Stickley on Security
Stickley on Security is a private cybersecurity education and awareness CUSO serving 200+ U.S. credit unions, banks, and fintechs with automated training, phishing simulation, security assessments, and compliance services following its 2026 merger with VYFI.
- Company typePrivate
- Founded2007
- HeadquartersEl Cajon, United States
- Headcount1–10
- GTM typeB2B
- OfferingServices
What Stickley on Security does
Stickley on Security is a privately held cybersecurity education and awareness firm founded in 2007 by Jim Stickley, operating as a Credit Union Service Organization (CUSO) from its headquarters in Dunedin, Florida. Following its June 2026 merger with VYFI, an information security CUSO, the combined entity delivers a portfolio of nine core products spanning Advanced Security (penetration testing and vulnerability assessments), Advisory (security and risk assessments including ACET Reviews and Microsoft 365), Compliance (information security program development), BCP/BCM (business continuity planning), Powered Cybersecurity Training (automated quarterly campaigns and monthly phishing simulations), SoS Advisor (a customer-facing platform with more than 2,000 videos and articles integrated into websites or online banking), Domain Assure (look-alike domain monitoring and acquisition), BadPhish (customizable phishing simulation), and Employee EDU. The company has additionally introduced SoS WorkRemote, a secure remote desktop solution built on Vega and AWS infrastructure (EC2, Workspaces, S3, Active Directory) that operates without VPN or local corporate data storage. Underlying technology is cloud-based, with staff certifications spanning CISSP, CISM, CISA, and CEH.
The firm primarily serves U.S. financial institutions, including more than 200 credit unions (with over $200 billion in total assets protected), banks, and fintechs, with selected engagements among Fortune 100 corporations and healthcare organizations. Its competitive positioning is grounded in deep regulatory expertise across NCUA, FFIEC, NIST, GLBA, and PCI DSS frameworks, a vertically focused sales motion (enterprise field sales, CUNA referral channel, and reseller partnerships), and a high-visibility brand anchored by CEO Jim Stickley's keynote circuit and earned media presence across Time, Business Week, Fortune, the New York Times, NBC, CNN, and CNBC. Revenue is generated primarily through recurring subscriptions for training, simulation, and domain-monitoring products, supplemented by professional services revenue from assessments, penetration testing, advisory engagements, and speaking fees; pricing is quote-based and not publicly disclosed.
The post-merger organization is led by Jim Stickley as CEO and Alan W. Ropes (former VYFI CEO/President) as COO, combining the firm's training and awareness heritage with VYFI's governance, risk, and compliance specialization. The company remains founder-owned, with no disclosed institutional funding, and operates within a single-country (U.S.) geographic footprint, though its SaaS delivery model and global speaking engagements leave room for international expansion.
Stickley on Security firmographics
Firmographics- Name
- Stickley on Security
- Legal name
- Stickley on Security LLC
- Website
- https://stickleyonsecurity.com
- Company type
- Private
- Founded year
- 2007
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Stickley on Security is a private cybersecurity education and awareness CUSO serving 200+ U.S. credit unions, banks, and fintechs with automated training, phishing simulation, security assessments, and compliance services following its 2026 merger with VYFI.
- Ownership category
- akta.pro rank
Stickley on Security industry classification
Industry- Product category
- Cybersecurity Services for Financial Institutions
- akta.pro primary industry
- Security Awareness, Training & Compliance Attestation (HDADAIAJ)
- akta.pro secondary industries
- Cybersecurity for Financial Services Compliance (controls, audits, SOC/ISO mapping) (FSAGAFAK), Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF)
Keywords
Where Stickley on Security is headquartered
LocationHeadquarters
- HQ city
- El Cajon
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
Stickley on Security business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Cybersecurity Training & Education Services: Recurring subscription-based training programs including Employee EDU, Powered Cybersecurity Training, and customer-facing SoS Advisor platform. Delivered via LMS with quarterly campaigns and monthly phishing simulations. Revenue from license fees and subscription renewals.
- Security Assessment & Advisory Services: One-time and recurring assessments including penetration testing, vulnerability assessments, information security assessments (ISE), risk assessments, and compliance reviews. Professional services revenue from engagements.
- Domain & Brand Protection Services: Domain Assure Detect and Prevent services for monitoring, acquiring, and protecting look-alike domains. Revenue from ongoing monitoring subscriptions and one-time domain acquisition services.
- Secure Remote Work Solutions: WorkRemote solution providing secure remote desktop infrastructure using AWS. Revenue from deployment and ongoing subscription fees for hosted workstation services.
