Merito
Merito is a Boulder, Colorado-based enterprise software quality and security services firm operating as a value-added reseller and delivery partner for 20+ enterprise software vendors. It delivers quality engineering, application security, SAP testing, and managed services to enterprise leaders across government, healthcare, energy, financial, and retail sectors.
- Company typePrivate
- Founded2000
- HeadquartersBoulder, United States
- Headcount1–10
- GTM typeB2B
- OfferingServices
What Merito does
Merito is a Boulder, Colorado-based private enterprise software quality and security services firm operating as a value-added reseller and delivery partner for more than 20 enterprise software vendors. Founded in 2000, the company delivers a platform-plus-services model spanning the full Software Development Life Cycle (SDLC), covering quality engineering, application security testing (SAST, SCA, DAST, IAST, ASPM), SAP transformation toolchain, performance testing, DevOps consulting, and managed services. The company's core technology is not a proprietary product but a multi-vendor delivery capability across Application Development Management partnerships (Atlassian, Tricentis, OpenText, Perforce, TestRail, AccelQ, BrowserStack, Applitools, Panaya, Planview, Syniti) and Application Security Testing partnerships (Sonatype, Snyk, Checkmarx, Black Duck, Akamai, Saltworks, Secure Code Warrior, Semgrep), with deep specialization in the SAP platform.
Merito generates revenue through three streams: software license resale from vendor partners (sold as annual subscriptions), professional services (implementation, consulting, training, MAPS Assessment, CRAFT Enablement, staff augmentation scoped as separate statements of work), and managed services (ongoing operational support for QA, AppSec, and delivery tooling). Pricing is quote-based with no public pricing disclosed, and most quote requests receive a response within 30 minutes during business hours. Licenses and delivery services are bundled into single enterprise engagements. The company routes inquiries through consultation and quote request workflows to specialized teams covering software delivery, quality engineering, accessibility, security, and platform modernization.
Merito serves enterprise engineering, QA, PMO, and security leaders across five verticals: government, healthcare, energy, financial, and retail. The vertical expansion was significantly enabled by the July 2024 acquisition of Bienabee Technologies, a professional services firm specializing in software quality assurance, automated testing, digital transformation, and RPA. The company was founded and is led by John Goodson as Founder and CEO. Merito maintains offices in Boulder, Colorado and operates as a wholly independent private firm with no disclosed parent company, institutional funding rounds, or board composition.
Merito firmographics
Firmographics- Name
- Merito
- Legal name
- Merito
- Website
- https://merito.com
- Company type
- Private
- Founded year
- 2000
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Merito is a Boulder, Colorado-based enterprise software quality and security services firm operating as a value-added reseller and delivery partner for 20+ enterprise software vendors. It delivers quality engineering, application security, SAP testing, and managed services to enterprise leaders across government, healthcare, energy, financial, and retail sectors.
- Ownership category
- akta.pro rank
Merito industry classification
Industry- Product category
- Enterprise Application Quality and Security Services
- NAICS
- Computer Systems Design and Related Services (54151), Custom Computer Programming Services (541511)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Enterprise Application License Advisory, Vendor Management & Optimization (BPAEAGAO)
- akta.pro secondary industries
- Software License Resale & Optimization (Perpetual/Subscription) (BPAEAOAC), Vendor & Contract Management (Software/Cloud) (BPAEAOAD), Software Asset Management (SAM) & License Compliance (BPAEAOAB)
Keywords
Where Merito is headquartered
LocationHeadquarters
- HQ city
- Boulder
- HQ country
- United States
- HQ region
- North America
Markets served
Merito business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Technology or R&D, Marketing or Sales, Others
Revenue model
- Software License Resale: Merito resells software licenses from vendor partners including Sonatype, Snyk, Secure Code Warrior, Saltworks, Akamai, Black Duck, Checkmarx, and others. Licenses are sold alongside implementation and delivery services as bundled engagements.
- Professional Services: Implementation, consulting, training, and managed services delivered by senior practitioners. Services include DevOps Consulting, Implementation Services, MAPS Assessment, CRAFT Enablement, Premium Support, Training and Enablement, and Staff Augmentation. Delivery work scoped as separate statement of work from license purchase.
