HolistiCyber
Founded in 2016, HolistiCyber is a private cybersecurity services firm delivering nation-state grade consulting, red/purple team testing, AI-driven defense planning via its SAGE platform, and 24/7 incident response to enterprise clients across finance, energy, entertainment, and other verticals.
- Company typePrivate
- Founded2016
- HeadquartersNew York, United States
- Headcount11–50
- GTM typeB2B
- OfferingServices
What HolistiCyber does
HolistiCyber is a private cybersecurity services firm founded in 2016 and headquartered in Tel Aviv, Israel, with additional offices in New York, Boston, and London. The company sells 'nation-state grade' cyber defense across four service pillars — Strategic Cybersecurity Services (strategy, threat modeling, vCISO, compliance), Proactive OPS (third-party risk management, training, CAIS), the Cybersecurity Assurance Program (red, purple, and penetration testing), and Response (24/7 incident response, RansomAID, tabletop exercises). The firm explicitly targets six verticals: financial institutions, private equity, energy/power/gas, data centers, manufacturing, and entertainment.
The company's core proprietary technology is SAGE, an AI-driven cyber defense planning and optimization platform that ingests structured security data (risks, vulnerabilities, assets, threats) and provides dynamic risk analysis, what-if budgeting simulations, predictive threat forecasting, and natural-language decision support for CISOs. Layered on top is the Cyber AI Suite (CAIS) for AI-assisted penetration testing and vulnerability assessment, the proprietary Offensive Framework Methodology (OFM) that combines AI secure coding with human-in-control signoff, and a unique darknet intelligence feed for attacker-perspective threat data. SAGE is designed to integrate with existing XDR/EDR and GRC/ticketing systems, and the company maintains a tool-agnostic positioning that avoids resale of third-party security products.
The business model is a blend of professional services (consulting, testing, managed incident response) and SAGE platform subscriptions, sold primarily through direct enterprise field sales to CISOs and security leaders. Pricing is undisclosed and quote-based, structured around multi-year strategic programs (3-year engagements are explicitly cited), advisory retainers, and incident response retainers. Distribution is augmented by a channel partner program (Genesis10, Iovations, ARD Security, Picksec). Named customers span BDR Thermea, DAZN, Jackson Energy Authority, a top-10 investment bank, a major credit card company, a major Hollywood talent agency, a large entertainment company, a hospitality provider, and a public-sector organization. Headcount is reported as 11–50, and the firm is founder-controlled (CEO Ran Shahor, Co-Founder/COO Moshe Ishai, Chairman Shimon Sheves), with Lord Jonathan Evans (former Director General of MI5) on the Advisory Board.
HolistiCyber firmographics
Firmographics- Name
- HolistiCyber
- Legal name
- HolistiCyber Ltd.
- Website
- https://holisticyber.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Founded in 2016, HolistiCyber is a private cybersecurity services firm delivering nation-state grade consulting, red/purple team testing, AI-driven defense planning via its SAGE platform, and 24/7 incident response to enterprise clients across finance, energy, entertainment, and other verticals.
- Ownership category
- akta.pro rank
Where HolistiCyber is headquartered
LocationHeadquarters
- HQ city
- New York
- HQ country
- United States
- HQ region
- North America
Offices5 records
Markets served
HolistiCyber business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Cybersecurity Consulting Services: Professional services including strategic cybersecurity consulting, threat modeling, compliance assessments, and CISO advisory services. Delivered through long-term engagement programs (multi-year engagements mentioned).
- Security Testing Services: Red Team, Purple Team, and penetration testing services. Real-world simulations and vulnerability assessments.
- Incident Response & Managed Security: 24/7 incident response services, ransomware mitigation (RansomAID), and ongoing security monitoring.
- SAGE Platform Subscription: AI-driven cyber defense planning platform available through subscription, potentially with demo and implementation services.
Go-to-market motion1 record
Distribution channels3 records
Marketing channels8 records
HolistiCyber product offering
Product offeringCore offering
HolistiCyber provides nation-state grade cybersecurity services to enterprise and government clients, combining human expertise with proprietary AI-driven tools. Core offerings include strategic cybersecurity consulting, red/purple team simulations, penetration testing, ransomware response (RansomAID), third-party risk management, and the SAGE AI-driven cyber defense planning platform. The firm delivers multi-year advisory programs to organizations across finance, private equity, energy, data centers, manufacturing, and entertainment sectors.
Product overview
HolistiCyber is a cybersecurity services company offering a comprehensive portfolio of nation-state grade cybersecurity services organized into four main categories: Strategic Cybersecurity Services, Proactive OPS, Cybersecurity Assurance Program, and Response. The core technology platform is SAGE, an AI-Driven Cyber Defense Planning & Optimization platform that provides strategic planning, dynamic risk analysis, and budget simulations. The Cyber AI Suite (CAIS) provides AI-powered security analysis. Key services include Red/Purple Team testing, penetration testing, incident response (including RansomAID), risk assessments, third-party risk management, cyber training, and strategic consulting (including virtual CISO services). The company serves multiple sectors including Finance, Private Equity, Energy, Data Centers, Manufacturing, and Entertainment.
