What Lodestone does

Lodestone is a cybersecurity consulting and managed services firm that operates as the security services arm of Beazley plc, a publicly traded specialty insurer, under the Beazley Security brand. Originally founded in 1999, the business now delivers a full cyber-lifecycle service portfolio organized into five solution areas — Prepare, Implement, Defend, Respond, and Manage Risk — serving enterprise clients concentrated in healthcare, education, financial services, and retail, as well as Beazley's own cyber insurance policyholders (the "Beazley Insured" segment). Core offerings include Managed XDR (MXDR), incident response and ransomware recovery, Exposure Management, Virtual CISO, penetration testing, purple team and tabletop exercises, vulnerability assessments, third-party risk monitoring, and cloud security advisory across M365, GCP, and AWS.

The technology stack pairs delivered services with proprietary platforms: the VERACIS client portal for engagement access, a managed detection-and-response capability, an Exposure Management product for preemptive risk visibility, and Beazley Risk Management Offerings (RMO) that translate the parent's underwriting and claims history into evidence-based security investment recommendations. The company positions its differentiation around a data advantage — more than two decades of cyber underwriting and claims data — and operational scale, citing teams that handle dozens of cyber security events daily.

Commercially, the business runs a sales-led, B2B motion targeting enterprise buyers through direct field sales and through Beazley's insurance distribution, which routes policyholders toward complementary security services. Revenue is generated through managed services and professional services under both project-based and retainer models; pricing is not publicly disclosed and is quote-based, with multi-year contract cadence. No standalone revenue, headcount, or funding figures for the security unit are disclosed in the source data.

Name

Lodestone

Legal name

Beazley Security

Website

https://lodestone.com

Company type

Private

Founded year

1999

Operating status

Operating

Headcount range

1–10 employees

Short description

Cybersecurity consulting and managed services firm operating as Beazley plc's security arm (Beazley Security). It delivers MXDR, incident response, exposure management, and vCISO services to enterprise clients in healthcare, education, financial services, retail, and Beazley cyber-insurance policyholders.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Other Computer Related Services (541519)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Governance, Risk & Compliance (GRC) Managed Services (BPAEADAJ)

akta.pro secondary industries

Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH), Business Continuity, Crisis Management & Resilience Planning (BPAKADAI)

Keywords

• Cybersecurity consulting
• Managed detection response
• Incident response services
• Vulnerability assessment
• Risk management services

Headquarters

HQ city

Lewisville

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Others

Revenue model

1. Cybersecurity Services Revenue: Beazley Security generates revenue through cybersecurity consulting, managed services, incident response, and risk management engagements. The company offers both project-based and retainer-based service models, with services spanning prepare, implement, defend, respond, and manage risk phases of the cybersecurity lifecycle.
2. Insurance-Adjacent Services: As a subsidiary of Beazley plc (a specialty insurance company), Beazley Security provides services that complement cyber insurance offerings, helping clients maximize insurability and optimize insurance protections in the event of a cyber event.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels6 records

Core offering

Lodestone provides cybersecurity consulting and managed security services across the pre-breach to remediation lifecycle. Offerings span preparation (IR planning, tabletop exercises, virtual CISO), implementation (penetration testing, vulnerability assessments, purple team exercises), defense (Managed XDR), response (incident response), and risk management (exposure management, third-party risk monitoring, Beazley Risk Management Offerings). Services are delivered through managed service and consulting engagement models for enterprise clients.

Product overview

Beazley Security offers a comprehensive cybersecurity services portfolio spanning five core solution areas: Prepare, Implement, Defend, Respond, and Manage Risk. The offering includes managed services (Managed XDR), advisory services (Virtual CISO, Cloud Security Advisory), assessments (Penetration Testing, Vulnerability Assessment, Purple Team Exercises, Security Posture Testing), preparedness services (IR Planning, Tabletop Exercises, Ransomware Readiness Assessment), and risk management offerings (Third-Party Risk Monitoring, Risk Management Offerings). The platform also includes a client portal (VERACIS) and produces threat intelligence content (Quarterly Threat Reports, Alerts & Advisories, Insights blog). A notable recent addition is Exposure Management, a product delivering visibility and personalized insights for preemptive threat mitigation.

