CalCom
CalCom sells the CalCom Hardening Suite (CHS), an automated zero-downtime server baseline-hardening and continuous compliance platform aligned to CIS and NIST, serving regulated enterprises in financial services, healthcare, and government/defense.
- Company typePrivate
- Founded2001
- HeadquartersLod, Israel
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What CalCom does
CalCom, Inc. is an Israel-based (Lod) privately held software vendor founded in 2001 that sells the CalCom Hardening Suite (CHS), an automated baseline-hardening platform for Windows and Linux servers. CHS profiles production servers in a "Learning Mode," generates per-server impact analysis, and then enforces CIS Benchmark, NIST, and other framework-aligned configurations without taking systems offline, while continuously detecting and correcting configuration drift. The product is supplemented by PAC (Policy Analysis Center) for compliance reporting and by specialized modules for Microsoft SQL Server and IIS web servers.
The company sells primarily to mid-market and large enterprises in regulated industries — financial services (banks, credit unions, including Kinecta Federal Credit Union), healthcare (hospitals and health systems, including a 1.4M-patient East Coast system), and U.S./EU government and defense contractors subject to HIPAA, PCI-DSS, FFIEC, CMMC, DORA, ISO 27001, FedRAMP, and similar regimes. GTM is consultative direct enterprise field sales with personalized demos; pricing is not publicly disclosed and is quote-based on server count and requirements, structured as annual enterprise subscriptions. CalCom holds CIS-Certified Vendor status, maintains a small 11–50 person organization, and has begun positioning the platform for MSP and channel-partner delivery in addition to direct enterprise sales.
CalCom firmographics
Firmographics- Name
- CalCom
- Legal name
- CalCom Inc.
- Website
- https://calcomsoftware.com
- Company type
- Private
- Founded year
- 2001
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- CalCom sells the CalCom Hardening Suite (CHS), an automated zero-downtime server baseline-hardening and continuous compliance platform aligned to CIS and NIST, serving regulated enterprises in financial services, healthcare, and government/defense.
- Ownership category
- akta.pro rank
CalCom industry classification
Industry- Product category
- Server Security Hardening Software
- NAICS
- Computer Systems Design and Related Services (5415)
- SIC
- Measuring & Controlling Devices, Nec (3829)
- akta.pro primary industry
- Configuration & Exposure Hardening (CIS/Benchmarking) (HDADAHAH)
- akta.pro secondary industries
- Patch & Remediation Orchestration (HDADAHAB), Continuous Controls Monitoring (CCM) (HDADAHAE), Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC) (HDABAHAI)
Keywords
Where CalCom is headquartered
LocationHeadquarters
- HQ city
- Lod
- HQ country
- Israel
- HQ region
- Middle East
Markets served
CalCom business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Software Licensing: CalCom Hardening Suite (CHS) is sold as a software solution for server hardening automation. The primary revenue model appears to be enterprise software licensing, likely with annual subscription contracts based on the enterprise sales motion and compliance-focused customer base.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise licensing with customized pricing based on server count and requirements |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels7 records
CalCom product offering
Product offeringCore offering
CalCom Hardening Suite (CHS) is an automated baseline hardening solution that profiles production servers in a 'Learning Mode', simulates the impact of CIS, NIST and other security baseline changes, and then enforces those baselines on Windows and Linux servers with zero downtime. It continuously detects and corrects configuration drift and produces audit-ready compliance reports mapped to frameworks such as CIS, NIST, HIPAA, PCI-DSS, FFIEC, CMMC, DORA and ISO 27001, with companion offerings PAC (Policy Analysis Center), CSS for IIS, and CHS for SQL Server.
Product overview
CalCom offers a unified server hardening platform centered on the CalCom Hardening Suite (CHS), which provides automated baseline hardening for Windows and Linux servers. The portfolio includes specialized add-on modules: CSS for IIS for hardening Microsoft web servers, and CHS for SQL Server for database hardening. PAC (Policy Analysis Center) provides compliance analysis and audit reporting capabilities. All products work together to enforce CIS Benchmarks and NIST standards with zero-downtime enforcement and continuous drift prevention across enterprise server environments.
Differentiator
Problem solved
Functional benefit
Brands
- CalCom Hardening Suite (CHS): A security baseline hardening solution that automates server hardening with zero downtime, detects configuration drift, and ensures compliance with CIS, NIST, and other security benchmarks.
- PAC – Policy Analysis Center
- CSS for IIS
Products and services
- CalCom Hardening Suite (CHS) Automated baseline hardening suite that profiles production Windows and Linux servers in Learning Mode, simulates policy change impact, and enforces CIS, NIST and other security baselines with zero downtime while preventing configuration drift and producing continuous compliance reports.
- PAC – Policy Analysis Center Policy compliance analysis tool that provides visibility into server policy compliance status and generates audit-ready compliance reports mapped to organizational policies and external frameworks.
- CSS for IIS – IIS Hardening Automation Specialized hardening automation solution for Microsoft Internet Information Services (IIS) web servers, securing web server configurations against relevant CIS Benchmarks and best practices.
- CHS for SQL Server – SQL Server Hardening Automation Targeted hardening automation solution for Microsoft SQL Server database environments that secures database configurations and helps meet database-related compliance requirements.
