ThreeShield Information Security
ThreeShield Information Security is a Calgary-based private cybersecurity firm that delivers Lavawall®, a proprietary continuous monitoring and GRC platform, combined with CISA-led audits and managed security services, primarily to healthcare organizations, accounting firms, and MSPs across Canada, the US, and the UK.
- Company typePrivate
- Founded2014
- HeadquartersCalgary, Canada
- Headcount1–10
- GTM typeB2B
- OfferingServices
What ThreeShield Information Security does
ThreeShield Information Security Corporation is a Calgary, Alberta-based private cybersecurity firm founded in 2014, operating as a Canadian federal corporation registered as a B-Corp. The company serves a defined vertical set — healthcare organizations (clinics, pharmacy groups, primary care networks), accounting firms and CPA practices, managed service providers (MSPs), bulk energy and utilities operators, merchants, and charities/non-profits — primarily across Canada (Alberta, British Columbia, Ontario) with subsidiary entities in the United States and the United Kingdom to support international client delivery.
The firm's core asset is Lavawall®, a proprietary multi-tenant security monitoring and GRC platform built by the firm's own CISSP and CISA certified auditors. Lavawall provides continuous endpoint patching across 7,533+ applications (Windows, Mac, Linux, plus third-party software missed by standard RMMs), Microsoft 365 and Entra ID breach and configuration monitoring, Google Workspace and AWS security telemetry, domain vulnerability scanning, ransomware IOC detection, and AI-assisted report generation. The platform is hosted on AWS Montréal with Cloudflare CDN/WAF and scanning servers in Calgary. The firm layers professional services on this platform: CISA-led cybersecurity audits producing 200+ findings per engagement (versus fewer than 5 from automated scans), managed IT for Calgary healthcare and accounting clients, end-to-end compliance programs across 20+ frameworks (HIPAA, Alberta HIA, PCI DSS, SOC 2, NERC CIP, CMMC, PIPEDA, CPA Canada, UK Cyber Essentials), security awareness training, and backup/continuity services.
ThreeShield's business model combines recurring Lavawall SaaS subscriptions (three tiers — DIY, Supported, Done-for-You — with no minimums or long-term contracts), managed services revenue, project-based compliance engagements with fixed timelines (e.g., HIPAA 60–90 days, PCI SAQ 30–60 days), and a global white-label channel program that delivers Tier 3 security expertise to MSPs under partner brand. GTM motion is hybrid: product-led growth via the free Lavawall domain scan, direct sales for Calgary managed services and enterprise audits, and channel partnerships for international MSP augmentation. Disclosed headcount is 1–10 employees; the firm is founder-owned with no external funding rounds reported.
ThreeShield Information Security firmographics
Firmographics- Name
- ThreeShield Information Security
- Legal name
- ThreeShield Information Security Corporation
- Website
- https://threeshield.ca
- Company type
- Private
- Founded year
- 2014
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- ThreeShield Information Security is a Calgary-based private cybersecurity firm that delivers Lavawall®, a proprietary continuous monitoring and GRC platform, combined with CISA-led audits and managed security services, primarily to healthcare organizations, accounting firms, and MSPs across Canada, the US, and the UK.
- Ownership category
- akta.pro rank
ThreeShield Information Security industry classification
Industry- Product category
- Managed Cybersecurity Services
- NAICS
- Computer Systems Design and Related Services (54151), Computer Systems Design and Related Services (5415), Security Systems Services (56162)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro industry
- Cybersecurity Architecture & Security IntegrationBusiness & Public Services/IT & Digital Services (Managed Services, Systems Integration)/IT Consulting & Systems IntegrationCyber Recovery & Ransomware-Resilient Backup ServicesBusiness & Public Services/IT & Digital Services (Managed Services, Systems Integration)/Business Continuity, Disaster Recovery & Backup ServicesData Security & Privacy Services (DLP, Encryption, Privacy Ops)Business & Public Services/Security & Investigations Services/Cybersecurity & Digital Forensics Services
Keywords
Where ThreeShield Information Security is headquartered
LocationHeadquarters
- HQ city
- Calgary
- HQ country
- Canada
- HQ region
- North America
Offices5 records
Markets served
ThreeShield Information Security business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales
Revenue model
- Lavawall® Platform (SaaS/Subscription): Multi-tenant security monitoring and GRC platform licensed to MSPs and organizations. Three engagement tiers: DIY (self-serve), Supported (platform + guidance), and Done-for-You (full program management). No minimums, no long-term contracts, no high-watermark billing.
