KNC Strategic Services

What KNC Strategic Services does

KNC Strategic Services is a veteran-led, service-disabled veteran-owned small business (SDVOSB) cybersecurity services firm headquartered in Carlsbad, California, founded in 2018 by three principals (Kelly, Nick, and Chuck) whose careers span the U.S. Marine Corps and financial services. The company operates as an Authorized CMMC Third Party Assessment Organization (C3PAO) and Registered Provider Organization (RPO) through Cyber AB, placing it among approximately 40 authorized CMMC Level 2 assessors nationwide — a license it received on January 2, 2025 following the Title 32 CFR Part 170 final rule.

Its core offerings include official CMMC Level 2 assessments, NIST 800-171 gap assessments, penetration and vulnerability testing (including its proprietary Cyber RECON multi-vector threat assessment), Virtual CISO services, cybersecurity documentation development (anchored by its CMMC Documentation Library), and recurring managed services such as KnowBe4-as-a-Service (KB4aaS) and Patch Management-as-a-Service (PMaaS). The firm also acts as a Value Added Reseller across regulatory compliance, network protection, vulnerability assessment, enterprise software, disaster recovery, awareness training, and SOC-as-a-Service categories.

KNC monetizes through firm-fixed-price professional services engagements, monthly managed services subscriptions, event sponsorship and ticket revenue (annual CMMC West Summit), and VAR product resale. Go-to-market relies on direct sales, federal contracting vehicles (GSA MAS Schedule #47QTCA21D00D7, California CMAS #3-23-04-1017), event-driven lead generation through the CMMC West Summit and monthly webinars, and content marketing including its CMMC Wars podcast. Primary customers are Defense Industrial Base organizations seeking CMMC certification, federal/state/local government agencies, and mid-market commercial firms in transportation, utilities, and manufacturing verticals. The company donates 10% of annual profits to US VALOR, a nonprofit it founded to run a cybersecurity apprenticeship program for transitioning military members.

Name

KNC Strategic Services

Legal name

KNC Strategic Services

Website

https://kncss.com

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

1–10 employees

Short description

KNC Strategic Services is a veteran-led, SDVOSB cybersecurity firm and Authorized C3PAO providing CMMC assessments, NIST 800-171 consulting, managed services, and vCISO support primarily to Defense Industrial Base contractors and government agencies.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting and Assessment Services

NAICS

Other Management Consulting Services (541618), Other Scientific and Technical Consulting Services (54169)

SIC

Services-Management Consulting Services (8742)

akta.pro industry

PRIMARYBPAKAHAH

Governance, Risk & Compliance (GRC) Advisory & Assessments

Business & Public Services/Security & Investigations Services/Cybersecurity & Digital Forensics Services

SECONDARYBPAKADAG

Security Governance, Risk & Compliance (GRC) Advisory

Business & Public Services/Security & Investigations Services/Security Consulting, Risk Assessment & Audits

SECONDARYBPAEADAJ

Governance, Risk & Compliance (GRC) Managed Services

Business & Public Services/IT & Digital Services (Managed Services, Systems Integration)/Cybersecurity Services (MSSP)

Keywords

• Cybersecurity consulting
• CMMC assessment
• Managed security services
• NIST compliance
• Virtual CISO

Headquarters

HQ city

Carlsbad

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Others

Revenue model

1. Cybersecurity Consulting Services: Governance, risk, and compliance consulting for frameworks like CMMC, NIST 800-171, NIST CSF, and CIS v8. Includes Virtual CISO services and cybersecurity documentation development.
2. CMMC Assessment Services: Official CMMC Level 2 Assessments conducted as an Authorized C3PAO for defense contractors. Also includes mock assessments and NIST 800-171 gap assessments.
3. Managed Security Services: Ongoing managed services including patch management, security awareness training, continuous compliance monitoring, Microsoft 365 security management, and incident response.
4. CMMC Documentation Products: Sale of CMMC documentation library including policies, plans, procedures, and forms. Available to Organizations Seeking Certification for CMMC preparation.
5. Product Resale: Value-added reseller of cybersecurity products including regulatory compliance, network protection, vulnerability assessment, and enterprise software solutions.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels6 records

Core offering

KNC Strategic Services provides cybersecurity consulting, official CMMC Level 2 assessments (as an Authorized C3PAO), and managed security services for the Defense Industrial Base, federal/state/local government, and commercial organizations. Offerings include Virtual CISO services, governance/risk/compliance consulting, vulnerability assessments, and subscription-based managed services such as patch management and KnowBe4 security awareness training.