Differentiator
Problem solved
Functional benefit
Brands
- SAGE: AI-Driven Cyber Defense Planning & Optimization platform that empowers CISOs with strategic cyber defense planning capabilities and dynamic risk analysis
- CAIS (Cyber AI Suite)
- RansomAID
Quantifiable outcome
- 91% of cyberattacks emanate from email (industry statistic)
- +2 more outcomes
Companies that use HolistiCyber
Customer profileNamed customers9 records
Segments6 records
Ideal customer profiles7 records
HolistiCyber technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability10 records
Feature5 records
HolistiCyber partnerships and signals
Strategic signalPartnerships
Four partnerships are on record, tiered core and minor.
- Genesis10coreGenesis10 is a channel partner offering HolistiCyber's cybersecurity services. The partnership adds strong cybersecurity core capabilities to Genesis10's portfolio, providing end-to-end state-of-the-art consulting solutions.
- IovationscoreIovations is a technology partner offering HolistiCyber's cybersecurity services as part of their portfolio. Provides comprehensive support including training, sales, marketing, and support.
- ARD SecurityminorARD Security is a partner offering HolistiCyber cybersecurity services. Channel-focused partnership model.
- PicksecminorPicksec is a partner offering HolistiCyber cybersecurity services. Channel-focused partnership model with two business models under one program.
Scale indicators5 records
Recent moves6 records
Expansion highlights6 records
HolistiCyber competitors and assessment
Company assessmentDirect peers
- Mandiant: Mandiant (now part of Google Cloud) is one of the most recognized incident response and strategic cybersecurity consulting firms. It directly competes with HolistiCyber in IR retainers, red team assessments, and CISO advisory, with a comparable services-led model and enterprise/government customer base.
- NCC Group: NCC Group is a global cybersecurity consulting and assurance firm offering red/purple teaming, penetration testing, threat intelligence, and managed detection services. Its breadth of offensive and defensive services and multi-region footprint make it a close operational peer to HolistiCyber.
- Bishop Fox: Bishop Fox is a specialist offensive security firm focused on red teaming, penetration testing, and security assessments. Its elite-operator positioning and continuous testing products align directly with HolistiCyber's Cybersecurity Assurance Program and OFM methodology.
- Coalfire: Coalfire is a cybersecurity advisory firm specializing in compliance assessments, risk management, and technical security testing. It competes directly with HolistiCyber's compliance, TPRM, and assurance services for enterprise and regulated-industry customers.
- Optiv: Optiv is a large cybersecurity solutions integrator delivering advisory, managed security, and risk services to enterprise clients. Its consultative, vendor-agnostic model and broad service portfolio overlap substantially with HolistiCyber's strategic and assurance offerings.
Broad incumbents
- CrowdStrike: CrowdStrike is a leading endpoint and cloud security platform vendor that has expanded into incident response, proactive services, and red team offerings through its Services team. Its platform-led approach increasingly competes with boutique firms like HolistiCyber for IR and advisory budgets.
- Palo Alto Networks (Unit 42): Unit 42 is Palo Alto Networks' threat intelligence and incident response consulting arm, offering IR retainers, risk assessments, and red team services. Its platform-backed delivery and global reach place it as a broader incumbent competing for the same enterprise wallet as HolistiCyber.
- Secureworks: Secureworks (now owned by Sophos) delivers managed detection and response, incident response, and security consulting to enterprise customers. Its broad portfolio and global SOC footprint make it a broad incumbent peer to HolistiCyber's response and proactive operations services.
- Trustwave: Trustwave provides managed security services, incident response, and cybersecurity consulting to enterprise and government clients globally. Its MSSP plus advisory model competes with HolistiCyber's managed services and strategic advisory offerings across similar verticals.
Emerging players
- Cybereason: Cybereason is an Israeli-founded cybersecurity firm specializing in endpoint detection and response and threat hunting. While more product-led than HolistiCyber, it shares Israeli roots, defense-grade talent positioning, and an overlap with HolistiCyber's threat detection and IR use cases.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
HolistiCyber social profiles
Digital presenceHolistiCyber financial estimates
Financial estimateRevenue estimate
Valuation estimate
HolistiCyber leadership team
Management profileNumber of profiles
Profiles8 records
HolistiCyber subsidiaries and ownership
Company hierarchySubsidiaries1 record
HolistiCyber funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
HolistiCyber M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about HolistiCyber
What does HolistiCyber do?
HolistiCyber provides nation-state grade cybersecurity services to enterprise and government clients, combining human expertise with proprietary AI-driven tools. Core offerings include strategic cybersecurity consulting, red/purple team simulations, penetration testing, ransomware response (RansomAID), third-party risk management, and the SAGE AI-driven cyber defense planning platform. The firm delivers multi-year advisory programs to organizations across finance, private equity, energy, data centers, manufacturing, and entertainment sectors.
Is HolistiCyber a public or private company?
HolistiCyber is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was HolistiCyber founded?
HolistiCyber was founded in 2016. It employs 11 to 50 people.
Where is HolistiCyber based?
HolistiCyber is headquartered in New York, United States, in the North America region.
How does HolistiCyber make money?
Four revenue lines are on record. Cybersecurity Consulting Services are the primary driver. The others are security Testing Services, incident Response & Managed Security and SAGE Platform Subscription.
Who are HolistiCyber's main competitors?
Direct peers on record are Mandiant, NCC Group, Bishop Fox, Coalfire and Optiv. Broad incumbents are CrowdStrike, Palo Alto Networks (Unit 42), Secureworks and Trustwave. Cybereason is listed as an emerging player.
Does HolistiCyber have an API?
No public API is recorded for HolistiCyber.