Crux Security
Crux Security provides a tiered SaaS cybersecurity program management platform and professional security services — including pen testing, CMMC compliance, and managed AppSec — to growing companies in finance, healthcare, technology, aerospace/defense, and other regulated U.S. verticals.
- Company typePrivate
- Founded-
- HeadquartersCedar Park, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Crux Security does
Crux Security is a private cybersecurity firm headquartered in Cedar Park, Texas (Austin area), formed through the strategic merger of Fidelis Risk Advisory and Jemurai. The company provides a hybrid platform-plus-services offering targeting growing companies that lack deep in-house security resources, with leadership anchored by CEO Matt Konda, a former Chair of the Open Worldwide Application Security Project (OWASP).
The core product is the Crux Platform, a cloud-based SaaS cybersecurity program management application built on Node and React. The platform is sold in three subscription tiers — Startup at $100/month for foundational policies, procedures, training, and task management; Complete at $500/month adding automated network scanning, user audits, risk management, and a vendor tracker; and Assisted at $2,000/month adding a dedicated project team with project management, advisory consulting, customer questionnaire handling, and audit support. Entry tiers require no annual commitment and include unlimited users. The platform tracks compliance across NIST 800-53, CMMC, CIS, ISO 27001, PCI DSS, and SOC 2.
Crux supplements the SaaS product with professional services including CMMC compliance consulting, network and application penetration testing, managed application security, physical intrusion testing, executive/VIP cybersecurity protection, and managed IT/MSSP services delivered through a partnership with FirstFront Technologies. The company serves customers across finance, healthcare, technology/SaaS, aerospace and defense, e-commerce, manufacturing, and legal verticals, with a go-to-market that combines self-serve product-led growth for SMBs and direct enterprise sales for the higher-touch Assisted tier. The company is privately held with no disclosed institutional funding and operates with a 1–10 person headcount.
Crux Security firmographics
Firmographics- Name
- Crux Security
- Legal name
- Crux Security
- Website
- https://cruxsecurity.ai
- Company type
- Private
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Crux Security provides a tiered SaaS cybersecurity program management platform and professional security services — including pen testing, CMMC compliance, and managed AppSec — to growing companies in finance, healthcare, technology, aerospace/defense, and other regulated U.S. verticals.
- Ownership category
- akta.pro rank
Where Crux Security is headquartered
LocationHeadquarters
- HQ city
- Cedar Park
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Crux Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- SaaS Subscription - Startup Tier: Monthly subscription at $100 per month offering foundational security program management including policies, procedures, training, task management, and progress tracking dashboards. Unlimited users included.
- SaaS Subscription - Complete Tier: Monthly subscription at $500 per month adding automated tools like network scanning, user audit, risk management, and vendor tracker on top of Startup features.
- SaaS Subscription - Assisted Tier: Monthly subscription at $2,000 per month including dedicated project team with project manager and technical experts for implementation support, customer questionnaire handling, audit support, and advisory consulting.
- Professional Services - Pen Testing: Network and application penetration testing services offered as add-on services for the Assisted tier or standalone engagements.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | Startup - $100/month: Foundation security program with policies, procedures, training, task management and dashboards. |
| Subscription | Monthly | Complete - $500/month: Full platform with automated tools for ongoing security reviews. |
| Subscription | Monthly | Assisted - $2,000/month: Dedicated project team for faster implementation and audit support. |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels4 records
Crux Security product offering
Product offeringCore offering
Crux Security provides a tiered SaaS cybersecurity program management platform (Startup, Complete, and Assisted plans) that helps businesses build and run security programs through policies, procedures, training, task management, dashboards, network scanning, user audits, risk management, and vendor tracking. The platform is complemented by professional services including CMMC compliance consulting, network and application penetration testing, managed application security, physical intrusion testing, executive/VIP protection, and managed IT/MSSP services.
Product overview
Crux Security offers a unified platform-plus-services cybersecurity solution combining a SaaS management platform with professional security services. The core Crux Platform is a tiered subscription SaaS product with three plans: Startup ($100/month) for foundational security policies, procedures, training, and task management; Complete ($500/month) adding automated network scanning, user audits, risk management, and vendor tracking; and Assisted ($2,000/month) providing dedicated project team support for accelerated implementation and audit readiness. These are complemented by professional services including CMMC compliance consulting, penetration testing (network, application, and physical), managed application security, executive protection, and managed IT/MSSP services delivered through the FirstFront Technologies partnership. The company was formed from a strategic merger between Fidelis Risk Advisory and Jemurai.
Differentiator
Problem solved
Functional benefit
Products and services
- Crux Platform A cloud-based SaaS cybersecurity program management platform that helps businesses achieve compliance, mitigate risk, and manage security programs through a tiered subscription model with policies, procedures, training, task management, dashboards, automated scanning, and risk management capabilities.
- Startup Plan $100/month subscription providing foundational security program elements including security policies, procedures, training, task management, and dashboards to track progress, with unlimited users and no annual commitment.
