CloudeAssurance

What CloudeAssurance does

CloudeAssurance (legal entity: EFORTRESSES; previously operating as eFortresses) is an Atlanta-based provider of Cyber Security Rating Services (SRS) for cloud service providers and enterprise cloud consumers. Founded in 2011–2012 by serial entrepreneur Taiye Lambo — former first CISO of the City of Atlanta and Director of Cybersecurity Strategy at the Federal Reserve Bank of Atlanta — the company maintains a proprietary database covering 10,000+ SaaS applications across AWS, Microsoft Azure, Google Cloud Platform, and IBM SoftLayer, producing both Provisional Scores (based on public information review) and Validated Scores (based on independent onsite assessments by HISPI Qualified CAAP Assessors). The platform spans four product lines: Cloud Security Management, Vendor Assurance (supporting 20+ standards), Cloud Assurance, and Consumer Assurance, supplemented by the BlackCloudRx cross-platform mobile app, an integrated Learning Management System offering HISP/NIST CSF/ISO 9001 certification training with up to 95 CPEs, and a RESTful Ratings API.

The business model is multi-stream SaaS subscription: direct enterprise subscriptions starting at $2,000/year (Cloud Assurance Trusted Advisor), metered API access from $5,000/year, mobile app subscriptions, and training course bundles (90-day, 1-year, 2-year tiers). Distribution combines self-serve SaaS sign-up, authorized resellers (Gameplan Group in UK, Comercio in Nigeria), strategic partners (SGS as global validation partner, NetDiligence for cyber insurance integration, SAWTST for DoD white-label, Rausch Advisory for enterprise risk, HISP Institute for certification oversight), and an enterprise field sales motion targeting Global 1000/Fortune 500 buyers. The company has earned Gartner Cool Vendor recognition (2013) and Hype Cycle features (2016, 2017), and was accepted into Plug and Play's Cybersecurity Accelerator in 2018.

Despite a 12+ year history and meaningful enterprise brand recognition, the company operates with only 1–10 employees, has raised disclosed capital of just $1M (May 2014), and operates in a Security Rating Services category now dominated by well-capitalized competitors such as SecurityScorecard and BitSight. This positions CloudeAssurance as a niche, founder-led platform with category-defining IP but constrained scaling relative to category leaders.

Name

CloudeAssurance

Legal name

EFORTRESSES

Website

https://cloudeassurance.com

Company type

Private

Founded year

2012

Operating status

Operating

Headcount range

1–10 employees

Short description

CloudeAssurance is an Atlanta-based cloud security rating platform that scores 10,000+ SaaS applications via Provisional and Validated assessments, serving enterprise CISOs, cloud auditors, cyber insurers, and government buyers through SaaS subscriptions, API access, and a partner channel.

Ownership category

akta.pro rank

Product category

Cloud Security Rating Services

NAICS

Software Publishers (513210)

SIC

Services-Prepackaged Software (7372)

akta.pro industry

PRIMARYHDABAHAI

Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC)

Hardware, Technology & Telecom/Cloud & Data Center Infrastructure/Cloud Security & Compliance Infrastructure

SECONDARYBPAEACAG

Cloud Security & Compliance Services

Business & Public Services/IT & Digital Services (Managed Services, Systems Integration)/Cloud Services & Cloud Migration

SECONDARYBPAEADAF

Cloud Security Managed Services (CSPM/CWPP/CNAPP)

Business & Public Services/IT & Digital Services (Managed Services, Systems Integration)/Cybersecurity Services (MSSP)

Keywords

• Cloud security ratings
• Vendor risk management
• Cybersecurity scoring
• Governance risk compliance
• Cloud assurance platform

Headquarters

HQ city

Atlanta

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Infrastructure, Personnel, Marketing or Sales, Operations

Revenue model

1. SaaS Platform Subscription: Annual subscription to the CloudeAssurance platform providing access to Cyber Security Rating Service, continuous monitoring, and scoring. Subscription options starting at $2,000 per year for Cloud Assurance Trusted Advisor access.
2. API Access: Metered API access enabling Enterprise CIOs/CROs/CISOs/CFOs, CASBs, MSSPs, GRC Platforms, and Cyber Insurers to consume the SRS database programmatically. Available under SaaS subscription for as little as $5K per year on a metered basis.
3. Mobile App Subscription: BlackCloudRx mobile app subscription with 1-year subscription code enabling real-time alerts and monitoring of cloud services. Subscription fee covers database maintenance and infrastructure.
4. Training and Certification Courses: Online training courses integrated with LMS offering HISPI, NIST CSF, and ISO 9001 certification preparation. Available in 90-day, 1-year, and 2-year access tiers providing up to 95 CPEs.

