Carson & Saint

What Carson & Saint does

Carson & Saint, legally Richard S. Carson & Associates, Inc. (operating as Carson & SAINT or Carson & Saint), is a privately held US cybersecurity firm founded in 1998 and headquartered in Rockville, Maryland. The company develops and sells the SAINT Security Suite, an integrated vulnerability management platform that combines scanning, risk assessment, compliance validation, and penetration testing capabilities, alongside specialized modules such as SAINT Risk Navigator (vulnerability risk management), SAINT OTM (open threat management), SAINT VM (vulnerability management), SAINTScanner, SAINT ASV (PCI DSS Approved Scanning Vendor services), and SAINT for AWS. The firm also delivers complementary professional services including security and risk assessments, penetration testing, third-party vendor risk and supply chain risk management, regulatory compliance advisory (PCI DSS, HIPAA, SOC 2), vCISO services, cloud security, security engineering, and incident response, plus both online and in-person SAINT training.

The business operates a direct enterprise sales model with quote-based pricing, "Talk with an Expert" and "Request a Demo" conversion paths, a customer portal (my.saintcorporation.com), a planned e-commerce storefront, and channel distribution through MSPs and MSSPs. Revenue is generated through software licenses and subscriptions (perpetual and recurring), professional services (assessments, penetration testing, vCISO advisory, incident response), training, and managed security services under AWS Level 1 MSSP status. The customer base spans federal agencies (including a federal energy agency FISMA engagement), credit unions and financial institutions (such as Jovia Financial Credit Union), healthcare, education, retail, and technology firms, with particular emphasis on regulated industries requiring FISMA, HIPAA, PCI DSS, and CIS benchmark compliance. Key ecosystem relationships include AWS (Level 1 MSSP and Public Sector Partner Program), Cisco (ISE compatibility certification), IBM (integration partnership), and Montgomery College (cybersecurity workforce development).

Name

Carson & Saint

Legal name

Richard S. Carson & Associates, Inc.

Website

https://carson-saint.com

Company type

Private

Founded year

1998

Operating status

Operating

Headcount range

51–100 employees

Short description

Carson & Saint is a Rockville, Maryland-based cybersecurity firm founded in 1998 that develops the SAINT Security Suite vulnerability management platform and delivers penetration testing, compliance, and managed security services to federal agencies, financial institutions, healthcare, education, retail, and channel partners.

Ownership category

akta.pro rank

Product category

Vulnerability Management Software

NAICS

Software Publishers (513210), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)

SIC

Services-Prepackaged Software (7372)

akta.pro industry

PRIMARYBPAEACAG

Cloud Security & Compliance Services

Business & Public Services/IT & Digital Services (Managed Services, Systems Integration)/Cloud Services & Cloud Migration

SECONDARYHDADADAI

SaaS Security Posture Management (SSPM)

Hardware, Technology & Telecom/Cybersecurity/Cloud Security (CNAPP, CSPM, CWPP)

SECONDARYHLACAJAG

Cloud Security (CSPM/CWPP/CIEM) for Health IT

Healthcare & Life Sciences/Digital Health & Health IT/Healthcare Cybersecurity, Identity & Privacy

Keywords

• Vulnerability management software
• Cybersecurity risk assessment
• Penetration testing services
• PCI DSS compliance scanning
• Managed security services

Headquarters

HQ city

Columbia

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Software Licenses and Subscriptions: Sale of SAINT Security Suite software licenses and subscriptions for vulnerability management, scanning, and security assessment tools. Includes perpetual license options and subscription-based access to platform updates and cloud services.
2. Professional Services: Cybersecurity consulting services including risk assessments, penetration testing, security engineering, incident response, vCISO services, and regulatory compliance advisory. Delivered as part-time guidance, project-based support, or ongoing consultation.
3. Training Services: Direct training for SAINT software, offered both online and in-person, including cybersecurity awareness and education programs for organizations
4. Managed Security Services: AWS Level 1 Managed Security Service Provider (MSSP) services with specialties in Modern Compute and Digital Forensics & Incident Response

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels6 records

Core offering

Carson & SAINT sells the SAINT Security Suite, an integrated vulnerability management, penetration testing, and compliance scanning platform, delivered as licensed software and cloud subscriptions. The company also provides professional cybersecurity services including risk assessments, penetration testing, regulatory compliance advisory, vCISO services, incident response, and SAINT software training for enterprise, government, healthcare, financial, education, MSP/MSSP, and retail buyers.

Product overview

Carson & SAINT offers a platform-plus-services cybersecurity portfolio built around the SAINT Security Suite as the core integrated platform, supplemented by specialized add-on modules (SAINT Risk Navigator, SAINT OTM, SAINT VM, SAINTScanner, SAINT ASV, SAINT for AWS) and professional services (Cybersecurity Risk Management, Regulatory Compliance, Cybersecurity Advisory, Vulnerability Management, and Training). The platform enables vulnerability management, risk assessment, penetration testing, and PCI compliance scanning across hybrid environments including AWS cloud infrastructure.

