Kalles Group

What Kalles Group does

Kalles Group is a privately held cybersecurity, risk management, and digital transformation consulting firm founded in 2010 and headquartered in Seattle, Washington, operating under a virtual-first model with a core team of 40-50 professionals and an extended network of several hundred consultants that can be assembled into tailored engagement teams. The firm organizes its offerings into five service pillars: Security Solutions (cybersecurity, incident response, security compliance, IT disaster recovery, business continuity, and zero trust programs), Risk Management (risk strategy, assessments, framework alignment, vendor risk management, privacy and data, and CMMC compliance), People Capabilities (project and program management, solution architecture, change management, and gap analysis), Training and Education (user enablement, digital upskilling, secure development, and security awareness), and Digital Services (cloud infrastructure, secure software development, automation, M365 and SharePoint, business intelligence, and Microsoft Copilot enablement). Named packaged offerings include On-Demand Resourcing for flexible staffing, M365 Security in 60 Days for fixed-scope Microsoft 365 hardening, and CyberTech as a proprietary solution.

The firm serves a mix of Fortune 50 enterprises, mid-market companies, and small businesses across technology, financial services, healthcare, retail, energy, and the Defense Industrial Base, with named customers including SpaceX, Costco, Lululemon, Nordstrom, BECU, Pitchbook, and Remitly. Kalles Group generates revenue through engagement-based professional services priced by project scope, duration, and expertise level, supplemented by multi-year contracts and a free-consultation-led enterprise sales motion. Distribution is direct and global in reach, supported by thought leadership channels including the Smart Cookies quarterly community events in the Pacific Northwest, a branded podcast, a blog and newsletter, and social media. There are no disclosed funding rounds, no revenue figures, and no parent company, indicating a bootstrapped, founder-led operating model concentrated around founder and CEO Derek Kalles.

Name

Kalles Group

Legal name

Kalles Group

Website

https://kallesgroup.com

Company type

Private

Founded year

2010

Operating status

Operating

Headcount range

11–50 employees

Short description

Kalles Group is a Seattle-based, privately held cybersecurity, risk management, and digital transformation consulting firm founded in 2010, serving Fortune 50 enterprises through small businesses across technology, financial services, healthcare, and retail via a virtual-first core team and extended consultant network.

Ownership category

akta.pro rank

Product category

Cybersecurity and Risk Management Consulting

NAICS

Computer Systems Design and Related Services (54151), Management, Scientific, and Technical Consulting Services (5416), Other Management Consulting Services (541618)

akta.pro primary industry

Security Governance, Risk & Compliance (GRC) Advisory (BPAKADAG)

akta.pro secondary industries

Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF), Compliance Technology, GRC Platforms & Controls Automation Advisory (BPAHAFAO), Governance, Risk & Compliance (GRC) Managed Services (BPAEADAJ)

Keywords

• Cybersecurity consulting
• Risk management services
• Incident response
• Compliance advisory
• Digital transformation

Headquarters

HQ city

Seattle

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Others

Revenue model

1. Professional Services Consulting: Engagement-based consulting services across security solutions, risk management, digital transformation, and training. Projects are scoped based on client needs, duration, and expertise levels. They offer both project-based and ongoing retainer engagements.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels7 records

Core offering

Kalles Group is a Seattle-based cybersecurity and professional services firm that delivers cybersecurity, risk management, compliance, and digital services to mid-market and enterprise clients. It also offers people-capabilities, training, and education services, and operates a flexible On-Demand Resourcing model through which clients can engage specialized professionals to scale security and risk programs on demand.

Product overview

Kalles Group is a professional services firm offering a comprehensive portfolio of cybersecurity, risk management, and digital transformation consulting services. The company operates as a unified services organization rather than a product company, organized into five core service pillars: Security Solutions (including Cybersecurity, Incident Response, and Security Compliance), Risk Management (spanning risk strategy, assessments, and compliance), People Capabilities (covering organizational development and change management), Training & Education (including security awareness and digital upskilling), and Digital Services (encompassing cloud infrastructure, secure software development, and business intelligence). Key named offerings include On-Demand Resourcing for flexible staffing, M365 Security for Microsoft environment hardening, and CyberTech as a proprietary solution. The firm serves organizations across industries including technology, financial services, healthcare, and government contracting, with particular expertise in CMMC compliance for Defense Industrial Base clients.

