What Cirrus Cybersecurity does

Cirrus Cybersecurity Group is a Houston, Texas-based cybersecurity consulting and advisory firm founded in 2006 by Andrew Brorsen. The firm specializes in Identity Security — covering Identity Governance and Administration (IGA), Identity and Access Management (IAM), Privileged Access Management (PAM), Customer Identity and Access Management (CIAM), and Identity Threat Detection and Response (ITDR) — alongside broader security advisory, NIST/CIS-based assessments, and managed security operations services (incident response, vulnerability scanning, penetration testing, awareness training). Its client base spans Fortune 500 corporations, large private enterprises, and mid-market businesses across Healthcare, Financial Services, Energy, Manufacturing, and Fintech verticals.

The firm does not develop proprietary Identity Security software. Instead, it implements and manages solutions from leading technology partners — SailPoint, Saviynt, Okta, Microsoft Entra ID, CyberArk, Delinea, Ping Identity, ForgeRock, Tenable, and SecZetta — under a proprietary QuickStart delivery methodology designed for phased, time-to-value-oriented rollouts. Service delivery is led by a bench of former CISOs, Auditors, and CPAs, including Senior Director of Security Advisory Paul de Graaff (former CISO at AIG and DTCC). In February 2023, Cirrus announced a strategic alliance with Strategic Security Solutions (S3), creating a combined consortium of more than 70 practitioners across GRC, SAP Security, IAM, and Data Security.

Cirrus's revenue model is professional services-based across three pillars: Advisory (including interim/virtual CISO engagements and security program roadmaps), Professional Services (Identity Security implementation, project rescue and realignment), and Managed Services (hybrid staff augmentation to full operational support). Pricing is quote-based and not publicly disclosed. Demand generation relies on thought-leadership content (website blog, case studies, downloadable datasheets) and an organic LinkedIn and Twitter presence. In 2023 the firm expanded its go-to-market with dedicated Mid-Market service offerings, and in 2024 added Tim Phillips as Strategic Advisor (July 2024) and Freddy Vaca to the Board of Directors. The company is privately held, founder-controlled, with no disclosed funding rounds.

Name

Cirrus Cybersecurity

Legal name

Cirrus Cybersecurity Group

Website

https://cirruscyber.com

Company type

Private

Founded year

2006

Operating status

Operating

Headcount range

1–10 employees

Short description

Cirrus Cybersecurity Group is a Houston-based cybersecurity consulting firm delivering Identity Security advisory, implementation, and managed services to Fortune 500, enterprise, and mid-market clients across Healthcare, Financial Services, Energy, Manufacturing, and Fintech verticals.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting & Advisory Services

NAICS

Computer Systems Design and Related Services (54151), Custom Computer Programming Services (541511), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Management Services (8741), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Cybersecurity & Identity Consulting (BPAHAEAG)

akta.pro secondary industries

Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF), Governance, Risk & Compliance (GRC) Managed Services (BPAEADAJ), Critical Infrastructure Protection (CIP) & NERC-CIP Compliance (HDADAJAC)

Keywords

• Cybersecurity consulting
• Identity security services
• Privileged access management
• Cybersecurity advisory services
• Security operations management

Headquarters

HQ city

Katy

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Advisory Services: Strategic cybersecurity advisory including interim CISO/CIO resources, security architecture, policy development, and compliance program support. Delivered by former CISOs and CPAs.
2. Professional Services: Implementation and delivery services for Identity Security solutions including SailPoint, Saviynt, Okta, Microsoft, CyberArk, Delinea, Ping Identity, and Tenable. Includes QuickStart delivery methodology for immediate time-to-value.
3. Managed Services: Hybrid staff augmentation to full operational support for all Identity Security solutions. Includes threat management, security operations, training and awareness programs.

Go-to-market motion2 records

Distribution channels2 records

Marketing channels5 records

Core offering

Cirrus Cybersecurity Group is a cybersecurity consulting and advisory firm that delivers strategic, tactical, and operational support for Security and Compliance programs. The firm provides Security Advisory services (including Interim/Virtual CISO, assessments, and roadmap planning), Professional Services for Identity Security implementations (IGA, IAM, PAM, Exposure Management), and Managed Security Services including incident response, vulnerability scanning, endpoint security, penetration testing, and security awareness training. Services are delivered by former CISOs, Auditors, and CPAs and supported through strategic alliances with leading identity security vendors such as SailPoint, Saviynt, Okta, Microsoft, CyberArk, Delinea, Ping Identity, ForgeRock, Tenable, and SecZetta.

