Foresite
Foresite Cybersecurity is a privately held managed security services provider delivering AI-enhanced MXDR, SOC-as-a-service, threat intelligence, and compliance automation via its Catalyst platform built natively on Google Security Operations, serving enterprise and mid-market customers across technology, financial services, government, retail, education, and other verticals.
- Company typePrivate
- Founded2013
- HeadquartersOverland Park, United States
- Headcount101–250
- GTM typeB2B
- OfferingServices
What Foresite does
Foresite Cybersecurity, Inc. is a privately held managed security services provider (MSSP) founded in 2013 and headquartered in Overland Park, Kansas, with a secondary office in Enfield, United Kingdom, serving enterprise and mid-market customers primarily across North America and EMEA. The company delivers 24/7 managed detection and response (MXDR), SOC-as-a-service, threat intelligence, and compliance automation through its Catalyst platform, which is built natively on Google Security Operations (formerly Chronicle/Backstory). Foresite operates as a Google Cloud Premier Partner with Advanced Security and MSSP specializations and is one of only 8 Google Cloud SecOps Service Delivery Partners worldwide, which underpins co-sell distribution with Google Cloud field teams and access to partner funding programs.
The core technology is the Catalyst platform, organized into five integrated modules: Bridge (Google SecOps engineering and co-management), Citadel (MXDR and 24/7 SOC response), Command (Mandiant-powered threat intelligence), Nexus (multi-cloud compliance automation via Security Command Center Enterprise), and Adapt (AI workload protection via Model Armor). The company's "Glass Box Model" and Practitioner-Governed Agentic SOC use Gemini Pro agents for multi-agent reasoning, MCP/A2A orchestration, and staged response actions that require named-analyst authorization before execution, producing traceable reasoning chains for every action. Additional offerings include the Tanium-powered TANIUMaaS managed endpoint operations service and Bindplane-based data ingestion architecture for Google SecOps. Foresite serves technology customers (e.g., Nvidia, Copado, Bloomreach, Blockdaemon, Astranis, ZT Systems, Techstars), financial services (Centra and Patelco credit unions), government (Florida Department of State), retail (Ross Stores, Kendra Scott), education (Sacred Heart University), energy (Gulfport Energy), environmental services (Recology, USA Hauling & Waste), and sports/entertainment (Liv Golf).
Revenue is generated primarily through recurring subscription contracts for managed security services, supplemented by professional services for SIEM migrations, detection engineering, vCISO engagements, and compliance assessments. Pricing is quote-based, varies with organization size, threat surface, and selected Catalyst modules, and is typically billed annually. Distribution combines direct enterprise field sales with significant co-sell through the Google Cloud partner channel and a parallel channel motion via Tanium, supported by content marketing, Google Cloud Next events, and customer advocacy. Marketing-funded Google security risk assessments serve as a bottom-of-funnel conversion mechanism.
Foresite firmographics
Firmographics- Name
- Foresite
- Legal name
- Foresite Cybersecurity, Inc.
- Website
- https://foresite.com
- Company type
- Private
- Founded year
- 2013
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- Foresite Cybersecurity is a privately held managed security services provider delivering AI-enhanced MXDR, SOC-as-a-service, threat intelligence, and compliance automation via its Catalyst platform built natively on Google Security Operations, serving enterprise and mid-market customers across technology, financial services, government, retail, education, and other verticals.
- Ownership category
- akta.pro rank
Foresite industry classification
Industry- Product category
- Managed Security Services
- NAICS
- Security Systems Services (except Locksmiths) (561621), Computer Systems Design Services (541512)
- SIC
- Services-Computer Integrated Systems Design (7373), Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Security Operations Center (SOC) as a Service (BPAEADAB)
- akta.pro secondary industries
- Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ), Cloud-Native Application Protection Platforms (CNAPP) (HDABAHAH), Prompt Security & Injection Defense (HDAAAKAE)
Keywords
Where Foresite is headquartered
LocationHeadquarters
- HQ city
- Overland Park
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
Foresite business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Managed Security Services (MDR/MXDR): Recurring managed detection and response services delivered through the Catalyst platform, providing 24/7 SOC operations, threat monitoring, and incident response. Revenue generated through annual or multi-year subscription contracts with enterprise and mid-market customers.
- Managed Endpoint Operations: Managed autonomous endpoint operations service through Tanium partnership, offered in two engagement models (Essentials and Complete). Includes endpoint security, patching, compliance enforcement, and configuration management.
