Nexum
Nexum is a SOC 2 Type 2-compliant U.S. managed security services provider delivering first*defense managed and monitored cybersecurity, manufacturer-authorized support, and professional services from three SNOCCs to Fortune 1000 enterprises across financial services, healthcare, manufacturing, and retail.
- Company typePrivate
- Founded2002
- HeadquartersChicago, United States
- Headcount51–100
- GTM typeB2B
- OfferingServices
What Nexum does
Nexum, Inc. is a privately held, founder-controlled U.S. cybersecurity and networking solutions provider founded in April 2002 by David J. Lesser in Chicago, Illinois, and now headquartered in Hammond, Indiana. The company operates as a SOC 2 Type 2-compliant Managed Security Services Provider (MSSP) under its registered first*defense® brand, delivering managed and monitored security services, manufacturer-authorized technical support, professional services, vulnerability assessment and penetration testing, and authorized training (notably as an F5 Authorized Training Center). Operations are anchored by three Security & Network Operations Command Centers (SNOCCs) located across the United States, including a facility in Albuquerque, NM, providing 24/7/365 combined SOC and NOC coverage.
The core technology stack is built around best-of-breed partner products from a 70+ vendor ecosystem, with manufacturer-authorized certifications held for Juniper Networks, F5, Palo Alto Networks, Check Point, and Symantec. Proprietary components are concentrated in the first*defense service wrapper (managed and monitored service delivery, SIEM integration automation, vulnerability prioritization) rather than in underlying products. Nexum is also a VA-verified Service-Disabled Veteran-Owned Small Business (SDVOSB), with 11% of its workforce composed of veterans or first responders.
Nexum generates revenue through five streams: recurring managed security services subscriptions, manufacturer-authorized support retainers, project-based professional services, instructor-led F5 training, and reseller margin on third-party product sales. Pricing is custom-quoted, typically on annual contracts. Go-to-market is direct enterprise field sales with dedicated Account Executives targeting Fortune 1000 accounts across Financial Services, Healthcare, Manufacturing, and Retail verticals, supplemented by vendor co-marketing and partner channels. The company employs approximately 100 people across offices in Hammond (HQ), Chicago, Nashua (New England regional), and Albuquerque, and is founder-controlled with no disclosed private equity or venture capital backing.
Nexum firmographics
Firmographics- Name
- Nexum
- Legal name
- Nexum, Inc.
- Website
- https://nexuminc.com
- Company type
- Private
- Founded year
- 2002
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Nexum is a SOC 2 Type 2-compliant U.S. managed security services provider delivering first*defense managed and monitored cybersecurity, manufacturer-authorized support, and professional services from three SNOCCs to Fortune 1000 enterprises across financial services, healthcare, manufacturing, and retail.
- Ownership category
- akta.pro rank
Nexum industry classification
Industry- Product category
- Managed Security Services
- NAICS
- Computer Systems Design and Related Services (5415), Computer Facilities Management Services (541513), Security Systems Services (except Locksmiths) (561621), Computer Systems Design Services (541512)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)
- akta.pro secondary industries
- Security Operations Center (SOC) as a Service (BPAEADAB), Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)
Keywords
Where Nexum is headquartered
LocationHeadquarters
- HQ city
- Chicago
- HQ country
- United States
- HQ region
- North America
Offices4 records
Markets served
Nexum business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Others
Revenue model
- Managed Security Services: Nexum offers comprehensive managed and monitored security services under the first*defense® brand, including 24/7 monitoring, threat intelligence, and vulnerability scanning through their SNOCCs. Services are provided on a recurring subscription basis.
- Professional Services: Implementation, deployment, and advisory services for cybersecurity and networking solutions. Includes security assessments, penetration testing, architecture design, and configuration reviews.
- Manufacturer-Authorized Support: 24/7 technical support services certified with major vendors including Juniper, F5, and Palo Alto Networks. Provided via telephone, email, and web-based portal.
- Training Services: Manufacturer-authorized training courses, particularly F5 certification courses. Offered as instructor-led virtual or onsite training with hands-on lab access.
