Goliath Cyber Security Group
Goliath Cyber Security Group is a private, veteran-owned cybersecurity advisory firm providing managed security, vCISO advisory, penetration testing, CMMC and regulatory compliance, incident response, and cyber insurance referral services to SMB and SME customers in regulated industries through its unified Goliath 360 platform and partner ecosystem.
- Company typePrivate
- Founded2019
- HeadquartersEstero, United States
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Goliath Cyber Security Group does
Goliath Cyber Security Group, LLC is a private, veteran-owned cybersecurity advisory firm headquartered in Estero, Florida, founded in 2019 (firmographic records also list 2022). The company targets small and mid-sized businesses and enterprises (SMB/SME) in regulated industries, offering managed security services, virtual CISO (vCISO) advisory, penetration testing, compliance readiness (notably CMMC Levels 1–3, HIPAA, GLBA, FFIEC, PCI DSS, SOC 2, ISO 27001), incident response, and cyber insurance referral through its Coverdash partnership.
The company's core technology is the Goliath 360 platform — a unified, AI-powered cybersecurity platform integrating endpoint, cloud (AWS, Azure, GCP), identity, and data security (Microsoft 365 and Google Workspace) with 24x7 managed detection and response (MDR) support. Layered modules include the Trident data and risk management program (vulnerability scanning, data sensitivity scanning, compliance assessment, secure configuration against CIS and DISA STIG benchmarks, dark web monitoring, risk monetization, and Rixon-partnered vaultless tokenization), AI Governance (behavioral policy enforcement and social engineering interception via the Maro cognitive security integration), and incident response services. The 2024 MITRE ATT&CK evaluation reportedly showed 100% protection, detection, and visibility.
Commercially, Goliath operates a sales-led, consultation-based go-to-market using HubSpot scheduling, supported by freemium offers (complimentary dark web scans, cybersecurity workshops, 14-day managed security trial) and a multi-vendor channel/technology partner ecosystem (Ingram Micro, Pax8, Trellix, Cynet, ZeroFOX, TDR, Keeper, AaDya, Coverdash, Maro, Rixon, and others). Revenue is generated through managed services subscriptions, vCISO advisory retainers and hourly engagements, project-based penetration testing and compliance work, subscription-based Trident risk management, and insurance referral commissions. Pricing is not publicly disclosed and requires scoping consultation. The firm is leadership-rich (CEO Dave Ackley, CFO Chris Conti, COO/Partner Andrew Berkuta, CRO Micholas Davis, Head of Executive Cyber Advisory Angelo Longo, plus an advisory and concierge layer) but capital-light, with no disclosed institutional funding or acquisitions.
Goliath Cyber Security Group firmographics
Firmographics- Name
- Goliath Cyber Security Group
- Legal name
- Goliath Cyber Security Group, LLC
- Website
- https://goliathsec.com
- Company type
- Private
- Founded year
- 2019
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Goliath Cyber Security Group is a private, veteran-owned cybersecurity advisory firm providing managed security, vCISO advisory, penetration testing, CMMC and regulatory compliance, incident response, and cyber insurance referral services to SMB and SME customers in regulated industries through its unified Goliath 360 platform and partner ecosystem.
- Ownership category
- akta.pro rank
Goliath Cyber Security Group industry classification
Industry- Product category
- Managed Cybersecurity Services
- NAICS
- Computer Systems Design and Related Services (54151)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Security Operations Center (SOC) as a Service (BPAEADAB)
- akta.pro secondary industries
- Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Vulnerability Management & Penetration Testing Services (BPAEADAD), Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM)
Keywords
Where Goliath Cyber Security Group is headquartered
LocationHeadquarters
- HQ city
- Estero
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Goliath Cyber Security Group business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Others
Revenue model
- Managed Security Services (Goliath 360): Continuous cybersecurity protection services delivered through the Goliath 360 unified platform, providing endpoint, cloud, identity, and data security with 24x7 MDR expert monitoring and support. Revenue generated through recurring service contracts.