Differentiator

Problem solved

Functional benefit

Brands

• SAINT Security Suite: Complete integrated security software suite providing vulnerability management, scanning, and risk assessment capabilities.
• SAINT Risk Navigator
• SAINT OTM
• SAINT VM
• SAINTScanner
• SAINT ASV
• SAINTcloud

Products and services

• SAINT Security Suite Complete integrated security software suite providing vulnerability management, risk assessment, compliance scanning, and penetration testing capabilities for enterprise and public-sector environments.
• SAINT Risk Navigator

Quantifiable outcome

• 88% Business Value Created rating from customers (SoftwareReviews Vulnerability Management Data Quadrant 2026)
• +3 more outcomes

Named customers5 records

Segments6 records

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability4 records

Feature9 records

Partnerships

Six partnerships are on record, tiered core and minor.

• Amazon Web Services (AWS)coreTechnology or Integration · 12 October 2018Carson & SAINT has partnered with AWS to secure important platforms including AWS WAF, GuardDuty, Control Tower, CloudTrail, and container deployment environments. The company is an AWS Level 1 Managed Security Service Provider (MSSP) with specialties in Modern Compute and Digital Forensics & Incident Response. SAINT for AWS provides vulnerability scanning and security assessment capabilities specifically for AWS environments.
• CiscominorStrategic or Co-development Partner · 21 February 2018SAINT Corporation contributed to Cisco's 2018 Annual Cybersecurity Report, providing vulnerability management insights and threat intelligence for the annual industry report.
• Lazarus Alliances IncminorChannel Partner/ Reseller/ Distributor · 1 January 2018Strategic partner Lazarus Alliances Inc has seen early returns with SAINT Corporation products, representing a successful channel partnership for MSP and MSSP distribution.
• Amazon Partner Network (APN)minorChannel Partner/ Reseller/ Distributor · 21 November 2016SAINT Corporation completed program requirements to become a member of the Amazon Partner Network (APN), enabling distribution and resale relationships within the AWS partner ecosystem.
• Montgomery CollegeminorStrategic or Co-development Partner · 18 May 2016SAINT partnered with Montgomery College on cybersecurity tools and training, providing software to the school's new cybersecurity lab to support education and workforce development in the cybersecurity field.
• CiscocoreTechnology or Integration · 5 February 2016SAINT Corporation achieved Cisco compatibility certification with Cisco Identity Service Engine (ISE) version 4.x through the Cisco Solution Partner Program. The partnership enables customers to visualize risks discovered by SAINT Security Suite, mitigate threat exposures, and enhance incident response processes. SAINT Security Suite facilitates incident response and risk mitigation by providing remediation tutorial guidance and interoperating with Cisco's ISE to quarantine at-risk assets.

Scale indicators4 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Rapid7: Rapid7's InsightVM and InsightConnect compete directly with SAINT in vulnerability management and security orchestration. Both target mid-market and enterprise with combined platform plus services offerings.
• Tenable: Tenable is the market-leading vulnerability management vendor (Nessus, Tenable.sc, Tenable One). It directly competes with SAINT Security Suite in enterprise VM, with comparable coverage of on-premises and cloud environments.
• Qualys: Qualys offers the Qualys VMDR platform spanning vulnerability management, detection, and response across cloud and on-prem. It is a direct competitor to SAINT with similar PCI ASV scanning capabilities and enterprise footprint.
• BeyondTrust: BeyondTrust provides vulnerability and privileged access management, competing with SAINT in vulnerability assessment while extending into adjacent identity security — overlapping in enterprise security stacks.

Emerging players

• F-Secure (WithSecure): WithSecure (formerly F-Secure corporate) provides vulnerability management and managed detection services, comparable to Carson & SAINT's combined platform and MSSP offering, with overlap in mid-market European and US accounts.
• Arctic Wolf: Arctic Wolf is a fast-growing managed detection and response provider that increasingly bundles vulnerability management into its security operations platform — comparable to Carson & SAINT's MSSP and VM convergence.
• Nucleus Security: Nucleus Security offers a modern vulnerability management platform focused on automation and integration. As a smaller, more agile competitor, it overlaps with SAINT's mid-market VM positioning and API-driven approach.

Broad incumbents

• Secureworks: Secureworks provides managed security services and Taegis XDR, overlapping with Carson & SAINT's managed security services and vulnerability management capabilities, particularly for enterprise and mid-market customers.
• Trustwave: Trustwave is a large MSSP offering managed vulnerability management, penetration testing, and advisory services — directly comparable to Carson & SAINT's professional services portfolio but at significantly greater scale.
• Optiv: Optiv is a large cybersecurity solutions integrator and services provider. It overlaps with Carson & SAINT in advisory, risk management, and vulnerability management services for enterprise customers.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Carson & Saint