- Product Sales: Best-of-breed cybersecurity and networking products and solutions from their ecosystem of technology partners.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Annual | Enterprise cybersecurity and networking solutions |
Go-to-market motion1 record
Distribution channels2 records
Marketing channels6 records
Nexum product offering
Product offeringCore offering
Nexum is a Managed Security Services Provider (MSSP) delivering SOC 2 Type 2-compliant security and networking solutions to enterprise organizations through its proprietary first*defense® managed services suite, three 24/7/365 Security & Network Operations Command Centers (SNOCCs), and a portfolio of professional services, security assessments, manufacturer-authorized support, and authorized F5 training. The company combines best-of-breed cybersecurity and networking products from a 70+ vendor partner ecosystem with hands-on engineering and advisory services for cloud security, identity and access, data center and networking, application security, and enterprise network security.
Product overview
Nexum is a cybersecurity and networking managed security services provider (MSSP) offering a holistic, value-based approach to security that combines best-of-breed products with professional services and managed offerings. The core product is first*defense, a SOC 2 Type 2-compliant suite of managed and monitored security services that includes Managed Services, Monitored Services, Night Vision (off-hours coverage), and Vulnerability Scanning. This is complemented by five security solution practices: Enterprise & Network Security, Cloud Security, Identity & Access, Data Center & Networking, and Application Security. Supporting services include Security Assessments (vulnerability assessments, penetration testing, application testing, configuration review), Professional Services for architecture and implementation, and Manufacturer-Authorized Support with certifications for Juniper, F5, Palo Alto Networks, Check Point, and Symantec. Nexum also provides authorized F5 training through its Authorized Training Center (ATC) program.
Differentiator
Problem solved
Functional benefit
Brands
- first*defense: Nexum's flagship brand for managed and monitored security services, including 24/7 SOC monitoring, threat intelligence, vulnerability scanning, and managed detection and response.
Products and services
- first*defense Managed Security Services Managed security monitoring and management service delivered through Nexum's SNOCCs that empowers IT staff to manage and defend networks, with SIEM integration automation, threat intelligence compilation, rapid incident notification, and procedures tailored to each organization.
- first*defense Monitored Services Network monitoring service where analysts and engineers track customer devices in a read-only role and alert IT staff to potential security threats, including all data-monitoring capabilities of Managed Services without operational management.
- first*defense Night Vision Night and weekend monitoring service providing 16x5 coverage during the week and 24-hour weekend coverage, taking over for IT staff during off-peak hours.
- first*defense Vulnerability Scanning Service that handles regular maintenance, configuration, and labor around producing scan results; the team configures and runs scans, prioritizes vulnerabilities, and removes false positives to improve remediation efficiency.
- Enterprise & Network Security Solutions Custom security architecture design and implementation services for large organizations transitioning to next-generation service delivery architectures, including scalable secure infrastructure design for public or private cloud, with industry-specific solutions for financial services, healthcare, manufacturing, and retail.
- Cloud Security Solutions Cloud security assessment, gap identification, compliance remediation, and shared security model alignment for public cloud platforms; engineers design and build cloud networks and integrate them with existing on-premises networks.
- Identity & Access Solutions Identity management solutions covering Remote Access VPN, Identity & Access Management, Multi-Factor Authentication (MFA), Zero Trust Architecture (ZTA) implementation, and API Security for distributed SaaS, public cloud, and legacy data center applications.
- Data Center & Networking Solutions Next-generation data center transformation covering data center fabric and routing, deployment and integration, highly-available and low-latency networking, application delivery, data center security, and software-defined network orchestration.
- Application Security Solutions Application protection services including Load Balancers, Web Application Firewalls (WAF), Mobile App Security, and Anti-Fraud solutions for building hardened secure applications and preventing vulnerabilities in code.
- Security Assessment Services Risk management services including Vulnerability Assessment, Penetration Testing, Application Testing (web and mobile), and Configuration Review; engineers perform multi-point holistic health checks of security posture with severity ratings and remediation recommendations.
