Cyberleaf
Cyberleaf is a U.S.-based cybersecurity-as-a-service firm providing managed detection and response, compliance, and advisory services to mid-market businesses, MSPs, and private equity portfolio companies from a 100% U.S.-based SOC.
- Company typePrivate
- Founded2010
- HeadquartersFort Myers, United States
- Headcount51–100
- GTM typeB2B
- OfferingServices
What Cyberleaf does
Cyberleaf is a U.S.-domiciled cybersecurity-as-a-service (CSaaS) provider operating as the commercial brand of Waterleaf International, LLC, founded in 2010 and headquartered in Fort Myers, Florida. The company delivers an enterprise-grade managed detection and response (MDR/XDR) platform that unifies endpoint, network, cloud, and identity monitoring into a single correlated defense layer, staffed by a 100% U.S.-based SOC team operating 24/7/365. Cyberleaf maintains CMMC Level 2, SOC 2 Type II, and ISO 27001 certifications, and aligns its security programs to NIST, CMMC, and SOC 2 frameworks—credentials that anchor its positioning with regulated and defense-adjacent buyers.
The core product portfolio comprises Managed Cybersecurity Services, CMMC Compliance Services, Advisory Services (including vCISO), Assessment Services, Technical Services (penetration testing and incident response), AI Security & Governance, and a recently launched Private Equity Cybersecurity Services line. The technology stack integrates with customers' existing tooling and is delivered primarily through a sales-led motion with consultative scoping calls, supplemented by a white-label channel through Managed Service Providers (MSPs) and a growing co-marketing presence with partners such as Splunk, Ontech Systems, and Entech.
Revenue mechanics combine subscription-based recurring managed services with project-based professional services for compliance assessments, penetration testing, and incident response. Pricing is quote-based with annual billing cadence. Primary customer segments are mid-market growing businesses, MSPs seeking to extend their portfolios without building SOC capability, and private equity firms requiring standardized cybersecurity governance across portfolio companies. The company employs 51-100 people and has no disclosed external funding, operating as a founder- and operator-led private firm with recent executive additions including CEO Jeff Buss (June 2025), CRO Jaime Reynolds (December 2025), and CPO Cory Brasel (April 2026).
Cyberleaf firmographics
Firmographics- Name
- Cyberleaf
- Legal name
- Waterleaf International, LLC
- Website
- https://cyberleaf.io
- Company type
- Private
- Founded year
- 2010
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Cyberleaf is a U.S.-based cybersecurity-as-a-service firm providing managed detection and response, compliance, and advisory services to mid-market businesses, MSPs, and private equity portfolio companies from a 100% U.S.-based SOC.
- Ownership category
- akta.pro rank
Cyberleaf industry classification
Industry- Product category
- Managed Cybersecurity Services
- NAICS
- Computer Systems Design and Related Services (54151), Security Systems Services (56162)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Managed Detection & Response (MDR) & SOC Services (HDADAGAG)
- akta.pro secondary industries
- Security Operations Center (SOC) as a Service (BPAEADAB), Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF), Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG), Vulnerability Management & Penetration Testing Services (BPAEADAD)
Keywords
Where Cyberleaf is headquartered
LocationHeadquarters
- HQ city
- Fort Myers
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Cyberleaf business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Others
Revenue model
- Managed Cybersecurity Services (MDR/XDR): Recurring subscription-based managed detection and response services providing 24/7 monitoring, threat investigation, containment, and response. Delivered as a Cybersecurity-as-a-Service (CSaaS) model with enterprise-grade protection at SMB-friendly pricing.
- Professional Services: Advisory services including vCISO services, cloud security consulting, and technical services such as penetration testing and incident response. One-time and project-based engagements.
- Compliance Services: Assessment and advisory services for CMMC, SOC 2, HIPAA, NIST 800-171, and other regulatory compliance frameworks. Includes gap analysis, process development, and managed services after certification.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Custom enterprise pricing based on organization size and requirements |
Go-to-market motion2 records
Distribution channels2 records
Marketing channels6 records
Cyberleaf product offering
Product offeringCore offering
Cyberleaf delivers enterprise-grade Cybersecurity-as-a-Service (CSaaS) anchored by Managed Detection and Response (MDR/XDR) with 24/7/365 monitoring by a 100% U.S.-based SOC. Its Orchestrated Defense platform unifies endpoint, network, cloud, and identity monitoring into a single correlated defense layer, supported by CMMC/NIST/SOC 2/HIPAA compliance services, vCISO advisory, security assessments, penetration testing/incident response, and AI security and governance services for growing businesses, MSPs, and private equity firms.