- Managed IT Services: Security-first managed IT services for healthcare organizations, accounting firms, and lean IT teams in Calgary. Includes continuous monitoring, patching, M365 security hardening, backup management, and Tier 3 escalation support.
- Cybersecurity Assessments & Audits: Grey-box security assessments and formal audits delivered by CISSP/CISA certified professionals. CISA-led methodology with government and Fortune 50 experience. Typically 200+ findings per engagement.
- Compliance Programs: End-to-end compliance delivery for 20+ frameworks (HIPAA, Alberta HIA, SOC 2, PCI DSS, NERC CIP, Bill C-8, etc.). Fixed-scope compliance packages with defined timelines (e.g., HIPAA 60-90 days, PCI SAQ 30-60 days).
- Training Programs: Security awareness training, phishing simulation, healthcare staff training, oil & gas security training, executive briefings, and incident response tabletop exercises. Combined compliance training that satisfies multiple frameworks simultaneously.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | DIY via Lavawall® - Self-serve platform for organizations with internal security capacity |
| Hybrid | Monthly | Supported - Platform + CISSP/CISA guidance (recommended for MSPs and lean IT teams) |
| Hybrid | Multi-year contract | Done-for-You - Full compliance program management by ThreeShield |
| Other | Monthly | Non-Profit/Charity Pricing |
Go-to-market motion3 records
Distribution channels6 records
Marketing channels10 records
ThreeShield Information Security product offering
Product offeringCore offering
ThreeShield Information Security delivers Lavawall®-powered cybersecurity combining a proprietary continuous security monitoring and GRC platform with CISA-led audits, Tier 3 managed support, managed IT, compliance delivery across 20+ frameworks, security awareness training, and backup/continuity services. The company targets healthcare organizations, accounting firms, MSPs, and energy/utilities, with white-label augmentation for MSP partners globally. The integrated single-vendor model replaces the typical four-vendor fragmented cybersecurity stack.
Product overview
ThreeShield Information Security delivers cybersecurity through Lavawall®, a proprietary platform combining continuous security monitoring and GRC automation. Lavawall® serves as the core technology, providing endpoint patching (7,533+ applications), Microsoft 365/Entra/AWS/Google Workspace monitoring, domain vulnerability scanning, and AI-powered compliance reporting. ThreeShield layers professional services on top: CISA-led cybersecurity audits (delivering 200+ findings versus industry-standard automated scans), Tier 3 managed augmentation for MSPs, managed IT for Calgary healthcare and accounting firms, security awareness training, backup and continuity services, and end-to-end compliance programs for 20+ frameworks including HIPAA, Alberta HIA, PCI DSS, SOC 2, CMMC, and NIST CSF.
Differentiator
Problem solved
Functional benefit
Brands
- Lavawall®: Continuous security monitoring platform providing automated patching for 7,533+ applications, M365/Entra/AWS security monitoring, GRC compliance automation for 15+ frameworks, ransomware IOC detection, and AI-powered security reports. Hosts scanning servers in Calgary AB, database/frontend on AWS Montréal, with Cloudflare CDN/WAF.
Products and services
- Lavawall® Platform Proprietary multi-tenant continuous security monitoring and GRC platform providing endpoint patching for 7,533+ applications (Windows, Mac, Linux, and third-party apps), Microsoft 365/Entra ID breach detection and secure score, Google Workspace and AWS monitoring, domain vulnerability scanning, GRC automation across 15+ frameworks, Akira ransomware IOC detection, and AI-powered security reporting. Hosted on AWS Montréal with Cloudflare CDN/WAF.
- Lavawall® Augmentation Tier 3 cybersecurity intelligence and support service for MSPs and lean IT teams, combining Lavawall® platform monitoring with CISSP/CISA-certified team support, security escalations, phishing alert review, vacation coverage, compliance delivery, and white-label options for MSP partners. Available globally.
