What IANS does

IANS (Institute for Applied Network Security) is a Boston-based, privately held cybersecurity insights and decision support firm founded in 2001 by Phil Gardner. It serves CISOs, senior security executives, security practitioners, and increasingly privacy and compliance stakeholders at large enterprises, with 46% of Fortune 100 Companies cited as clients. The company operates an enterprise field sales GTM through corporate licensing agreements, distributing its products via a proprietary Client Portal and a network of more than 125 annual events (Forums, CISO Roundtables, Symposiums, Insight Exchanges, Webinars).

The core product suite spans four pillars: Decision Support (Ask IANS, Ask-an-Expert, Executive Communications, Vendor Assessment Community, CISO Inquiry, Privacy Operations), Consulting (Penetration Testing, Security Program Assessments, Tabletop Exercises), Professional Development (IANS Security Academy, Security Leadership Development, CISO Executive Coaching), and Events. The technological foundation is a proprietary knowledge base built from thousands of anonymized 1:1 conversations between 1,000+ clients and 170+ vetted cybersecurity Faculty practitioners, surfaced through AI-powered search and the Ask IANS Q&A service. The platform is SOC2 Type 1 certified, complies with NIST 800-171/88R1, GDPR, and CCPA, and uses 256-bit AES encryption with quantum-resilient password hashing.

IANS earns revenue primarily through recurring corporate subscriptions (ARR), supplemented by project-based consulting engagements, event sponsorship sold to security vendors, and paid attendance at sponsored events. A third-party source reports $122.7M ARR and a $368.1M valuation as of 2025; IANS also received a strategic investment from Apax Digital Funds in April 2024 to fund product development and scaling. Sustained 20%+ year-over-year growth between FY2021 and FY2024 was recognized by The Boston Globe in March 2026.

Name

IANS

Legal name

Institute for Applied Network Security

Website

https://iansresearch.com

Company type

Private

Founded year

2001

Operating status

Operating

Headcount range

101–250 employees

Short description

IANS is a Boston-based cybersecurity insights and decision support firm serving CISOs and security leaders at large enterprises with practitioner-validated research, a 170+ Faculty expert network, AI-powered Ask IANS Q&A, consulting, events, and professional development, sold via corporate licensing agreements.

Ownership category

akta.pro rank

Product category

Cybersecurity Research & Advisory

NAICS

Computer Systems Design and Related Services (54151), Custom Computer Programming Services (541511), Software Publishers (513210)

SIC

Services-Computer Integrated Systems Design (7373), Services-Computer Programming Services (7371)

akta.pro primary industry

Governance, Risk & Compliance (GRC) Managed Services (BPAEADAJ)

Keywords

• Cybersecurity research
• Security advisory
• CISO consulting
• Security benchmarking
• Vendor assessment

Headquarters

HQ city

Boston

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Corporate Subscription / Licensing: Recurring revenue via corporate licensing agreements that grant authorized users access to the IANS Client Portal and product suite (Decision Support, Consulting, Professional Development, Events). Land-and-expand via additional products like Privacy Operations, Vendor Assessment Community, and the IANS Security Academy.
2. Consulting Services: Project-based cybersecurity consulting including Penetration Testing, Security Program Assessments, and Tabletop Exercises. Customized, project-driven engagements on top of subscriptions.
3. Event Sponsorship: Vendor sponsorship opportunities at Forums and other events (vendor sponsorship landing page explicitly present); allows sponsors to introduce brand, tell story, and build relationships with attendees.
4. Self-funded recurring revenue (ARR): Per third-party reporting, IANS is a self-funded Security Compliance Software company with $122.7M ARR and a $368.1M valuation, grown without external funding since 2001. (Later: Apax Digital Funds made a strategic investment in 2024.)

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels9 records

Core offering

IANS provides subscription-based cybersecurity research, advisory, and consulting to enterprise CISOs and security teams through its Client Portal, Ask IANS AI assistant, faculty-led calls, custom consulting engagements, and annual benchmarking research. The core deliverable is independent, practitioner-grounded decision support that helps enterprise security organizations evaluate vendors, justify investments, benchmark maturity, and develop their teams.

Differentiator

Problem solved

Functional benefit

Brands

• IANS Research: Operating brand for the Institute for Applied Network Security, providing cybersecurity insights, research, advisory services, and a client portal.
• Ask IANS
• IANS News
• IANS Daily Dive
• IANS Security Academy
• Security Leadership Development
• CISO Executive Coaching
• Privacy Operations
• Vendor Assessment Community (VAC)
• CISO Inquiry

Products and services

• IANS Client Portal

Quantifiable outcome

• More than 8,000 annual expert 1:1 sessions delivered to clients.
• +5 more outcomes

Segments6 records

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability4 records

Feature6 records

Partnerships

Five partnerships are on record, tiered core, minor and operational.

