What TraceSecurity does

TraceSecurity, LLC is a privately held cybersecurity compliance and risk management firm headquartered in Baton Rouge, Louisiana, founded in 2004. The company delivers IT governance, risk, and compliance (GRC) services to U.S. organizations, with primary concentration in financial services (banks and credit unions) and secondary presence in healthcare, government, and legal verticals. Over a 21-year operating history, TraceSecurity reports having served 3,700+ organizations and generated 40,000+ examiner-approved reports, delivered through a team of 50+ certified information security analysts.

The company's offering combines certified-analyst-led professional services with a proprietary software suite. Professional services span penetration testing, IT security audits, risk assessments, social engineering, red/purple team testing, vCISO engagements, ransomware preparedness assessments, and tabletop exercises, executed by analysts holding CISA, CISSP, and CompTIA Security+ credentials. The software portfolio includes TraceCSO (client management portal), TraceInsight (vulnerability management platform with Qualys-powered scanning), TraceEducation (security awareness video training), TracePhishing (phishing simulation), and the Cybersecurity Assessment Tool (CSAT), a NIST 2.0-aligned self-assessment spanning Identify, Protect, Detect, Respond, and Recover functions.

Revenue is generated through a hybrid model: project-based professional services engagements combined with recurring SaaS subscriptions to its software platforms. Pricing is custom and quote-based, typically structured as multi-year contracts. Go-to-market is sales-led, with information security sales consultants responding to inbound quote requests, supplemented by a content marketing engine (quarterly webinars, blog, whitepapers) and a long-standing channel partnership with CUNA Strategic Services (since 2006) for distribution into the credit union community. The company operates as TraceSecurity, LLC, is privately held with no disclosed external funding, and has 51-100 employees.

Name

TraceSecurity

Legal name

TraceSecurity, LLC

Website

https://tracesecurity.com

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

51–100 employees

Short description

TraceSecurity is a U.S. cybersecurity compliance firm serving 3,700+ organizations, primarily banks and credit unions. It combines certified-analyst-led professional services (audits, penetration testing, vCISO) with proprietary software (TraceCSO, TraceInsight, TraceEducation, TracePhishing) for GRC management.

Ownership category

akta.pro rank

Product category

Cybersecurity Compliance & Testing Services

NAICS

Investigation and Security Services (5616), Security Systems Services (56162)

SIC

Services-Testing Laboratories (8734)

akta.pro primary industry

Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG)

akta.pro secondary industries

Vulnerability Management & Penetration Testing Services (BPAEADAD), Penetration Testing & Red Teaming (BPAKADAE), Security Awareness, Training & Compliance Attestation (HDADAIAJ)

Keywords

• Cybersecurity compliance services
• Penetration testing
• Vulnerability management
• Security awareness training
• IT security audits

Headquarters

HQ city

Baton Rouge

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Professional Services - Assessments & Testing: Cybersecurity compliance services including penetration testing, vulnerability assessments, IT security audits, risk assessments, social engineering testing, security awareness training, and red/purple team testing delivered by certified analysts
2. Software Subscriptions - Platform Access: SaaS-based platform access for TraceCSO, TraceInsight, TraceEducation, and TracePhishing for ongoing cybersecurity management, vulnerability scanning, training assignments, and phishing testing

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels5 records

Core offering

TraceSecurity delivers cybersecurity compliance services and supporting SaaS platforms to organizations in financial services, healthcare, government, and legal sectors. A team of 50+ certified information security analysts performs penetration testing, vulnerability assessments, IT security audits, risk assessments, social engineering, and security awareness training, supplemented by proprietary software platforms (TraceCSO, TraceInsight, TraceEducation, TracePhishing, and the Cybersecurity Assessment Tool) for ongoing vulnerability management, phishing simulation, and employee training.

Product overview

TraceSecurity offers a comprehensive suite of cybersecurity compliance services and software tools. The portfolio consists of four main software products: the Cybersecurity Assessment Tool (CSAT) for NIST-based self-assessments, TraceEducation Platform for security awareness training, TracePhishing Platform for phishing simulation testing, and Vulnerability Management powered by Qualys for scanning and remediation. These are delivered through the TraceInsight and TraceCSO platforms. The company also provides professional services including Configuration Reviews, IT Security Audits, Onsite Social Engineering, Penetration Testing, Phishing & Vishing testing, Purple Team Testing, Ransomware Preparedness Assessment, Red Team Testing, Risk Assessment, Security Awareness Training, Tabletop Testing, vCISO services, and Vulnerability Assessments.

Differentiator

Problem solved

Functional benefit

Brands

• TraceCSO: Cybersecurity management platform for executive oversight and reporting.
• TraceInsight
• TraceEducation
• TracePhishing
• Cybersecurity Assessment Tool (CSAT)