Product overview
Cyberleaf delivers an end-to-end Cybersecurity-as-a-Service (CSaaS) platform for growing businesses, MSPs, and private equity firms. The core offering combines Managed Cybersecurity Services (MDR/XDR) with Advisory Services, Assessment Services, Technical Services, and CMMC Compliance Services. Additional products include AI Security & Governance and Private Equity Cybersecurity Services. The portfolio is distributed primarily through MSPs with professional services supporting regulatory and security requirements. The company also publishes the 2026 AI Threat Report and offers a Tool Sprawl Self-Assessment diagnostic tool.
Differentiator
Problem solved
Functional benefit
Products and services
- Managed Cybersecurity Services Enterprise-grade Managed Detection and Response (MDR/XDR) services providing 24/7/365 monitoring, threat investigation, containment, and remediation by a 100% U.S.-based SOC team. Unifies endpoint, network, cloud, and identity monitoring into a single correlated defense layer.
- CMMC Compliance Services Cybersecurity Maturity Model Certification (CMMC) assessment preparation and compliance services for defense contractors, covering gap analysis, NIST 800-171 alignment, process development, and managed services through certification.
- Advisory Services Virtual Chief Information Security Officer (vCISO) services, cloud security advisory across Azure, AWS, and Google Cloud, security program development, and compliance roadmap alignment to NIST and CMMC frameworks.
- Assessment Services Comprehensive risk assessments, CMMC and NIST 800-171 compliance gap analysis, governance structure management, and legal/regulatory compliance evaluation.
- Technical Services Penetration testing and vulnerability assessments, red team/attack simulation exercises, incident response and recovery services, and forensic analysis.
- AI Security & Governance AI-specific security advisory and governance services addressing risks from AI-powered attacks, AI coding assistants, and agentic AI frameworks used by threat actors.
- Private Equity Cybersecurity Services Portfolio-wide managed security, cyber due diligence, and compliance support for private equity firms and their portfolio companies, including pre-acquisition assessment, 24/7 SOC deployment, and exit-ready compliance posture.
Quantifiable outcome
- 80-90% of tactical attack work executed autonomously by AI (per 2026 AI Threat Report)
- +2 more outcomes
Companies that use Cyberleaf
Customer profileNamed customers1 record
Segments3 records
Ideal customer profiles3 records
Cyberleaf technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature4 records
Cyberleaf partnerships and signals
Strategic signalPartnerships
Four partnerships are on record, tiered core and minor.
- Waterleaf International, LLCcoreParent company of Cyberleaf. Waterleaf International is the parent entity and brand, founded in 2010, providing managed cybersecurity solutions and communications infrastructure services for government and commercial customers.
- Ontech SystemscoreCo-developed webinar content on 'From Tool Sprawl to Orchestrated Defense' discussing security orchestration and consolidation strategies. Ontech Systems is a technology partner delivering combined expertise to MSPs and end customers.
- EntechminorJoint livestream event 'AI is in Your Business, Now What?' featuring CEO Jeff Buss and VP of Technology Stephen Tracy discussing practical AI adoption and security risks in business environments.
- SplunkcoreTechnology partnership for security analytics and SIEM platform. Cyberleaf is a Splunk partner using AI and ML for threat detection and identification of generative AI threats. Also supports grant-writing efforts for customers.
Scale indicators2 records
Recent moves6 records
Expansion highlights5 records
Cyberleaf competitors and assessment
Company assessmentDirect peers
- Arctic Wolf Networks: Pure-play MDR/SOC provider offering 24/7 managed detection and response across endpoint, network, and cloud. Closely comparable to Cyberleaf's core managed cybersecurity service in customer profile (SMB to mid-market) and delivery model.
