged in 2025 as NSS Labs LLC, a privately held entity owned by its executive team. The company serves three distinct buyer segments: enterprises that require third-party validation of deployed security controls, security vendors that need credible independent ratings to support marketing and procurement cycles, and service providers/MSPs that differentiate offerings through validated efficacy. Customer logos span Check Point, Palo Alto Networks, Fortinet, Zscaler, Versa, Cloudflare, F5, Juniper Networks, Forcepoint, Rapid7, Sangfor, and Google.
The company's core product is Minion, an AI-enabled Continuous Control Validation platform that delivers managed, remote security testing without requiring in-house test infrastructure. Minion runs against a proprietary threat library of 4,000+ exploits, 1,000+ evasion techniques, 1M+ malware samples updated daily, and test methodologies spanning enterprise firewalls, cloud network firewalls, Security Service Edge (SSE), SD-WAN, Zero Trust Network Access (ZTNA), and emerging categories including AI/ML security and Post-Quantum Cryptography. In April 2026 NSS Labs launched the AI Protection Systems (AIPS) methodology, one of the first independent frameworks for testing enterprise AI guardrails. Test results are published through the affiliated CyberRatings.org non-profit.
NSS Labs monetizes through a mix of professional services engagements (customized testing), recurring subscriptions (Minion platform and research publication access), and quote-based multi-year enterprise contracts. Pricing is not publicly disclosed; go-to-market is direct enterprise field sales with one disclosed regional channel partner (ectacom GmbH for Central Europe). Strategic collaborations include Keysight Technologies as lead partner on AIPS and white paper co-development with AWS, Microsoft, and F5. The company employs 51-100 staff and has accumulated over 800 research publications since 2007.
NSS Labs firmographics
Firmographics- Name
- NSS Labs
- Legal name
- NSS Labs LLC
- Website
- https://nsslabs.com
- Company type
- Private
- Founded year
- 2007
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- NSS Labs is an independent cybersecurity product testing and validation company serving enterprises, security vendors, and service providers. Its Minion platform delivers AI-enabled continuous control validation across firewalls, SSE, SD-WAN, ZTNA, AI security, and post-quantum cryptography.
- Ownership category
- akta.pro rank
NSS Labs industry classification
Industry- Product category
- Cybersecurity Testing and Validation
- NAICS
- Testing Laboratories and Services (541380)
- SIC
- Services-Testing Laboratories (8734)
- akta.pro primary industry
- Penetration Testing Platforms (PTaaS) (HDADAHAG)
- akta.pro secondary industries
- Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG), Vulnerability Management & Penetration Testing Services (BPAEADAD)
Keywords
Where NSS Labs is headquartered
LocationHeadquarters
- HQ city
- Austin
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
NSS Labs business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- Security Testing Services: NSS Labs provides independent cybersecurity product testing and validation services to enterprises, security vendors, and service providers. Services include effectiveness testing, performance testing, and suitability testing for security technologies including firewalls, SSE, SD-WAN, ZTNA, AI security, and post-quantum cryptography.
- Minion - Test as a Service: Managed security testing platform providing continuous control validation. Offers periodic, audit-defensible evidence that security controls are performing as expected, operationalizing GRC by transforming regulatory requirements into continuous measurable validation.
- Research Publications and Reports: The company offers access to over 800 research and testing publications through subscription. Test reports and comparative reports provide detailed analysis of security product performance, security effectiveness ratings, and total cost of ownership assessments.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Customized enterprise testing services |
Go-to-market motion1 record
Distribution channels3 records
Marketing channels6 records
NSS Labs product offering
Product offeringCore offering
NSS Labs provides independent, evidence-based cybersecurity testing and validation services through its AI-enabled Minion platform, which conducts continuous real-world testing of security controls and AI systems. The company delivers specialized testing for enterprise firewalls, cloud network firewalls, SSE, SD-WAN, ZTNA, AI/ML security, and post-quantum cryptography, serving enterprises, security vendors, and service providers.
Product overview
NSS Labs is a cybersecurity testing and validation company offering independent, evidence-based evaluations of security technologies. The core offering is Minion by NSS Labs, an AI-enabled Continuous Control Validation platform that delivers continuous, real-world testing of cybersecurity controls and AI systems. The portfolio includes specialized testing services for Enterprise Firewall, Cloud Network Firewall, Security Service Edge (SSE), SD-WAN, and ZTNA technologies. Additionally, NSS Labs provides emerging technology testing services for Artificial Intelligence/Machine Learning and Post Quantum Cryptography. The company has also developed the AI Protection Systems (AIPS) framework for evaluating enterprise AI security controls. Testing results are published through CyberRatings.org, with products tested from vendors including Check Point, Palo Alto Networks, Fortinet, Versa, Zscaler, and others.
