Gotham Security
Gotham Security is a New York–based cybersecurity services firm founded in 2013, specializing in managed security, Red Team Testing, GRC, and incident response for financial services and healthcare organizations in highly regulated environments.
- Company typePrivate
- Founded2013
- HeadquartersNew York, United States
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Gotham Security does
Gotham Security is a New York–based, privately held cybersecurity firm founded in 2013 with a headcount in the 11–50 range, positioned as a specialist in cybersecurity services. The firm's operational footprint, as reflected in available source material, spans managed IT operations, managed cloud and infrastructure, managed cybersecurity, professional services, cybersecurity governance and advisory, and incident response — serving highly regulated sectors including financial services (hedge funds, private equity) and healthcare (hospital networks). Its go-to-market is consultative enterprise field sales with custom-scoped, multi-year engagements, and its value proposition is anchored in a dedicated Red Team working alongside Blue Team and GRC professionals.
The core technology stack pairs human-led offensive and defensive security services with an AI-enabled penetration testing capability delivered through a partnership with Horizon3.ai's NodeZero Autonomous Security Platform, supporting continuous autonomous attack simulation. A NIST-based risk assessment methodology feeds into an integrated Cybersecurity Dashboard that serves as a centralized risk register and remediation tracker, giving clients ongoing visibility into posture between engagements. Industry-specific bundled offerings — AbacusFlex for financial services and mCare for healthcare — package IT, cloud, and security into sector-tailored solutions.
Revenue mechanics are a blend of recurring managed services contracts (managed IT, managed cloud, managed cybersecurity, vCISO), project-based professional services (Red Team Testing, penetration testing, GRC, risk assessments), and incident response retainers. Pricing is not publicly disclosed; engagements are scoped to customer environment, risk profile, and regulatory requirements and structured as multi-year contracts. The firm markets through a content-led mix of industry insights, guides and whitepapers, events and webinars, and earned media, with sales delivered through direct enterprise engagement.
Gotham Security firmographics
Firmographics- Name
- Gotham Security
- Website
- https://gotham-security.com
- Company type
- Private
- Founded year
- 2013
- Headcount range
- 11–50 employees
- Short description
- Gotham Security is a New York–based cybersecurity services firm founded in 2013, specializing in managed security, Red Team Testing, GRC, and incident response for financial services and healthcare organizations in highly regulated environments.
- Ownership category
- akta.pro rank
Gotham Security industry classification
Industry- Product category
- Cybersecurity Services
- NAICS
- Computer Systems Design and Related Services (54151), Investigation and Security Services (5616)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Threat Intelligence, Hunting & Adversary Emulation (BPAKAHAE)
- akta.pro secondary industries
- Cybersecurity Architecture & Security Integration (BPAEAAAL), Cybersecurity Training & Awareness Programs (BPAEANAF)
Keywords
Where Gotham Security is headquartered
LocationHeadquarters
- HQ city
- New York
- HQ country
- United States
- HQ region
- North America
Markets served
Gotham Security business model
Business model- GTM type
- B2B
- Offering type
- Services
Revenue model
- Managed Cybersecurity Services: Recurring managed security services including access controls, endpoint protection, risk management, monitoring and response, and vCISO services. Delivered as ongoing operational support contracts.
- Professional Services (Red Team, Penetration Testing, GRC): Project-based professional services including Red Team Testing, penetration testing, security risk assessments, and governance risk and compliance services. Engagements are scoped to customer environment with specific deliverables.
- Managed IT Operations: Ongoing managed IT services covering end user support, device lifecycle management, monitoring, automation, optimization, and productivity suites.
- Managed Cloud & Infrastructure: Cloud infrastructure management services including multi-cloud infrastructure, network management, cloud desktop and app delivery, and voice/contact center services.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Custom-scoped engagements based on customer environment and requirements |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels4 records
Gotham Security product offering
Product offeringCore offering
Gotham Security is described as an expert in cybersecurity with a stated genuine enthusiasm for the cybersecurity field. Specific service offerings, products, and capabilities are not detailed in the available source material.
Product overview
Abacus is a managed IT and cybersecurity services provider offering a comprehensive portfolio of technology services organized into six main solution areas: Managed IT Operations, Managed Cloud & Infrastructure, Professional Services, Managed Cybersecurity, Cybersecurity Governance & Advisory Services, and Incident Response. The company serves highly regulated industries including Financial Services (with the AbacusFlex offering) and Healthcare (with the mCare offering). Within Cybersecurity Governance & Advisory Services, Red Team Testing is a flagship offering that combines penetration testing, AI-Enabled penetration testing powered by Horizon3.ai's NodeZero Autonomous Security Platform, and Security Risk Assessments using NIST-based methodologies. The company operates with a dedicated Red Team working alongside Blue Team and GRC professionals to deliver realistic, actionable security assessments.
