What VARS does

VARS Corporation is a Montreal-based managed cybersecurity services provider targeting small and medium enterprises (SMEs) across Canada, with particular concentration in Quebec. The company operates as the dedicated cybersecurity division of Raymond Chabot Grant Thornton (RCGT), one of Quebec's largest professional services firms, and was acquired by RCGT in January 2020. VARS serves more than 1,200 client organizations with a 100% managed, multi-module cybersecurity platform that bundles best-of-breed third-party technologies — Perception Point for email security, Cyolo for zero-trust access control, Terranova Security for awareness training, and CYBERWALL.AI for web application protection — into a single subscription wrapped with 24/7 SOC monitoring, incident response, and an on-demand virtual CISO (vCISO) advisory layer. The company's product portfolio spans managed cybersecurity for SMEs, operational technology (OT/ICS) security, personal information protection with a virtual Chief Privacy Officer (vCPO) for Quebec Law 25 compliance, penetration testing, and 24/7 emergency incident response, all delivered with quote-based subscription pricing and optional monthly billing.

VARS monetizes primarily through recurring managed-service subscriptions, supplemented by vCISO retainers, one-time professional services engagements (penetration testing, compliance projects), and emergency response contracts. Its go-to-market is sales-led and consultative, combining content marketing, a structured six-part webinar series ("Redéfinir la cybersécurité"), direct outreach, and demo-driven conversion. A significant distribution advantage stems from RCGT's 100+ office network across Quebec, Ottawa, and Edmundston and its 2,800+ professionals, who serve as a referral channel into VARS for the parent firm's accounting, tax, and consulting clients. The team — led by co-founder and CEO Guillaume Caron, co-founder and OT Security Leader Maxime Boutin, VP of Data Governance Sébastien Meunier, and consultant James Ferrenburg (formerly U.S. Air Force ICBM program manager and NATO firewall security manager) — collectively holds 18+ industry certifications (CISSP, CCSP, CCISO, CEH, CRISC, CISM, OSCP, OSWP, GIAC, among others), positioning VARS as an enterprise-grade expertise provider accessible to resource-constrained SMEs at a fraction of the cost of in-house security staffing.

Name

VARS

Legal name

VARS Corporation

Website

https://varscorporation.com

Company type

Private

Founded year

2020

Operating status

Operating

Headcount range

11–50 employees

Short description

VARS Corporation is a Montreal-based managed cybersecurity services provider serving more than 1,200 SMEs across Canada as the cybersecurity division of Raymond Chabot Grant Thornton, bundling best-of-breed third-party security technologies with 24/7 SOC monitoring, vCISO advisory, and Quebec Law 25 compliance services.

Ownership category

akta.pro rank

Product category

Managed Cybersecurity Services

NAICS

Computer Systems Design and Related Services (54151), Computer Facilities Management Services (541513), Other Computer Related Services (541519), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)

akta.pro secondary industries

Security Operations Center (SOC) as a Service (BPAEADAB), Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM)

Keywords

• Managed cybersecurity services
• Email security solutions
• Incident response services
• Security awareness training
• Compliance management services

Headquarters

HQ city

Montréal

HQ country

Canada

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed Cybersecurity Services (Subscription): VARS's primary revenue stream is a fully managed cybersecurity-as-a-service offering. Clients subscribe to a customizable, 100% managed solution that bundles multiple security modules (email, endpoint, dark web, OT security, access control, awareness training) under a single subscription. The model includes continuous monitoring, incident response, and expert management, with pricing that varies based on the number of users, selected modules, and organizational size. The company explicitly mentions 'monthly billing available' and 'flexible pricing,' indicating a recurring subscription model with monthly or annual billing cadences.
2. On-Demand CISO (vCISO) Service: Organizations can access the expertise of a Chief Information Security Officer on demand, without hiring a full-time resource. This is offered as a managed professional service, providing strategy, policy oversight, and incident response on a flexible basis. Pricing is likely subscription-based or project-based, varying with the level of service required.
3. Professional Services (Compliance and Advisory): VARS offers professional services including personal information protection (Law 25/Bill 25 compliance), penetration and security testing, and incident response. These are likely one-time or project-based engagements complementing the recurring managed services.
4. 24/7 Cybersecurity Emergency Response: Emergency incident response service available around the clock, deployed in the event of an active cyberattack. This service may be offered as an add-on to existing managed service contracts or as a standalone emergency engagement.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels7 records

Core offering

VARS provides a 100% managed, customizable cybersecurity platform for small and medium-sized enterprises that integrates best-of-breed third-party technologies (Perception Point email security, Cyolo zero-trust access, Terranova Security awareness training, CYBERWALL.AI web protection) with human expert management, 24/7 SOC monitoring, and a personalized monthly security report. Its portfolio extends to on-demand CISO (vCISO) leadership, operational technology (OT/ICS) security, Quebec Law 25 personal information protection, penetration testing, secure data transfer, dark web monitoring, and 24/7 emergency incident response, all delivered as subscription-based managed services.