- Managed Services: Ongoing operational support for QA, AppSec, and delivery tooling including policy tuning, integration maintenance, and reporting operations.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Quote-based pricing tailored to customer requirements |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels4 records
Merito product offering
Product offeringCore offering
Merito is an enterprise services firm that delivers application quality and security across the SDLC through a platform-plus-services model. The company resells software licenses from vendors such as Sonatype, Snyk, Black Duck, Akamai, Saltworks, and Secure Code Warrior, and bundles those licenses with implementation, consulting, managed services, training, and staff augmentation delivered by senior practitioners. Its core offerings span quality engineering, application security testing (SAST, SCA, DAST, IAST), SAP testing, DevOps toolchain integration, performance testing, and managed services for engineering, QA, PMO, and security leaders.
Product overview
Merito is an enterprise software quality and security services provider offering a platform-plus-services model across application security, SAP testing, DevOps toolchain, and managed services. The core offerings span quality engineering, application security testing (SAST, SCA, DAST, IAST), SAP integrated toolchain, performance testing, and staff augmentation. Merito operates as a reseller and delivery partner for multiple vendor ecosystems including Sonatype (Nexus Repository, Lifecycle, Guide, SBOM Manager), Snyk (Code, Open Source, Container, IaC, API & Web, Studio), Black Duck (Coverity, SCA, Software Risk Manager), Akamai (App and API Protector, Prolexic, API Security, Client-side Protection), Saltworks (SaltMiner ASPM), and Secure Code Warrior (AI Software Governance Platform, Trust Agent). The company also offers proprietary platform programs for SAP, with planned Oracle and Salesforce platform expansions.
Differentiator
Problem solved
Functional benefit
Products and services
- DevOps Consulting Consulting service that helps enterprise teams design delivery strategy, toolchain planning, and CI/CD pipeline foundations across the SDLC.
- Implementation Services Implementation service deploying and integrating enterprise software tools from Merito's vendor partner ecosystem into customer delivery environments.
- Managed Services Ongoing operational support for QA, AppSec, and delivery tooling, including policy tuning, integration maintenance, and reporting operations.
- Premium Support Premium support service for customers running enterprise software under Merito's delivery and partner ecosystem.
- Training and Enablement Training and enablement programs that develop customer teams on quality engineering, application security, SAP, and DevOps tools.
- Staff Augmentation Staff augmentation service supplying senior practitioners into customer delivery, quality, and security teams.
- Accessibility Services Accessibility compliance validation services using Deque tools across enterprise applications.
- MAPS Assessment Merito-branded structured application security program assessment delivered as part of the Govern and Mature SDLC phase.
- CRAFT Enablement Merito-branded structured enablement program that builds customer capability in quality and security practices.
- Upgrade Services Upgrade services for enterprise platforms and partner tools, scoped as a separate statement of work.
- Application Security Solution Solution that embeds application security testing and governance into enterprise delivery workflows without slowing releases.
- DevOps Toolchain Solution Solution integrating SDLC tooling across Atlassian, Microsoft, and OpenText with CI/CD pipeline foundations.
- Test Automation Solution Solution for test framework engineering and automation architecture across enterprise delivery programs.
- SAP Integrated Toolchain Solution Solution for SAP transformation toolchain including LeanIX, Signavio, Syniti, Cloud ALM, Tricentis, SAP ECT, and SAP WalkMe.
- SAP Testing Solution Solution reducing SAP upgrade and release risk with connected testing model across Cloud ALM, Signavio, Tosca, LiveCompare, OpenText Functional Testing, and Panaya.
- Performance Testing Solution Solution modernizing enterprise performance testing across CI/CD, legacy systems, and major-event readiness.
- Software Delivery Acceleration Solution Solution for delivery strategy and toolchain planning with QA program design and test strategy.
- Data Migration Solution Solution for enterprise data migration services.
- Enterprise Modernization Solution Solution for enterprise platform modernization and cutover services.
- Agentic AI Development Solution Solution accelerating software delivery using AI agents across development, testing, security, and release management.
- SAP Platform End-to-end SAP transformation platform combining license resale with implementation and delivery under one partner.