- Executive Cyber Advisory / vCISO Services: Virtual CISO and cyber advisory services offered through flexible engagement models including hourly vCISO support, advisory retainers (monthly block of hours), project-based engagements, and hybrid vCISO support. Delivers strategic security leadership at fraction of full-time hire cost.
- Penetration Testing & Security Assessments: Comprehensive penetration testing services including internal/external network, web application, API, mobile app, cloud penetration testing, Active Directory security, PCI DSS assessments, red teaming, OSINT, and purple teaming. Delivered as project-based engagements.
- CMMC & Compliance Services: Cybersecurity Maturity Model Certification (CMMC) readiness assessments, gap analysis, System Security Plan (SSP) development, Plan of Action and Milestones (POA&M) creation, and compliance advisory for HIPAA, PCI DSS, GLBA, SOC 2, ISO 27001, and other frameworks.
- Trident Data & Risk Management Program: Subscription-based unified data risk and compliance program providing vulnerability scanning, data sensitivity scanning, compliance assessment, secure configuration, dark web monitoring, and risk monetization capabilities.
- Cyber Insurance Referral: Partnership with Coverdash to provide cyber insurance products to SMB customers. Revenue through referral/commission structure from insurance placements.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | Goliath 360 Managed Security Services - Enterprise protection platform |
| Subscription | Monthly | vCISO Advisory Retainer - Monthly access to seasoned security leadership |
| Other | Pay-as-you-go | Hourly vCISO Support - Occasional expert advice for specific projects |
| Freemium | Pay-as-you-go | Complimentary Dark/Deep Web Scan |
| Freemium | Pay-as-you-go | Complimentary Cyber Workshop |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels6 records
Goliath Cyber Security Group product offering
Product offeringCore offering
Goliath Cyber Security Group is a cyber advisory firm delivering managed security services, cybersecurity consulting, compliance readiness, and risk management to SMB and SME customers in regulated industries. The company's core product is the unified AI-powered Goliath 360 platform backed by 24x7 Managed Detection and Response (MDR) experts, providing endpoint, cloud, identity, and data security. Supplementary offerings include Executive Cyber Advisory (vCISO) services, penetration testing, incident response, CMMC readiness, and the Trident data and risk management program.
Product overview
Goliath Cyber Security Group offers a unified cybersecurity platform called Goliath 360 as the core product, supplemented by multiple specialized modules and services. The portfolio includes AI Governance (cognitive security agents), Trident (data and risk management), Executive Cyber Advisory Services (vCISO), Penetration Testing & Assessment Services, Incident Response Management, CMMC Readiness Assessment, Cyber Risk & Compliance Services, and Cyber Insurance Services. The company provides free offerings including a 14-day trial, Dark/Deep Web Scan, and Cyber Workshop. The platform integrates with Microsoft 365, Google Workspace, AWS, Azure, GCP, and Maro for cognitive security capabilities.
Differentiator
Problem solved
Functional benefit
Products and services
- Goliath 360 Unified AI-powered cybersecurity platform backed by 24x7 MDR experts, providing complete protection, endpoint security, cloud protection, and data security across networks, servers, applications, and users. Designed for SMB and SME customers in regulated industries.
- AI Governance Program enforcing AI Policy at the behavior level using cognitive security agents that prevent human risk in real time, right where AI decisions are made.
- Trident Data & Risk Management Program Subscription-based cyber risk management and compliance program providing internal/external vulnerability scanning, data sensitivity scanning, compliance assessment, secure configuration assessment, dark web monitoring, and risk monetization across Microsoft 365, Google Workspace, and cloud environments.
- Executive Cyber Advisory Services (vCISO) vCISO program delivering embedded cyber leadership to organizations, helping with strategy, guiding execution, and aligning security and compliance to business outcomes via flexible engagement models (hourly, monthly advisory retainer, project-based, or hybrid).
- Penetration Testing & Security Assessment Services Tailored security assessment engagements including internal/external network, web application, API, mobile app, cloud penetration testing (AWS/Azure/GCP), Active Directory security, PCI DSS assessments, red teaming, OSINT, and purple teaming for organizations needing to validate security posture.
