Defy Security
Defy Security is a vendor-agnostic cybersecurity VAR and services provider founded in 2017, serving hundreds of enterprise clients across financial services, healthcare, manufacturing, retail, technology, and energy via 450+ vendor partnerships, a proprietary Defy LABS validation platform, and a comprehensive managed and professional services portfolio.
- Company typePrivate
- Founded2017
- HeadquartersCanonsburg, United States
- Headcount51–100
- GTM typeB2B
- OfferingServices
What Defy Security does
Defy Security is a private, vendor-agnostic cybersecurity solutions provider founded in 2017 and headquartered in Canonsburg, Pennsylvania, with a secondary office in San Ramon, California. The company operates a channel-first go-to-market motion as a value-added reseller (VAR) with 450+ cybersecurity vendor partnerships, combined with a professional services portfolio spanning AI Security, Data Protection, Identity Services, Managed Security Services, Penetration Testing, Operational Technology Services, and Security Program Services. Its proprietary technology platform, Defy LABS, functions as a test and validation laboratory and a repository of cybersecurity research and use-case development that the firm uses to support customer evaluations and deployments. The customer base spans hundreds of enterprise and commercial clients across financial services, healthcare, manufacturing, retail, technology, and energy, with sales and solution architect teams operating without sales quotas to deliver vendor-neutral recommendations.
The company's revenue model combines one-time technology resale (through its VAR model), recurring managed security services (XDR/MDR, SOC, threat detection), and project-based professional services (assessments, implementations, staff augmentation). Defy reports nearly $500M in annual revenue as of November 2025, with claimed 880% growth since inception, and was recognized as the fastest-growing cybersecurity VAR in North America. In April 2026, Booz Allen Hamilton completed its acquisition of Defy, which now operates as a wholly owned subsidiary combining its enterprise commercial customer base and vendor ecosystem with Booz Allen's federal cyber expertise and AI-native Vellox product suite, with stated plans to expand across U.S. and international markets. Prior to the Booz Allen transaction, Defy was owned by Sverica Capital Management from 2020 through the exit.
The company employs approximately 500 consulting and delivery engineers and security practitioners, and is led by founders Justin Domachowski (CEO) and Jeremy Gilbert (COO), both veterans of Accuvant and Optiv. The leadership team includes CFO Michael Klein, CHRO Becky Vinton, and a board chaired by Frank Young with members including Gary Warzala, a CISO Hall of Fame inductee. Defy has earned consecutive Great Place to Work certifications, a 2026 CRN Tech Elite 250 placement, and a Gold Cybersecurity Excellence Award for Service Provider of the Year.
Defy Security firmographics
Firmographics- Name
- Defy Security
- Legal name
- Defy Security
- Website
- https://defysecurity.com
- Company type
- Private
- Founded year
- 2017
- Operating status
- Acquired
- Headcount range
- 51–100 employees
- Short description
- Defy Security is a vendor-agnostic cybersecurity VAR and services provider founded in 2017, serving hundreds of enterprise clients across financial services, healthcare, manufacturing, retail, technology, and energy via 450+ vendor partnerships, a proprietary Defy LABS validation platform, and a comprehensive managed and professional services portfolio.
- Ownership category
- akta.pro rank
Defy Security industry classification
Industry- Product category
- Cybersecurity Services & Technology Reselling
- NAICS
- Security Systems Services (except Locksmiths) (561621), Custom Computer Programming Services (541511)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Prepackaged Software (7372)
- akta.pro primary industry
- Cybersecurity for Financial Services Compliance (controls, audits, SOC/ISO mapping) (FSAGAFAK)
Keywords
Where Defy Security is headquartered
LocationHeadquarters
- HQ city
- Canonsburg
- HQ country
- United States
- HQ region
- North America
Offices3 records
Markets served
Defy Security business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure
Revenue model
- Technology Resale: Revenue from reselling cybersecurity technology products and solutions from 450+ vendor partnerships. Acts as a value-added reseller (VAR) providing technology sourcing, procurement, and deployment services.
- Professional Services: Revenue from cybersecurity consulting and services including AI Security Services, Data Protection, Digital Transformation Engineering, Identity Services, Managed Security Services, OT Services, Penetration Testing, Security Program Services, Staff Augmentation, and Technology Deployment/Integration.
- Managed Security Services: Ongoing managed security services including Extended Detection & Response (XDR), Managed Detection & Response (MDR), SOC & Incident Response Services, and Threat Detection & Response.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Annual | Enterprise and commercial pricing tailored to customer size and requirements |
Go-to-market motion2 records
Distribution channels2 records
Marketing channels6 records
Defy Security product offering
Product offeringCore offering
Defy Security is a vendor-agnostic value-added reseller (VAR) and cybersecurity services provider that helps enterprises assess, source, procure, deploy, and operate cybersecurity solutions from 450+ technology vendors. The company delivers a portfolio of professional services including AI security, managed security (XDR/MDR/SOC), penetration testing, identity services, OT security, data protection, and security program advisory, supported by its proprietary Defy LABS test and validation environment.
Product overview
Defy Security is a cybersecurity solutions provider offering a portfolio of technology sourcing and professional services. Their core platform is Defy LABS, an industry-first test and validation laboratory combined with a cybersecurity research repository. Around this platform, they deliver comprehensive service offerings spanning AI Security Services, Data Protection & Management, Identity Services, Managed Security Services, Penetration Testing, Operational Technology (OT) Services, and Security Program Services. The company operates as a vendor-agnostic VAR (Value-Added Reseller) with 450+ technology partnerships, helping enterprise customers assess, select, procure, and deploy cybersecurity solutions. With approximately 500+ consulting and delivery engineers, Defy supports customers across financial services, healthcare, manufacturing, retail, energy, and technology sectors. The company was acquired by Booz Allen Hamilton in April 2026 and operates as a wholly owned subsidiary.