Product overview

Cirrus Cybersecurity Group is a leading cybersecurity advisory firm providing clients with strategic, tactical, and operational support for their Security and Compliance programs. The company offers a comprehensive suite of professional services organized into three core pillars: (1) Security Advisory Services - including Cybersecurity Advisory, Assessment, Roadmap Planning, Virtual/Interim CISO support, Security Incident Response, and Disaster Recovery; (2) Identity Security Delivery - encompassing Identity Governance and Administration (IGA), Identity and Access Management (IAM), Privileged Access Management (PAM), and Exposure Management solutions; and (3) Managed Services - providing hybrid staff augmentation to full operational support, including Security Operations Management and Training & Awareness Programs. The firm partners with leading Identity Security solution providers including SailPoint, Saviynt, Okta, Microsoft Entra ID, CyberArk, Delinea, Ping Identity, ForgeRock, Tenable, and SecZetta to deliver implementations and ongoing support for Fortune 500, enterprise-scale private companies, and Mid-Market businesses. Services are delivered by a team of former CISOs, Auditors, and CPAs with over 20 years of industry experience.

Differentiator

Problem solved

Functional benefit

Products and services

• Security Advisory Services Strategic advisory services including Cybersecurity Advisory, Cybersecurity Assessment, Cybersecurity Roadmap Planning, and Virtual/Interim CISO support. Delivered by former CISOs and Auditors who help communicate risk and cost/benefit to senior management supported by technical roadmaps aligned to budget and resource requirements. Includes Interim CISO/CIO resources, Information Security Policy Development, Data Classification Process Design, Security Incident Response Program, and Disaster Recovery planning.
• Identity Security Professional Services Implementation and delivery services for Identity Security solutions including Identity and Access Management (IAM), Identity Governance and Administration (IGA), Privileged Access Management (PAM), and Exposure Management. Delivered using the Cirrus Cyber QuickStart methodology for immediate time-to-value and phased implementation across SailPoint, Saviynt, Okta, Microsoft Entra ID, CyberArk, Delinea, Ping Identity, ForgeRock, Tenable, and SecZetta platforms.
• Managed Security Services Hybrid staff augmentation to full operational support for Identity Security solutions including Security Operations Management, Incident Response and Remediation, Disaster Planning and Recovery, Technical Vulnerability Scanning and Assessments, Endpoint Security, Attack and Penetration Testing, Wireless Security Assessment, Firewall and Network Segmentation, Threat Management, and Cybersecurity Awareness Training.
• Active Directory (AD) Assessment Standalone assessment service to evaluate Active Directory security posture, identify vulnerabilities and gaps, and provide remediation recommendations. Targeted at organizations needing focused AD hygiene and risk evaluation.
• Cybersecurity Assessment with Tenable Standalone cybersecurity assessment using Tenable's vulnerability management platform for risk-based prioritization, continuous monitoring, attack surface management, and compliance management. Designed for organizations needing external validation of their security posture.
• Project Rescue and Realignment Advisory services to realign Identity Security projects to key objectives, budget, and timeline for organizations whose existing implementations are off-track. Includes strategy workshops, risk assessments, policy review/update, and roadmap development.
• Mid-Market Professional Services Comprehensive service offerings for mid-market customers including full lifecycle from Advisory to Delivery to MSP, migration plans for on-prem to cloud-based Identity Security solutions, security solution selection (RFI/RFP, POC, Contract), security program maturity assessment and roadmap, AD/business application clean-up and prep, and addressing risk for external identities.

Quantifiable outcome

• Quarterly Access Certifications reduced from 85 days to 10 business days for 7,000 reviewers
• +3 more outcomes

Named customers7 records

Segments5 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration10 records

Feature6 records

Partnerships

Ten partnerships are on record, tiered core and strategic.

