InfoSight
InfoSight is a U.S.-based cybersecurity services provider founded in 1998, delivering 24/7 SOCaaS, MDR, vulnerability management, and compliance services to regulated industries including financial services, healthcare, energy, and government through its proprietary Mitigator risk intelligence platform.
- Company typePrivate
- Founded1998
- HeadquartersMiami Lakes, United States
- Headcount11–50
- GTM typeB2B
- OfferingServices
What InfoSight does
InfoSight is a privately held U.S. cybersecurity services provider founded in 1998 and headquartered in Miami Lakes, Florida. The company delivers managed security services, vulnerability management, and risk-based compliance support to regulated industries including financial services (banks and credit unions), healthcare, energy and utilities, government, oil and gas, manufacturing, and education. Its customer base spans named enterprises such as Santander, BankUnited, Ohio Electric Cooperatives, Colgate University, and Charlotte County Florida alongside multiple credit unions and regional institutions.
InfoSight's core technology is the proprietary Mitigator Cyber Risk & Threat Intelligence Platform, a cloud-native system that aggregates network, cloud, and web-application vulnerability scans, ranks CVEs by business risk, and automates remediation ticketing. The company pairs this platform with a 24/7 U.S.-based SOC delivering SOC-as-a-Service (SOCaaS), Managed Detection and Response (MDR), Managed EDR, Managed SIEM/XDR, and specialized OT/ICS monitoring. A March 2026 platform update introduced financial cyber risk quantification and identity security monitoring; May 2026 added a Threat Intel Dashboard and the general availability of an AI-Enabled Purple Team SOCaaS that unifies offensive adversary emulation with defensive monitoring.
The company's revenue model combines recurring subscriptions (managed SOC, MDR, EDR, XDR, and platform) with project-based professional services (penetration testing, vulnerability assessments, vISO engagements, OT/ICS assessments, framework compliance reviews). Go-to-market is sales-led and consultative, targeting enterprise and mid-market organizations through content marketing, free security assessments, ROI calculators, and expert-advisor outreach. The firm operates with 11-50 employees under founder, president and CEO Tom Garcia, holds SOC 2 Type II attestation, and offers FedRAMP-aligned SOCaaS for federal buyers. No external funding rounds, acquisitions, or institutional ownership are disclosed.
InfoSight firmographics
Firmographics- Name
- InfoSight
- Legal name
- InfoSight Inc.
- Website
- https://infosightinc.com
- Company type
- Private
- Founded year
- 1998
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- InfoSight is a U.S.-based cybersecurity services provider founded in 1998, delivering 24/7 SOCaaS, MDR, vulnerability management, and compliance services to regulated industries including financial services, healthcare, energy, and government through its proprietary Mitigator risk intelligence platform.
- Ownership category
- akta.pro rank
InfoSight industry classification
Industry- Product category
- Managed Cybersecurity Services
- NAICS
- Computer Systems Design and Related Services (54151), Security Systems Services (56162)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)
- akta.pro secondary industries
- Managed Detection & Response (MDR) & SOC Services (HDADAGAG), Security Operations Center (SOC) as a Service (BPAEADAB)
Keywords
Where InfoSight is headquartered
LocationHeadquarters
- HQ city
- Miami Lakes
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
InfoSight business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Managed Security Services (SOCaaS/MDR): Recurring managed security services including 24/7 SOC-as-a-Service and Managed Detection & Response. Delivered as ongoing subscription with continuous monitoring, threat hunting, and incident response.
- Professional Services: Penetration testing, vulnerability assessments, security awareness training, advisory services, vISO services, and consulting engagements. Typically project-based or retainer arrangements.
- Platform/SaaS Subscriptions: Mitigator Cyber Risk Intelligence Platform delivered as cloud-native SaaS with dashboards, risk scoring, and vulnerability management capabilities.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise and mid-market organizations |
Go-to-market motion1 record
Distribution channels2 records
Marketing channels6 records
InfoSight product offering
Product offeringCore offering
InfoSight delivers managed cybersecurity, regulatory compliance, and risk management services through its proprietary Mitigator Cyber Risk & Threat Intelligence Platform and a 24/7 U.S.-based Security Operations Center (SOC). The company provides SOC-as-a-Service (SOCaaS) with Managed Detection & Response (MDR), penetration testing, managed EDR/XDR, and OT/ICS security assessments for financial, healthcare, government, energy, and manufacturing organizations.