Quantifiable outcome
- Earlier detection of regressions and critical CVEs with real-time visibility into release quality and AppSec posture
- +2 more outcomes
Companies that use Merito
Customer profileSegments6 records
Ideal customer profiles2 records
Merito technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration47 records
AI capability15 records
Feature1 record
Merito partnerships and signals
Strategic signalPartnerships
26 partnerships are on record, tiered core, flagship and strategic.
- SonatypecoreMerito sells and operates the Sonatype portfolio including Nexus One Platform, Nexus Repository, Lifecycle (SCA), Guide (AI governance), and SBOM Manager. Merito handles deployment, policy authoring, repository firewall configuration, SBOM workflow design, and ongoing run support.
- SnykcoreMerito sells and operates the Snyk developer-first AI security platform including Snyk Code (SAST), Snyk Open Source (SCA), Snyk Container, Snyk IaC, Snyk API & Web (DAST), and Snyk Studio (AI integration). Services include implementation, policy authoring, IDE rollout, CI/CD integration, and ongoing run.
- Secure Code WarriorcoreMerito sells and operates the Secure Code Warrior portfolio including AI Software Governance Platform (with Learning) and Trust Agent. Merito handles Learning rollout, AI governance configuration, Trust Score program design, and Trust Agent integration.
- SaltworkscoreMerito sells and operates Saltworks SaltMiner ASPM platform. Merito handles scanner integration, normalization rule authoring, executive dashboard configuration, and pentest management workflow.
- AkamaicoreMerito sells and operates the Akamai runtime protection portfolio including App and API Protector (WAAP), Prolexic (DDoS), API Security, and Client-side Protection and Compliance. Services include WAF/bot rule design, threshold tuning, and incident response runbook authoring.
- Black DuckcoreMerito sells and operates the Black Duck portfolio including Coverity Static, Black Duck SCA, Software Risk Manager (ASPM), Polaris, Continuous Dynamic, Seeker Interactive, Defensics, and Signal. Services include implementation, tool integration, and compliance mapping.
- CheckmarxcoreMerito sells and operates Checkmarx application security testing portfolio including SAST, SCA, and related products. Merito handles implementation, policy configuration, and CI/CD integration.
- SAPflagshipSAP is Merito's flagship platform program. Merito delivers SAP transformation toolchain covering LeanIX, Signavio, Syniti, Cloud ALM, Tricentis, SAP ECT, and SAP WalkMe. Services include SAP testing, upgrade services, and implementation under one partner.
- TricentiscoreMerito is a certified Tricentis partner for SAP testing and test automation. Tricentis products are part of Merito's SAP Platform program.
- OpenTextcoreMerito is a certified OpenText partner for functional testing and application security. Products include OpenText Functional Testing and OpenText Application Security.
- PerforcecoreMerito is a certified Perforce partner for enterprise version control and application lifecycle management solutions.
- TestRailcoreMerito is a certified TestRail partner for test case management integrated into enterprise delivery toolchains.
- SemgrepcoreMerito sells and operates Semgrep for SAST and supply-chain security. Services include implementation, policy authoring, and CI/CD integration.
- InflectracoreMerito is a certified Inflectra partner for test management and application lifecycle solutions.
- MicrosoftcoreMerito integrates with Microsoft development and security tooling including Azure DevOps, GitHub, and related Microsoft security platforms as part of enterprise delivery toolchains.
- AccelQcoreMerito is a certified AccelQ partner for codeless test automation and API testing integrated into enterprise delivery programs.
- BrowserStackcoreMerito integrates BrowserStack for cross-browser and mobile testing as part of enterprise quality engineering programs.
- ApplitoolscoreMerito integrates Applitools for visual testing and monitoring as part of enterprise quality engineering programs.
- DequecoreMerito offers Accessibility Services using Deque tools for accessibility compliance validation across enterprise applications.
- PanayacoreMerito integrates Panaya for SAP testing and change-impact analysis as part of SAP platform services.
- AtlassiancoreMerito integrates Atlassian tools (Jira, Confluence, Bitbucket) for SDLC tooling as part of DevOps toolchain solutions.
- GitLabcoreMerito integrates GitLab for CI/CD pipelines and DevOps toolchain implementations.
- AWScoreMerito integrates AWS cloud infrastructure and services as part of enterprise delivery and security programs.
- WorkdaycoreMerito provides testing and delivery services for Workday enterprise applications.
- UiPathcoreMerito integrates UiPath for RPA testing and automation validation as part of digital transformation services.
