M.A. Polce

What M.A. Polce does

M.A. Polce is a privately held managed IT and cybersecurity services provider founded in 1998 and headquartered in Rome, New York, with a secondary office in East Syracuse. The firm serves small to mid-sized businesses, K-12 school districts, and regulated organizations primarily across New York State, with deep specialization in public-sector cybersecurity through its approved-vendor status with all 12 New York State Regional Information Centers (RICs) following the November 2023 Erie 1 BOCES MDR RFP award. The company is SOC 2 Type II certified and has placed on MSSP Alert's Top 250 MSSP list for five consecutive years (2020-2024).

The product portfolio is organized around three structured technology programs: Managed IT (24x7x365 monitoring and management of networks, systems, and workstations), Managed Detection and Response (24x7x365 SOC-backed threat monitoring with minute-level containment), and Governance, Risk, and Compliance (an AI-based platform that combines internal and external vulnerability scans with guided questionnaires, real-time threat intelligence, and security roadmapping). Adjacent offerings include vCISO, penetration testing, incident response, incident readiness tabletops, policy and plan development, security awareness training (delivered with KnowBe4), and cloud, hardware, and professional services. Technology delivery relies on a deep vendor ecosystem — Cisco, Microsoft, Splunk, Arctic Wolf, Blackpoint Cyber, Fortinet, Sophos, KnowBe4, Verkada, Nutanix, Pure Storage, Barracuda, Mimecast, HPE, Citrix, Cohesity, Vertiv, and Cynomi, among others — with Blackpoint Cyber serving as a strategic MDR co-marketing partner.

The business model is predominantly subscription-based managed services (Managed IT, MDR, GRC) supplemented by one-time professional services engagements and hardware pass-through revenue. Go-to-market combines direct enterprise field sales (discovery calls, consultation requests) with channel distribution through the NY State RICs for K-12 education customers. The firm is founder/management-owned, with Mike Polce as CEO and Principal Consultant and Michelle Senus as President of Human Resources; no external institutional funding, M&A activity, or parent-company relationships are disclosed. The company has 11-50 employees and reports no disclosed revenue.

Name

M.A. Polce

Legal name

M.A. Polce Consulting Inc.

Website

https://mapolce.com

Company type

Private

Founded year

1998

Operating status

Operating

Headcount range

11–50 employees

Short description

M.A. Polce is a SOC 2 Type II certified managed IT and cybersecurity services provider serving SMBs, K-12 school districts, and regulated organizations across New York State through subscription-based Managed IT, MDR, and AI-powered GRC programs delivered via direct sales and statewide RIC channel partnerships.

Ownership category

akta.pro rank

Product category

Managed IT & Cybersecurity Services

NAICS

Security Systems Services (56162), Computer Systems Design and Related Services (54151), Computer Facilities Management Services (541513)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

akta.pro secondary industries

IT Risk Management (ITRM) (HDADAIAD), ITSM Governance, Compliance & Audit Readiness (BPAEAJAM)

Keywords

• Managed IT services
• Managed detection response
• Cybersecurity compliance services
• Governance risk compliance
• Virtual CISO services

Headquarters

HQ city

Rome

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Managed IT Services: Recurring managed services for IT infrastructure support including monitoring, management, and security of networks, systems, and workstations. Offered through structured technology programs with three tiers.
2. Managed Detection and Response (MDR): 24x7x365 security monitoring and response services with human analyst oversight. Subscription-based pricing for continuous protection against cyber threats.
3. Governance, Risk, and Compliance (GRC): Compliance management services using AI-based platform for risk assessments, policy development, security roadmapping, and ongoing compliance monitoring.
4. Professional Services: One-time consulting services for cybersecurity assessments, penetration testing, incident response, and IT project implementation.
5. Hardware Purchasing: IT hardware procurement and purchasing services for clients needing infrastructure equipment.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels6 records

Core offering

M.A. Polce delivers managed IT infrastructure and cybersecurity services through three structured technology programs: Managed IT (24x7x365 monitoring and management of networks, systems, and workstations), Governance Risk & Compliance (AI-based risk and compliance platform with security roadmapping), and Managed Detection & Response (24x7x365 threat monitoring with human analyst response and containment within minutes). The company supplements these with add-on services such as vCISO, penetration testing, incident response, security awareness training, cloud, and hardware procurement.