Differentiator
Problem solved
Functional benefit
Brands
- Defy LABS: Defy Security's proprietary technology platform for validating solutions, testing and vetting new products, and repository of technology research, advisement, and use-case development. Described as the industry's first test & validation lab plus repository of cybersecurity research.
Products and services
- Defy LABS Proprietary test and validation laboratory combined with a repository of cybersecurity research, advisement, and use-case development. Enables Defy to validate solutions, test and vet new products, and lets clients reuse sanitized documentation of past engagements across their environment.
- Technology Sourcing Vendor-agnostic, client-centric cybersecurity procurement service that helps customers assess, select, negotiate, and implement security technologies using Defy's 450+ vendor partnerships across ten security domains.
- AI Security Services Cybersecurity consulting focused on AI including AI Governance, Custom AI Testing, Generative AI security, LLM Benchmarking & Jailbreaking, and LLM Web Application Testing.
- Data Protection & Management Services covering Data Classification, Data Discovery, Data Protection, Data Security Posture Management (DSPM), and Secure Access Services Edge Readiness.
- Identity Services Implementation and strategy services for Access Management, SSO, Customer IAM, Identity Management, Privileged Identity Management, and Zero Trust Architecture.
- Managed Security Services Ongoing managed security capabilities including Extended Detection & Response (XDR), Managed Detection & Response (MDR), SOC & Incident Response, and Threat Detection & Response.
- Penetration Testing Services Adversarial testing including Red Team Engagements, Ransomware Simulation, Purple Team exercises; Application Testing with Code Auditing and Web App Pen Testing; Cloud Penetration Testing for AWS, Azure, and GCP; and Social Engineering Assessments.
- Operational Technology (OT) Services OT cybersecurity services including Maturity Assessment, OT Red Teaming, Managed OT Detection/Response, OT Cybersecurity Architecture Design, and OT Security Tool Deployment.
- Security Program Services Compliance Readiness, Cyber Insurance, Cybersecurity Governance, Incident Response Planning, vCISO/CISO-as-a-Service, Third Party Risk Management, and Vulnerability Management Programs.
- Digital Transformation Engineering Engineering services supporting digital transformation initiatives as part of Defy's broader cybersecurity services portfolio.
- Staff Augmentation Services Provides cybersecurity talent to client teams to fill specialized skill gaps on a flexible basis.
- Technology Deployment, Integration, Optimization Deployment, integration, and ongoing optimization services for cybersecurity technologies sourced through Defy's vendor ecosystem.
Quantifiable outcome
- 880% growth since company inception in 2017
- +2 more outcomes
Companies that use Defy Security
Customer profileNamed customers3 records
Segments4 records
Ideal customer profiles3 records
Defy Security technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature2 records
Defy Security partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered core and minor.
- CrowdStrikecoreCrowdStrike is Defy's Technology Partner of the Year for 2025, recognized for excellence and collaboration. Defy maintains robust technology partnerships spanning IAM, network, cloud, and application security. CrowdStrike is one of Defy's key security platform partners.
- WizcoreWiz is Defy's Technology Growth Partner of the Year for 2025. Wiz provides cloud security platform capabilities that Defy integrates into its customer offerings. Partnership has shown strong growth velocity and customer relationship health.
- Socium SecuritycoreSocium Security is Defy's Alliance Partner of the Year for 2025. They deliver flexible but comprehensive expertise to assess, implement, integrate, and operationalize security solutions for Defy customers. Partnership built on tight collaboration and shared goals.
- LockBaseminorLockBase is Defy's Alliance Growth Partner of the Year for 2025. Provides security services that complement Defy's technology offerings. Partnership recognized for growth velocity and customer relationship health.
- Anthropic IdentityminorAnthropic Identity is Defy's Alliance Emerging Partner of the Year for 2025. Provides identity security services that extend Defy's capabilities. Partnership recognized for emerging market engagement.
Scale indicators5 records
Recent moves6 records
Expansion highlights6 records
Defy Security competitors and assessment
Company assessmentMarket position
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
Defy Security social profiles
Digital presenceDefy Security compliance and trust
Trust signalCompliance2 records
Defy Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Defy Security leadership team
Management profileNumber of profiles
Profiles8 records
Defy Security funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Defy Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Defy Security
What does Defy Security do?
Defy Security is a vendor-agnostic value-added reseller (VAR) and cybersecurity services provider that helps enterprises assess, source, procure, deploy, and operate cybersecurity solutions from 450+ technology vendors. The company delivers a portfolio of professional services including AI security, managed security (XDR/MDR/SOC), penetration testing, identity services, OT security, data protection, and security program advisory, supported by its proprietary Defy LABS test and validation environment.
Is Defy Security a public or private company?
Defy Security is a private company. It is classified as corporate owned and is currently acquired.
When was Defy Security founded?
Defy Security was founded in 2017. It employs 51 to 100 people.
Where is Defy Security based?
Defy Security is headquartered in Canonsburg, United States, in the North America region.
How does Defy Security make money?
Three revenue lines are on record. Technology Resale is the primary driver. The others are professional Services and managed Security Services.
Does Defy Security have an API?
No public API is recorded for Defy Security.
What industry is Defy Security in?
Defy Security's product category is Cybersecurity Services & Technology Reselling. Its primary akta.pro industry code is FSAGAFAK, Cybersecurity for Financial Services Compliance (controls, audits, SOC/ISO mapping). Its NAICS code is 561621 and its SIC code is 7370.