- Cognition (Devin, Windsurf)strategicSnyk and Cognition partnered to deliver Snyk for Devin and Snyk for Windsurf as flagship Snyk Studio implementations. Programs adopting Cognition's autonomous AI software engineer or agentic IDE get Snyk intelligence inside the AI workflow. Merito implements these integrations.
Scale indicators3 records
Recent moves6 records
Expansion highlights5 records
Merito competitors and assessment
Company assessmentBroad incumbents
- SHI International: Large-scale IT reseller and services organization with significant software, security, and cloud practices. Comparable in operating model but materially larger in scale, geographic reach, and breadth of vendor relationships.
- EPAM Systems: Global digital engineering services firm with strong SDLC, quality engineering, and platform-modernization practices. Comparable delivery scope but with materially larger engineering bench and global delivery footprint.
- CDW: Large multi-brand IT solutions provider with security, software, and services practices serving enterprise and mid-market customers. Comparable GTM but at substantially greater scale and breadth than Merito.
- Insight Enterprises: Global IT solutions and services provider combining hardware/software resale with professional and managed services. Operates the same reseller-plus-services GTM model as Merito across enterprise accounts.
Direct peers
- Trace3: IT solutions provider combining software resale, professional services, and managed services across enterprise infrastructure, security, and cloud. Closely mirrors Merito's value-added reseller plus services delivery model.
- Optiv: Security-focused VAR and services firm that resells and implements enterprise security tools while providing advisory, integration, and managed security services. Directly comparable to Merito's AppSec vendor resale and delivery model.
- GuidePoint Security: Specialized cybersecurity reseller and services provider covering application security, identity, and cloud security vendors. Directly comparable to Merito's application security testing partner ecosystem and delivery model.
- Qualitest: Pure-play quality engineering and testing services firm covering functional, performance, automation, and security testing. Direct peer to Merito's QA and quality engineering practice serving enterprise clients.
- Cigniti Technologies: Independent quality engineering and software testing services firm specializing in test automation, performance testing, and digital assurance. Closely comparable niche to Merito's quality engineering and SAP testing offerings.
- Slalom: Technology consulting firm with strong SDLC, quality engineering, and platform-modernization practices serving enterprise clients. Comparable to Merito in targeting engineering and QA leaders with delivery-plus-platform offerings, though at meaningfully larger scale.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Merito social profiles
Digital presenceMerito compliance and trust
Trust signalCompliance23 records
Merito financial estimates
Financial estimateRevenue estimate
Valuation estimate
Merito leadership team
Management profileNumber of profiles
Profiles1 record
Merito subsidiaries and ownership
Company hierarchySubsidiaries1 record
Merito funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Merito M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Merito
What does Merito do?
Merito is an enterprise services firm that delivers application quality and security across the SDLC through a platform-plus-services model. The company resells software licenses from vendors such as Sonatype, Snyk, Black Duck, Akamai, Saltworks, and Secure Code Warrior, and bundles those licenses with implementation, consulting, managed services, training, and staff augmentation delivered by senior practitioners. Its core offerings span quality engineering, application security testing (SAST, SCA, DAST, IAST), SAP testing, DevOps toolchain integration, performance testing, and managed services for engineering, QA, PMO, and security leaders.
Is Merito a public or private company?
Merito is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Merito founded?
Merito was founded in 2000. It employs 1 to 10 people.
Where is Merito based?
Merito is headquartered in Boulder, United States, in the North America region.
How does Merito make money?
Three revenue lines are on record. Software License Resale is the primary driver. The others are professional Services and managed Services.
Who are Merito's main competitors?
Broad incumbents on record are SHI International, EPAM Systems, CDW and Insight Enterprises. Direct peers are Trace3, Optiv, GuidePoint Security, Qualitest, Cigniti Technologies and Slalom.
Does Merito have an API?
No public API is recorded for Merito.
What industry is Merito in?
Merito's product category is Enterprise Application Quality and Security Services. Its primary akta.pro industry code is BPAEAGAO, Enterprise Application License Advisory, Vendor Management & Optimization, with a secondary code of BPAEAOAC, Software License Resale & Optimization (Perpetual/Subscription). Its NAICS code is 54151 and its SIC code is 7370.