Catalisto

What Catalisto does

Catalisto is a cybersecurity consulting firm founded in 2018 and headquartered in New York, USA, structured as a private LLC. The firm serves enterprise clients across multiple verticals — including energy, government, financial services, legal, and technology — delivering a portfolio of nine service lines: assessments and penetration testing, continuous monitoring and threat detection, compliance readiness and certification support, solution sourcing and vendor intelligence, cyber governance and program design, cybersecurity capability development, systems integration and secure architecture, and incident readiness and response support. One short description additionally frames the firm as distributing emerging security technologies through a global network of trusted resellers, an indication that distribution and channel activity sits alongside its consulting practice.

The firm's core technology asset is Lexcy, described as a proprietary solution intelligence platform for vendor procurement. Lexcy is positioned to systematize how buyers evaluate and source cybersecurity vendors, effectively productizing the consulting expertise that the firm sells through its services. Beyond Lexcy, Catalisto's intellectual property appears concentrated in its consulting methodology and the senior-led delivery model it markets, rather than in additional visible software assets. There are no disclosed patents, models, or AI/ML components in the available data.

Catalisto operates a professional services revenue model, monetizing through consulting engagements augmented by its Lexcy platform and what appears to be a reseller/distribution channel for emerging security products. Delivery is geographically distributed across offices in the US (New York, Orlando, Fort Lauderdale, San Antonio), South Africa (Johannesburg), Albania (Tirana), Italy (Milan), Switzerland (Ticino), and Ukraine (Kyiv), enabling a nearshore/offshore staffing mix. The firm reports 1-10 employees, is led by CEO Claudia Iannazzo, and has no disclosed funding rounds, M&A activity, or named customers in the available data.

Name

Catalisto

Legal name

Catalisto LLC

Website

https://catalisto.com

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

1–10 employees

Short description

Catalisto is a New York-headquartered cybersecurity consulting firm founded in 2018, serving enterprise clients in energy, government, financial, legal, and technology sectors through penetration testing, threat monitoring, compliance, governance, and its proprietary Lexcy solution intelligence platform.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting Services

NAICS

Management Consulting Services (54161), Computer Systems Design and Related Services (54151), Other Computer Related Services (541519), Security Systems Services (56162)

SIC

Services-Management Consulting Services (8742), Services-Computer Integrated Systems Design (7373), Services-Computer Programming Services (7371)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

akta.pro secondary industries

Managed Detection & Response (MDR) & SOC Services (HDADAGAG), Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH), Security Awareness, Training & Compliance Attestation (HDADAIAJ), Cybersecurity Support Operations (SOC Triage, Incident Intake) (BPAAACAF)

Keywords

• Cybersecurity consulting
• Penetration testing
• Incident response
• Compliance advisory
• Vendor intelligence

Headquarters

HQ city

New York

HQ country

United States

HQ region

North America

Offices9 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales

Revenue model

1. Professional Cybersecurity Consulting Services: End-to-end cybersecurity consulting engagements including assessments, penetration testing, compliance readiness, governance design, monitoring, training, incident response, and systems integration. Delivered by seasoned cybersecurity experts for impact and clarity.

Go-to-market motion1 record

Distribution channels2 records

Marketing channels6 records

Core offering

Catalisto delivers end-to-end cybersecurity consulting services spanning assessments and penetration testing, continuous monitoring and threat detection, compliance readiness, solution sourcing and vendor intelligence, cyber governance, capability development, systems integration, and incident response. These services are augmented by Lexcy, a proprietary solution-intelligence platform that enables clients to filter and evaluate cybersecurity tools by compliance, geography, pricing, and use case.

Product overview

Catalisto is a cybersecurity consulting firm offering an integrated portfolio of advisory services and a proprietary procurement intelligence platform called Lexcy. The core offering consists of nine interconnected service lines spanning the security lifecycle: Assessments & Penetration Testing, Continuous Monitoring & Threat Detection, Compliance Readiness & Certification Support, Solution Sourcing & Vendor Intelligence, Cyber Governance & Program Design, Cybersecurity Capability Development, Systems Integration & Secure Architecture, and Incident Readiness & Response Support. Lexcy, the company's SaaS platform, augments the sourcing and vendor intelligence services by enabling organizations to filter and evaluate cybersecurity tools by compliance requirements, geography, pricing, and use case. Together, these services and platform provide end-to-end cybersecurity support from testing and compliance through incident response and capability building.

Differentiator

Problem solved

Functional benefit

Brands

• Lexcy: Solution intelligence platform that helps clients make faster, smarter procurement decisions by filtering solutions by compliance, geography, pricing, and use case.

Products and services

• Assessments & Penetration Testing

Quantifiable outcome

• Energy operator remediated 200,000+ vulnerabilities in 6 weeks
• +4 more outcomes

Named customers4 records

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Scale indicators4 records

Recent moves4 records

Expansion highlights4 records

Direct peers

• Mandiant: Mandiant (now part of Google Cloud) is the archetypal cybersecurity consulting and incident response firm offering assessments, threat intelligence, and MDR—directly comparable to Catalisto's full-lifecycle consulting portfolio.
• Palo Alto Networks Unit 42: Unit 42 provides incident response, threat intelligence, and cyber risk management consulting—competing head-to-head with Catalisto's response, assessments, and governance practices for enterprise and government buyers.
• Optiv: Optiv is a large cybersecurity solutions integrator and advisor delivering assessments, integration, GRC, and managed services; comparable to Catalisto's services portfolio with an additional product resale model.
• CrowdStrike Services: CrowdStrike's services arm delivers IR, proactive services, and tabletop exercises on top of its Falcon platform—directly comparable to Catalisto's incident response, monitoring, and capability development offerings.
• NCC Group: NCC Group provides cybersecurity consulting, penetration testing, and managed detection services globally—a similarly broad service portfolio serving regulated enterprise and government clients.
• Secureworks: Secureworks is an MSSP with managed detection, incident response, and advisory services—comparable to Catalisto's monitoring and incident response lines, though with a more product-centric delivery model.
• Trustwave: Trustwave combines managed security services, consulting, and database security—overlapping with Catalisto's MSSP-style offering, compliance readiness, and MDR support.
• Bishop Fox: Bishop Fox is an offensive-security firm specializing in penetration testing, red teaming, and security assessments—a direct competitor in Catalisto's assessments and pen testing practice.
• GuidePoint Security: GuidePoint Security provides cybersecurity consulting, professional services, and product resale—overlapping with Catalisto's sourcing, integration, and advisory offerings.

Broad incumbents

• KPMG Cyber Security Services: KPMG's cyber practice delivers GRC, compliance, and managed security services as part of a Big 4 portfolio—competing for the same enterprise and regulated-buyer engagements that Catalisto targets, but with vastly broader resources.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks7 records

Key highlights7 records

Customer concentration

• Xx.com/Catalisto1
• Facebookfacebook.com/catalistocyber
• LinkedInlinkedin.com/company/catalisto

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Catalisto