Product overview
InfoSight offers a portfolio of cybersecurity and risk management products and services primarily organized around its core Mitigator Cybersecurity Risk & Threat Intelligence Platform and its 24x7 SOC-as-a-Service (SOCaaS) with MDR. The Mitigator platform serves as the central vulnerability and threat management product, while SOCaaS provides managed security monitoring and response. Supporting these core offerings are specialized services including penetration testing, managed EDR, industrial control/OT security assessments, and compliance-focused assessments. Recent additions include the AI-Enabled Purple Team SOCaaS (unifying offensive and defensive security through AI-driven threat intelligence) and the Threat Intel Dashboard within Mitigator. The company also provides advisory services, virtual CISO offerings, and industry-specific security solutions for financial services, healthcare, energy, government, and manufacturing sectors.
Differentiator
Problem solved
Functional benefit
Brands
- Mitigator: Cybersecurity Risk & Threat Intelligence Platform - Cloud-native platform that aggregates network, cloud, and web-app scans, ranks CVEs by business risk, and automates ticketing for faster patching.
Products and services
- Mitigator Cybersecurity Risk & Threat Intelligence Platform Cloud-native SaaS platform that aggregates network, cloud, and web-app vulnerability scans, ranks CVEs by business risk, and automates ticketing for faster patching. Built-in dashboards track vulnerability trends and provide board-ready reporting with financial risk trending.
- SOC-as-a-Service (SOCaaS) & MDR 24/7 U.S.-based SOC-as-a-Service with Managed Detection & Response that stops ransomware, phishing, and insider threats in real time. Provides compliance support for ISO 27001, NIST, HIPAA, and NERC CIP.
- AI-Enabled Purple Team SOCaaS Managed security solution unifying offensive adversary emulation with defensive monitoring through AI-driven threat intelligence. Combines red-team and blue-team capabilities for continuous threat exposure management.
- Penetration Testing Services Offensive-security experts simulate real attackers across networks, web apps, APIs, mobile, cloud, and SCADA/ICS environments. Detailed reports prioritize vulnerabilities, verify exploit paths, and map fixes to PCI DSS, FFIEC, and MITRE ATT&CK.
- Managed EDR AI-powered Endpoint Detection & Response blocks malware, file-less attacks, and zero-days. SOC analysts hunt threats, isolate hosts, and roll back malicious changes 24x7x365.
- Managed SIEM & XDR Enterprise-grade SIEM/XDR monitoring by experienced U.S. analysts providing 24x7 visibility into network, cloud, and endpoint environments.
- 24x7 ICS, SCADA & OT MDR Managed Detection & Response specifically designed for industrial control systems, SCADA, and operational technology environments. NERC CIP-aware SOC with OT network segmentation and anomaly detection.
- Vulnerability Management as a Service (VMaaS) Cloud-native vulnerability management service that aggregates scans, ranks CVEs by business risk, and automates ticketing for faster remediation with audit-ready evidence.
- Industrial Control & IoT Assessments Comprehensive OT security assessment for PLCs, DCS, and IIoT devices that uncovers misconfigurations, weak segmentation, and legacy exploits. Delivers a prioritized roadmap aligned to IEC 62443 and NIST 800-82.
- Virtual Information Security Officer (vISO) Virtual CISO service providing executive-level security leadership, strategic guidance, and regulatory expertise for organizations that need senior security oversight without a full-time hire.
- Managed Microsoft Teams Voice Fully managed Microsoft Teams Phone with network monitoring and 24x7 support. End-to-end SLA ensures secure collaboration, regulatory call recording, and seamless migration from legacy PBX or SIP trunks.
- Enterprise Risk Management Comprehensive risk management services helping organizations identify, assess, and mitigate cybersecurity risks aligned with business objectives and regulatory requirements.
- Red Blue Purple Team Testing Adversary emulation testing combining offensive (red), defensive (blue), and integrated purple team approaches to validate detection capabilities and security controls across the full attack lifecycle.