• Strategic Security Solutions (S3)coreStrategic or Co-development Partner · 16 February 2023Strategic alliance to create a consortium of industry leading security experts combining expertise in GRC, SAP Security, IAM solutions including IGA, PAM, CIAM, and DataSecurity. The alliance creates over 70 common resources across multiple pillars focused on customer success and outcome driven Professional Services.
• SailPointcoreTechnology or IntegrationSailPoint is the leading identity governance and administration (IGA) company, providing an AI-powered platform for comprehensive identity security. Cirrus Cyber provides advisory, delivery, and managed services for SailPoint solutions.
• SaviyntcoreTechnology or IntegrationSaviynt is an industry-recognized leader providing a cloud-native converged Identity Platform including Cloud Security, CPAM, IGA, External Identity Management, and Application Access Governance. Cirrus Cyber delivers implementation services for Saviynt.
• OktacoreTechnology or IntegrationOkta is a leader in identity and access management (IAM) providing a cloud-based platform for Single Sign-On (SSO), Multi-Factor Authentication (MFA), Universal Directory integration, and user lifecycle management.
• MicrosoftcoreTechnology or IntegrationMicrosoft Entra ID provides comprehensive Identity Security including IGA, IAM (SSO, MFA, and Conditional Access), and PAM. For customers heavily invested in the Microsoft ecosystem, it offers a closely integrated solution.
• CyberArkcoreTechnology or IntegrationCyberArk is a PAM market leader providing comprehensive privileged account security tools including Password Vaulting, Just-in-Time Privileged Access, Session Monitoring and Recording, and Least Privilege Enforcement.
• DelineacoreTechnology or IntegrationDelinea is a leading provider of PAM solutions built on Zero Trust principles, providing Password Vaulting, Just-in-Time Privileged Access, Session Monitoring and Recording, Elevation Control and Monitoring, and Remote Access Security.
• Ping IdentitycoreTechnology or IntegrationPing and ForgeRock's combined capabilities address Customer IAM (CIAM) and Workforce identity, including fraud and risk protection, identity verification, decentralized identity, fine-grained authorization, lifecycle management and IGA.
• TenablecoreTechnology or IntegrationTenable is a market leader in Exposure Management with focus on Vulnerability Management, risk-based prioritization, continuous monitoring, attack surface management, and compliance management.
• SecZettastrategicStrategic or Co-development PartnerSecZetta is a leading partner for non-employee identity management solutions. Cirrus Cyber creates a line of defense by reviewing business processes necessary to support managing third-party resources and tailors SecZetta for clients to properly track, onboard/offboard, and bring visibility to non-employee populations.

Scale indicators3 records

Recent moves5 records

Expansion highlights5 records

Broad incumbents

• SHI International: Large IT solutions and services provider with a meaningful cybersecurity services practice including identity, IAM/PAM, and managed security offerings. Comparable to Cirrus as a competitor for enterprise identity security implementations, though SHI operates at substantially larger scale and as a broader IT services incumbent.
• Trace3: Large technology consultancy with a significant cybersecurity practice covering advisory, architecture, and managed services. Comparable to Cirrus as a competitor for enterprise identity/security advisory work, though Trace3 operates at significantly greater scale and broader technology breadth.
• Slalom: National consulting firm with a dedicated cybersecurity and identity practice delivering advisory, transformation, and managed services to mid-market and enterprise clients. Comparable to Cirrus in its advisory-led approach and mid-market reach, though broader in scope and geographic footprint.
• Deloitte Cyber Risk Services: Big 4 advisory practice with one of the largest global cybersecurity, identity governance, and IAM/IGA delivery organizations. Comparable to Cirrus in serving Fortune 500 identity security mandates, but with materially larger scale, geographic reach, and breadth of offerings.

Direct peers

• Bishop Fox: Elite offensive-security and cybersecurity advisory firm offering strategic consulting, security assessments, and managed services to Fortune-class enterprises. Comparable to Cirrus in delivering high-touch advisory, framework-based assessments (NIST, CIS), and CISO advisory services.
• NCC Group: Global cybersecurity consulting and managed services firm with deep identity, threat intelligence, and risk advisory practices. Comparable to Cirrus in providing senior-led advisory, identity/IAM consulting, and managed security services to enterprise clients across regulated industries.
• Simeio Solutions: Identity-focused cybersecurity services firm specializing in IAM, IGA, PAM, and CIAM advisory, implementation, and Identity-as-a-Service managed offerings. Directly comparable to Cirrus given shared identity security specialization across the same vendor ecosystem (SailPoint, Saviynt, Okta).
• DirectDefense: Boutique cybersecurity services firm delivering advisory, managed security operations, vulnerability management, and identity/IAM services to enterprise and mid-market clients. Comparable to Cirrus in its three-pillar model (advisory, professional services, managed services) and mid-market expansion focus.
• Optiv Security: Largest pure-play US cybersecurity solutions integrator and advisory firm. Closely comparable to Cirrus because it combines vendor-agnostic advisory, professional services, and managed services across identity, IAM, IGA, and PAM — directly competing for the same enterprise and mid-market identity security engagements.
• Kudelski Security: Cybersecurity advisory, consulting, and managed security services firm serving enterprise and mid-market clients. Comparable to Cirrus in delivering strategic advisory (including virtual CISO), identity/IAM implementations, and managed detection/response services to regulated industries.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/CirrusCyber
• LinkedInlinkedin.com/company/cirrus-cybersecurity-group

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cirrus Cybersecurity