- Cybersecurity Audits CISA-led security assessments using government and Fortune 50 methodology. Delivers real penetration testing plus 200+ control findings per engagement for PCI, HIPAA, SOC 2, NERC, and other frameworks, distinct from automated vulnerability scans.
- Managed IT Services - Calgary Security-first comprehensive managed IT for healthcare organizations and accounting firms in Calgary, including proactive patching, Microsoft 365 security, email security, backup and disaster recovery, and on-site and remote support.
- GRC and Compliance Delivery End-to-end compliance delivery combining Lavawall® GRC automation with CISSP/CISA guidance and audit execution. Supports SOC 2, HIPAA, Alberta and BC HIA, PCI DSS, NIST CSF, CIS Controls, CMMC, PIPEDA, CPA Canada, and 20+ frameworks in one integrated offering, including fixed-scope compliance packages such as HIPAA 60-90 days and PCI SAQ 30-60 days.
- Security Awareness Training Staff security awareness training tailored by industry (healthcare, accounting, energy sector) including phishing recognition, social engineering, password hygiene, mobile security, incident reporting, and cloud safety, delivered in-person, virtual, or asynchronous e-learning formats. Includes phishing simulation, executive briefings, and incident response tabletop exercises.
- Backup and Business Continuity Ransomware-resilient backup design with 3-2-1-1 architecture, quarterly restore testing, Microsoft 365 backup, and business continuity planning to ensure backups cannot be encrypted alongside production data.
- Free Website Migration Free migration service from GoDaddy Airo, Wix, or Squarespace to free Cloudflare Pages hosting, included in managed package engagements.
Quantifiable outcome
- 200+ audit findings per engagement vs. competitors finding fewer than 5
- +6 more outcomes
Companies that use ThreeShield Information Security
Customer profileNamed customers14 records
Segments6 records
Ideal customer profiles6 records
ThreeShield Information Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration7 records
AI capability5 records
Feature8 records
ThreeShield Information Security partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered core and minor.
- QSA Partners (Qualified Security Assessors)coreFor Level 1 PCI DSS merchants requiring a formal Report on Compliance (ROC), ThreeShield coordinates with vetted QSA (Qualified Security Assessor) partners. ThreeShield conducts all readiness work; the QSA partner issues the official ROC. One contract, one project manager across both engagements.
- CPA Firms (SOC 2 Attestation)coreSOC 2 Type I and Type II audits require CPA firm attestation. ThreeShield performs all readiness work and evidence collection via Lavawall; the CPA partner issues the formal attestation. Integrated engagement with single project management.
- Accredited Certification Bodies (ISO 27001)coreISO 27001 certification requires an accredited certification body. ThreeShield delivers all preparation and evidence collection; the accredited body issues the certificate. Maintains independent integrity of certification process.
- C3PAO Partners (CMMC)coreCMMC Level 2 and Level 3 assessments must be performed by a C3PAO (Certified Third-Party Assessment Organization). ThreeShield prepares organizations for assessment; the C3PAO conducts the official assessment. One coordinated engagement for defense contractors.
- MSP and Web Design PartnersminorMSP and web design partners referred to ThreeShield when clients need security services. ThreeShield reciprocates by referring business to partners when clients aren't a good fit for direct service. Mutual referral relationship.
- Microsoft (M365/Azure)coreLavawall® integrates with Microsoft 365 and Azure for breach detection, secure score monitoring, conditional access management, and compliance evidence collection. Also arranges non-profit accreditation pricing for Microsoft 365.
Scale indicators8 records
Recent moves6 records
Expansion highlights7 records
ThreeShield Information Security competitors and assessment
Company assessmentDirect peers
- Huntress: Huntress provides managed security operations, endpoint detection, and security awareness training purpose-built for MSPs and SMBs—directly paralleling ThreeShield's Lavawall® Augmentation model and MSP white-label channel.
- Todyl: Todyl is an MSP-focused security platform combining SASE, endpoint, SIEM, and GRC into a single console—competing head-to-head with Lavawall® for the same MSP partner channel and mid-market security-as-a-service motion.