Differentiator
Problem solved
Functional benefit
Brands
- Minion: Minion is a managed security testing platform developed by NSS Labs that delivers independent, real-world validation of security controls. It is an AI-enabled Continuous Control Validation platform designed to deliver continuous, real-world testing of cybersecurity controls and AI systems, evaluating security effectiveness across hundreds of thousands of real-world attack scenarios.
Products and services
- Minion by NSS Labs AI-enabled Continuous Control Validation platform delivering continuous, real-world testing of cybersecurity controls and AI systems. Evaluates security effectiveness across hundreds of thousands of real-world attack scenarios including exploits, malware, evasions, and false positives. Fully managed and remote, with lightweight deployment.
- Enterprise Firewall Testing Rigorous testing of enterprise-grade next-generation firewall platforms against evolving threat scenarios, evaluating capacity to handle internal and external traffic, enforce security policies, and protect against sophisticated threats.
- Cloud Network Firewall Testing Independent validation of cloud-native firewall products across public cloud and co-located deployments, ensuring firewalls effectively inspect and control traffic within and across cloud platforms.
- Security Service Edge (SSE) Testing Rigorous, independent testing of SSE products rooted in real-world attack techniques and industry-accepted security standards, evaluating how effectively SSE protects against advanced threats.
- SD-WAN Testing Assessments covering Management, Routing and Access Control, Stability and Reliability, Quality of Experience (QoE) for audio and video, and throughput metrics.
- Zero Trust Network Access (ZTNA) Testing Testing capabilities evaluating ZTNA solutions across key functions such as policy enforcement, authentication, TLS/SSL encryption support, routing behavior, and access control mechanisms.
- Artificial Intelligence/Machine Learning Testing Services Services for emerging AI/ML technologies including landscape mapping, use case analysis, risk-based product feature prioritization, and evaluation design and validation methodology.
- Post Quantum Cryptography (PQC) Testing Services Services including landscape mapping, use case analysis, risk-based feature prioritization, and end-to-end evaluation design and validation for quantum-safe cryptography.
- AI Protection Systems (AIPS) Comprehensive framework for evaluating enterprise AI security controls, assessing AI protection across multiple dimensions using hundreds of thousands of attack variations including prompt injection, jailbreak techniques, and data extraction attempts.
Quantifiable outcome
- Tested 4,873 malware samples and 317 exploits in Zscaler SSE evaluation, achieving 98.85% overall Security Effectiveness
- +3 more outcomes
Companies that use NSS Labs
Customer profileNamed customers12 records
Segments3 records
Ideal customer profiles3 records
NSS Labs technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability5 records
Feature4 records
NSS Labs partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered core and regional.
- F5coreF5 collaborated with AWS and Microsoft to contribute to an NSS Labs white paper titled 'AI Security Beyond the Model.' The white paper establishes a comprehensive framework for evaluating AI guardrails efficacy in enterprise environments, providing actionable guidance including critical capability areas for evaluating AI security.
- Keysight TechnologiescoreKeysight Technologies serves as the lead partner supporting development and execution of NSS Labs' AI Protection Systems (AIPS) security testing initiative. This is one of the industry's first independent evaluation programs dedicated to testing AI security guardrail technologies. Keysight's support enables NSS Labs to evaluate AI protection systems across multiple security dimensions using hundreds of thousands of attack scenarios.
- Amazon Web Services (AWS)coreAWS collaborated with NSS Labs on two foundational white papers addressing enterprise AI security challenges. The white papers provide a governance-driven framework for understanding AI risk in production systems and practical procurement guidance for AI security vendors, developed with industry collaboration from AWS and other partners.
- MicrosoftcoreMicrosoft collaborated with NSS Labs on two foundational white papers addressing enterprise AI security challenges. The collaboration emphasizes the need for independent validation and adversarial testing of AI security controls, providing actionable guidance for enterprise security leaders.
- ectacom GmbHregionalNSS Labs selected ectacom GmbH to expand cybersecurity representation in Central Europe. This partnership extends NSS Labs' reach into Central European markets for security testing services and customer engagement.
