What Cyturus Technologies, Inc does

Cyturus Technologies, Inc. is a private SaaS company founded in 2020 and headquartered in Dallas, Texas, with a secondary office in Alexandria, Virginia. The company develops the Cyber Resilience Tracker (CRT), a continuous compliance and risk management platform built on a proprietary architecture called the Living Control Set (LCS), which normalizes 250+ compliance frameworks (including CMMC, NIST CSF, ISO 27001, HIPAA, PCI DSS, TISAX, FedRAMP, SOC 2, and GDPR) into a single durable system of record. The platform is organized into nine modules spanning compliance management, maturity management, third-party risk management, risk register, incident response, policy management, document control, and the patented Cyber Maturity Index (CMI) and Adaptive Risk Model (ARM) scoring methodologies. A patent-pending blockchain and forensic files invention by CCO Joshua Marpet extends the platform into evidence integrity.

Cyturus generates revenue primarily through annual SaaS subscriptions to the CRT platform, with quote-based enterprise pricing and an inside-sales motion for Registered Provider Organizations (RPOs) accessing CRT as an exclusive member benefit through the Cyber AB RPO Program. Distribution combines direct enterprise field sales, channel partnerships (Carahsoft as Master Government Aggregator, InventureIT for SMBs), co-marketing with C3PAOs such as Redspin/Clearwater and Big Four firms like PwC, and an integrated CMMC Compliance 360 bundle launched in October 2025 with Carahsoft, Redspin, and Kiteworks covering up to 90% of CMMC Level 2 requirements. The customer base spans defense contractors (Alutiiq, Sentar), Fortune 500 enterprises (American Axle, MSC Industrial, Pearson, Caliber Financial Services), regulated verticals (Cleco energy, top food retailer across 35,000 locations, Cardinal Health-adjacent healthcare), research institutions (USC, University of Arizona), and Big Four advisory (PwC).

The company employs 11–50 people, has disclosed approximately $1.625M in funding across two small rounds in 2022 and 2023, and is led by founder/CEO Robert Hill, CCO Joshua Marpet (a co-author of parts of the CMMC framework), COO Keren de Via, President Lou Carli, and CRO Bowe Hoy. Recent strategic emphasis has shifted toward AI-augmented compliance via a 2026 integration with E-V-E AI, channel-led distribution, and federal market depth, positioning the company as a focused mid-market GRC platform riding the CMMC enforcement tailwind in the Defense Industrial Base.

Name

Cyturus Technologies, Inc

Legal name

Cyturus Technologies, Inc.

Website

https://cyturus.com

Company type

Private

Founded year

2020

Operating status

Operating

Headcount range

11–50 employees

Short description

Cyturus Technologies is a private SaaS company that provides the Cyber Resilience Tracker (CRT), a unified compliance, risk, vendor, and cybersecurity maturity management platform built on its Living Control Set architecture, serving defense contractors, Fortune 500 enterprises, and Registered Provider Organizations navigating CMMC, NIST, ISO, and other frameworks.

Ownership category

akta.pro rank

Product category

GRC (Governance, Risk, and Compliance) Software

NAICS

Software Publishers (513210), Software Publishers (5132)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Customer Success & Account Management CRM (HDAEAFAD)

akta.pro secondary industry

CRM Data Quality, Enrichment & CDP-Adjacent CRM (HDAEAFAJ)

Keywords

• GRC compliance platform
• Cybersecurity maturity management
• CMMC compliance software
• Third-party risk management
• Continuous compliance SaaS

Headquarters

HQ city

Addison

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. SaaS Platform Subscription: Subscription-based access to Cyturus CRT platform with tiered access levels for enterprises, consulting firms, and RPOs. Platform provides compliance management, risk tracking, maturity assessment, and vendor management capabilities.
2. RPO Program Platform Access: CRT platform access provided as exclusive member benefit for Registered Provider Organizations through Cyber AB portal, with access conditional on active RPO membership.
3. CMMC Compliance 360 Integrated Solution: Integrated compliance solution bundled with Redspin (assessment), Kiteworks (secure communications), and Carahsoft (government procurement), simplifying certification for DoD contractors.