Product overview

VARS is a managed cybersecurity services provider, operating as the cybersecurity division of Raymond Chabot Grant Thornton. Its portfolio centers on a unified integrated cybersecurity solution for SMEs that bundles multiple security modules — including dark web monitoring, advanced email security (powered by Perception Point), endpoint surveillance and protection, and employee awareness training (powered by Terranova Security and Fortra) — under a single fully managed service with 24/7 SOC monitoring. The core offering is complemented by standalone services: On-Demand CISO (vCISO) for virtual security leadership, penetration and security testing, 24/7 incident emergency response, managed IT services, operational technology (OT) security, and personal information protection with a virtual Chief Privacy Officer (vCPO) powered by tools including Metatracer, RoPA, and LMS for Quebec Law 25 and GDPR compliance. Additional integrated modules include zero-trust role-based access control (powered by Cyolo), secure data transfer, and CYBERWALL.AI for web application and API protection. All services are backed by VARS's 24/7 Security Operations Center and include a unique monthly security report.

Differentiator

Problem solved

Functional benefit

Brands

• VARS Security Operations Center (SOC): A dedicated team for monitoring, detecting, and responding to cyberthreats in real time, providing 24/7 protection services.
• vCISO (Virtual Chief Information Security Officer)

Products and services

• Integrated Cybersecurity Solution for SMEs A fully managed, customizable cybersecurity platform for small and medium-sized enterprises that combines dark web monitoring, advanced email security, endpoint surveillance, and security awareness training under a single 24/7 expert-monitored solution.
• On-Demand CISO (vCISO) Virtual Chief Information Security Officer service providing experienced security leadership that designs security strategies, oversees cybersecurity policies, conducts risk assessments, and responds to incidents on a flexible, as-needed basis without the cost of a full-time hire.
• Penetration and Security Testing Offensive security services that identify and remediate vulnerabilities before exploitation, including penetration testing, security assessments, and tailored security testing to strengthen defenses and protect critical assets.
• 24/7 Cybersecurity Emergency Response Round-the-clock incident response service that deploys advanced cybersecurity solutions rapidly to contain threats, minimize damage, and restore operations for organizations experiencing active cyberattacks.
• Managed IT Services Managed information technology services providing ongoing IT support and guidance alongside cybersecurity to address immediate and long-term technology needs for modern businesses.
• Operational Technology (OT) Security Specialty security solutions that protect industrial systems and software used to monitor, control, and manage processes and operations across an organization, addressing cyber threats targeting OT/ICS environments in critical infrastructure sectors.
• Personal Information Protection (vCPO) Turnkey solution for implementing an information governance and personal data protection program, including a virtual Chief Privacy Officer (vCPO) service and locally Quebec-hosted compliance tools (Metatracer, RoPA, LMS) to achieve compliance with Quebec's Law 25, GDPR, and other privacy regulations.
• Advanced Email Security Fully managed AI-powered email security platform powered by Perception Point that uses dynamic analysis and anti-evasion patented technology to block spam, phishing, BEC, malware, account takeover, and zero-day threats before they reach Microsoft 365, Google Workspace, or any email environment.
• Employee Awareness and Prevention (Phishing Simulation) Fully managed cybersecurity awareness and phishing simulation program leveraging the Terranova Security platform that provides customizable training content, realistic phishing simulations, monthly campaigns, expert advice available 24/7, and comprehensive reporting to build a strong security culture.
• Role-Based Access Control (Zero Trust) Zero-trust access control solution powered by Cyolo providing identity-based access with continuous authentication, granular authorizations, end-to-end encryption, real-time monitoring, session recording, comprehensive access logs, and agile deployment for cloud, on-premises, or hybrid environments.
• CYBERWALL.AI (Web Application and API Protection) Fully managed AI-powered web application and API protection providing real-time advanced threat protection including web application firewall, DDoS protection, bot protection, and advanced threat mitigation to secure web applications at the source.

Quantifiable outcome

• 99.95% email threat detection rate with sub-15-second average threat interception (Perception Point-powered email security)
• +6 more outcomes

Named customers4 records

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration11 records

AI capability6 records

Feature8 records

Partnerships

Five partnerships are on record, tiered core and minor.