- Professional Services: Advisory and enablement services including security assessments, SIEM migrations, detection engineering, implementation, and training. Also includes vCISO services and compliance assessments.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise managed security services with custom pricing based on customer requirements |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels7 records
Foresite product offering
Product offeringCore offering
Foresite delivers managed detection and response (MXDR), 24/7 security operations, threat intelligence, compliance automation, endpoint security, and security advisory services through its proprietary Catalyst platform built natively on Google Cloud Security Operations. The platform combines AI-driven Agentic SOC capabilities with practitioner governance under a Glass Box Model, enabling enterprise and mid-market customers to outsource or modernize their security operations across cloud, endpoint, and AI workload environments.
Differentiator
Problem solved
Functional benefit
Brands
- Catalyst: MXDR platform for Google Cloud with modules including Bridge (Google SecOps management), Citadel (24/7 SOC response), Nexus (compliance automation), Command (threat intelligence), and Adapt (AI security).
- TANIUMaaS
Products and services
- Catalyst - MXDR for Google Cloud Proprietary MXDR platform built natively on Google Security Operations, delivering unified detection, response, threat intelligence, compliance, and AI workload protection for enterprise customers.
- Managed Security Operations (MXDR) 24/7 managed detection and response service powered by Google SecOps, providing continuous threat monitoring, AI-assisted triage, and practitioner-governed incident response for enterprise and mid-market customers.
- Vulnerability & Patch Management Managed vulnerability management and patching service that identifies, prioritizes, and remediates security weaknesses across customer environments.
- Firewall Management Managed firewall administration, tuning, and monitoring service for enterprise network security infrastructure.
- EDR Management Managed endpoint detection and response service providing administration, tuning, and continuous monitoring of EDR platforms across enterprise endpoints.
- Threat Intelligence Operationalized threat intelligence service drawing on Mandiant-powered data, integrated directly into detection engineering and incident response workflows.
- Managed Compliance Continuous compliance monitoring and automation service for multi-cloud environments covering regulatory and industry frameworks.
- Virtual CISO (vCISO) Fractional CISO advisory service providing strategic security leadership, governance, and program oversight for organizations without a full-time CISO.
- Security Assessments Security risk and posture assessment services identifying gaps across enterprise security environments, including Google-funded risk assessments for eligible organizations.
- Autonomous Penetration Testing Autonomous, AI-driven penetration testing service that continuously validates enterprise security controls and identifies exploitable weaknesses.
- AI Security AI workload and LLM endpoint protection service addressing emerging AI attack surfaces, delivered through Catalyst Adapt and Google Model Armor.
- TANIUMaaS (Tanium-as-a-Service) Managed autonomous endpoint operations service built on Tanium's Autonomous IT Platform, providing real-time endpoint visibility, automated patching, compliance enforcement, and configuration control for mid-market and enterprise customers.
Quantifiable outcome
- 90% reduction in mean investigation time
- +3 more outcomes
Companies that use Foresite
Customer profileNamed customers20 records
Segments10 records
Ideal customer profiles2 records
Foresite technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration3 records
AI capability7 records
Feature9 records
Foresite partnerships and signals
Strategic signalPartnerships
Four partnerships are on record, tiered core and flagship/core.
- TaniumcoreStrategic partnership to launch managed autonomous endpoint operations service built on Tanium's Autonomous IT Platform. Service provides real-time endpoint visibility, automation, and remediation across distributed environments. Offered in two engagement models: Essentials (advisory-led) and Complete (fully managed). Partnership enables Foresite to extend Catalyst platform to endpoint layer.
- BindplanecoreStrategic partnership to enhance data ingestion architecture within Google Security Operations environments. The collaboration replaces the default Chronicle Forwarder, enabling improved data collection, processing, and security threat response.
- Google Cloudflagship/coreForesite is a Google Cloud Premier Partner with Advanced Security & MSSP specializations. The company is one of only 8 Google Cloud SecOps Service Delivery Partners worldwide. Foresite operates its Catalyst platform natively on Google Security Operations, combining Google's AI-driven security capabilities with human analyst oversight. The partnership includes co-development on agentic features, co-sell motions, and leverage of Google partner funding programs.
- Mandiant (Google)coreMandiant-powered threat intelligence integrated directly into Foresite's Catalyst Command module, providing intelligence operationalized inside customer security workflows. Part of the Google Cloud ecosystem that Foresite operates within.
Scale indicators6 records
Recent moves6 records
Expansion highlights5 records
Foresite competitors and assessment
Company assessmentDirect peers
- Arctic Wolf: Arctic Wolf is a leading pure-play MDR/MSSP providing 24/7 managed detection and response across multiple SIEM and EDR platforms. Directly comparable as a subscription-based managed security services provider competing for the same mid-market and enterprise customers, though Arctic Wolf is vendor-agnostic rather than Google Cloud-native.
