Cyber Defense Group
Cyber Defense Group is a US-based cybersecurity consulting firm delivering fixed-cost Outcomes-Based Security® Programs, including vCISO, risk assessment, compliance, incident response, and AI governance services, to mid-market and enterprise organizations across Healthcare, Retail, Financial Services, and Media verticals.
- Company typePrivate
- Founded2016
- HeadquartersLos Angeles, United States
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Cyber Defense Group does
Cyber Defense Group (CDG) is a US-based cybersecurity consulting firm founded in 2016 by Lou Rabon and headquartered in Pasadena, California. The company delivers cybersecurity services to mid-market and enterprise organizations through its proprietary Outcomes-Based Security® Programs framework, which packages Virtual CISO (vCISO) leadership, risk assessments, compliance services (SOC 2, ISO 27001, HIPAA, NIST, CMMC, GDPR), incident response and forensics, managed detection and response (MDR), penetration testing, AI governance, and cybersecurity-as-a-service into a fixed-cost subscription engagement anchored by a dedicated consulting team rather than billable hours.
CDG's core technology footprint is light relative to product-led cybersecurity vendors: the firm does not market a proprietary platform, and its differentiation rests on consulting methodology, the registered 'Outcomes-Based Security®' trademark, and a small set of internally developed or licensed tools (including the Blink SaaS application referenced in the Terms of Service and the Screener's Security Report internal monitoring tool developed for the EditShare engagement). Service delivery is organized around NIST-aligned frameworks and tailored programs rather than a unified software platform, with pricing positioned against the $200K–$400K annual cost of a full-time CISO.
CDG's commercial model combines direct enterprise field sales with a structured channel partner ecosystem. Direct sales target mid-market and enterprise CISOs, CTOs, and IT leaders across verticals including Healthcare, Retail, Media & Entertainment, Financial Services, Legal, Technology, and Utilities. Indirect distribution runs through technology advisors, MSPs, and VARs (notably Telarus under a strategic partnership announced in April 2026, plus AppDirect, Avant Communications, Acceler8 Networks, Amplix, Convergent, and Stratacore) supported by deal registration, SPIFF incentives, and an AppDirect marketplace listing. Revenue is primarily recurring through multi-year Outcomes-Based Security subscriptions, supplemented by incident response retainers, on-demand emergency response, and project-based assessments. The customer base includes recognizable enterprise names such as EditShare, SHEIN, Crouse Hospital, Golden State Water, Sheppard Mullin, Abbott Diagnostics, and Lantronix, with the company claiming 100+ companies actively protected, 100+ compliance audits passed, and a 4.7-star Clutch rating. In 2024, CDG hired former USC CISO Gus Anagnos as COO to lead a stated hypergrowth strategy, and in 2026 ESET announced an agreement to acquire CDG's Netherlands distribution operation.
Cyber Defense Group firmographics
Firmographics- Name
- Cyber Defense Group
- Legal name
- Cyber Defense Group, Inc.
- Website
- https://cdg.io
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Cyber Defense Group is a US-based cybersecurity consulting firm delivering fixed-cost Outcomes-Based Security® Programs, including vCISO, risk assessment, compliance, incident response, and AI governance services, to mid-market and enterprise organizations across Healthcare, Retail, Financial Services, and Media verticals.
- Ownership category
- akta.pro rank
Cyber Defense Group industry classification
Industry- Product category
- Cybersecurity Consulting Services
- NAICS
- Computer Systems Design and Related Services (54151), Investigation and Security Services (5616)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF)
- akta.pro secondary industries
- Cybersecurity & Identity Consulting (BPAHAEAG), Cybersecurity Awareness & Digital Safety Training for Security Personnel (BPAKAOAO), Cybersecurity Technical Skills (Security Engineering, SOC, Pen Testing) (EDABAFAF)
Keywords
Where Cyber Defense Group is headquartered
LocationHeadquarters
- HQ city
- Los Angeles
- HQ country
- United States
- HQ region
- North America
Offices3 records
Markets served
Cyber Defense Group business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations
Revenue model
- Outcomes-Based Security Programs (Subscription): CDG's primary revenue stream comes from fixed-cost subscription agreements for Outcomes-Based Security Programs. These programs bundle vCISO services, risk assessments, compliance management, incident response retainer, and AI governance into a predictable monthly or annual subscription with clear deliverables and fixed pricing. Revenue is recurring in nature, anchored on multi-year client relationships.