- Guardz: Guardz offers a unified cybersecurity platform built specifically for MSPs to secure SMB clients, spanning endpoint, identity, email, and cloud—directly comparable to Lavawall®'s multi-tenant MSP architecture and white-label positioning.
- Blackpoint Cyber: Blackpoint Cyber provides MDR, incident response, and compliance services through an MSP-first channel—closely aligned with ThreeShield's MSP Augmentation model and Tier 3 escalation value proposition.
- Liongard: Liongard provides automated configuration monitoring and compliance intelligence for MSPs across Microsoft 365, Google Workspace, and network infrastructure—directly comparable to Lavawall®'s continuous monitoring of M365/Entra/Google Workspace for the same MSP partner base.
- ConnectSecure (Kaseya): ConnectSecure delivers automated vulnerability scanning and compliance assessment tools purpose-built for MSPs—competing with Lavawall®'s domain vulnerability scan, multi-framework compliance automation, and MSP white-label offering.
Broad incumbents
- Arctic Wolf: Arctic Wolf delivers MDR, managed risk, and security awareness as a broad-incumbent platform for SMB and mid-market, frequently delivered through MSP partners—overlapping with ThreeShield's continuous monitoring and Tier 3 support offering but at significantly greater scale.
- Vanta: Vanta is a leading automated compliance and GRC platform (SOC 2, ISO 27001, HIPAA, PCI) explicitly benchmarked in ThreeShield's competitive comparison—overlapping on continuous evidence collection but lacking ThreeShield's CISA-led audit execution and Tier 3 support.
- Drata: Drata is a venture-backed continuous compliance automation platform (SOC 2, ISO 27001, HIPAA, PCI) also cited in ThreeShield's competitive matrix—competing for the same compliance-driven mid-market buyer but without ThreeShield's bundled audit and managed support layer.
Regional players
- Senthorus: Senthorus is a Calgary/Canada-based managed security services provider serving Western Canadian SMB and mid-market clients—geographically and segment-overlapping with ThreeShield's Calgary MSP services for healthcare and accounting firms.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
ThreeShield Information Security social profiles
Digital presenceThreeShield Information Security compliance and trust
Trust signalCompliance6 records
ThreeShield Information Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
ThreeShield Information Security leadership team
Management profileNumber of profiles
Profiles5 records
ThreeShield Information Security subsidiaries and ownership
Company hierarchySubsidiaries2 records
ThreeShield Information Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
ThreeShield Information Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about ThreeShield Information Security
What does ThreeShield Information Security do?
ThreeShield Information Security delivers Lavawall®-powered cybersecurity combining a proprietary continuous security monitoring and GRC platform with CISA-led audits, Tier 3 managed support, managed IT, compliance delivery across 20+ frameworks, security awareness training, and backup/continuity services. The company targets healthcare organizations, accounting firms, MSPs, and energy/utilities, with white-label augmentation for MSP partners globally. The integrated single-vendor model replaces the typical four-vendor fragmented cybersecurity stack.
Is ThreeShield Information Security a public or private company?
ThreeShield Information Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was ThreeShield Information Security founded?
ThreeShield Information Security was founded in 2014. It employs 1 to 10 people.
Where is ThreeShield Information Security based?
ThreeShield Information Security is headquartered in Calgary, Canada, in the North America region.
How does ThreeShield Information Security make money?
Five revenue lines are on record. Lavawall® Platform (SaaS/Subscription) is the primary driver. The others are managed IT Services, cybersecurity Assessments & Audits, compliance Programs and training Programs.
Who are ThreeShield Information Security's main competitors?
Direct peers on record are Huntress, Todyl, Guardz, Blackpoint Cyber, Liongard and ConnectSecure (Kaseya). Broad incumbents are Arctic Wolf, Vanta and Drata. Senthorus is listed as a regional player.
Does ThreeShield Information Security have an API?
No public API is recorded for ThreeShield Information Security.
What industry is ThreeShield Information Security in?
ThreeShield Information Security's product category is Managed Cybersecurity Services. Its primary akta.pro industry code is BPAEAAAL, Cybersecurity Architecture & Security Integration, with a secondary code of BPAEALAG, Cyber Recovery & Ransomware-Resilient Backup Services. Its NAICS code is 54151 and its SIC code is 7373.