- eSentire: MDR specialist with a 24/7 SOC and a focus on mid-market organizations across regulated industries. Comparable to Cyberleaf in offering mix (managed detection plus compliance-aligned services) and customer segment.
- ReliaQuest: Enterprise-grade MDR provider with a 'GreyMatter' platform unifying endpoint, network, cloud, and identity telemetry. Highly comparable to Cyberleaf's orchestrated defense thesis, though operating at materially larger scale.
- Expel: Transparent MDR provider combining a SaaS platform with a 24/7 SOC for SMB and mid-market customers. Direct comparable to Cyberleaf's managed detection and response delivery model and customer profile.
- Pondurance: MDR and compliance services firm focused on mid-market and regulated industries, including CMMC and NIST-aligned offerings. Closely matches Cyberleaf's combined MDR + compliance readiness positioning.
- Binary Defense: MDR provider built around an Open XDR platform with a U.S.-based SOC, serving mid-market and enterprise customers. Comparable technology approach (managed detection across multiple telemetry layers) and customer overlap.
Broad incumbents
- Sophos Managed Detection and Response: Established cybersecurity vendor offering Sophos MDR alongside a broad endpoint and network security portfolio. Comparable in service delivery (24/7 SOC MDR) but competes from a much wider product portfolio and larger brand footprint.
- CrowdStrike (Falcon Complete): Endpoint security platform that bundles its own managed detection and response (Falcon Complete) as part of a broader platform. Overlaps with Cyberleaf's MDR offering but operates from a substantially larger installed base and R&D budget.
- Booz Allen Hamilton Cybersecurity: Large federal and commercial cybersecurity services provider with deep CMMC and NIST compliance practices. Competes with Cyberleaf for federal and defense industrial base compliance engagements, but at materially larger scale and broader capability set.
Others
- Kroll Cyber Risk: Global cyber risk advisory and incident response firm with overlapping compliance, advisory, and incident response capabilities. Notable also because Kroll's Global Head of Cyber Risk sits on Cyberleaf's board; comparable in advisory and IR services rather than core MDR delivery.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights6 records
Customer concentration
Cyberleaf social profiles
Digital presenceCyberleaf compliance and trust
Trust signalCompliance4 records
Cyberleaf financial estimates
Financial estimateRevenue estimate
Valuation estimate
Cyberleaf leadership team
Management profileNumber of profiles
Profiles6 records
Cyberleaf funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Cyberleaf M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Cyberleaf
What does Cyberleaf do?
Cyberleaf delivers enterprise-grade Cybersecurity-as-a-Service (CSaaS) anchored by Managed Detection and Response (MDR/XDR) with 24/7/365 monitoring by a 100% U.S.-based SOC. Its Orchestrated Defense platform unifies endpoint, network, cloud, and identity monitoring into a single correlated defense layer, supported by CMMC/NIST/SOC 2/HIPAA compliance services, vCISO advisory, security assessments, penetration testing/incident response, and AI security and governance services for growing businesses, MSPs, and private equity firms.
Is Cyberleaf a public or private company?
Cyberleaf is a private company. It is classified as corporate owned and is currently operating.
When was Cyberleaf founded?
Cyberleaf was founded in 2010. It employs 51 to 100 people.
Where is Cyberleaf based?
Cyberleaf is headquartered in Fort Myers, United States, in the North America region.
How does Cyberleaf make money?
Three revenue lines are on record. Managed Cybersecurity Services (MDR/XDR) is the primary driver. The others are professional Services and compliance Services.
Who are Cyberleaf's main competitors?
Direct peers on record are Arctic Wolf Networks, eSentire, ReliaQuest, Expel, Pondurance and Binary Defense. Broad incumbents are Sophos Managed Detection and Response, CrowdStrike (Falcon Complete) and Booz Allen Hamilton Cybersecurity. Kroll Cyber Risk is listed as an others.
Does Cyberleaf have an API?
No public API is recorded for Cyberleaf.
What industry is Cyberleaf in?
Cyberleaf's product category is Managed Cybersecurity Services. Its primary akta.pro industry code is HDADAGAG, Managed Detection & Response (MDR) & SOC Services, with a secondary code of BPAEADAB, Security Operations Center (SOC) as a Service. Its NAICS code is 54151 and its SIC code is 7370.