Cyber Defense Group

What Cyber Defense Group does

Cyber Defense Group (CDG) is a US-based cybersecurity consulting firm founded in 2016 by Lou Rabon and headquartered in Pasadena, California. The company delivers cybersecurity services to mid-market and enterprise organizations through its proprietary Outcomes-Based Security® Programs framework, which packages Virtual CISO (vCISO) leadership, risk assessments, compliance services (SOC 2, ISO 27001, HIPAA, NIST, CMMC, GDPR), incident response and forensics, managed detection and response (MDR), penetration testing, AI governance, and cybersecurity-as-a-service into a fixed-cost subscription engagement anchored by a dedicated consulting team rather than billable hours.

CDG's core technology footprint is light relative to product-led cybersecurity vendors: the firm does not market a proprietary platform, and its differentiation rests on consulting methodology, the registered 'Outcomes-Based Security®' trademark, and a small set of internally developed or licensed tools (including the Blink SaaS application referenced in the Terms of Service and the Screener's Security Report internal monitoring tool developed for the EditShare engagement). Service delivery is organized around NIST-aligned frameworks and tailored programs rather than a unified software platform, with pricing positioned against the $200K–$400K annual cost of a full-time CISO.

CDG's commercial model combines direct enterprise field sales with a structured channel partner ecosystem. Direct sales target mid-market and enterprise CISOs, CTOs, and IT leaders across verticals including Healthcare, Retail, Media & Entertainment, Financial Services, Legal, Technology, and Utilities. Indirect distribution runs through technology advisors, MSPs, and VARs (notably Telarus under a strategic partnership announced in April 2026, plus AppDirect, Avant Communications, Acceler8 Networks, Amplix, Convergent, and Stratacore) supported by deal registration, SPIFF incentives, and an AppDirect marketplace listing. Revenue is primarily recurring through multi-year Outcomes-Based Security subscriptions, supplemented by incident response retainers, on-demand emergency response, and project-based assessments. The customer base includes recognizable enterprise names such as EditShare, SHEIN, Crouse Hospital, Golden State Water, Sheppard Mullin, Abbott Diagnostics, and Lantronix, with the company claiming 100+ companies actively protected, 100+ compliance audits passed, and a 4.7-star Clutch rating. In 2024, CDG hired former USC CISO Gus Anagnos as COO to lead a stated hypergrowth strategy, and in 2026 ESET announced an agreement to acquire CDG's Netherlands distribution operation.

Name

Cyber Defense Group

Legal name

Cyber Defense Group, Inc.

Website

https://cdg.io

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

11–50 employees

Short description

Cyber Defense Group is a US-based cybersecurity consulting firm delivering fixed-cost Outcomes-Based Security® Programs, including vCISO, risk assessment, compliance, incident response, and AI governance services, to mid-market and enterprise organizations across Healthcare, Retail, Financial Services, and Media verticals.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting Services

NAICS

Computer Systems Design and Related Services (54151), Investigation and Security Services (5616)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF)

akta.pro secondary industries

Cybersecurity & Identity Consulting (BPAHAEAG), Cybersecurity Awareness & Digital Safety Training for Security Personnel (BPAKAOAO), Cybersecurity Technical Skills (Security Engineering, SOC, Pen Testing) (EDABAFAF)

Keywords

• Cybersecurity consulting services
• Virtual CISO services
• Incident response services
• Managed security services
• Cybersecurity risk assessments

Headquarters

HQ city

Los Angeles

HQ country

United States

HQ region

North America

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Outcomes-Based Security Programs (Subscription): CDG's primary revenue stream comes from fixed-cost subscription agreements for Outcomes-Based Security Programs. These programs bundle vCISO services, risk assessments, compliance management, incident response retainer, and AI governance into a predictable monthly or annual subscription with clear deliverables and fixed pricing. Revenue is recurring in nature, anchored on multi-year client relationships.
2. Incident Response (On-Demand / Retainer): Incident response services are offered as emergency reactive engagements or through prepaid retainer arrangements. Retainers cover development, management testing/validation, playbook creation, and post-mortems, with security professionals and tools available for swift incident response.
3. Cybersecurity as a Service (CSaaS): Customizable cybersecurity-as-a-service engagements providing ongoing protection, monitoring, and advisory services. Billed as part of the subscription or as standalone managed service engagements.
4. Professional Services (Consulting / Assessments): One-time and project-based professional services including cybersecurity risk assessments, penetration testing, ransomware readiness testing, compliance readiness assessments, and cyber insurance readiness assessments. These generate non-recurring revenue alongside subscription programs.
5. Licensed Technology Products: CDG offers proprietary SaaS applications such as the Blink service, which clients can license as part of the service engagement. Revenue from licensed technology products supplements service-based fees.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels9 records