Differentiator

Problem solved

Functional benefit

Brands

• CyberTech: A cybersecurity solution offering mentioned in the company's solutions portfolio.
• Smart Cookies
• On-Demand Resourcing

Products and services

• Cybersecurity Services Core cybersecurity service offering for organizations seeking to assess, build, and run security programs, spanning strategy, operations, and execution.
• Risk Management Services Risk management service offering covering risk identification, assessment, treatment, and ongoing program oversight for clients.
• People Capabilities People and organizational capabilities service offering covering training, education, and workforce development supporting security and risk programs.
• Training and Education Training and education services covering security awareness and practitioner enablement for client teams.
• Digital Services Digital services offering covering cloud, automation, data, and Microsoft 365/SharePoint/Power Platform enablement for clients.
• On-Demand Resourcing Flexible engagement model providing on-demand access to specialized cybersecurity and risk professionals for clients needing to scale teams for projects, audits, or incidents.
• M365 Security Structured 60-day program to assess and harden Microsoft 365 environments for security and compliance readiness.
• CyberTech Named CyberTech solution combining cybersecurity expertise with technology enablement for client environments.
• Privacy, Trust, and Data Services Privacy and data protection service offering supporting privacy programs, data governance, and trust initiatives for organizations.
• Incident Response Incident response service offering providing readiness, response, and recovery support for security incidents.
• IT Disaster Recovery IT disaster recovery service offering covering planning, exercising, and execution of IT resilience and recovery capabilities.
• Business Continuity Business continuity service offering covering continuity program development, exercise, and ongoing program management.
• Security Compliance Security compliance service offering supporting readiness, audits, and ongoing compliance for frameworks including CMMC, SOC 2, NIST, PCI DSS, HIPAA, GDPR, ISO 27001, and FedRAMP.
• Cloud Infrastructure Services Cloud infrastructure service offering covering cloud architecture, migration, and operations for client environments.
• Secure Software Development Secure software development service offering covering secure SDLC practices, code review, and developer enablement.
• Automation and Systems Automation and systems integration service offering supporting workflow automation and systems integration initiatives.
• O365 and SharePoint Services Microsoft 365 and SharePoint service offering covering implementation, migration, and ongoing enablement for clients.
• Full SDLC Services Full software development lifecycle service offering covering end-to-end application development support for clients.
• Business Intelligence and Data Analytics Business intelligence and data analytics service offering covering data visualization, reporting, and analytics enablement.
• Microsoft Copilot Enablement Microsoft Copilot enablement service offering covering Copilot readiness, deployment, and adoption support for clients.

Quantifiable outcome

• Delivered data inventory project ahead of anticipated timeline (less than 12 months vs typical 2-3 years for fintech client)
• +2 more outcomes

Named customers10 records

Segments9 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature2 records

Partnerships

Six partnerships are on record, tiered minor and notable.

• Industrious WorkspaceminorGTM or Marketing Partner · 10 September 2025Sponsor of Smart Cookies event series, providing workspace for in-person events.
• Treat CookiesminorGTM or Marketing Partner · 10 September 2025Sponsor of Smart Cookies event series.
• Microsoft Copilot StudionotableStrategic or Co-development Partner · 12 June 2025Microsoft Copilot Studio Principal Product Manager Eli Coon participated as a panelist at the Smart Cookies event 'From Tool to Teammate: Leading with AI' discussing AI operationalization and team integration.
• UltravoxnotableStrategic or Co-development Partner · 12 June 2025Co-founder & CEO Zach Koch participated as a panelist discussing AI implementation and organizational transformation at Smart Cookies event.
• AILayernotableStrategic or Co-development Partner · 12 June 2025Co-founder Mike Anderson participated discussing AI-native organizational concepts and future technology landscape at Smart Cookies event.
• Independent AI InstitutenotableStrategic or Co-development Partner · 12 June 2025Executive Director Mike Anderson represented the organization at Smart Cookies event, contributing insights on AI leadership and organizational transformation.

Scale indicators2 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Kudelski Security: Provides cybersecurity advisory, risk management, and incident response to enterprises, overlapping strongly with Kalles' security and IR services.
• GuidePoint Security: Cybersecurity consulting and services provider covering risk, compliance, and security program advisory for enterprises, matching Kalles' core security-solutions delivery model.
• Coalfire: Cybersecurity advisory and assessment firm specializing in compliance (FedRAMP, CMMC, PCI) and risk management; directly overlaps with Kalles' GRC, compliance readiness, and security assessment services.
• Schellman: Specialized compliance and cybersecurity assessment firm (SOC, HIPAA, CMMC, ISO); directly comparable to Kalles' certification preparation and audit/compliance advisory offerings.

Emerging players

• Bishop Fox: Offensive security and penetration testing specialist; overlaps with Kalles' penetration testing and security assessment offerings, though narrower in scope.
• Critical Start: Cybersecurity services company focused on risk reduction, assessments, and managed detection; partial overlap with Kalles' security assessment and risk advisory work.

Broad incumbents

• Optiv: Large security solutions integrator offering advisory, risk, compliance, and managed services; competes broadly in the same space but at far greater scale than Kalles.
• NCC Group: Global cybersecurity consultancy offering assessments, GRC, and incident response; overlapping capabilities delivered at much larger, multinational scale.
• Trustwave: Managed security and consulting firm covering compliance, risk, and incident response for enterprises, competing with Kalles' advisory and IR services at larger scale.

Regional players

• Structured: Pacific Northwest-based IT and security solutions provider serving similar regional enterprise clients, overlapping in cybersecurity and digital infrastructure consulting.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/kallesgroup

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Kalles Group