- Complete Plan $500/month subscription building on the Startup tier with automated tools including network scanning, user audit, risk management, and vendor tracker for ongoing periodic security reviews, with unlimited users and no annual commitment.
- Assisted Plan $2,000/month subscription offering a dedicated project team with project manager and technical experts to accelerate security program implementation, handle customer questionnaires, support audit preparation, and provide advisory consulting, with annual commitment option including six application pen tests.
- CMMC Compliance Services Cybersecurity Maturity Model Certification compliance services helping defense contractors achieve required certification levels and DoD compliance.
- Penetration Testing Services Network and application penetration testing services including network/application/intrusion testing, vulnerability scanning, and security code review to identify and remediate security weaknesses.
- Managed Application Security Services Ongoing application security management services to continuously monitor and improve application security posture.
- Physical Intrusion / Penetration Testing Physical security testing services that assess vulnerabilities in physical security controls and facilities.
- Executive / VIP Cybersecurity Protection Services Specialized cybersecurity protection services for executives and VIP individuals.
- Managed IT (MSP) and Managed Security Services (MSSP) Managed IT and Managed Security Services provided through partnership with FirstFront Technologies, enabling comprehensive managed IT (MSP) and managed security (MSSP) capabilities for clients.
Quantifiable outcome
- Streamlined security program implementation for businesses without extensive in-house expertise
- +1 more outcomes
Companies that use Crux Security
Customer profileSegments9 records
Ideal customer profiles6 records
Crux Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature5 records
Crux Security partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- FirstFront TechnologiescoreCrux Security has partnered with FirstFront Technologies to provide managed IT and security services to clients. This partnership enables Crux to offer comprehensive managed IT (MSP) and managed security services (MSSP) capabilities by leveraging FirstFront's managed IT infrastructure expertise.
Scale indicators1 record
Recent moves6 records
Expansion highlights5 records
Crux Security competitors and assessment
Company assessmentDirect peers
- Vanta: Vanta is the leading automated compliance and security platform for SMB and mid-market, offering SOC 2, ISO 27001, HIPAA and more. It is the most direct competitor to Crux's SaaS platform across the same buyer profile.
- Drata: Drata provides continuous compliance automation for SOC 2, ISO 27001, HIPAA, PCI and other frameworks, competing head-to-head with Crux in selling subscription-based compliance programs to growth-stage companies.
- Secureframe: Secureframe automates compliance audits and security program management for SMB and mid-market, very similar buyer and use-case overlap to Crux's platform.
- Sprinto: Sprinto offers compliance automation for fast-growing SaaS businesses, with framework coverage and self-serve onboarding that closely parallels Crux's tiered SaaS approach.
- Thoropass: Thoropass combines compliance automation software with in-house audit expertise, mirroring Crux's platform-plus-services model for SOC 2, ISO 27001 and HITRUST.
- Laika: Laika is a compliance and security management platform aimed at SaaS companies pursuing SOC 2 and ISO 27001, overlapping with Crux on customer segment and value proposition.
- Strike Graph: Strike Graph provides a compliance and certification platform paired with audit services, again matching Crux's combined SaaS + advisory approach for SMB buyers.
- Hyperproof: Hyperproof offers a security assurance and compliance operations platform targeting mid-market and enterprise, competing with Crux on automation of controls and evidence collection.
- Bishop Fox: Bishop Fox is a cybersecurity consulting firm known for offensive security services including penetration testing, directly comparable to Crux's pen-testing and managed AppSec services line.
Broad incumbents
- NCC Group: NCC Group is a global cybersecurity services and software provider spanning pen testing, compliance advisory and managed security — a broad incumbent whose services portfolio overlaps much of Crux's professional-services offering.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
Crux Security social profiles
Digital presenceCrux Security compliance and trust
Trust signalCompliance1 record
Crux Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Crux Security leadership team
Management profileNumber of profiles
Profiles1 record
Crux Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Crux Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Crux Security
What does Crux Security do?
Crux Security provides a tiered SaaS cybersecurity program management platform (Startup, Complete, and Assisted plans) that helps businesses build and run security programs through policies, procedures, training, task management, dashboards, network scanning, user audits, risk management, and vendor tracking. The platform is complemented by professional services including CMMC compliance consulting, network and application penetration testing, managed application security, physical intrusion testing, executive/VIP protection, and managed IT/MSSP services.
Is Crux Security a public or private company?
Crux Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Crux Security founded?
Crux Security was founded in -1. It employs 11 to 50 people.
Where is Crux Security based?
Crux Security is headquartered in Cedar Park, United States, in the North America region.
How does Crux Security make money?
Four revenue lines are on record. SaaS Subscription - Startup Tier is the primary driver. The others are saaS Subscription - Complete Tier, saaS Subscription - Assisted Tier and professional Services - Pen Testing.
Who are Crux Security's main competitors?
Direct peers on record are Vanta, Drata, Secureframe, Sprinto, Thoropass, Laika, Strike Graph, Hyperproof and Bishop Fox. NCC Group is listed as a broad incumbent.
Does Crux Security have an API?
No public API is recorded for Crux Security.