• Artico SearchcoreStrategic or Co-development PartnerIANS and Artico Search co-publish cybersecurity talent and compensation research (e.g., 2024 and 2026 surveys of 500+ professionals). Their joint reports document retention challenges, salary benchmarks ($113K analysts, $188K architects, $256K functional leaders), and CISO title trends.
• Retail & Hospitality Information Sharing and Analysis Center (RH-ISAC)coreStrategic or Co-development PartnerRH-ISAC and IANS co-publish the annual CISO Benchmark Report for retail and hospitality (2026 edition surveyed more than 200 CISOs), focusing on AI-driven cybersecurity risk, budgets, and CISO scope.
• RSA ConferencecoreGTM or Marketing PartnerIANS Research is a Partner of RSA Conference (referenced via partner graphic on portal login page and Learn About Daily Dive page; utm_source=assoc-ians&utm_medium=referral&utm_campaign links confirm association).
• RH-ISAC co-sponsors of IANS eventsminorGTM or Marketing PartnerPrivacy Statement references co-sponsorship of IANS events; co-sponsors may receive Personal Information of attendees per the Privacy Policy.
• Event technology / payment processing service providersoperationalImplementation/ SI/ Consulting PartnerPer Privacy Policy, IANS engages nonaffiliated third parties (e.g., payment processors, email marketing providers) under contract to deliver services. Client payments collected via ACH (Automated Clearing House).

Scale indicators13 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• SANS Institute: Direct peer in cybersecurity training, certifications, and practitioner-led research, sharing IANS' emphasis on instructor/practitioner credibility. Overlaps most directly with the IANS Security Academy, Security Leadership Development, and Faculty-driven content.
• Forrester Research: Closest direct peer: a publicly traded research and advisory firm covering cybersecurity, risk, and technology decisions for enterprise leaders. Sells subscription research, advisory, and events to a similar enterprise audience, but with broader coverage and a heavier analyst-model rather than practitioner-Faculty model.

Emerging players

• Bishop Fox: Specialized offensive-security firm offering penetration testing, red teaming, and security assessments. Direct overlap with IANS' Penetration Testing consulting line, with a more boutique and technically deep positioning versus IANS' broader advisory stack.
• Cybereason: AI-driven endpoint detection and response vendor with strong practitioner-led thought leadership and research content targeting enterprise CISOs. Adjacent rather than directly overlapping, but competes for CISO mindshare and serves a similar buyer persona.

Broad incumbents

• Mandiant (Google Cloud): Now part of Google Cloud, Mandiant combines security consulting, threat intelligence, and managed detection, overlapping with IANS' Consulting practice (penetration testing, security program assessments, tabletop exercises) and with IANS' threat-driven news and Faculty content.
• International Data Corporation (IDC): Global market intelligence and advisory firm with a significant cybersecurity research practice serving enterprise IT and security buyers. Comparable subscription/benchmarking motion and enterprise GTM, but broader industry focus than IANS' security-pure positioning.
• Optiv Security: Large cybersecurity solutions integrator and advisory firm delivering strategy, risk, and technical consulting to enterprises. Overlaps with IANS Consulting and Decision Support engagements and competes for the same CISO advisory dollars, though via a partner-led delivery model.
• Kroll Cyber Risk: Cyber risk, incident response, and advisory practice within Kroll, comparable to IANS Consulting and decision-support work for enterprise CISOs. Broader risk and investigations portfolio; competes for tabletop exercise and program assessment budgets.
• (ISC)²: Global cybersecurity certification body (CISSP, CCSP) that partners with IANS as a CPE Submitter and runs adjacent research, training, and member communities. Comparable practitioner audience but a membership/certification-led business model versus IANS' subscription/advisory model.
• Gartner: Dominant IT research and advisory incumbent whose security coverage (Magic Quadrant for Security Operations, etc.) competes for the same enterprise CISO budget as IANS Decision Support and Vendor Assessment Community. Much larger scale and broader scope; IANS differentiates via practitioner-led depth rather than breadth.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/ians_security
• YouTubeyoutube.com/channel/UC4zc3IkGmNfSVUMqLF8qBiQ
• LinkedInlinkedin.com/company/56975

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds2 records

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about IANS