Pricing tiers

Go-to-market motion3 records

Distribution channels6 records

Marketing channels6 records

Core offering

CloudeAssurance is a cloud-based SaaS Cyber Security Rating Service (SRS) platform that delivers risk-intelligent rating, continuous education, and continuous monitoring of cloud service provider security and governance, risk, and compliance (GRC). Its portfolio covers Cloud Security Management, Vendor Assurance, Cloud Assurance, and Consumer Assurance services, powered by proprietary Provisional and Validated scoring algorithms across 10,000+ SaaS applications on AWS, Azure, Google Cloud, and IBM SoftLayer.

Product overview

CloudeAssurance is a cloud security management platform offering a unified portfolio of risk-intelligent rating, continuous education, and continuous monitoring services. The core products include Cloud Security Management, Vendor Assurance, Cloud Assurance, and Consumer Assurance, all powered by the Cyber Security Rating Service (SRS) database. The platform's main offerings include BlackCloudRx (a cross-platform mobile app for consumer monitoring), the Ratings API (for programmatic access to security ratings), and the integrated Learning Management System (LMS) for security certification training. Advisory services include Cloud Implementation Trusted Advisor (CITA), Cloud Assurance Trusted Advisor (CATA), and Vendor Assurance Trusted Advisor (VATA). The platform supports 10,000+ SaaS applications and provides both Provisional and Validated security scores through the HISPI-managed Cloud Assurance Assessor Program (CAAP).

Differentiator

Problem solved

Functional benefit

Brands

• BlackCloudRx: A cross-platform Mobile App powered by CloudeAssurance that delivers real time alerts of cloud security ratings, security breaches and class action lawsuits related to cloud services.
• Cloud Assurance Assessor Program (CAAP)
• Ratings API

Products and services

• Cloud Security Management

Quantifiable outcome

• By 2023, at least 99% of cloud security failures will be customer's fault (Gartner)
• +3 more outcomes

Named customers7 records

Segments7 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

Eight partnerships are on record, tiered core.

• SGScoreStrategic or Co-development PartnerSGS is the world's leading inspection, verification, testing and certification company with over 83,515 employees and a network of over 1,650 offices and laboratories around the world. As a strategic partner of CloudeAssurance, SGS is also the first HISPI Qualified Validation Assessment Partner for the HISPI managed Cloud Assurance Assessor Program (CAAP). SGS leverages the largest independent network of consumer product experts to deliver vendor, cloud and consumer assurance globally.
• NetDiligencecoreStrategic or Co-development PartnerNetDiligence is a Cyber Risk Assessment and Data Breach Services company whose services are used by leading insurers including ACE, Arch, Chubb, Zurich, Beazley, Hiscox, Aspen, Brit and Lloyds of London syndicates. Strategic partnership allows NetDiligence to include CloudeAssurance Cloud Security Benchmark Study data (CloudeAssurance Provisional Scores) in Cyber Risk Assessment reports for insurance underwriters and companies seeking Cyber Risk & Privacy Liability Insurance coverage.
• Rausch Advisory ServicescoreStrategic or Co-development PartnerRausch Advisory Services is a professional service firm providing strategic insights and skilled execution to create and maximize shareholder value. As a strategic partner of CloudeAssurance, they leverage the CloudeAssurance platform to deliver cost effective, value added Information Security Enterprise-wide Risk Assessment, Automated Self-Assessments and Third Party Risk Assessments to clients.
• SAWTSTcoreStrategic or Co-development PartnerSAWTST, LLC is a leading global provider of Information Technology Engineering Services and Logistics Support serving US Department of Defense agencies and commercial customers. As a White Label strategic partner of CloudeAssurance, SAWTST leverages its strong government relationships to serve the large growing government market with cloud assurance services.
• Gameplan GroupcoreChannel Partner/ Reseller/ DistributorGameplan is a boutique Consultancy operating within the Technology sector providing specialized services focused on People, Processes and Systems. Gameplan Group is the first UK based authorized reseller for CloudeAssurance, enabling CloudeAssurance to reach the UK enterprise market through localized sales and implementation support.
• Comercio LimitedcoreChannel Partner/ Reseller/ DistributorComercio Limited is an ICT solutions provider based in Lagos, Nigeria with capacity for Infrastructure, Hardware, Solutions, Cyber Security and Cloud services. Clients span Financial Services, Oil & Gas, Telecommunications, Manufacturing, Government, and FMCG. Comercio Group is the first Nigeria based authorized reseller for CloudeAssurance, extending reach into African markets.
• HISP Institute, Inc.coreStrategic or Co-development PartnerHISPI is an independent certification organization established in 2007 promoting a holistic approach to information security program management. HISPI is the oversight body of the Cloud Assurance Assessor Program (CAAP), which provides assurance of qualifications for independent Cloud Assessors. HISPI co-developed the CAAP with CloudeAssurance to provide industry-wide standardization and consistency in validating cloud service provider security and GRC management.
• eFortressescoreStrategic or Co-development PartnereFortresses is a cutting edge security, governance, risk and compliance management solutions company offering unique education and strategic consulting with a mission to prevent data breaches through monitoring CSPs. Named Gartner Cool Vendor in Risk Management and Compliance in 2013. Customers include Global 1000, Fortune 500, Fortune 50 and small to medium sized businesses across North America, Asia, Europe, Middle East and Africa.