Quantifiable outcome
- Achieved approximately 99% compliance with approved hardening policies across 700+ production servers
- +4 more outcomes
Companies that use CalCom
Customer profileNamed customers6 records
Segments4 records
Ideal customer profiles3 records
CalCom technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature6 records
CalCom partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Center for Internet Security (CIS)coreCalCom is a CIS-certified vendor and their CalCom Hardening Suite (CHS) aligns with CIS Benchmarks. This partnership provides customers with industry-leading security protocols for protecting digital assets and sensitive information through automated baseline hardening aligned to CIS standards.
Scale indicators6 records
Recent moves6 records
Expansion highlights6 records
CalCom competitors and assessment
Company assessmentDirect peers
- HCL BigFix: HCL BigFix provides automated configuration management, patch, and compliance enforcement across large server estates, serving regulated enterprises with continuous compliance — directly comparable to CalCom's CHS value proposition of zero-downtime, automated baseline enforcement.
- Netwrix: Netwrix's configuration assessment and compliance auditing solutions map to CIS and NIST benchmarks and target the same IT operations and security buyer that CalCom serves, with overlap in regulated verticals like finance and healthcare.
- Tripwire (Fortra): Tripwire's Enterprise Suite and Compliance offerings provide automated configuration hardening, file integrity monitoring, and CIS/NIST compliance reporting across servers — directly overlapping CalCom's CHS in capability and target buyer (security and IT operations teams in regulated enterprises).
- Progress Chef InSpec: Chef InSpec is a compliance-as-code framework that automates CIS Benchmark and STIG compliance testing across Windows and Linux servers, with continuous compliance use cases analogous to CalCom's drift detection and audit-ready reporting.
Emerging players
- JupiterOne: JupiterOne is a continuous configuration and compliance monitoring platform that maps assets to CIS, NIST, and other frameworks, with continuous drift detection similar to CalCom's CHS. It represents a next-generation competitor in the same compliance automation category.
- Ansible (Red Hat): Red Hat Ansible Automation Platform is widely used to script configuration hardening and CIS compliance enforcement at scale. While broader than server hardening, it overlaps CalCom on automated policy enforcement and is a substitute buyers frequently evaluate.
Broad incumbents
- Microsoft Security Compliance Toolkit: Microsoft ships baselines and tooling for Windows Server hardening at no additional cost. It is the default incumbent in any Windows-heavy enterprise and the most frequently cited alternative to CalCom's commercial CHS.
- Rapid7 InsightVM: Rapid7's vulnerability and exposure management offering includes configuration assessment against CIS and DISA STIGs. It is a broad incumbent alternative to CalCom in mid-market and enterprise security buyer evaluations.
- Tenable Nessus / Tenable Cloud Security: Tenable is a leading vulnerability and exposure management platform with configuration auditing capabilities covering CIS Benchmarks. It competes with CalCom for the security team's compliance budget and is materially larger and better capitalized.
- CIS (Center for Internet Security): CIS publishes the CIS Benchmarks and the free CIS-CAT assessment tool that many enterprises use as their primary hardening reference. CalCom is a CIS-Certified Vendor, positioning itself as a commercial complement to CIS's free tooling.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat3 records
Key risks5 records
Key highlights6 records
Customer concentration
CalCom social profiles
Digital presenceCalCom compliance and trust
Trust signalCompliance15 records
CalCom financial estimates
Financial estimateRevenue estimate
Valuation estimate
CalCom leadership team
Management profileNumber of profiles
Profiles2 records
CalCom funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
CalCom M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about CalCom
What does CalCom do?
CalCom Hardening Suite (CHS) is an automated baseline hardening solution that profiles production servers in a 'Learning Mode', simulates the impact of CIS, NIST and other security baseline changes, and then enforces those baselines on Windows and Linux servers with zero downtime. It continuously detects and corrects configuration drift and produces audit-ready compliance reports mapped to frameworks such as CIS, NIST, HIPAA, PCI-DSS, FFIEC, CMMC, DORA and ISO 27001, with companion offerings PAC (Policy Analysis Center), CSS for IIS, and CHS for SQL Server.
Is CalCom a public or private company?
CalCom is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was CalCom founded?
CalCom was founded in 2001. It employs 11 to 50 people.
Where is CalCom based?
CalCom is headquartered in Lod, Israel, in the Middle East region.
How does CalCom make money?
One revenue line is on record: software Licensing.
Who are CalCom's main competitors?
Direct peers on record are HCL BigFix, Netwrix, Tripwire (Fortra) and Progress Chef InSpec. Emerging players are JupiterOne and Ansible (Red Hat). Broad incumbents are Microsoft Security Compliance Toolkit, Rapid7 InsightVM, Tenable Nessus / Tenable Cloud Security and CIS (Center for Internet Security).
Does CalCom have an API?
No public API is recorded for CalCom.
What industry is CalCom in?
CalCom's product category is Server Security Hardening Software. Its primary akta.pro industry code is HDADAHAH, Configuration & Exposure Hardening (CIS/Benchmarking), with a secondary code of HDADAHAB, Patch & Remediation Orchestration. Its NAICS code is 5415 and its SIC code is 3829.