- Professional Services Certified senior security and network engineers providing architecture design, implementation, and consulting services supporting Zero Trust Architecture migrations, data center builds, and cloud migrations with industry best practices and flexible scheduling.
- Manufacturer-Authorized Support 24/7 manufacturer-authorized technical support via telephone, email, and web portal with certified engineers, secure ticket access, asset tracking, and break/fix troubleshooting; Nexum's SNOCCs hold certifications with Juniper, F5, Palo Alto Networks, Check Point, and Symantec.
- F5 Training Courses Manufacturer-authorized F5 training including instructor-led online and onsite courses on Administering BIG-IP, Configuring BIG-IP LTM, APM, AFM, DNS, Advanced WAF, Developing iRules for BIG-IP, and Troubleshooting BIG-IP on V14 curriculum with full hands-on lab access.
Quantifiable outcome
- SOC 2 Type 2 compliant MSSP with 24/7/365 monitoring capabilities
- +1 more outcomes
Companies that use Nexum
Customer profileNamed customers4 records
Segments3 records
Ideal customer profiles2 records
Nexum technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration5 records
AI capability1 record
Feature3 records
Nexum partnerships and signals
Strategic signalPartnerships
14 partnerships are on record, tiered standard, core and featured.
- vArmourstandardAdded as new technology partner in March 2022 for data security and application security solutions.
- Versa NetworksstandardAdded to offer Versa SASE and Versa SD-WAN solutions to customers starting March 2022.
- SwimlanestandardSecurity automation partnership adding low-code security automation capabilities.
- AppOmnistandardSaaS Security partnership added February 2022 for SaaS security posture management.
- Juniper NetworkscoreKey technology partner for wired and wireless networking solutions including switches, access points, and AI-driven network management. Nexum engineers are certified and provide Juniper solutions including Mist wireless and SD-WAN.
- Palo Alto NetworkscoreFeatured technology partner for next-generation firewalls, security operations, and network security solutions. Nexum provides BPA+ review services and certified support.
- F5 NetworkscoreNexum is an Authorized Training Center (ATC) for F5, offering manufacturer-authorized training courses on BIG-IP products including LTM, DNS, APM, WAF, and AFM. Also provides certified support.
- FortinetfeaturedFeatured technology partner for network security solutions including firewalls and secure SD-WAN.
- CrowdStrikefeaturedFeatured technology partner for endpoint protection and threat intelligence.
- IBMfeaturedFeatured technology partner for enterprise security and networking solutions.
- Abnormal SecurityfeaturedFeatured technology partner for email security solutions. Co-marketing on CISO Guide to Ransomware.
- ZscalerfeaturedFeatured technology partner for cloud security and SASE solutions.
- CyerafeaturedFeatured technology partner for data security posture management.
- Additional Partners (70+)standardFull ecosystem of 70+ technology partners including: 1Touch, Algosec, Appdome, AppviewX, Arista, Armis, Attivo Networks, Aviatrix, Axonius, Backbox, BitSight, BlueCat Networks, Broadcom, Bugcrowd, Carbon Black, Cato Networks, Check Point, Cisco, Cloudflare, Code42, Corelight, Cribl, CyberArk, Devo, Entrust, Exabeam, Extrahop, Fastly, Fidelis, Firemon, Forescout, Fortra, Gigamon, Google, Grip Security, HPE, Illumio, Infoblox, Ironscales, Ivanti, Ixia, Keeper Security, Keysight, Lacework, Live Cyber, LogRhythm, Malwarebytes, Menlo Security, Microsoft, Morphisec, NetScout, Netskope, Noname, Nutanix, Okta, Orca, Proofpoint, Qualys, Rapid7, Recorded Future, RedSeal, Riverbed, RSA, SecurityScorecard, Seemplicity, Semperis, SentinelOne, Snyk, StrongDM, Sumo, Synopsys, Tenable, Thales, Trellix, Trend Micro, Tufin, Varonis, Veracode, Wiz
Scale indicators4 records
Recent moves7 records
Expansion highlights6 records
Nexum competitors and assessment
Company assessmentDirect peers
- Pondurance: U.S.-based MDR and managed security services provider with similar mid-market to enterprise focus and a 24/7 SOC. Directly comparable in scale, service scope, and customer profile to Nexum.