Pricing tiers

Go-to-market motion4 records

Distribution channels5 records

Marketing channels7 records

Core offering

Cyturus sells the Cyber Resilience Tracker (CRT), a SaaS continuous compliance and risk management platform built on its proprietary Living Control Set architecture that normalizes 250+ frameworks into one unified control system. The platform is sold as annual subscriptions to enterprises, defense contractors, and consulting firms (RPOs), with supporting offerings including the CMMC Readiness Tool, CMMC Compliance 360 integrated solution, and a Self-Guided Assessment portal.

Product overview

Cyturus offers the Cyber Resilience Tracker (CRT), a unified SaaS platform built on the Living Control Set architecture that centralizes compliance, risk, third-party risk, incident response, policy, and document management into one connected ecosystem. CRT consists of nine integrated modules: Compliance Management, Maturity Management, TPRM, Risk Register, Incident Response, Policy Manager, and DCMS, plus two proprietary methodologies—Cyber Maturity Index (CMI) and Adaptive Risk Model (ARM). Supporting offerings include the CMMC Readiness Tool for RPOs, CMMC Compliance 360 integrated solution, Self-Guided Assessment portal, and an RPO Partner Program. The platform normalizes 250+ compliance frameworks including CMMC, NIST, ISO, HIPAA, TISAX, and PCI DSS.

Differentiator

Problem solved

Functional benefit

Brands

• CRT (Cyber Resilience Tracker): The company's flagship continuous compliance and risk management platform built on the Living Control Set architecture.
• Living Control Set (LCS)
• Adaptive Risk Model (ARM)
• CMMC Readiness Tool
• C2MA Framework

Products and services

• Cyturus Cyber Resilience Tracker (CRT) Flagship SaaS continuous compliance and risk management platform built on the Living Control Set architecture, unifying compliance, risk, vendor, incident, policy, and maturity management into one connected ecosystem for enterprises, defense contractors, and RPOs.
• Cyber Maturity Index (CMI) Patented quantitative scoring methodology that measures the capacity and effectiveness of an organization's cybersecurity processes, systems, and controls, tracking maturity progression through Maturity Indicator Levels (MILs) from Not Implemented to Fully Implemented.
• Adaptive Risk Model (ARM) Patented dynamic risk quantification system that continuously evolves based on organizational data and the changing cybersecurity environment, providing real-time risk visibility, prioritized remediation, and cross-framework integration.
• CMMC Readiness Tool CRT-powered exclusive member benefit for Cyber AB Registered Provider Organizations (RPOs), accessible through The Cyber AB portal, simplifying and scaling how RPOs deliver client readiness engagements for CMMC certification.
• CMMC Compliance 360 Joint integrated solution with Carahsoft, Redspin, and Kiteworks that provides preconfigured technical controls covering up to 90% of CMMC Level 2 requirements, real-time dashboards, auto-updating System Security Plans, and continuous compliance monitoring for DoD contractors.
• Self-Guided Assessment Free self-service assessment tool that enables organizations to evaluate their current compliance posture and maturity level across multiple frameworks (ISO, NIST, CMMC) without lengthy consultations, providing actionable next steps.
• RPO Partner Program Cyber AB-affiliated Registered Provider Organization program that empowers consulting companies to support the defense sector with CMMC compliance expertise, providing exclusive CRT platform access, training, and support.

Quantifiable outcome

• Redspin increased assessment efficiency by 90%
• +5 more outcomes

Named customers20 records

Segments7 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

AI capability7 records

Feature6 records

Partnerships

Seven partnerships are on record, tiered core, strategic, flagship and minor.