- Speaking & Event Services: Jim Stickley speaking at conferences, corporate events, and seminars on cybersecurity topics. Revenue from speaking fees and event-based engagements.
Go-to-market motion3 records
Distribution channels4 records
Marketing channels8 records
Stickley on Security product offering
Product offeringCore offering
Stickley on Security is a Credit Union Service Organization (CUSO) that delivers cybersecurity education, awareness training, phishing simulation, penetration testing, regulatory compliance, and domain protection services to financial institutions. Its portfolio covers Advanced Security, Advisory, Compliance, BCP/BCM, Powered Cybersecurity Training, SoS Advisor, Domain Assure, BadPhish, Employee EDU, and SoS WorkRemote, forming an end-to-end cybersecurity and compliance lifecycle offering for credit unions, banks, fintechs, and other regulated organizations.
Product overview
Stickley on Security is a unified cybersecurity education and awareness platform, operating as a Credit Union Service Organization (CUSO), that provides a comprehensive suite of services across nine core product areas. The portfolio includes Advanced Security (penetration testing and vulnerability assessments), Advisory (security assessments and audits), Compliance (regulatory program management), BCP/BCM (business continuity services), Powered Cybersecurity Training (automated training with phishing simulations), SoS Advisor (customer-facing awareness with 2,000+ video/article library), Domain Assure (domain spoofing detection and prevention), BadPhish (advanced phishing simulation), and Employee EDU (employee education). Additionally, SoS WorkRemote provides secure remote work solutions. These products work together to provide end-to-end cybersecurity, compliance, governance, and organizational resilience services primarily for financial institutions including credit unions, banks, and fintechs.
Differentiator
Problem solved
Functional benefit
Brands
- BadPhish: Phishing simulation platform that goes beyond basic tests by simulating advanced and realistic attack scenarios. Organizations can select from a wide range of prebuilt payloads and customize them to create unique testing campaigns.
- Domain Assure
- SoS Advisor
- Employee EDU
- Powered Cybersecurity Training
- WorkRemote
Products and services
- Advanced Security Penetration testing and vulnerability assessment services that identify weaknesses across systems, networks, and applications from both internal and external perspectives for credit unions, banks, and fintechs.
- Advisory Security assessment and audit services that evaluate existing controls and processes for effectiveness and regulatory alignment, including Information Security Assessments, ACET Reviews, Risk Assessments, and Microsoft 365 assessments.
- Compliance Information security program development and maintenance services that help organizations stay aligned with federal, state, and industry regulatory expectations.
- BCP/BCM Business Continuity Program and Business Continuity Management services that help organizations prepare for, respond to, and recover from unexpected events.
- Powered Cybersecurity Training Automated training solution delivering quarterly training campaigns and monthly phishing simulations with full LMS support, customizable education, and comprehensive reporting for employee awareness.
- SoS Advisor Customer-facing cybersecurity awareness solution integrated into financial institution websites or online banking platforms, providing a library of over 2,000 videos and articles for fraud, scam, and security education of members and customers.
- Domain Assure Domain spoofing protection service with Domain Assure Detect for monitoring and takedown of look-alike domains and Domain Assure Prevent for proactive acquisition and securing of commonly targeted domains.
- BadPhish Advanced phishing simulation platform that simulates realistic attack scenarios with customizable payloads, automated training follow-up, and detailed reporting to build employee phishing resilience.
- Employee EDU Employee cybersecurity education platform delivering engaging, regularly updated training content with quarterly course updates and integrated phishing simulation.
- SoS WorkRemote Secure remote work solution powered by Vega that uses AWS infrastructure (EC2, Workspaces, S3, Active Directory) to provide fully functional custom desktops for remote workers without corporate data residing at remote locations or VPN requirements.
Quantifiable outcome
- Protected over $200 billion in total asset value for credit unions
- +3 more outcomes
Companies that use Stickley on Security
Customer profileNamed customers5 records
Segments4 records
Ideal customer profiles4 records
Stickley on Security technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature5 records
Stickley on Security partnerships and signals
Strategic signalPartnerships
Two partnerships are on record, tiered core.
- VYFIcoreVYFI, an industry-leading information security CUSO, merged with Stickley on Security in June 2026 to form a single, more powerful organization dedicated to strengthening cybersecurity awareness and regulatory readiness for credit unions, banks, fintechs, and other organizations. The merger combines Stickley on Security's cybersecurity education expertise with VYFI's deep specialization in information security, governance, and compliance.