Product overview

M.A. Polce is a managed IT and cybersecurity services provider offering three structured technology programs: Managed IT (24x7x365 infrastructure monitoring and management), Governance Risk & Compliance (AI-based risk and compliance platform with security roadmapping), and Managed Detection & Response (24x7x365 threat monitoring with human expert response). The company also provides additional cybersecurity services including vCISO, penetration testing, incident response, security awareness training, and cloud/hardware/professional services. Services are primarily delivered to small and medium-sized businesses in New York State, with specialization in K-12 education and local government sectors.

Differentiator

Problem solved

Functional benefit

Products and services

• Managed Information Technology (Managed IT) 24x7x365 monitoring and management of client networks, systems, and workstations, with security at the core, designed to supplement or fully replace an in-house IT team for SMB and mid-market organizations.
• Governance, Risk, & Compliance (GRC) AI-based platform providing a holistic view of a client's risk posture and compliance status, with detailed security roadmapping, vulnerability data integration, real-time threat intelligence, and guided risk management tasks across multiple regulatory frameworks.
• Managed Detection & Response (MDR) 24x7x365 monitoring of networks and devices with human security analysts in a SOC who detect breaches and respond to contain them within minutes using proprietary threat detection technology.
• Virtual CISO (vCISO) Virtual Chief Information Security Officer service providing strategic cybersecurity guidance, security roadmap development, and compliance expertise for organizations that do not have a full-time CISO.
• Penetration Testing Testing service that simulates real-world attacks to validate the effectiveness of security measures and uncover hidden vulnerabilities across client environments.
• Incident Response Services Rapid response services to contain and manage cybersecurity incidents and minimize operational disruption for affected organizations.
• Risk & Security Assessments Security and risk assessments that identify vulnerabilities, quantify the broader risk landscape, and inform comprehensive security roadmaps for client organizations.
• Incident Readiness Tabletops Facilitated tabletop exercises including hot wash meetings and after-action reports to test organizational preparedness for cyber incidents and identify gaps before a real attack occurs.
• Policy & Plan Development Development of security policies and incident response plans tailored to organizational needs and regulatory requirements.
• Security Awareness Training Employee cybersecurity training programs (delivered via platforms such as KnowBe4) that build security culture and threat recognition across client organizations.
• Private, Public, & Hybrid Cloud Services Cloud services covering private, public, and hybrid cloud infrastructure to support organizational technology needs, leveraging partners such as Microsoft, Nutanix, and HPE.
• Hardware Purchasing IT hardware procurement and purchasing services for clients needing infrastructure equipment.
• Professional Services Technical professional services for complex technology projects, cybersecurity assessments, and IT implementations delivered on a project basis.

Quantifiable outcome

• MDR can stop ransomware attacks within minutes of detection
• +2 more outcomes

Named customers2 records

Segments5 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

AI capability3 records

Feature3 records

Partnerships

20 partnerships are on record, tiered core.