Differentiator
Problem solved
Functional benefit
Companies that use Gotham Security
Customer profileNamed customers2 records
Segments2 records
Gotham Security technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability3 records
Feature3 records
Gotham Security partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Horizon3.aicoreTechnology partnership providing AI-enabled penetration testing capabilities. Abacus Group's AI-Enabled Penetration Testing is powered by Horizon3.ai's NodeZero Autonomous Security Platform, delivering continuous validation of security controls through autonomous attack simulation. Designed specifically for highly regulated environments.
Scale indicators1 record
Recent moves5 records
Expansion highlights5 records
Gotham Security competitors and assessment
Company assessmentDirect peers
- Pen Test Partners: Pen Test Partners is a specialist cybersecurity consultancy focused on penetration testing and adversary simulation. It mirrors Gotham Security as a similarly sized, offensive-security-led cyber boutique targeting enterprise clients.
- Schellman & Co. Schellman is a professional services firm specializing in cybersecurity assessments and compliance attestation (e.g., SOC 2, ISO 27001, HITRUST). It is comparable to Gotham Security as a boutique cyber advisory serving regulated, audit-driven buyers.
- NetSPI: NetSPI is a cybersecurity firm focused on penetration testing, breach prevention, and attack surface management. It mirrors Gotham Security as a mid-sized, expertise-led cyber services provider selling to enterprise and highly regulated clients.
- Bishop Fox: Bishop Fox is a boutique cybersecurity consulting firm specializing in offensive security testing, red teaming, and adversary emulation. It is directly comparable to Gotham Security as a similarly sized, specialist cyber firm serving enterprise and regulated buyers with high-touch testing services.
- Trail of Bits: Trail of Bits is a cybersecurity research and consulting firm offering offensive security, cryptographic, and software assurance services. It is comparable to Gotham Security as a small, deeply specialized cyber firm providing technical assessments to sophisticated buyers.
- TrustedSec: TrustedSec is a boutique cybersecurity consulting firm focused on adversary simulation, penetration testing, and incident response. It parallels Gotham Security in being an expert-led cyber consultancy serving enterprise security teams.
- Coalfire: Coalfire is a cybersecurity advisory and compliance firm specializing in GRC, penetration testing, and cloud security assessments. It is comparable to Gotham Security as a similarly positioned cyber advisory boutique targeting regulated industries.
Broad incumbents
- Trustwave: Trustwave is a global cybersecurity provider offering managed detection, threat intelligence, and professional services. It is comparable to Gotham Security in providing cyber advisory and managed services to mid-market and enterprise regulated clients.
- NCC Group: NCC Group is a global cybersecurity advisory and assurance firm offering consulting, managed detection, and offensive testing. It is comparable to Gotham Security as a broader incumbent offering overlapping cyber advisory, testing, and managed services to regulated enterprises.
- Optiv Security: Optiv is a large cybersecurity solutions integrator delivering advisory, managed security, and risk services. It is comparable in serving similar regulated financial and healthcare buyers with cyber advisory and managed offerings, though at materially larger scale than Gotham Security.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat3 records
Key risks4 records
Key highlights4 records
Customer concentration
Gotham Security social profiles
Digital presenceGotham Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Gotham Security leadership team
Management profileNumber of profiles
Gotham Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Gotham Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Gotham Security
What does Gotham Security do?
Gotham Security is described as an expert in cybersecurity with a stated genuine enthusiasm for the cybersecurity field. Specific service offerings, products, and capabilities are not detailed in the available source material.
Is Gotham Security a public or private company?
Gotham Security is a private company. It is classified as unknown.
When was Gotham Security founded?
Gotham Security was founded in 2013. It employs 11 to 50 people.
Where is Gotham Security based?
Gotham Security is headquartered in New York, United States, in the North America region.
How does Gotham Security make money?
Four revenue lines are on record. Managed Cybersecurity Services are the primary driver. The others are professional Services (Red Team, Penetration Testing, GRC), managed IT Operations and managed Cloud & Infrastructure.
Who are Gotham Security's main competitors?
Direct peers on record are Pen Test Partners, Schellman & Co., NetSPI, Bishop Fox, Trail of Bits, TrustedSec and Coalfire. Broad incumbents are Trustwave, NCC Group and Optiv Security.
Does Gotham Security have an API?
No public API is recorded for Gotham Security.
What industry is Gotham Security in?
Gotham Security's product category is Cybersecurity Services. Its primary akta.pro industry code is BPAKAHAE, Threat Intelligence, Hunting & Adversary Emulation, with a secondary code of BPAEAAAL, Cybersecurity Architecture & Security Integration. Its NAICS code is 54151 and its SIC code is 7373.