- Incident Response Management Collaborative incident response services handling critical security incidents, conducting analysis to resolve cyberattacks, and implementing long-term solutions to prevent recurrences for organizations facing active breaches.
- CMMC Readiness & Gap Assessment Assessment services helping organizations prepare for Cybersecurity Maturity Model Certification (CMMC) compliance, identifying gaps, creating System Security Plans (SSP), and developing Plans of Action and Milestones (POA&M).
- Cyber Risk & Compliance Services Services that help organizations design, assess, and transform processes, controls, and infrastructure to address specific compliance and regulatory risks across frameworks including HIPAA, GLBA, PCI DSS, SOC 2, ISO 27001, and NIST.
- Cyber Insurance Services Cyber insurance offering delivered through embedded partnership with Coverdash, providing cyber liability policies to SMB customers against digital risks, extortion, crime, breach costs, and business interruption, available across all 50 states.
Quantifiable outcome
- Reduced internal security workload by nearly 40%
- +1 more outcomes
Companies that use Goliath Cyber Security Group
Customer profileNamed customers5 records
Segments3 records
Ideal customer profiles3 records
Goliath Cyber Security Group technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration6 records
AI capability4 records
Feature6 records
Goliath Cyber Security Group partnerships and signals
Strategic signalPartnerships
Eleven partnerships are on record, tiered core and minor.
- MarocorePartnership to integrate Maro's cognitive security platform including behavioral policy engine, social engineering safeguards, and browser-level protection into Goliath's managed security services. The collaboration targets the human attack surface with real-time behavioral controls and AI-powered threat interception, addressing the gap between static cybersecurity policies and actual workforce behavior.
- Rixon TechnologycorePanel discussion partnership on vaultless tokenization and zero data architecture. Panel includes Dr. Georgianna 'George' Shea, Douglas Lambert, Justin Hatcher, Angelo Longo, and Andrew Berkuta discussing AI-accelerated threats, quantum computing risks, and future-proof data protection.
- CoverdashcoreEmbedded insurtech partnership providing cyber insurance products to SMB customers. Coverdash offers competitive cyber liability policies with average customer savings of 25%. Services available across all 50 states with 24/7 customer support.
- Anti-Predator ProjectminorCommunity awareness partnership with 501(c)(3) non-profit combating human trafficking. Goliath Cyber supports community awareness initiatives in Southwest Florida, including building awareness, engaging with victim support organizations, and fundraising activities.
- Ingram MicrocoreTechnology distribution partner in the partner ecosystem logo section.
- TrellixcoreTechnology partner for cybersecurity solutions integration.
- CynetcoreTechnology partner for cybersecurity solutions integration.
- TDR (Threat Detection and Response)coreThreat detection and response technology partner.
- Pax8coreCloud distribution partner for marketplace distribution.
- Four IncminorSystems integration and consulting partner.
- AaDyacorePartnership offering next-generation cybersecurity platform for small and midsize businesses.
Scale indicators3 records
Recent moves6 records
Expansion highlights5 records
Goliath Cyber Security Group competitors and assessment
Company assessmentDirect peers
- Expel: Expel offers transparent, tech-forward MDR and security operations services for mid-market customers — a directly comparable MDR peer with similar SMB/mid-market orientation and a partner ecosystem approach.
- Pondurance: Pondurance delivers MDR, compliance, and advisory services for mid-market and regulated organizations including healthcare and financial services — directly comparable across the MSS + compliance bundle that Goliath sells.
- Huntress: Huntress provides managed detection and response, security awareness training, and SIEM-for-MSPs targeting SMBs and the MSP channel — directly comparable to Goliath's SMB/MSSP focus and Pax8-distributed partner-led GTM motion.
- Arctic Wolf Networks: Arctic Wolf is a leading MDR/security operations provider focused on SMB and mid-market customers with a concierge delivery model — a direct competitor to Goliath 360's managed detection and response offering for the same regulated SMB segment.