Differentiator

Problem solved

Functional benefit

Products and services

• Managed XDR (MXDR) Managed Extended Detection and Response service providing advanced visibility capabilities to identify and contain threats for enterprise security operations.
• Exposure Management Product delivering visibility and personalized insights to help preempt attacks before they start, combating accelerating risks for enterprise clients.
• Virtual CISO Virtual Chief Information Security Officer service providing executive-level strategic security leadership for organizations needing CISO expertise on a flexible basis.
• Penetration Testing Security testing service to identify vulnerabilities in systems and applications for organizations seeking to validate their defensive posture.
• Vulnerability Assessment Assessment service to identify and evaluate vulnerabilities in systems, supporting risk-based prioritization of remediation.
• Cloud Security Advisory Advisory service covering cloud security for M365, GCP, and AWS environments, supporting cloud migration and posture hardening.
• IR Planning & Playbook Development Incident response planning and playbook development services that prepare organizations to respond to cyber incidents.
• Tabletop Exercises Executive workshop exercises designed to test organizational preparedness for security incidents.
• Ransomware Readiness Assessment Assessment service evaluating organizational readiness against ransomware threats.
• Beazley Risk Management Offerings Risk management services leveraging nearly two decades of underwriting and claims experience to provide fact-based cyber security investment recommendations.
• Third-Party Risk Monitoring Continuous visibility service into the external security posture of vendors, delivered through the TPRM program.
• VERACIS Client Portal Online portal providing account access for clients to engage with cybersecurity services and manage their engagements.

Quantifiable outcome

• Exploited vulnerabilities jump 43% in Q1 as cyber criminals leverage AI for more effective attacks

Named customers5 records

Segments5 records

Ideal customer profiles5 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

One partnership is on record.

• Beazley plccoreStrategic or Co-development PartnerBeazley Security is a wholly owned subsidiary of Beazley plc, providing cyber security services. Beazley plc is a specialty insurance company, and Beazley Security operates as its cybersecurity services arm, with shared customer information between entities to support complementary insurance and security services.

Scale indicators3 records

Recent moves5 records

Expansion highlights4 records

Broad incumbents

• Secureworks: Established MSSP and MDR provider (owned by Dell Technologies) offering Taegis XDR and broad managed security services — overlapping customer base and service portfolio but operating at greater scale.
• CrowdStrike (Falcon Complete): Endpoint security leader whose Falcon Complete managed offering competes with MDR/XDR services — larger scale and broader product portfolio but overlapping enterprise customer base.
• Sophos Managed Detection and Response: Endpoint-centric incumbent offering Sophos MDR as part of a broader security product portfolio — directly comparable managed service offering but bundled within a much larger vendor ecosystem.
• Aon (Stroz Friedberg / Cyber Solutions): Insurance-linked cybersecurity services business under a global brokerage — directly comparable in the insurance-security integration thesis and overlapping enterprise client base.

Direct peers

• Trustwave: Established MSSP and MDR provider offering managed detection, incident response, and cybersecurity consulting across similar verticals (financial services, retail, healthcare) — a directly comparable services peer.
• Arctic Wolf: Leading pure-play MDR/MSSP offering 24x7 managed detection and response, vulnerability management, and security awareness — directly competing for the same enterprise and mid-market security services engagements.
• Expel: Transparent, transparency-first MDR provider delivering managed detection and response, cloud security, and phishing protection — competing directly in the same enterprise segment with similar service packaging.
• eSentire: Pure-play MDR and managed security services provider competing head-to-head in XDR, incident response, and vCISO offerings, particularly across financial services and healthcare verticals.
• ReliaQuest: Enterprise-focused MDR and security operations provider with a proprietary GreyMatter platform — comparable in target customer profile, XDR delivery model, and full-lifecycle service approach.

Emerging players

• Pondurance: Mid-market-focused MDR and incident response provider with strong regulated-vertical exposure — comparable in offering but smaller in scale and geographic reach.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• Facebookfacebook.com/LodestoneTraining
• LinkedInlinkedin.com/company/lodestone

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Lodestone