- Incident Response (On-Demand / Retainer): Incident response services are offered as emergency reactive engagements or through prepaid retainer arrangements. Retainers cover development, management testing/validation, playbook creation, and post-mortems, with security professionals and tools available for swift incident response.
- Cybersecurity as a Service (CSaaS): Customizable cybersecurity-as-a-service engagements providing ongoing protection, monitoring, and advisory services. Billed as part of the subscription or as standalone managed service engagements.
- Professional Services (Consulting / Assessments): One-time and project-based professional services including cybersecurity risk assessments, penetration testing, ransomware readiness testing, compliance readiness assessments, and cyber insurance readiness assessments. These generate non-recurring revenue alongside subscription programs.
- Licensed Technology Products: CDG offers proprietary SaaS applications such as the Blink service, which clients can license as part of the service engagement. Revenue from licensed technology products supplements service-based fees.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Outcomes-Based Security Programs — Fixed-Cost Subscription |
| Subscription | Annual | Virtual CISO (vCISO) Services |
| Outcome Based/ Performance | Pay-as-you-go | Incident Response — Emergency Reactive |
| Subscription | Monthly | Incident Response — Retainer |
| Unit Pricing | Pay-as-you-go | Specialized Assessments (Penetration Testing, Cloud Security, etc.) |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels9 records
Cyber Defense Group product offering
Product offeringCore offering
Cyber Defense Group is a cybersecurity consulting firm that delivers Outcomes-Based Security® Programs — fixed-cost, outcome-driven managed security engagements built around a dedicated team model rather than billable hours. Core service lines include Virtual CISO (vCISO) leadership, cybersecurity risk assessments, compliance services (SOC 2, HIPAA, ISO 27001, NIST, CMMC, GDPR), incident response and forensics, AI governance, managed detection and response (MDR), penetration testing, tabletop exercises, and threat hunting.
Product overview
Cyber Defense Group is a cybersecurity consulting firm that operates as a single integrated platform rather than a collection of separate products. The core offering is the Outcomes-Based Security® Programs framework, which unifies all services including Virtual CISO, Cybersecurity Risk Assessment, Compliance Services, Incident Response Services, AI Governance Services, Forensic Services, Cybersecurity as a Service (CSaaS), Managed Detection and Response (MDR), Penetration Testing, Tabletop Exercises, and Threat Hunting. All services are delivered through this unified Outcomes-Based Security® framework with fixed pricing and dedicated teams, rather than traditional billable-hours consulting. The company also offers supporting resources like the vCISO Checklist, solution briefs, and the Channel Security Secrets podcast.
Differentiator
Problem solved
Functional benefit
Brands
- Outcomes-Based Security®: A proprietary managed security services model delivering measurable cybersecurity outcomes with fixed-cost, dedicated-team engagements rather than billable-hours.
- Cybersecurity as a Service (CSaaS)
- Channel Security Secrets Podcast
Products and services
- Outcomes-Based Security® Programs Flagship managed security service framework delivering measurable, outcome-driven cybersecurity programs with fixed pricing, dedicated teams, and clear deliverables rather than billable hours. Bundles vCISO leadership, risk assessments, compliance, incident response, and AI governance for mid-market and enterprise organizations.
- Virtual CISO Services Strategic cybersecurity leadership on demand, providing expert guidance on security strategy, compliance initiatives, and risk management for organizations that need CISO-level expertise without the cost of a full-time executive ($200K–$400K annually).
- Cybersecurity Risk Assessment Comprehensive assessment identifying vulnerabilities, evaluating threats, and providing actionable insights to prioritize and mitigate risks while ensuring compliance with industry standards. For organizations seeking to understand their security posture.
- Compliance Services Ongoing compliance guidance and support for frameworks including SOC 2, ISO 27001, HIPAA, NIST, CMMC, and GDPR, with roadmaps and tailored assessments. For organizations pursuing or maintaining regulatory certifications.