Product overview

KNC Strategic Services is a veteran-led cybersecurity services firm and Authorized C3PAO offering a portfolio of proprietary managed services and assessment products alongside a broad Value Added Reseller (VAR) product portfolio. Its core proprietary offerings include: Cyber RECON (a multi-vector technical vulnerability threat assessment), the CMMC Documentation Library (a comprehensive compliance document set for NIST 800-171/CMMC), Patch Management-as-a-Service (PMaaS), KnowBe4-as-a-Service (KB4aaS, a managed KnowBe4 security awareness training service), official CMMC Level 2 Assessments as an Authorized C3PAO, and Virtual CISO (vCISO) consulting services. KNC also operates as a VAR, reselling and supporting third-party products across network protection, vulnerability assessment, disaster recovery, enterprise software, cybersecurity awareness training, regulatory compliance, and SOC-as-a-Service categories.

Differentiator

Problem solved

Functional benefit

Brands

• Cyber RECON: A proactive technical threat assessment service that evaluates multiple threats and threat vectors from different perspectives to provide a comprehensive view of cybersecurity threats and vulnerabilities.
• CMMC Documentation Library
• Patch Management-as-a-Service (PMaaS)
• KnowBe4-as-a-Service (KB4aaS)

Products and services

• Cyber RECON A proactive multi-vector technical vulnerability threat assessment service that evaluates internal, external, cloud, and phishing threat vectors for small to medium organizations with 50-500 employees.
• CMMC Documentation Library A comprehensive library of living compliance documents (System Security Plans, policies, procedures, plans, forms, and guides) developed for CMMC/NIST 800-171 compliance and provided at no additional cost to KNC CMMC preparation clients.
• Patch Management-as-a-Service (PMaaS) A subscription-based managed patching service covering operating systems, applications, network infrastructure, and cloud systems with vulnerability prioritization and a 30-day complimentary proof of concept available.
• KnowBe4-as-a-Service (KB4aaS) A managed security awareness training subscription service where KNC actively manages client KnowBe4 platforms, including monthly phishing campaigns, quarterly training campaigns, tracking, and reporting to reduce insider threat risk.
• CMMC Level 2 Assessment Official CMMC Level 2 Certification Assessments conducted by KNC as an Authorized C3PAO for Organizations Seeking Certification (OSC) in the Defense Industrial Base, with firm fixed price proposals.
• Virtual Chief Information Security Officer (vCISO) Executive-level virtual CISO consulting that manages an organization's information security program development, implementation, and ongoing maintenance, including governance, risk management, compliance oversight, and third-party risk management.
• Managed Security Services A strategic managed services bundle for select clients covering patch management, security awareness training, continuous compliance, Microsoft 365 security management, CMMC solutions, AWS security management, and incident response.

Quantifiable outcome

• $4.5 Million average cost of data breach (2023 Ponemon Institute)
• +1 more outcomes

Named customers3 records

Segments6 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration18 records

Feature4 records

Partnerships

15 partnerships are on record, tiered core, flagship, major and minor.