Quantifiable outcome
- Reduced mean-time-to-recover through proven incident-response playbooks
Companies that use InfoSight
Customer profileNamed customers12 records
Segments9 records
Ideal customer profiles4 records
InfoSight technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability7 records
Feature5 records
InfoSight partnerships and signals
Strategic signalScale indicators2 records
Recent moves6 records
Expansion highlights6 records
InfoSight competitors and assessment
Company assessmentDirect peers
- Arctic Wolf: Provides 24/7 managed detection and response and security operations services to mid-market and enterprise customers, with a security operations platform approach similar to InfoSight's SOCaaS and Mitigator combination. Directly competes for the same regulated-industry and mid-market accounts.
- eSentire: Pure-play MDR and SOC-as-a-service provider with 24/7 monitoring, threat hunting, and incident response, focused heavily on financial services, healthcare, and other regulated industries — a near-identical go-to-market to InfoSight.
- Expel: Managed detection and response provider offering transparent SOC services with a SaaS-style platform for security operations; competes with InfoSight for mid-market and enterprise security services spend, with similar transparency and customer-experience positioning.
- ReliaQuest: Enterprise-focused MDR and security operations provider with a platform (GreyMatter) unifying SIEM, EDR, and cloud telemetry — directly comparable to InfoSight's Mitigator-plus-SOCaaS approach, though typically serving larger enterprise customers.
- Critical Start: MDR provider offering 24/7 SOC services with a focus on reducing alert fatigue and providing managed detection across endpoints, networks, and cloud — overlapping directly with InfoSight's SOCaaS/MDR value proposition.
- Binary Defense: Managed detection and response and SOC-as-a-service provider with open-XDR capabilities, serving mid-market and enterprise customers — comparable service portfolio, scale, and customer profile to InfoSight.
- Pondurance: Mid-market-focused MDR and compliance services provider with strong healthcare and financial services vertical coverage, offering managed SOC, log management, and incident response — a close match to InfoSight's regulated-vertical GTM.
- Nuspire: Managed security services and MDR provider offering 24/7 SOC, EDR, and managed SIEM to mid-market and enterprise customers, with a similar product breadth to InfoSight and overlapping verticals including financial services and manufacturing.
- Foresite Cybersecurity: Mid-market MSSP and MDR provider offering managed SOC, vulnerability management, and compliance services with a comparable go-to-market focus on regulated industries and a service portfolio that closely mirrors InfoSight's offerings.
Broad incumbents
- Trustwave: Large MSSP offering managed security services, MDR, database security, and threat intelligence, with deep coverage in financial services and government — a broader incumbent that overlaps with InfoSight in the same regulated verticals but at a larger scale.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
InfoSight social profiles
Digital presenceInfoSight compliance and trust
Trust signalCompliance2 records
InfoSight financial estimates
Financial estimateRevenue estimate
Valuation estimate
InfoSight leadership team
Management profileNumber of profiles
Profiles1 record
InfoSight funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
InfoSight M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about InfoSight
What does InfoSight do?
InfoSight delivers managed cybersecurity, regulatory compliance, and risk management services through its proprietary Mitigator Cyber Risk & Threat Intelligence Platform and a 24/7 U.S.-based Security Operations Center (SOC). The company provides SOC-as-a-Service (SOCaaS) with Managed Detection & Response (MDR), penetration testing, managed EDR/XDR, and OT/ICS security assessments for financial, healthcare, government, energy, and manufacturing organizations.
Is InfoSight a public or private company?
InfoSight is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was InfoSight founded?
InfoSight was founded in 1998. It employs 11 to 50 people.
Where is InfoSight based?
InfoSight is headquartered in Miami Lakes, United States, in the North America region.
How does InfoSight make money?
Three revenue lines are on record. Managed Security Services (SOCaaS/MDR) is the primary driver. The others are professional Services and platform/SaaS Subscriptions.
Who are InfoSight's main competitors?
Direct peers on record are Arctic Wolf, eSentire, Expel, ReliaQuest, Critical Start, Binary Defense, Pondurance, Nuspire and Foresite Cybersecurity. Trustwave is listed as a broad incumbent.
Does InfoSight have an API?
No public API is recorded for InfoSight.
What industry is InfoSight in?
InfoSight's product category is Managed Cybersecurity Services. Its primary akta.pro industry code is BPAKAHAA, Managed Security Services (MSSP) & 24/7 SOC Operations, with a secondary code of HDADAGAG, Managed Detection & Response (MDR) & SOC Services. Its NAICS code is 54151 and its SIC code is 7370.