- Incident Response Services Rapid emergency response, threat containment, and remediation services including emergency incident response, incident response retainers, managed detection and response (MDR), tabletop exercises, and threat hunting. For organizations experiencing or preparing for security incidents.
- AI Governance Services Structured AI governance framework services helping organizations meet ISO 42001 standards while creating foundations for ethical and transparent AI use, including data governance protocols, AI decision-making transparency, and proactive risk and bias management.
- Forensic Services Expert digital forensics, post-breach investigation, and litigation support including digital forensics & eDiscovery, incident forensics, and expert witness testimony. For organizations involved in security incidents or legal proceedings requiring digital evidence.
- Cybersecurity as a Service (CSaaS) Fully managed cybersecurity programs delivered through the Outcomes-Based Security® framework, providing ongoing protection, monitoring, and security management as an outsourced service.
- Managed Detection and Response (MDR) Comprehensive managed detection and response service with continuous monitoring, enabling swift responses to threats or unusual activities. For organizations needing 24/7 threat detection and response capabilities.
- Penetration Testing Ethical hacking services that uncover real-world vulnerabilities through practical penetration testing techniques, providing thorough reports of successful penetrations. For organizations seeking to validate their security controls.
- Tabletop Exercises Custom-designed cybersecurity mock drills simulating attack scenarios relevant to the business, allowing organizations to practice and validate their incident response plans.
- Threat Hunting Proactive network and systems examination to identify potential signs of compromise, driven by hypotheses and supported by latest threat intelligence.
Quantifiable outcome
- Fixed-cost pricing replaces unpredictable hourly billing, eliminating surprise costs associated with traditional MSSP engagements
- +4 more outcomes
Companies that use Cyber Defense Group
Customer profileNamed customers15 records
Segments6 records
Ideal customer profiles5 records
Cyber Defense Group technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability1 record
Feature3 records
Cyber Defense Group partnerships and signals
Strategic signalPartnerships
Nine partnerships are on record, tiered core, minor and flagship.
- TelaruscoreCyber Defense Group and Telarus announced a strategic partnership in April 2026 to strengthen advisor-led cybersecurity services. The partnership enables Telarus technology advisors to offer CDG's Outcomes-Based Security Programs, assessments, incident response, and AI governance services to mid-market and enterprise clients. CDG's fixed-cost engagement model and dedicated teams complement Telarus's advisor-led go-to-market approach.
- Phoenix Tech ExpertsminorPhoenix Tech Experts is a technology advisor partner that offers CDG's cybersecurity services to its customers. President JJ Schwartz has provided a testimonial endorsement of CDG's partnership quality, cybersecurity expertise, and commitment to long-term partnerships.
- AppDirectcoreAppDirect is a marketplace platform partner that lists CDG's Outcomes-Based Security Programs, enabling technology advisors and end customers to discover and procure CDG services through the AppDirect ecosystem.
- Avant CommunicationsminorAvant Communications is a technology advisor partner that offers CDG's cybersecurity services to its customer base.
- AmplixminorAmplix is a channel partner that collaborates with CDG to deliver cybersecurity services to end customers.
- Acceler8 NetworksminorAcceler8 Networks is a channel partner in CDG's partner ecosystem, reselling CDG cybersecurity services to their customer base.
- ConvergentminorConvergent is a channel partner in CDG's partner ecosystem, collaborating on cybersecurity service delivery.
- StratacoreminorStratacore is a channel partner in CDG's partner ecosystem, collaborating on cybersecurity service delivery.
- ESETflagshipESET agreed to acquire Cyber Defense Group as its exclusive distribution partner in the Netherlands, expanding ESET's direct presence in the European market. This acquisition ensures seamless transfer of CDG's employees and customers to ESET and strengthens ESET's position as a cybersecurity player in Europe. CDG's Netherlands operations became part of ESET's 20 global offices following the acquisition announced at ESET World 2026.