Core offering

Cyber Defense Group is a cybersecurity consulting firm that delivers Outcomes-Based Security® Programs — fixed-cost, outcome-driven managed security engagements built around a dedicated team model rather than billable hours. Core service lines include Virtual CISO (vCISO) leadership, cybersecurity risk assessments, compliance services (SOC 2, HIPAA, ISO 27001, NIST, CMMC, GDPR), incident response and forensics, AI governance, managed detection and response (MDR), penetration testing, tabletop exercises, and threat hunting.

Product overview

Cyber Defense Group is a cybersecurity consulting firm that operates as a single integrated platform rather than a collection of separate products. The core offering is the Outcomes-Based Security® Programs framework, which unifies all services including Virtual CISO, Cybersecurity Risk Assessment, Compliance Services, Incident Response Services, AI Governance Services, Forensic Services, Cybersecurity as a Service (CSaaS), Managed Detection and Response (MDR), Penetration Testing, Tabletop Exercises, and Threat Hunting. All services are delivered through this unified Outcomes-Based Security® framework with fixed pricing and dedicated teams, rather than traditional billable-hours consulting. The company also offers supporting resources like the vCISO Checklist, solution briefs, and the Channel Security Secrets podcast.

Differentiator

Problem solved

Functional benefit

Brands

• Outcomes-Based Security®: A proprietary managed security services model delivering measurable cybersecurity outcomes with fixed-cost, dedicated-team engagements rather than billable-hours.
• Cybersecurity as a Service (CSaaS)
• Channel Security Secrets Podcast

Products and services

• Outcomes-Based Security® Programs Flagship managed security service framework delivering measurable, outcome-driven cybersecurity programs with fixed pricing, dedicated teams, and clear deliverables rather than billable hours. Bundles vCISO leadership, risk assessments, compliance, incident response, and AI governance for mid-market and enterprise organizations.
• Virtual CISO Services Strategic cybersecurity leadership on demand, providing expert guidance on security strategy, compliance initiatives, and risk management for organizations that need CISO-level expertise without the cost of a full-time executive ($200K–$400K annually).
• Cybersecurity Risk Assessment Comprehensive assessment identifying vulnerabilities, evaluating threats, and providing actionable insights to prioritize and mitigate risks while ensuring compliance with industry standards. For organizations seeking to understand their security posture.
• Compliance Services Ongoing compliance guidance and support for frameworks including SOC 2, ISO 27001, HIPAA, NIST, CMMC, and GDPR, with roadmaps and tailored assessments. For organizations pursuing or maintaining regulatory certifications.
• Incident Response Services Rapid emergency response, threat containment, and remediation services including emergency incident response, incident response retainers, managed detection and response (MDR), tabletop exercises, and threat hunting. For organizations experiencing or preparing for security incidents.
• AI Governance Services Structured AI governance framework services helping organizations meet ISO 42001 standards while creating foundations for ethical and transparent AI use, including data governance protocols, AI decision-making transparency, and proactive risk and bias management.
• Forensic Services Expert digital forensics, post-breach investigation, and litigation support including digital forensics & eDiscovery, incident forensics, and expert witness testimony. For organizations involved in security incidents or legal proceedings requiring digital evidence.
• Cybersecurity as a Service (CSaaS) Fully managed cybersecurity programs delivered through the Outcomes-Based Security® framework, providing ongoing protection, monitoring, and security management as an outsourced service.
• Managed Detection and Response (MDR) Comprehensive managed detection and response service with continuous monitoring, enabling swift responses to threats or unusual activities. For organizations needing 24/7 threat detection and response capabilities.
• Penetration Testing Ethical hacking services that uncover real-world vulnerabilities through practical penetration testing techniques, providing thorough reports of successful penetrations. For organizations seeking to validate their security controls.
• Tabletop Exercises Custom-designed cybersecurity mock drills simulating attack scenarios relevant to the business, allowing organizations to practice and validate their incident response plans.
• Threat Hunting Proactive network and systems examination to identify potential signs of compromise, driven by hypotheses and supported by latest threat intelligence.

Quantifiable outcome

• Fixed-cost pricing replaces unpredictable hourly billing, eliminating surprise costs associated with traditional MSSP engagements
• +4 more outcomes

Named customers15 records

Segments6 records

Ideal customer profiles5 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability1 record

Feature3 records

Partnerships

Nine partnerships are on record, tiered core, minor and flagship.