- Credit Union National Association (CUNA)coreAs part of the CUNA partnership, when credit unions select 'Credit Union' as their Business Type during purchase, CUNA receives the credit union's name, contact name, contract length, and member count. This partnership provides market access and referral channel to credit unions through CUNA's member network.
Scale indicators4 records
Recent moves6 records
Expansion highlights5 records
Stickley on Security competitors and assessment
Company assessmentDirect peers
- KnowBe4: Market-leading security awareness and phishing simulation platform serving SMB through enterprise. Competes head-to-head with SoS's Employee EDU, BadPhish, and Powered Cybersecurity Training offerings, with broader scale and similar subscription GTM.
- Hoxhunt: Enterprise security awareness and phishing simulation platform with behavior-change gamification. Overlaps directly with SoS's BadPhish phishing simulation and employee training products.
- TraceSecurity: Information security assessment and compliance provider for financial institutions, co-founded by Jim Stickley before SoS. Directly comparable to SoS's Advanced Security, Advisory, and Compliance products in the FI market.
- Curricula: Security awareness training platform focused on engaging, story-based content for SMBs and mid-market. Competes in the same awareness/training category as SoS Employee EDU and Powered Cybersecurity Training.
- NINJIO: Security awareness training vendor producing episodic micro-learning content for employees. Directly comparable to SoS's Employee EDU and SoS Advisor video/article-based cybersecurity education.
- InfoSec Institute (CISO MAG / Infosec): Cybersecurity education and certification provider with awareness training and phishing simulation offerings. Direct competitor to SoS's awareness/training portfolio.
Broad incumbents
- SANS Institute: Global cybersecurity training, certification, and research organization. Overlaps with SoS in cybersecurity training and awareness, but operates at a much larger scale with deep technical certifications.
- Mimecast Awareness Training: Email and cyber resilience vendor offering security awareness training as part of integrated platform. A broader incumbent whose awareness offering competes with SoS's training products.
- Proofpoint Security Awareness: Large email security and compliance vendor with bundled security awareness and phishing simulation. A broader incumbent that overlaps with SoS's full suite but as part of a much wider portfolio.
Emerging players
- Living Security: Human risk management platform combining security awareness with behavioral analytics and phishing simulation. Comparable emerging player in security awareness training alongside SoS offerings.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
Stickley on Security social profiles
Digital presenceStickley on Security compliance and trust
Trust signalCompliance4 records
Stickley on Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Stickley on Security leadership team
Management profileNumber of profiles
Profiles2 records
Stickley on Security funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Stickley on Security M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Stickley on Security
What does Stickley on Security do?
Stickley on Security is a Credit Union Service Organization (CUSO) that delivers cybersecurity education, awareness training, phishing simulation, penetration testing, regulatory compliance, and domain protection services to financial institutions. Its portfolio covers Advanced Security, Advisory, Compliance, BCP/BCM, Powered Cybersecurity Training, SoS Advisor, Domain Assure, BadPhish, Employee EDU, and SoS WorkRemote, forming an end-to-end cybersecurity and compliance lifecycle offering for credit unions, banks, fintechs, and other regulated organizations.
Is Stickley on Security a public or private company?
Stickley on Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Stickley on Security founded?
Stickley on Security was founded in 2007. It employs 1 to 10 people.
Where is Stickley on Security based?
Stickley on Security is headquartered in El Cajon, United States, in the North America region.
How does Stickley on Security make money?
Five revenue lines are on record. Cybersecurity Training & Education Services are the primary driver. The others are security Assessment & Advisory Services, domain & Brand Protection Services, secure Remote Work Solutions and speaking & Event Services.
Who are Stickley on Security's main competitors?
Direct peers on record are KnowBe4, Hoxhunt, TraceSecurity, Curricula, NINJIO and InfoSec Institute (CISO MAG / Infosec). Broad incumbents are SANS Institute, Mimecast Awareness Training and Proofpoint Security Awareness. Living Security is listed as an emerging player.
Does Stickley on Security have an API?
No public API is recorded for Stickley on Security.
What industry is Stickley on Security in?
Stickley on Security's product category is Cybersecurity Services for Financial Institutions. Its primary akta.pro industry code is HDADAIAJ, Security Awareness, Training & Compliance Attestation, with a secondary code of FSAGAFAK, Cybersecurity for Financial Services Compliance (controls, audits, SOC/ISO mapping).