Scale indicators6 records
Recent moves6 records
Expansion highlights6 records
Cyber Defense Group competitors and assessment
Company assessmentBroad incumbents
- Trustwave: Global cybersecurity MSSP and consulting firm offering managed detection, incident response, and compliance services to mid-market and enterprise customers. Overlaps with CDG on outcome-oriented managed services and IR retainer offerings.
- ReliaQuest: Enterprise-focused managed detection and response and security operations provider with an extensive platform layer. Represents the software-enabled incumbent that CDG competes against for security leadership dollars.
- Mandiant (Google Cloud): Incident response, threat intelligence, and security consulting firm now part of Google Cloud. Most directly comparable to CDG's IR and forensics offerings and represents the gold-standard incumbent in incident response consulting.
- Optiv Security: Large cybersecurity solutions integrator offering advisory, managed security, and consulting across enterprise clients. Represents the scaled incumbent that CDG competes against for security program engagements.
- Arctic Wolf: Large, well-funded MDR/security operations platform serving mid-market and enterprise customers with bundled advisory and vCISO-adjacent services. Competes for the same buyer budget as CDG but at much greater scale.
- eSentire: MDR and managed security services provider with mid-market and enterprise customers across financial services, healthcare, and legal. Overlaps with CDG on managed services and IR retainers.
Direct peers
- Kudelski Security: Global cybersecurity services provider combining consulting, managed security, and incident response for mid-market and enterprise clients. Comparable service portfolio to CDG's Outcomes-Based Security® programs.
- Avertium: Mid-market-focused cybersecurity services firm delivering MDR, compliance, and consulting across regulated industries. Closely overlaps CDG on customer profile and outcomes-oriented engagement model.
- Pondurance: US-based mid-market MDR and professional services firm combining managed detection and response with advisory and compliance work. Closely comparable to CDG on customer size, vertical mix, and human-delivered outcomes model.
- BTB Security: Boutique US cybersecurity consulting firm offering vCISO, penetration testing, and compliance readiness to mid-market clients. Comparable headcount and similar positioning as a fractional security leadership provider.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
Cyber Defense Group social profiles
Digital presenceCyber Defense Group financial estimates
Financial estimateRevenue estimate
Valuation estimate
Cyber Defense Group leadership team
Management profileNumber of profiles
Profiles3 records
Cyber Defense Group funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Cyber Defense Group M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Cyber Defense Group
What does Cyber Defense Group do?
Cyber Defense Group is a cybersecurity consulting firm that delivers Outcomes-Based Security® Programs — fixed-cost, outcome-driven managed security engagements built around a dedicated team model rather than billable hours. Core service lines include Virtual CISO (vCISO) leadership, cybersecurity risk assessments, compliance services (SOC 2, HIPAA, ISO 27001, NIST, CMMC, GDPR), incident response and forensics, AI governance, managed detection and response (MDR), penetration testing, tabletop exercises, and threat hunting.
Is Cyber Defense Group a public or private company?
Cyber Defense Group is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Cyber Defense Group founded?
Cyber Defense Group was founded in 2016. It employs 11 to 50 people.
Where is Cyber Defense Group based?
Cyber Defense Group is headquartered in Los Angeles, United States, in the North America region.
How does Cyber Defense Group make money?
Five revenue lines are on record. Outcomes-Based Security Programs (Subscription) is the primary driver. The others are incident Response (On-Demand / Retainer), cybersecurity as a Service (CSaaS), professional Services (Consulting / Assessments) and licensed Technology Products.
Who are Cyber Defense Group's main competitors?
Broad incumbents on record are Trustwave, ReliaQuest, Mandiant (Google Cloud), Optiv Security, Arctic Wolf and eSentire. Direct peers are Kudelski Security, Avertium, Pondurance and BTB Security.
Does Cyber Defense Group have an API?
No public API is recorded for Cyber Defense Group.
What industry is Cyber Defense Group in?
Cyber Defense Group's product category is Cybersecurity Consulting Services. Its primary akta.pro industry code is BPAHAFAF, Privacy, Data Protection & Cyber Governance (GRC), with a secondary code of BPAHAEAG, Cybersecurity & Identity Consulting. Its NAICS code is 54151 and its SIC code is 7373.