Scale indicators5 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• SecurityScorecard: SecurityScorecard is the leading vendor of Security Rating Services, continuously scoring millions of organizations on cyber risk. It is the closest direct competitor to CloudeAssurance's SRS platform, serving enterprise CISOs, third-party risk teams, and cyber insurers via API and portal.
• BitSight: BitSight provides external cybersecurity ratings and third-party risk management used by insurers, enterprises, and governments. It competes head-on with CloudeAssurance on continuous monitoring of cloud and SaaS providers and on integration with underwriting workflows (e.g., BitSight for Insurance).
• UpGuard: UpGuard delivers vendor risk management and security ratings, with continuous monitoring of cloud and SaaS providers. It is a directly comparable peer, offering both a CISO-facing ratings portal and an API/TPRM workflow that overlaps with CloudeAssurance's offering.
• RiskRecon (Mastercard): RiskRecon provides cybersecurity ratings and risk reconnaissance for third-party risk management, now part of Mastercard. It competes directly with CloudeAssurance on continuous cloud and vendor security scoring and on integration into enterprise TPRM and underwriting programs.
• Panorays: Panorays offers automated third-party security risk management combining external attack-surface scoring with questionnaire-based assessments. It is a direct competitor in the vendor assurance and SRS-adjacent space that CloudeAssurance also addresses through Vendor Assurance and CATA.

Emerging players

• Wiz: Wiz is a cloud security posture management (CSPM/CNAPP) platform that provides continuous assessment of cloud workloads across AWS, Azure, GCP, and OCI. While more focused on agentless cloud workload security than ratings, its continuous assessment posture overlaps with CloudeAssurance's CSP scoring mission.
• ProcessUnity: ProcessUnity is a third-party risk management platform that ingests cyber ratings, questionnaires, and continuous monitoring data. It is a comparable peer for the vendor assurance and GRC use cases CloudeAssurance addresses via Vendor Assurance, CATA, and its Ratings API.

Broad incumbents

• Tenable: Tenable is a broad vulnerability management and cloud security platform (Nessus, Tenable Cloud Security). As a large incumbent, it offers overlapping cloud security posture, compliance, and continuous-monitoring capabilities against the same enterprise buyers CloudeAssurance targets.
• Microsoft Defender for Cloud / Secure Score: Microsoft embeds cloud security posture management, compliance scoring (Secure Score), and continuous controls monitoring into Defender for Cloud and Azure. As a hyperscaler incumbent, it competes with CloudeAssurance's Validated/Provisional scoring by offering native, bundled posture ratings.
• AWS Audit Manager / Security Hub CSPM: AWS provides native continuous monitoring, compliance evidence collection, and posture management through Audit Manager and Security Hub. As an incumbent cloud provider, it embeds features that overlap with parts of CloudeAssurance's SRS and CAAP validation scope.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• YouTubevimeo.com/cloudeassurance
• Xx.com/cloudeassurance
• Facebookfacebook.com/cloudeassurance-705056572862748
• LinkedInlinkedin.com/company/2524744

Revenue estimate

Valuation estimate

Number of profiles

Profiles7 records

Funding overview

Funding rounds1 record

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CloudeAssurance