• Erie 1 BOCEScoreChannel Partner/ Reseller/ Distributor · 15 November 2023Won RFP award for Managed Detection and Response (MDR) services from Erie 1 Board of Cooperative Educational Services (BOCES). This partnership enables M.A. Polce's MDR services to be available through all 12 Regional Information Centers across New York State for K-12 school districts.
• CiscocoreTechnology or IntegrationTechnology partner providing networking and security solutions including Cisco security portfolio integration.
• MicrosoftcoreTechnology or IntegrationTechnology partner for cloud services, productivity solutions, and security integrations including Azure and Microsoft 365.
• SplunkcoreTechnology or IntegrationTechnology partner for security information and event management (SIEM), log analysis, and threat detection capabilities.
• Arctic WolfcoreTechnology or IntegrationSecurity operations platform partner for threat detection, response, and security operations center capabilities.
• Blackpoint CybercoreStrategic or Co-development PartnerStrategic MDR partnership with joint webinars and content. Blackpoint's MDR technology powers part of M.A. Polce's managed detection and response services. M.A. Polce and Blackpoint Cyber conducted a joint session on MDR partnerships and security service provider benefits.
• KnowBe4coreTechnology or IntegrationSecurity awareness training platform partner providing cybersecurity training content for client organizations.
• FortinetcoreTechnology or IntegrationNetwork security partner providing next-generation firewalls, endpoint protection, and unified threat management.
• SophoscoreTechnology or IntegrationCybersecurity partner for endpoint protection, network security, and threat response solutions.
• VerkadacoreTechnology or IntegrationPhysical security and video surveillance partner providing integrated physical security solutions.
• NutanixcoreTechnology or IntegrationHyperconverged infrastructure partner for cloud computing and data center solutions.
• Pure StoragecoreTechnology or IntegrationAll-flash storage solutions partner for enterprise data storage and cloud infrastructure.
• BarracudacoreTechnology or IntegrationEmail protection, network security, and data protection solutions partner.
• MimecastcoreTechnology or IntegrationEmail security and collaboration partner providing email protection and management solutions.
• Cisco MerakicoreTechnology or IntegrationCloud-managed IT solutions partner for networking, security, and mobile device management.
• Axis CommunicationscoreTechnology or IntegrationNetwork video solutions partner for security cameras and surveillance infrastructure.
• HPE (Hewlett Packard Enterprise)coreTechnology or IntegrationEnterprise IT infrastructure partner for servers, storage, and networking solutions.
• CitrixcoreTechnology or IntegrationWorkspace and virtualization partner for secure remote access and application delivery.
• CohesitycoreTechnology or IntegrationData management and backup solutions partner for enterprise data protection and management.
• VertivcoreTechnology or IntegrationCritical digital infrastructure partner for power and cooling solutions for data centers.

Scale indicators2 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• Trustwave: Trustwave is a global MSSP and MDR provider with deep compliance and managed security services capabilities. It competes with M.A. Polce in regulated verticals (financial services, healthcare, government) but at a much larger scale.
• ConnectWise: ConnectWise provides IT management, RMM, and security platforms widely used by MSPs and MSSPs serving SMB customers. It is a critical ecosystem peer given M.A. Polce's managed IT service delivery model.
• Secureworks: Secureworks is a scaled global MSSP offering MDR, GRC, and threat intelligence across enterprise and mid-market segments. It represents the broader incumbent alternative to M.A. Polce for buyers evaluating larger, more established cybersecurity providers.
• Sophos: Sophos is a major endpoint and network security vendor that also offers Sophos MDR for SMB and mid-market customers. As both a technology partner and competitor, it represents a platform-driven alternative to M.A. Polce's human-led service model.
• Kaseya: Kaseya is a leading provider of IT management and cybersecurity platforms for MSPs, including RMM, BCDR, and security offerings. It supplies infrastructure that many competing regional MSSPs and MSPs use as alternatives to homegrown stacks like M.A. Polce's.

Direct peers

• eSentire: eSentire is an MDR-focused MSSP offering 24x7 SOC services, threat hunting, and incident response to mid-market organizations. It competes head-to-head with M.A. Polce's MDR offering for the same regulated SMB buyer profile.
• Blackpoint Cyber: Blackpoint Cyber provides MDR technology that powers part of M.A. Polce's MDR offering. As both a partner and a competitor, Blackpoint sells directly to MSSPs and end-customers in the SMB/mid-market segment.
• Expel: Expel provides transparent, subscription-based MDR and SOC services with a strong focus on mid-market and enterprise customers. It represents a similar service model to M.A. Polce's MDR practice, with a comparable technology-partner ecosystem.
• Arctic Wolf: Arctic Wolf is a leading pure-play MDR/SOC-as-a-service provider serving SMB and mid-market customers. It is both a technology partner of M.A. Polce and a direct competitor offering subscription-based 24x7 security operations.

Regional players

• CMIT Solutions: CMIT Solutions is a nationwide franchise network of managed IT and cybersecurity providers serving SMBs. It is a comparable regional/local MSP model that competes with M.A. Polce for similar resource-constrained SMB customers across multiple U.S. markets.

Market position

Strengths4 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/mapolce
• YouTubeyoutube.com/@mapolce?si=KoMbLqpNuio-9y-a
• Facebookfacebook.com/mapolceconsulting
• LinkedInlinkedin.com/company/m-a-polce-consulting-inc-
• Instagraminstagram.com/mapolce

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about M.A. Polce