- Secureworks: MSSP and MDR provider offering managed security monitoring, threat detection, and incident response to enterprises. Direct competitor to Nexum's first*defense® managed services, with similar vendor-agnostic positioning across multiple security stacks.
- Trustwave: Global MSSP delivering managed security services, threat detection, and security consulting. Comparable to Nexum in multi-vendor managed security delivery, with overlapping focus on enterprise and mid-market security operations.
- Arctic Wolf: Managed detection and response (MDR) provider operating its own cloud-native security operations platform. Competes with Nexum's first*defense® SOC offering for mid-market and enterprise SOC-as-a-service contracts.
- eSentire: Pure-play MDR and MSSP focused on 24/7 threat detection and response, with multi-vertical enterprise coverage. Directly comparable to Nexum's SNOCC-driven managed security service model.
- Binary Defense: MDR provider offering managed detection, SOC-as-a-service, and security operations consulting. Comparable to Nexum in target customer, service mix, and U.S.-based delivery model.
Emerging players
- Expel: Cloud-native MDR provider with transparent, SaaS-style pricing model. Competes for similar enterprise SOC outsourcing budgets as Nexum but with a more software-delivered GTM motion.
Broad incumbents
- Optiv Security: Large cybersecurity solutions integrator and MSSP with deep partnerships across the same vendor ecosystem (Palo Alto, Splunk, CrowdStrike). Competes with Nexum in enterprise security architecture and managed services, but at substantially greater scale.
- IBM Security Services: Enterprise security and managed services arm of IBM offering SOC, MDR, and consulting. Competes for the same Fortune 1000 enterprise customers Nexum targets, but with vastly greater scale and global footprint.
- AT&T Cybersecurity: Carrier-affiliated MSSP offering managed security, threat detection, and consulting to enterprise and government customers. Comparable in U.S. enterprise/government focus and managed services scope, though bundled with broader telecom relationships.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Nexum social profiles
Digital presenceNexum compliance and trust
Trust signalCompliance2 records
Nexum financial estimates
Financial estimateRevenue estimate
Valuation estimate
Nexum leadership team
Management profileNumber of profiles
Profiles12 records
Nexum funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Nexum M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Nexum
What does Nexum do?
Nexum is a Managed Security Services Provider (MSSP) delivering SOC 2 Type 2-compliant security and networking solutions to enterprise organizations through its proprietary first*defense® managed services suite, three 24/7/365 Security & Network Operations Command Centers (SNOCCs), and a portfolio of professional services, security assessments, manufacturer-authorized support, and authorized F5 training. The company combines best-of-breed cybersecurity and networking products from a 70+ vendor partner ecosystem with hands-on engineering and advisory services for cloud security, identity and access, data center and networking, application security, and enterprise network security.
Is Nexum a public or private company?
Nexum is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Nexum founded?
Nexum was founded in 2002. It employs 51 to 100 people.
Where is Nexum based?
Nexum is headquartered in Chicago, United States, in the North America region.
How does Nexum make money?
Five revenue lines are on record. Managed Security Services are the primary driver. The others are professional Services, manufacturer-Authorized Support, training Services and product Sales.
Who are Nexum's main competitors?
Direct peers on record are Pondurance, Secureworks, Trustwave, Arctic Wolf, eSentire and Binary Defense. Expel is listed as an emerging player. Broad incumbents are Optiv Security, IBM Security Services and AT&T Cybersecurity.
Does Nexum have an API?
No public API is recorded for Nexum.
What industry is Nexum in?
Nexum's product category is Managed Security Services. Its primary akta.pro industry code is BPAKAHAA, Managed Security Services (MSSP) & 24/7 SOC Operations, with a secondary code of BPAEADAB, Security Operations Center (SOC) as a Service. Its NAICS code is 5415 and its SIC code is 7370.