ProCircular
ProCircular is a US Midwest-based cybersecurity consulting and managed security services firm founded in 2016 that delivers attack surface management, MXDR, risk assessments, penetration testing, incident response, and virtual CISO advisory to mid-market healthcare, manufacturing, higher education, and financial services organizations.
- Company typePrivate
- Founded2016
- HeadquartersCoralville, United States
- Headcount11–50
- GTM typeB2B
- OfferingServices
What ProCircular does
ProCircular is a privately held cybersecurity consulting and managed security services firm founded in 2016 and headquartered in North Liberty, Iowa, with additional team presence in the Des Moines area. The company targets mid-market organizations across healthcare, manufacturing, higher education and public research, and financial services, delivering a portfolio that combines proprietary technology with professional and managed services. Its product surface includes the proprietary Toccata attack surface management platform, 24/7 Managed Extended Detection and Response (MXDR), the Cyber Advisory Program (CAP) functioning as a virtual CISO offering, Cybersecurity Risk Assessment (CRA), penetration testing, incident response and tabletop exercises, and the recently introduced Canvas After-Action Assessment for higher education institutions affected by the Canvas LMS ransomware incident. Toccata handles external exposure discovery, CRA and CAP translate findings into governance and roadmap priorities, MXDR provides continuous monitoring across identity, endpoint, network, and cloud telemetry from SentinelOne, Microsoft, Okta, AWS, Azure, Cisco, Fortinet, Palo Alto, and Google Workspace integrations, and penetration testing plus incident response round out adversarial validation and breach recovery capabilities. The company's revenue mechanics blend quote-based professional service engagements (assessments, pen testing, incident response) with multi-year recurring MXDR and vCISO contracts, sold through a direct, consultative sales motion led by technical specialists rather than channel partners. Leadership is founder-controlled under CEO Aaron R. Warner, who was named SBA 2023 Iowa Small Business Person of the Year, with engineering staff recognized through wins at the National Cyber League and the Sentinels League Threat Hunting World Championship, indicating technical depth that is unusual for a firm of its size.
ProCircular firmographics
Firmographics- Name
- ProCircular
- Legal name
- ProCircular, Inc.
- Website
- https://procircular.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- ProCircular is a US Midwest-based cybersecurity consulting and managed security services firm founded in 2016 that delivers attack surface management, MXDR, risk assessments, penetration testing, incident response, and virtual CISO advisory to mid-market healthcare, manufacturing, higher education, and financial services organizations.
- Ownership category
- akta.pro rank
Where ProCircular is headquartered
LocationHeadquarters
- HQ city
- Coralville
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
ProCircular business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Professional Cybersecurity Services: Revenue generated through consulting engagements including cybersecurity risk assessments, penetration testing, incident response, governance/risk/compliance services, and ongoing advisory programs. Services are priced as professional service engagements.
- Managed Security Services (MXDR): Recurring managed detection and response services with 24/7 monitoring, threat hunting, and response coordination across client environments.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Custom professional service engagements |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels5 records
ProCircular product offering
Product offeringCore offering
ProCircular is a cybersecurity consulting and managed security services firm that helps mid-market organizations discover exposure, assess risk, monitor threats, test defenses, and respond to incidents. Its core offerings include the proprietary Toccata attack surface management platform, 24/7 Managed Extended Detection & Response (MXDR), Cybersecurity Risk Assessments, Penetration Testing, the Cyber Advisory Program (vCISO), and Incident Response & Tabletop Exercises. Services are delivered through custom professional engagements and recurring managed service contracts.
Product overview
ProCircular is a cybersecurity consulting and managed security services firm offering a portfolio of services centered around exposure discovery, risk assessment, monitoring, testing, and incident response. The core service portfolio includes Toccata (Attack Surface Management), Managed Extended Detection & Response (MXDR), Cybersecurity Risk Assessment (CRA), Penetration Testing, Cybersecurity Advisory Program (CAP), and Incident Response & Tabletop Exercises. Toccata serves as the exposure discovery platform, feeding into CRA and CAP for prioritization and governance. MXDR provides continuous 24/7 monitoring across identity, endpoint, network, and cloud environments. Penetration Testing validates defensive controls through adversarial testing. CAP provides ongoing vCISO leadership, while Incident Response handles breach situations. Recent additions include the Canvas After-Action Assessment for higher education institutions.
Differentiator
Problem solved
Functional benefit
Brands
- Toccata: Attack Surface Management product
- CAP (Cyber Advisory Program)
- MXDR (Managed Extended Detection & Response)
Products and services
- Toccata Attack Surface Management Proprietary attack surface management platform that identifies exposed assets, public-facing systems, credentials, domains, vulnerabilities, and changes across an organization's external footprint. Used by mid-market organizations to continuously discover exposure and feed risk-based prioritization into broader security programs.
- Managed Extended Detection & Response (MXDR) 24/7 managed security monitoring service that collects activity across identity, endpoint, network, and cloud environments, correlates related behaviors, evaluates suspicious activity, and initiates coordinated incident response. Integrates with SentinelOne, Microsoft, Okta, AWS, Azure, Cisco, Fortinet, Palo Alto Networks, and Google Workspace.
- Cybersecurity Advisory Program (CAP) Virtual CISO program providing dedicated cybersecurity leadership, strategic guidance, roadmap planning, and program oversight. Offered in tiers (Baseline, Foundation, Acceleration, Extension) to match organizational maturity and internal capacity.
- Cybersecurity Risk Assessment (CRA) Comprehensive risk assessment service connecting security controls, governance, vendors, people, systems, and compliance requirements into a practical baseline view. Combines stakeholder interviews, evidence review, and framework-based analysis to identify gaps and organize remediation.