• TelaruscoreChannel Partner/ Reseller/ Distributor · 8 April 2026Cyber Defense Group and Telarus announced a strategic partnership in April 2026 to strengthen advisor-led cybersecurity services. The partnership enables Telarus technology advisors to offer CDG's Outcomes-Based Security Programs, assessments, incident response, and AI governance services to mid-market and enterprise clients. CDG's fixed-cost engagement model and dedicated teams complement Telarus's advisor-led go-to-market approach.
• Phoenix Tech ExpertsminorChannel Partner/ Reseller/ DistributorPhoenix Tech Experts is a technology advisor partner that offers CDG's cybersecurity services to its customers. President JJ Schwartz has provided a testimonial endorsement of CDG's partnership quality, cybersecurity expertise, and commitment to long-term partnerships.
• AppDirectcoreChannel Partner/ Reseller/ DistributorAppDirect is a marketplace platform partner that lists CDG's Outcomes-Based Security Programs, enabling technology advisors and end customers to discover and procure CDG services through the AppDirect ecosystem.
• Avant CommunicationsminorChannel Partner/ Reseller/ DistributorAvant Communications is a technology advisor partner that offers CDG's cybersecurity services to its customer base.
• AmplixminorChannel Partner/ Reseller/ DistributorAmplix is a channel partner that collaborates with CDG to deliver cybersecurity services to end customers.
• Acceler8 NetworksminorChannel Partner/ Reseller/ DistributorAcceler8 Networks is a channel partner in CDG's partner ecosystem, reselling CDG cybersecurity services to their customer base.
• ConvergentminorChannel Partner/ Reseller/ DistributorConvergent is a channel partner in CDG's partner ecosystem, collaborating on cybersecurity service delivery.
• StratacoreminorChannel Partner/ Reseller/ DistributorStratacore is a channel partner in CDG's partner ecosystem, collaborating on cybersecurity service delivery.
• ESETflagshipOthersESET agreed to acquire Cyber Defense Group as its exclusive distribution partner in the Netherlands, expanding ESET's direct presence in the European market. This acquisition ensures seamless transfer of CDG's employees and customers to ESET and strengthens ESET's position as a cybersecurity player in Europe. CDG's Netherlands operations became part of ESET's 20 global offices following the acquisition announced at ESET World 2026.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Trustwave: Global cybersecurity MSSP and consulting firm offering managed detection, incident response, and compliance services to mid-market and enterprise customers. Overlaps with CDG on outcome-oriented managed services and IR retainer offerings.
• ReliaQuest: Enterprise-focused managed detection and response and security operations provider with an extensive platform layer. Represents the software-enabled incumbent that CDG competes against for security leadership dollars.
• Mandiant (Google Cloud): Incident response, threat intelligence, and security consulting firm now part of Google Cloud. Most directly comparable to CDG's IR and forensics offerings and represents the gold-standard incumbent in incident response consulting.
• Optiv Security: Large cybersecurity solutions integrator offering advisory, managed security, and consulting across enterprise clients. Represents the scaled incumbent that CDG competes against for security program engagements.
• Arctic Wolf: Large, well-funded MDR/security operations platform serving mid-market and enterprise customers with bundled advisory and vCISO-adjacent services. Competes for the same buyer budget as CDG but at much greater scale.
• eSentire: MDR and managed security services provider with mid-market and enterprise customers across financial services, healthcare, and legal. Overlaps with CDG on managed services and IR retainers.

Direct peers

• Kudelski Security: Global cybersecurity services provider combining consulting, managed security, and incident response for mid-market and enterprise clients. Comparable service portfolio to CDG's Outcomes-Based Security® programs.
• Avertium: Mid-market-focused cybersecurity services firm delivering MDR, compliance, and consulting across regulated industries. Closely overlaps CDG on customer profile and outcomes-oriented engagement model.
• Pondurance: US-based mid-market MDR and professional services firm combining managed detection and response with advisory and compliance work. Closely comparable to CDG on customer size, vertical mix, and human-delivered outcomes model.
• BTB Security: Boutique US cybersecurity consulting firm offering vCISO, penetration testing, and compliance readiness to mid-market clients. Comparable headcount and similar positioning as a fractional security leadership provider.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/CyberDefGroup
• YouTubeyoutube.com/channel/UC6X-K8Km9Bmy_m7l5UMwLlA
• LinkedInlinkedin.com/company/cyber-defense-group

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cyber Defense Group