- Expel: Expel is a transparent, transparency-focused MDR provider offering managed detection and response for cloud, endpoint, network, and identity. Directly comparable in GTM motion (mid-market and enterprise MDR), technology philosophy (explainable AI, transparent investigations), and target buyer (CISO-led security modernization).
- eSentire: eSentire is an MDR specialist delivering 24/7 SOC services, threat hunting, and incident response across endpoint, network, cloud, and SaaS. Directly comparable as an MSSP competing for similar enterprise and mid-market customers with comparable SOC-as-a-service and managed detection offerings.
- ReliaQuest: ReliaQuest provides enterprise MDR plus its GreyMatter platform, unifying security operations across multiple SIEM, EDR, and cloud providers. Comparable as a higher-end enterprise MSSP with proprietary platform and similar focus on SOC modernization, though with broader multi-vendor support than Foresite's Google Cloud-native approach.
- Critical Start: Critical Start is an MDR/MSSP providing managed detection and response with a focus on resolving every alert, serving mid-market and enterprise customers. Comparable as a pure-play managed security operations provider with similar subscription-based GTM and enterprise customer focus.
- Deepwatch: Deepwatch is a cloud-native MDR and managed security services provider offering 24/7 SOC operations, threat hunting, and security operations management. Comparable as an MSSP built around managed detection and response for cloud-centric enterprises, with similar recurring revenue model and SIEM co-management capabilities.
- Pondurance: Pondurance is an MDR and managed security services provider focused on mid-market and enterprise customers across regulated industries. Comparable as an MSSP delivering managed detection, response, and compliance services to similar enterprise verticals including financial services and healthcare.
Broad incumbents
- CrowdStrike (Falcon Complete): CrowdStrike offers Falcon Complete, a fully managed MDR service bundled with its Falcon endpoint protection platform, targeting enterprise customers globally. Comparable as a major incumbent in the managed detection and response space, though CrowdStrike bundles its own proprietary endpoint platform rather than operating as a third-party MSSP.
- Palo Alto Networks (Unit 42): Palo Alto Networks delivers Unit 42 MDR services bundled with its Cortex XSIAM and Prisma Cloud platforms. Comparable as a broad incumbent offering managed detection and response as part of a wider security platform portfolio, competing for the same enterprise security modernization budgets as Foresite.
- Secureworks (Taegis): Secureworks offers Taegis MDR and managed security services via its Taegis platform, serving enterprise customers globally. Comparable as a long-standing MSSP incumbent with a proprietary XDR platform and broad managed services portfolio competing in the same enterprise MDR market.
Market position
Strengths4 records
Weaknesses5 records
Competitive moat5 records
Key highlights7 records
Customer concentration
Foresite social profiles
Digital presenceForesite financial estimates
Financial estimateRevenue estimate
Valuation estimate
Foresite leadership team
Management profileNumber of profiles
Profiles10 records
Foresite subsidiaries and ownership
Company hierarchySubsidiaries1 record
Foresite funding detail
Funding detailFunding overview
Funding rounds2 records
Investors2 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Foresite M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Foresite
What does Foresite do?
Foresite delivers managed detection and response (MXDR), 24/7 security operations, threat intelligence, compliance automation, endpoint security, and security advisory services through its proprietary Catalyst platform built natively on Google Cloud Security Operations. The platform combines AI-driven Agentic SOC capabilities with practitioner governance under a Glass Box Model, enabling enterprise and mid-market customers to outsource or modernize their security operations across cloud, endpoint, and AI workload environments.
Is Foresite a public or private company?
Foresite is a private company. It is classified as venture growth investor backed and is currently operating.
When was Foresite founded?
Foresite was founded in 2013. It employs 101 to 250 people.
Where is Foresite based?
Foresite is headquartered in Overland Park, United States, in the North America region.
How does Foresite make money?
Three revenue lines are on record. Managed Security Services (MDR/MXDR) is the primary driver. The others are managed Endpoint Operations and professional Services.
Who are Foresite's main competitors?
Direct peers on record are Arctic Wolf, Expel, eSentire, ReliaQuest, Critical Start, Deepwatch and Pondurance. Broad incumbents are CrowdStrike (Falcon Complete), Palo Alto Networks (Unit 42) and Secureworks (Taegis).
Does Foresite have an API?
No public API is recorded for Foresite.
What industry is Foresite in?
Foresite's product category is Managed Security Services. Its primary akta.pro industry code is BPAEADAB, Security Operations Center (SOC) as a Service, with a secondary code of BPAEADAH, Endpoint Security Managed Services (EDR/XDR). Its NAICS code is 561621 and its SIC code is 7373.