- BlueVoyant: BlueVoyant provides MDR, third-party cyber risk management, and compliance services for mid-market and enterprise customers — a broadly comparable competitor across managed security and advisory offerings.
- eSentire: eSentire is a pure-play MDR provider with 24x7 SOC services for mid-market and enterprise customers — directly comparable to Goliath 360's AI-powered MDR platform with human expert support, particularly in regulated industries like financial services and healthcare.
- A-LIGN: A-LIGN is a cybersecurity compliance and advisory firm focused on SOC 2, ISO 27001, HITRUST, CMMC, and PCI DSS for SMB and mid-market — directly comparable to Goliath's compliance advisory (Trident) and CMMC readiness services in the same regulated SMB segment.
- Blackpoint Cyber: Blackpoint Cyber provides MDR and security operations specifically built for MSPs serving SMBs — directly comparable to Goliath's stated CISO-of-National-MSP customer and its focus on enabling MSPs and MSSPs with managed security.
Broad incumbents
- Sophos (Managed Detection and Response): Sophos offers a broad portfolio of endpoint, network, and managed detection and response services for SMB and mid-market — an incumbent vendor with overlapping SMB MDR and channel-led GTM that competes with Goliath 360.
- CrowdStrike (Falcon Complete MDR): CrowdStrike's Falcon Complete offering is a native vendor-managed MDR service delivered atop the Falcon platform — a much larger incumbent competing for the same SMB/Mid-market MDR wallet and capable of bundling endpoint, identity, and cloud protection into a single SKU.
Market position
Strengths5 records
Weaknesses4 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
Goliath Cyber Security Group social profiles
Digital presenceGoliath Cyber Security Group compliance and trust
Trust signalCompliance11 records
Goliath Cyber Security Group financial estimates
Financial estimateRevenue estimate
Valuation estimate
Goliath Cyber Security Group leadership team
Management profileNumber of profiles
Profiles6 records
Goliath Cyber Security Group funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Goliath Cyber Security Group M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Goliath Cyber Security Group
What does Goliath Cyber Security Group do?
Goliath Cyber Security Group is a cyber advisory firm delivering managed security services, cybersecurity consulting, compliance readiness, and risk management to SMB and SME customers in regulated industries. The company's core product is the unified AI-powered Goliath 360 platform backed by 24x7 Managed Detection and Response (MDR) experts, providing endpoint, cloud, identity, and data security. Supplementary offerings include Executive Cyber Advisory (vCISO) services, penetration testing, incident response, CMMC readiness, and the Trident data and risk management program.
Is Goliath Cyber Security Group a public or private company?
Goliath Cyber Security Group is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Goliath Cyber Security Group founded?
Goliath Cyber Security Group was founded in 2019. It employs 11 to 50 people.
Where is Goliath Cyber Security Group based?
Goliath Cyber Security Group is headquartered in Estero, United States, in the North America region.
How does Goliath Cyber Security Group make money?
Six revenue lines are on record. Managed Security Services (Goliath 360) is the primary driver. The others are executive Cyber Advisory / vCISO Services, penetration Testing & Security Assessments, CMMC & Compliance Services, trident Data & Risk Management Program and cyber Insurance Referral.
Who are Goliath Cyber Security Group's main competitors?
Direct peers on record are Expel, Pondurance, Huntress, Arctic Wolf Networks, BlueVoyant, eSentire, A-LIGN and Blackpoint Cyber. Broad incumbents are Sophos (Managed Detection and Response) and CrowdStrike (Falcon Complete MDR).
Does Goliath Cyber Security Group have an API?
No public API is recorded for Goliath Cyber Security Group.
What industry is Goliath Cyber Security Group in?
Goliath Cyber Security Group's product category is Managed Cybersecurity Services. Its primary akta.pro industry code is BPAEADAB, Security Operations Center (SOC) as a Service, with a secondary code of BPAEADAH, Endpoint Security Managed Services (EDR/XDR). Its NAICS code is 54151 and its SIC code is 7370.