Products and services

• Penetration Testing Manual penetration testing service in which certified analysts attempt to hack client networks, report on security deficiencies, and provide actionable recommendations to remediate findings. Used by banks, credit unions, healthcare, and government organizations.
• IT Security Audit Audit service that verifies the controls protecting client IT environments and produces examiner-acceptable reports designed to meet regulatory compliance requirements such as those imposed on banks and credit unions.
• Risk Assessment Assessment service that helps organizations understand their risks, threats, and control deficiencies and align their security posture with regulatory requirements, guidance frameworks, and best practices.
• Vulnerability Assessment Analyst-led vulnerability assessment service that identifies and prioritizes exploitable vulnerabilities in client environments to support remediation planning and budget allocation.
• vCISO Outsourced Virtual CISO service providing ongoing security leadership, program oversight, and strategic guidance for organizations that do not maintain a full-time in-house CISO.
• Security Awareness Training Training service using in-house developed sessions and videos to educate client employees on security best practices and reduce susceptibility to social engineering attacks.
• Phishing & Vishing Testing Social engineering testing service that simulates phishing email and vishing (voice phishing) attacks against client employees to measure and improve organizational resilience to remote social engineering.
• Onsite Social Engineering Onsite social engineering service that tests physical security and in-person manipulation defenses at client facilities, including attempts to bypass physical and procedural controls.
• Purple Team Testing Collaborative purple team testing service in which TraceSecurity's offensive team works with the client's defensive team to identify gaps in detection and response capabilities.
• Red Team Testing Adversary emulation service in which TraceSecurity's red team attempts to compromise client environments end-to-end to evaluate the overall effectiveness of the client's security program.
• Tabletop Testing Tabletop exercise service that walks client leadership and response teams through simulated security incident scenarios to evaluate and improve incident response readiness.
• Ransomware Preparedness Assessment Assessment service that evaluates an organization's readiness to prevent, detect, respond to, and recover from ransomware attacks, including review of backups, controls, and response plans.
• Configuration Reviews Configuration review service that assesses the security configuration of client IT environments (including Microsoft 365 and other platforms) against best practices and regulatory expectations.
• Cybersecurity Assessment Tool (CSAT) A self-assessment tool, updated to NIST 2.0, that evaluates cybersecurity maturity across the five NIST Cybersecurity Framework categories (Identify, Protect, Detect, Respond, Recover) for financial, government, higher education, healthcare, industrial, retail, and SEC/OCIE regulated organizations.
• TraceEducation Cloud-based video training platform that allows organizations to assign regular security awareness training sessions to employees to maintain ongoing security education.
• TracePhishing Cloud-based phishing simulation platform for on-demand employee testing, with included training content to remediate users who fail simulations.
• Vulnerability Management Platform Cloud-based vulnerability management platform powered by Qualys that performs on-demand vulnerability scans and provides proactive remediation management capabilities.
• TraceInsight Primary client-facing software platform that consolidates vulnerability management, cybersecurity assessment tools, and related management capabilities, accessible via https://insight.tracesecurity.com.
• TraceCSO Client login platform used by TraceSecurity customers to access engagement information, reports, and service management for TraceSecurity services, accessible via https://cso.tracesecurity.com.

Quantifiable outcome

• Over 550 IT audits performed in a single year
• +3 more outcomes

Named customers4 records

Segments4 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Partnerships

One partnership is on record.

• CUNA Strategic ServicescoreChannel Partner/ Reseller/ Distributor · 1 January 2006Long-standing strategic partnership since 2006 where CUNA Strategic Services recommends TraceSecurity's cybersecurity services and software to their credit union members. This channel partnership has enabled TraceSecurity to serve the credit union community extensively, with CUNA providing ongoing recommendations as the industry evolves.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• NetSPI: NetSPI is a penetration testing and vulnerability management provider serving financial services, healthcare, and technology firms. It competes directly with TraceSecurity on IT audit, penetration testing, and ASM services for mid-market and enterprise customers.
• Bishop Fox: Bishop Fox specializes in penetration testing, red teaming, and attack surface management. Its offensive-security-led service portfolio and target customer segments overlap closely with TraceSecurity's Red Team, Purple Team, and Penetration Testing practices.
• Coalfire: Coalfire is a cybersecurity advisory and assessment firm focused on compliance (PCI, HITRUST, FedRAMP) and penetration testing. It is directly comparable on IT audit, risk assessment, and compliance testing services, particularly for regulated industries.
• NCC Group: NCC Group provides cybersecurity consulting, penetration testing, and managed detection services globally. It is comparable to TraceSecurity on professional-services-led security testing and compliance engagements, though with broader geographic scale.
• SecurityMetrics: SecurityMetrics provides PCI compliance, penetration testing, vulnerability scanning, and security awareness training for small and mid-market businesses. It overlaps closely with TraceSecurity's compliance audit, training, and assessment portfolio at a similar customer scale.

Broad incumbents

• Rapid7: Rapid7 is a public cybersecurity vendor offering vulnerability management (InsightVM), penetration testing services, and managed detection. It competes with TraceInsight on vulnerability scanning and overlaps with TraceSecurity's pen testing services at a broader enterprise scale.
• Tenable: Tenable is the creator of Nessus and a leading vulnerability management platform (Tenable One). It directly competes with the Qualys-powered TraceInsight platform on enterprise vulnerability scanning and continuous assessment.
• Qualys: Qualys powers TraceSecurity's vulnerability management offering today and is itself a leading cloud-based VM and compliance platform. As both partner and competitive threat, Qualys represents the largest incumbent in the underlying tech stack TraceInsight resells.
• Secureworks: Secureworks is a global MSSP offering managed detection, vulnerability management, and compliance services. It is comparable to TraceSecurity as a broader-incumbent cybersecurity services provider with overlapping regulatory and vulnerability offerings.

Emerging players

• Arctic Wolf: Arctic Wolf is a fast-growing MDR/SaaS security operations vendor that bundles vulnerability management, security awareness, and compliance reporting. It is an emerging adjacency competing for the same mid-market security budget as TraceSecurity's software stack.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/tracesecurity
• Facebookfacebook.com/174611622550347
• LinkedInlinkedin.com/company/tracesecurity

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds3 records

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about TraceSecurity