- Penetration Testing Ethical hacking service testing external and internal systems, applications, APIs, and social engineering attack paths. Includes reconnaissance, discovery, manual exploitation, post-exploitation validation, and actionable remediation reporting.
- Incident Response & Tabletop Exercises Incident response services including breach containment, forensic investigation, ransom negotiation, and recovery support, plus tabletop exercises for incident preparedness practice. Demonstrated outcome in a Doppelpaymer case: ransom negotiated from $295,000 to $75,000 with 100% data decryption.
- Canvas After-Action Assessment Specialized assessment for higher education institutions affected by the Canvas LMS security incident. Covers incident timeline reconstruction, response effectiveness, tenant-level technical audit, and compliance validation against FERPA, GLBA, and state student privacy statutes.
Quantifiable outcome
- Ransomware ransom negotiations successfully reduced from $295,000 to $75,000 in one case
- +1 more outcomes
Companies that use ProCircular
Customer profileNamed customers5 records
Segments4 records
Ideal customer profiles4 records
ProCircular technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration10 records
AI capability5 records
Feature2 records
ProCircular partnerships and signals
Strategic signalPartnerships
Four partnerships are on record, tiered minor and core.
- PacketWatchminorProCircular was profiled alongside PacketWatch in a STATS N DATA market analysis report on cybersecurity due diligence for M&A transactions. Both companies were identified among 20 companies offering cybersecurity services for M&A.
- Ernst & Young Global LimitedminorProCircular was mentioned alongside EY in a market analysis report on cybersecurity due diligence for M&A. EY represents a larger incumbent in the same market space.
- RedscanminorProCircular was mentioned alongside Redscan in a market analysis report on cybersecurity due diligence for M&A transactions. Both identified as providers in the same market segment.
- Big Ten UniversitycoreProCircular built its Canvas After-Action Assessment alongside the cybersecurity program at a Big Ten university that was responding in real time to the Canvas LMS ransomware incident. This collaboration shaped the standardized assessment offering.
Scale indicators4 records
Recent moves6 records
Expansion highlights5 records
ProCircular competitors and assessment
Company assessmentDirect peers
- PacketWatch: Mid-market cybersecurity firm offering incident response, digital forensics, and M&A cyber diligence services. ProCircular and PacketWatch were co-listed in industry analyses of cybersecurity due diligence providers, indicating directly comparable service portfolios and target customers.
- Redscan: UK-based managed detection and response and penetration testing provider serving mid-market organizations. Co-listed with ProCircular in M&A cybersecurity due diligence market analysis, sharing a similar mid-market-focused, service-led positioning.
- Binary Defense: Managed detection and response and DFIR firm serving mid-market clients with a heavy emphasis on threat hunting. Strong overlap with ProCircular's MXDR and incident response offerings.
- Pondurance: Mid-market-focused MDR, compliance, and incident response provider with a strong healthcare and regulated-industries tilt. Highly comparable target customer profile and service mix to ProCircular.
Broad incumbents
- Arctic Wolf: Large-scale MDR/MXDR provider with a 24/7 SOC and a concierge delivery model aimed at mid-market customers. Directly competes with ProCircular's MXDR service but operates at significantly greater scale and geographic reach.
- eSentire: Global MDR provider with multi-SOC coverage and a focus on mid-market and enterprise customers. Overlaps with ProCircular's MXDR, incident response, and managed security services.
- Deepwatch: Managed security services provider offering 24/7 SOC monitoring, MDR, and vulnerability management to mid-market and enterprise. Competes directly with ProCircular's MXDR and monitoring capabilities.
- Optiv: Large cybersecurity solutions integrator and advisory firm offering advisory, implementation, and managed security services. Competes with ProCircular's CAP, risk assessment, and penetration testing lines at the larger end of the mid-market.
- ReliaQuest: Enterprise-focused MXDR provider with the GreyMatter platform unifying detection and response across endpoint, network, cloud, and identity. Competes with ProCircular's MXDR, although ReliaQuest serves larger enterprise customers.
Emerging players
- Schellman & Co (now part of A-LIGN): Compliance-focused cybersecurity assessor providing audit, penetration testing, and advisory services. Overlaps with ProCircular's GRC, risk assessment, and pen testing offerings, particularly for regulated mid-market clients.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
ProCircular social profiles
Digital presenceProCircular financial estimates
Financial estimateRevenue estimate
Valuation estimate
ProCircular leadership team
Management profileNumber of profiles
Profiles12 records
ProCircular funding detail
Funding detailFunding overview
Funding rounds2 records
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
ProCircular M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about ProCircular
What does ProCircular do?
ProCircular is a cybersecurity consulting and managed security services firm that helps mid-market organizations discover exposure, assess risk, monitor threats, test defenses, and respond to incidents. Its core offerings include the proprietary Toccata attack surface management platform, 24/7 Managed Extended Detection & Response (MXDR), Cybersecurity Risk Assessments, Penetration Testing, the Cyber Advisory Program (vCISO), and Incident Response & Tabletop Exercises. Services are delivered through custom professional engagements and recurring managed service contracts.
Is ProCircular a public or private company?
ProCircular is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was ProCircular founded?
ProCircular was founded in 2016. It employs 11 to 50 people.
Where is ProCircular based?
ProCircular is headquartered in Coralville, United States, in the North America region.
How does ProCircular make money?
Two revenue lines are on record. Professional Cybersecurity Services are the primary driver. The others are managed Security Services (MXDR).
Who are ProCircular's main competitors?
Direct peers on record are PacketWatch, Redscan, Binary Defense and Pondurance. Broad incumbents are Arctic Wolf, eSentire, Deepwatch, Optiv and ReliaQuest. Schellman & Co (now part of A-LIGN) is listed as an emerging player.
Does ProCircular have an API?
No public API is recorded for ProCircular.