Securosis
Securosis is a Phoenix-based information security research and advisory firm specializing in cloud security, offering licensed research, consulting (Cloud Security Project Accelerators), CCSK and SecDevOps training, and the free CloudSLAW weekly training program, serving Fortune 1000 enterprises and security vendors.
- Company typePrivate
- Founded2010
- HeadquartersPhoenix, United States
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Securosis does
Securosis's core products are organized around four service lines: Primary Research Publishing (research developed live on the Securosis blog under its "Totally Transparent Research" methodology, then compiled under Creative Commons and licensed annually to vendors and enterprises); Cloud Security Project Accelerators (packaged consulting combining assessment, on-site workshops, and follow-up accountability calls, available for AWS and Azure); Training Programs (CCSK-Plus Advanced, Advanced Cloud Security and Applied SecDevOps, plus custom in-house training at $1,600–$4,500 per person); and Custom Research, Advisory, and Retainer Services (Data Security Strategy Days, M&A due diligence, vendor retainer packages, executive coaching). The firm also operates CloudSLAW (Cloud Security Lab a Week), a free weekly hands-on cloud security training program distributed via email with an optional Patreon support community ($2 and $10/month tiers).
Securosis makes money primarily through professional services and research licensing rather than software subscriptions. Revenue streams include: (1) annual research licensing to vendors who redistribute content to their communities; (2) fee-for-service consulting and training engagements with Fortune 1000 enterprises; (3) vendor retainer packages providing ongoing market and product analysis; (4) public and in-house training delivery; and (5) a nascent Patreon subscription tier. Distribution is sales-led and inbound-driven: the firm relies on its analysts' personal brands (Dark Reading column, TidBITS editorial role, RSAC review committee participation, Disaster Recovery Breakfast at RSAC now in its 16th year), the CloudSLAW community funnel, and the CSA partnership for demand generation. Customers are primarily large enterprises (Fortune 1000) and security vendors, with documented engagements spanning financial services, general enterprise, and technology sectors.
Securosis firmographics
Firmographics- Name
- Securosis
- Legal name
- Securosis, LLC.
- Website
- https://securosis.com
- Company type
- Private
- Founded year
- 2010
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Securosis is a Phoenix-based information security research and advisory firm specializing in cloud security, offering licensed research, consulting (Cloud Security Project Accelerators), CCSK and SecDevOps training, and the free CloudSLAW weekly training program, serving Fortune 1000 enterprises and security vendors.
- Ownership category
- akta.pro rank
Securosis industry classification
Industry- Product category
- Information Security Research & Advisory
- NAICS
- Professional and Management Development Training (611430), Computer Training (611420)
- SIC
- Services-Educational Services (8200), Services-Computer Processing & Data Preparation (7374)
- akta.pro primary industry
- Cloud Computing & Cloud Security (EDAOAIAC)
- akta.pro secondary industries
- Cybersecurity Technical Skills (Security Engineering, SOC, Pen Testing) (EDABAFAF), Cloud-Native Application Protection Platforms (CNAPP) (HDABAHAH)
Keywords
Where Securosis is headquartered
LocationHeadquarters
- HQ city
- Phoenix
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Securosis business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Marketing or Sales, Operations, Technology or R&D, Others
Revenue model
- Primary Research Licensing: Securosis publishes the vast majority of research for free through its blog, with full research papers licensed annually to vendors and enterprises. The company maintains strict objectivity requirements and follows its Totally Transparent Research policy. Licensees may host and reuse content for the length of the license (typically one year), but research is always freely accessible on the Securosis website.
- Cloud Security Project Accelerators: Packaged consulting offerings (SPAs) that combine pre-workshop assessment, a 1-day on-site workshop, post-workshop findings and toolkits, and two follow-up accountability calls. Programs are customized to client needs and available for AWS and Microsoft Azure.
- Security Training Programs: Training programs including CCSK-Plus Advanced and Advanced Cloud Security and Applied SecDevOps. Also available as custom in-house training designed for specific teams. Baseline pricing for 2-3 day live technical training ranges from $1,600–$4,500 per person.
- Custom Research, Advisory, and Retainer Services: Custom research reports, speaking engagements, merger and acquisition due diligence, strategic advisory days, coaching programs for security executives, and vendor retainer packages. Vendor retainers include ongoing market and product analysis, technology guidance, product evaluations, and M&A assessments.
- CloudSLAW Patreon: CloudSLAW Pro subscription at $10/month offering Discord community access, weekly office hours, subscriber-only webinars, and lab proposal/voting rights. CloudSLAW Tipper tier at $2/month with no extra benefits. Core CloudSLAW content remains free.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | CloudSLAW Pro (Patreon) |
| Freemium | Monthly | CloudSLAW Tipper (Patreon) |
| Other | Multi-year contract | Live Technical Training |
Go-to-market motion2 records
Distribution channels4 records
Marketing channels8 records
Securosis product offering
Product offeringCore offering
Securosis is an information security research and advisory firm that publishes free and licensed primary research on cloud and information security, delivers packaged cloud security consulting engagements (Project Accelerators), runs technical training programs (including the CCSK certification curriculum and Applied SecDevOps), and provides custom research, strategy days, and vendor advisory retainers. It also operates CloudSLAW, a free weekly hands-on cloud security training lab distributed via email with optional paid Patreon tiers.