• Carahsoft Technology Corp.coreChannel Partner/ Reseller/ Distributor · 7 October 2025Carahsoft serves as Master Government Aggregator simplifying procurement for DoD contractors through CMMC Compliance 360 initiative. The partnership enables faster certification timelines, reduced costs, and sustained compliance across the lifecycle of Level 2 certification process, available through extensive contract vehicles and reseller partners.
• Redspin (division of Clearwater)coreImplementation/ SI/ Consulting Partner · 7 October 2025Redspin, one of the first Authorized C3PAOs for CMMC, provides expert guidance, readiness, gap analysis, and remediation within CMMC Compliance 360. Redspin invested in Cyturus to scale their CMMC practice, achieving 90% increased assessment efficiency.
• KiteworkscoreTechnology or Integration · 7 October 2025Kiteworks delivers FedRAMP Moderate Authorized platform for secure CUI communications within CMMC Compliance 360, eliminating common audit findings and ensuring compliant data exchange for DoD contractors.
• InventureITcoreChannel Partner/ Reseller/ DistributorInventureIT delivers Cyturus CRT to micro and small businesses across the United States, specifically supporting businesses working toward CMMC, NIST, HIPAA, and other compliance standards. Partnership provides scalable, affordable pathway to cybersecurity maturity.
• E-V-E AIstrategicTechnology or IntegrationE-V-E AI brings human-centered, advisory AI capabilities into the Cyber Resilience Tracker, helping organizations reduce compliance burden, establish maturity baselines faster, and operationalize cybersecurity maturity across complex regulatory environments by turning documentation into actionable insights.
• Cyber AB (formerly CMMC-AB)flagshipStrategic or Co-development PartnerCyber AB powers the RPO Program with Cyturus CRT as exclusive member benefit for Registered Provider Organizations. The platform is accessible through Cyber AB portal as a secure, SaaS-based solution that unifies management of clients' compliance, risk, and maturity efforts.
• PwCminorImplementation/ SI/ Consulting PartnerPwC offers structured gap analyses and risk assessments to help DoD contractors on their CMMC compliance journey, utilizing Cyturus for operationalizing compliance programs.

Scale indicators8 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Secureframe: Secureframe automates compliance evidence collection and continuous monitoring for frameworks including SOC 2, ISO 27001, HIPAA, and CMMC. Direct competitor in SaaS compliance automation serving SMB and mid-market.
• Drata: Drata provides automated compliance monitoring and GRC workflows across SOC 2, ISO 27001, HIPAA, CMMC, and additional frameworks. Closely comparable on automation-driven, multi-framework continuous compliance for mid-market and enterprise.
• RegScale: RegScale delivers continuous compliance monitoring for NIST, CMMC, FedRAMP, and other federal frameworks with API-first architecture. Direct peer in CMMC and federal compliance automation with similar target verticals.
• Hyperproof: Hyperproof is a continuous compliance and risk management SaaS supporting SOC 2, ISO, FedRAMP, CMMC, and others. Closely comparable on continuous, multi-framework compliance operations and evidence management.
• LogicGate: LogicGate offers a flexible GRC workflow platform for risk, compliance, and third-party risk management. Comparable in multi-framework compliance automation with enterprise workflow customization.
• Thoropass (formerly Laika): Thoropass combines compliance automation software with audit services for SOC 2, ISO 27001, HIPAA, and PCI. Comparable in continuous compliance SaaS plus managed audit delivery, with overlap in mid-market customers.
• Vanta: Vanta is a leading automated compliance and GRC platform supporting SOC 2, ISO 27001, HIPAA, FedRAMP, and CMMC. Direct competitor in multi-framework continuous compliance with a similar SaaS delivery model and overlapping customer base.

Broad incumbents

• ServiceNow Governance, Risk, and Compliance: ServiceNow's GRC suite provides integrated risk and compliance workflows as part of its broader enterprise platform. A broad incumbent offering overlapping GRC capabilities, particularly for large enterprises with existing ServiceNow deployments.
• AuditBoard: AuditBoard is an established GRC platform focused on audit, risk, and compliance management for enterprises and audit teams. Overlaps with Cyturus on risk and compliance management for large, multi-framework organizations.
• Archer (an RSA Business): RSA Archer is a legacy enterprise GRC platform for integrated risk management across operational, IT, and regulatory risk. A broader incumbent with overlapping compliance and risk capabilities though typically deployed at larger enterprises.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/CyturusT
• Facebookfacebook.com/Cyturus
• LinkedInlinkedin.com/company/cyturus-technologies-inc

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds2 records

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cyturus Technologies, Inc