Scale indicators4 records
Recent moves7 records
Expansion highlights6 records
NSS Labs competitors and assessment
Company assessmentDirect peers
- CyberRatings.org: Non-profit public-testing publication founded by NSS Labs CEO Vikram Phatak that publishes the very test reports NSS Labs produces. Effectively a sister entity and the primary distribution channel for NSS Labs' ratings — directly comparable as an independent cybersecurity product rating outlet.
- MITRE Engenuity (ATT&CK Evaluations): Runs the widely-cited ATT&CK Evaluations program testing enterprise security products against real adversary tactics. Closest direct competitor to NSS Labs in independent, methodology-driven cybersecurity product testing with strong enterprise buyer mindshare.
- AV-Comparatives: Independent testing lab based in Austria that publishes comparative reports on endpoint/AV and other security products using real-world threat samples. Comparable business model of paid-by-vendor independent testing with public comparative ratings.
- SE Labs: UK-based independent security testing firm running enterprise, endpoint, and email security tests with public certification ratings. Directly comparable as a methodology-driven independent tester with global vendor and enterprise audiences.
- AV-TEST: German independent security testing institute publishing regular endpoint, mobile, and smart-home security product evaluations. Similar revenue model of vendor-funded independent testing with published comparative ratings.
- ICSA Labs: Independent division of NTT that certifies and tests security products including firewalls, endpoint, and anti-malware. Directly comparable third-party testing and certification provider serving enterprise buyers and vendors.
Broad incumbents
- Gartner (Security & Risk Research): Dominant enterprise research and advisory firm whose Magic Quadrant and Critical Capabilities reports shape security procurement. Competes for the same enterprise mindshare on product validation but as part of a much broader portfolio of IT research and advisory services.
- Forrester Research: Major enterprise research firm publishing Forrester Wave evaluations of cybersecurity products. Comparable as a vendor-validated research authority but operates across all of enterprise IT rather than specializing in security product testing.
- Enterprise Strategy Group (ESG): Integrated IT analyst, research, and validation firm now part of TechTarget that conducts hands-on product validation reports alongside analyst research. Comparable in providing hands-on testing and validation for enterprise buyers and vendors.
Regional players
- The Tolly Group: Independent IT testing firm historically focused on hands-on evaluation of networking and security products. Comparable in providing third-party validation services to enterprise buyers and vendors, though with stronger emphasis on networking and performance testing.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
NSS Labs social profiles
Digital presenceNSS Labs financial estimates
Financial estimateRevenue estimate
Valuation estimate
NSS Labs leadership team
Management profileNumber of profiles
Profiles10 records
NSS Labs funding detail
Funding detailFunding overview
Funding rounds3 records
Investors3 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
NSS Labs M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about NSS Labs
What does NSS Labs do?
NSS Labs provides independent, evidence-based cybersecurity testing and validation services through its AI-enabled Minion platform, which conducts continuous real-world testing of security controls and AI systems. The company delivers specialized testing for enterprise firewalls, cloud network firewalls, SSE, SD-WAN, ZTNA, AI/ML security, and post-quantum cryptography, serving enterprises, security vendors, and service providers.
Is NSS Labs a public or private company?
NSS Labs is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was NSS Labs founded?
NSS Labs was founded in 2007. It employs 51 to 100 people.
Where is NSS Labs based?
NSS Labs is headquartered in Austin, United States, in the North America region.
How does NSS Labs make money?
Three revenue lines are on record. Security Testing Services are the primary driver. The others are minion - Test as a Service and research Publications and Reports.
Who are NSS Labs's main competitors?
Direct peers on record are CyberRatings.org, MITRE Engenuity (ATT&CK Evaluations), AV-Comparatives, SE Labs, AV-TEST and ICSA Labs. Broad incumbents are Gartner (Security & Risk Research), Forrester Research and Enterprise Strategy Group (ESG). The Tolly Group is listed as a regional player.
Does NSS Labs have an API?
No public API is recorded for NSS Labs.
What industry is NSS Labs in?
NSS Labs's product category is Cybersecurity Testing and Validation. Its primary akta.pro industry code is HDADAHAG, Penetration Testing Platforms (PTaaS), with a secondary code of BPAKAHAG, Vulnerability Assessment, Security Audits & Compliance Testing. Its NAICS code is 541380 and its SIC code is 8734.