• Raymond Chabot Grant Thornton (RCGT)coreStrategic or Co-development Partner · 28 January 2020VARS is a cybersecurity division fully owned and acquired by Raymond Chabot Grant Thornton in January 2020. RCGT is one of Quebec's largest professional services firms with 100+ offices across Quebec and additional offices in Ottawa and Edmundston, employing 2,800+ professionals. VARS operates as an integrated division of RCGT, benefiting from the parent company's brand, client relationships, and distribution network across accounting, tax, consulting, and advisory services. The partnership is integral to VARS's market positioning and go-to-market motion in the Quebec and Canadian market.
• Terranova SecuritycoreTechnology or IntegrationTerranova Security is the platform provider for VARS's employee cybersecurity awareness and phishing simulation program. VARS resells and manages Terranova's platform, which offers monthly phishing simulations based on real-world threats, customizable training modules, quizzes, eLearning content, and a 24/7 expert desk. The platform is hosted by Terranova and integrated into VARS's managed security offering.
• Perception PointcoreTechnology or IntegrationPerception Point provides VARS's advanced email security platform, powered by AI and proprietary anti-evasion technology. The solution delivers 100% dynamic analysis of email traffic, 99.95% detection rate, and sub-15-second threat interception. VARS integrates Perception Point into its managed security service, providing 24/7 management, incident response, and customer support as the fully managed wrapper around Perception Point's technology.
• CyolocoreTechnology or IntegrationCyolo provides VARS's zero-trust access control platform, which VARS integrates into its managed cybersecurity solution. Cyolo's technology enables identity-based access control, continuous authentication, end-to-end encryption, granular permissions, and real-time session monitoring for cloud, on-premise, and hybrid environments. VARS wraps Cyolo's technology with its managed service layer.
• CYBERDEFENSE AI inc.minorStrategic or Co-development PartnerCYBERDEFENSE AI inc. is referenced in a webinar co-presentation with VARS on automated web cybersecurity (CYBERWALL.AI solution). Mickael Nadeau, Founder and CTO of CYBERDEFENSE AI inc., co-presented with VARS's expert Alexandre Blanc, suggesting a co-development or co-marketing partnership for the CYBERWALL.AI solution.

Scale indicators3 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Herjavec Group: Canadian cybersecurity services firm founded by Shark Tank's Robert Herjavec, specializing in managed security services, SOC operations, and incident response for enterprises and mid-market organizations. Directly comparable to VARS in the Canadian MSSP market with greater brand recognition.
• eSentire: Canadian-headquartered (Waterloo, Ontario) MDR/MSSP provider offering 24/7 SOC, managed detection and response, and cybersecurity services to mid-market organizations. Direct competitor to VARS in the Canadian managed cybersecurity market, with broader scale and geographic reach.
• ISA Cybersecurity: Canadian MSSP providing managed security services, compliance support, and cybersecurity advisory to SMBs and mid-market organizations across Canada. Strong overlap with VARS in targeting Quebec and broader Canadian SMEs with bundled managed security offerings.
• Cytelligence: Canadian cybersecurity firm specializing in incident response, digital forensics, and managed security services. Comparable to VARS in offering 24/7 cybersecurity emergency response and managed cybersecurity services with a Canadian operating footprint.
• GoSecure: Canadian MSSP with North American operations providing managed detection and response, security operations, and professional security services. Comparable to VARS as a regional managed cybersecurity services competitor targeting mid-market customers.

Broad incumbents

• Secureworks: Global MSSP and MDR provider serving mid-market and enterprise customers with managed security, threat intelligence, and compliance services. Overlaps with VARS in the SOC and managed detection market but operates at significantly larger scale across more geographies.
• Trustwave: Global cybersecurity company offering managed security services, MDR, database security, and consulting. Larger incumbent competing with VARS in the MSSP market, particularly for mid-market clients seeking fully managed cybersecurity services.
• Rapid7: Public cybersecurity vendor offering MDR services, security analytics, and managed detection and response. Overlaps with VARS in the managed SOC category, though at significantly larger scale and with proprietary SIEM/analytics platforms.
• Arctic Wolf: Large North American MDR/MSSP offering 24/7 SOC-as-a-service with security operations platform. Competes with VARS for SME and mid-market managed security deals, with much larger scale, broader geographic coverage, and significant growth investment.
• OpenText (Scalar Security): Scalar Decisions/now part of OpenText, a major Canadian IT security services and solutions provider with strong enterprise footprint. Comparable to VARS in the Canadian market for cybersecurity professional and managed services, with far greater scale and broader portfolio.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xtwitter.com/varscorportation
• LinkedInlinkedin.com/company/vars-corporation

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about VARS