• Cyber ABcoreStrategic or Co-development PartnerKNC is an Authorized C3PAO through Cyber AB, the official CMMC accreditation body. This partnership enables KNC to conduct official CMMC Level 2 Assessments of Defense Industrial Base organizations.
• KnowBe4coreTechnology or IntegrationKnowBe4 is the leading security awareness training platform that KNC utilizes for their KB4aaS managed service. KNC specializes in actively managing clients' KnowBe4 platforms to maximize their security training investment.
• US VALOR (US Veterans Advancing Through Learning, Opportunities and Resources)flagshipStrategic or Co-development PartnerNonprofit organization founded by KNC CEO Kelly Kendall. KNC donates 10% of annual profits to support US VALOR's Cybersecurity Apprenticeship Program for transitioning military service members. KNC's President Kelly Kendall serves as Executive Director of US VALOR.
• CISA AES ProgramcoreStrategic or Co-development PartnerKNC works with CISA Assessment Evaluation and Standardization (AES) program to conduct non-tier-one assessments of High-Value Assets (HVA) for Federal, State, Local, Tribal, and Territorial entities.
• KiteworksmajorChannel Partner/ Reseller/ DistributorKiteworks is a Diamond Sponsor for CMMC West Summit events. Kiteworks offers FedRAMP Authorized solutions for secure file and email communications supporting CMMC compliance.
• Atomus CorporationmajorChannel Partner/ Reseller/ DistributorAtomus is a Gold Sponsor for CMMC West Summit and provides managed Microsoft GCC-High solutions for CMMC/NIST/DFARS/ITAR compliance. Recently passed their own CMMC Level 2 assessment.
• Totem TechnologiesminorChannel Partner/ Reseller/ DistributorSilver Sponsor for 2026 CMMC West Summit. Provides solutions for microbusiness CUI enclave securing small organizations to NIST 800-171 standards.
• University of San DiegominorStrategic or Co-development PartnerBronze sponsor for 2025 CMMC West Summit. Breakfast and networking sponsor for 2025 event.
• NDIA (National Defense Industrial Association)minorStrategic or Co-development PartnerDefense industry association partnership through logo display on KNC's partner page.
• AFCEA (Armed Forces Communications and Electronics Association)minorStrategic or Co-development PartnerDefense industry association partnership through logo display on KNC's partner page.
• CyberDImajorStrategic or Co-development PartnerCyberDI provides CMMC Certified Professional (CCP) training. KNC hosts CyberDI training at CMMC West Summit events with Vince Scott as instructor. Full-day training followed by evening sessions over 6-7 weeks.
• ECN IT SolutionsminorChannel Partner/ Reseller/ DistributorSilver sponsor for 2026 CMMC West Summit. Speaker on CMMC lessons learned from MSP perspective.
• Preveil, Inc.minorChannel Partner/ Reseller/ DistributorExhibitor at 2026 CMMC West Summit.
• RADICLminorChannel Partner/ Reseller/ DistributorExhibitor at 2026 CMMC West Summit.
• Brea NetworksminorChannel Partner/ Reseller/ DistributorExhibitor at 2026 CMMC West Summit.

Scale indicators5 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Coalfire: Coalfire is a large cybersecurity advisory and assessment firm offering CMMC C3PAO services, FedRAMP advisory, penetration testing, and GRC consulting — directly competing with KNC across the DIB market, including via its Redspin C3PAO practice.
• A-LIGN: A-LIGN is an Authorized CMMC C3PAO and cybersecurity compliance firm providing SOC 2, ISO 27001, HITRUST, FedRAMP, and CMMC assessments and readiness services. It is one of the most direct comparables to KNC's combined advisory + C3PAO model.
• Summit 7 Systems: Summit 7 is an Authorized CMMC C3PAO and Microsoft GCC/GCC High specialist serving defense contractors — directly comparable to KNC's defense-focused CMMC assessment and Microsoft 365 security practice.
• Pivot Point Security: Pivot Point Security is an Authorized CMMC C3PAO specializing in NIST 800-171 / CMMC readiness, vCISO services, and FedRAMP — a direct competitor for CMMC assessment, gap analysis, and consulting engagements in the DIB market.
• Schellman & Co. Schellman is a top-ranked cybersecurity and compliance assessment firm delivering SOC 2, ISO 27001, CMMC, and FedRAMP services. It competes head-on with KNC for CMMC C3PAO and broader GRC advisory work with mid-market and enterprise clients.
• BARR Advisory: BARR Advisory is a cybersecurity and compliance firm providing SOC audits, ISO 27001, FedRAMP, and CMMC-related consulting — directly comparable to KNC's GRC advisory and assessment-adjacent services for SMB and mid-market clients.
• Cyber Defense Labs: Cyber Defense Labs is a veteran-founded cybersecurity firm offering CMMC consulting, RPO services, penetration testing, and vCISO support to defense contractors — directly comparable to KNC's veteran-led, DIB-focused services.

Broad incumbents

• Optiv: Optiv is a large cybersecurity solutions integrator providing advisory, managed security, and assessment services across many frameworks. It overlaps with KNC's vCISO, managed services, and GRC advisory offerings as part of a much broader portfolio.
• GuidePoint Security: GuidePoint Security is a broad cybersecurity services and VAR firm offering advisory, managed detection and response, and GRC services to federal and commercial clients — a larger-scale incumbent competitor to KNC's consulting and reseller practice.
• NCC Group: NCC Group is a global cybersecurity consulting and assurance firm offering GRC, penetration testing, and managed detection services — a large-scale incumbent competitor with overlapping capabilities to KNC's consulting and managed services.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/kncss

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about KNC Strategic Services