Product overview
Securosis is an information security research and advisory firm offering a portfolio of research-driven services and free content. The core offerings include Primary Research Publishing (freely available blog content and licensable papers), Cloud Security Project Accelerators (consulting packages), Training Programs (including CCSK certification prep and advanced SecDevOps courses), and Custom Research and Consulting (strategy days, coaching, advisory retainers). The company also provides CloudSLAW (Cloud Security Lab a Week), a free weekly hands-on training program with optional Patreon support tiers. Research coverage spans cloud security, DevSecOps, API security, data security, endpoint security, and threat intelligence, with papers published on topics like the Universal Cloud Threat Model, Modernizing SecOps for Cloud, and Enterprise DevSecOps. The firm operates on a Totally Transparent Research model where content is developed publicly with community feedback before being compiled into licensed papers.
Differentiator
Problem solved
Functional benefit
Brands
- CloudSLAW: Cloud Security Lab a Week - a free training program delivering weekly 15-30 minute high-quality training labs via email. Also has a Patreon support program.
Products and services
- Cloud Security Project Accelerators
Quantifiable outcome
- AWS IAM Users cause 66% of all AWS customer security incidents
Companies that use Securosis
Customer profileNamed customers3 records
Segments4 records
Ideal customer profiles4 records
Securosis technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature4 records
Securosis partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Cloud Security Alliance (CSA)coreSecurosis is formally partnered with the Cloud Security Alliance. The firm built the CCSK (Certificate of Cloud Security Knowledge) training curriculum used by CSA and presents at the annual CSA Summit. Rich Mogull serves as a co-worker and review committee member within the CSA ecosystem. The partnership combines Securosis's research expertise with CSA's industry leadership position.
Scale indicators4 records
Recent moves6 records
Expansion highlights5 records
Securosis competitors and assessment
Company assessmentDirect peers
- Gigaom: Independent technology research and advisory firm producing research, reports, and analyst commentary. Comparable in offering free research with premium/licensed content and serving enterprise technology buyers.
- KuppingerCole Analysts: European-headquartered analyst firm specializing in identity, cloud security, and cybersecurity research with a vendor-licensing model similar to Securosis's research licensing approach. Comparable in niche specialization and boutique scale.
- IANS Research: Boutique information security research and advisory firm offering faculty-led research,咨询服务, and peer community for security practitioners. Highly comparable in model, target buyer (CISOs / security leaders), and boutique scale.
- Enterprise Strategy Group (ESG): TechTarget-owned IT research and analyst firm covering cybersecurity, cloud, and data center. Directly comparable in providing enterprise advisory, custom research, and analyst-led consulting engagements.
- 451 Research: Part of S&P Global, formerly independent tech research firm covering enterprise IT including security, cloud, and data. Comparable in research methodology, enterprise buyer focus, and licensing model.
- TAG Cyber: Boutique cybersecurity advisory firm led by Dr. Edward Amoroso, providing enterprise security research and vendor guidance. Similar in model (research, advisory, vendor support) and in serving Fortune-class enterprise security buyers.
Broad incumbents
- IDC: Global market intelligence firm covering IT, including security and cloud markets. Provides syndicated research, custom advisory, and vendor licensing — a superset of Securosis's model at far greater scale.
- Forrester Research: Global research and advisory firm with a strong security and risk practice (Forrester Wave). Directly competes for enterprise security advisory spend, though Forrester offers broader coverage beyond Securosis's cloud-security focus.
- SANS Institute: Largest cybersecurity training and certification provider globally, including GIAC certifications and cloud security courses. Comparable in security training revenue and practitioner audience, though SANS is significantly larger and more diversified.
- Gartner: Largest IT research and advisory firm covering security, cloud, and broader enterprise IT. Overlaps directly with Securosis on cloud security and information security advisory, though Gartner operates at vastly greater scale with Magic Quadrant, Hype Cycle, and global analyst coverage. Founder Rich Mogull was a Gartner Research VP.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
Securosis social profiles
Digital presenceSecurosis financial estimates
Financial estimateRevenue estimate
Valuation estimate
Securosis leadership team
Management profileNumber of profiles
Profiles10 records
Securosis funding detail
Funding detailFunding overview
Funding rounds1 record
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Securosis M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Securosis
What does Securosis do?
Securosis is an information security research and advisory firm that publishes free and licensed primary research on cloud and information security, delivers packaged cloud security consulting engagements (Project Accelerators), runs technical training programs (including the CCSK certification curriculum and Applied SecDevOps), and provides custom research, strategy days, and vendor advisory retainers. It also operates CloudSLAW, a free weekly hands-on cloud security training lab distributed via email with optional paid Patreon tiers.
Is Securosis a public or private company?
Securosis is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Securosis founded?
Securosis was founded in 2010. It employs 11 to 50 people.
Where is Securosis based?
Securosis is headquartered in Phoenix, United States, in the North America region.
How does Securosis make money?
Five revenue lines are on record. Primary Research Licensing is the primary driver. The others are cloud Security Project Accelerators, security Training Programs, custom Research, Advisory, and Retainer Services and cloudSLAW Patreon.
Who are Securosis's main competitors?
Direct peers on record are Gigaom, KuppingerCole Analysts, IANS Research, Enterprise Strategy Group (ESG), 451 Research and TAG Cyber. Broad incumbents are IDC, Forrester Research, SANS Institute and Gartner.
Does Securosis have an API?
No public API is recorded for Securosis.
What industry is Securosis in?
Securosis's product category is Information Security Research & Advisory. Its primary akta.pro industry code is EDAOAIAC, Cloud Computing & Cloud Security, with a secondary code of EDABAFAF, Cybersecurity Technical Skills (Security Engineering, SOC, Pen Testing). Its NAICS code is 611430 and its SIC code is 8200.