EliteSec Information Security Consultants, Inc.
EliteSec is a Waterloo, Ontario-based boutique cybersecurity consultancy founded in 2019 that delivers CREST-accredited penetration testing, security consulting, and gamified tabletop exercises to mid-market and SMB clients across Canada and the United States.
- Company typePrivate
- Founded2019
- HeadquartersCambridge, Canada
- Headcount1–10
- GTM typeB2B
- OfferingServices
What EliteSec Information Security Consultants, Inc. does
EliteSec Information Security Consultants, Inc. is a privately held, founder-led boutique cybersecurity consultancy incorporated in Ontario, Canada and headquartered in Waterloo. Founded in 2019 by John Svazic, who serves as Founder and Principal Consultant, the firm delivers CREST-accredited manual penetration testing (web application, internal/external network, and mobile), cybersecurity consulting (threat modeling, cloud migration security, best-practices implementation), and a differentiated gamified tabletop exercise (TTX) service that uses dice-based outcome randomization to stress-test incident response plans. Every pentest engagement includes five complimentary re-tests over a 12-month remediation window, and reports are formatted for board, auditor, and enterprise-buyer consumption. Its technology stack is fundamentally a human-expert delivery model aligned to the OWASP Testing Guide and CREST processes, augmented by a free Pentest Readiness Assessment self-service tool and Second Opinion Reviews of competitor pentest reports.
The company monetizes through quote-based professional-services engagements billed as multi-year contracts, with no public pricing tiers or marketplace channels. Go-to-market is founder-led direct sales: prospects enter through website contact forms, 30-minute discovery calls, and SEO-driven blog and comparison content, and are then scoped into engagements personally managed by the principal consultant. EliteSec holds ISO 27001:2022 (February 2025) and CREST Penetration Testing (March 2025) certifications and serves primarily mid-market organizations in education technology, insurance, financial services, nonprofit, and technology, with an emerging presence in the United States. Named customers include DigitalEd, Charitycan, Logisense, Thinktum, RouteThis, Magnet Forensics, GBL, OpenDev, Faithlife Financial, Juniper CDS, and an Education Technology Provider, alongside an enterprise Canadian Insurance Provider engagement that surfaced a pre-launch critical vulnerability.
EliteSec Information Security Consultants, Inc. firmographics
Firmographics- Name
- EliteSec Information Security Consultants, Inc.
- Legal name
- EliteSec Information Security Consultants, Inc.
- Website
- https://elitesec.io
- Company type
- Private
- Founded year
- 2019
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- EliteSec is a Waterloo, Ontario-based boutique cybersecurity consultancy founded in 2019 that delivers CREST-accredited penetration testing, security consulting, and gamified tabletop exercises to mid-market and SMB clients across Canada and the United States.
- Ownership category
- akta.pro rank
EliteSec Information Security Consultants, Inc. industry classification
Industry- Product category
- Cybersecurity Consulting Services
- NAICS
- Testing Laboratories and Services (54138)
- akta.pro primary industry
- Penetration Testing & Red Teaming (BPAKAHAF)
- akta.pro secondary industries
- Penetration Testing & Red Teaming (BPAKADAE), Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG)
Keywords
Where EliteSec Information Security Consultants, Inc. is headquartered
LocationHeadquarters
- HQ city
- Cambridge
- HQ country
- Canada
- HQ region
- North America
Offices1 record
Markets served
EliteSec Information Security Consultants, Inc. business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Technology or R&D, Marketing or Sales
Revenue model
- Penetration Testing Services: Professional services revenue from certified penetration testing engagements including web application, internal/external network, and mobile application testing. Each engagement includes five free re-tests over 12 months.
- Cybersecurity Consulting: Advisory services including threat modeling, cloud migration security, and best practices implementation for organizations building security programs.
- Gamified Tabletop Exercises: Custom scenario-based incident response training using dice-based randomization to stress-test organizational readiness under realistic conditions.
- Second Opinion Reviews: Review and validation of penetration test or vulnerability assessment reports from other firms, providing independent interpretation of findings and remediation guidance.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Professional penetration testing engagement with 5 included re-tests |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels5 records
EliteSec Information Security Consultants, Inc. product offering
Product offeringCore offering
EliteSec is a boutique cybersecurity consultancy delivering CREST-accredited penetration testing (web, network, mobile), security consulting (threat modeling, cloud migration), and gamified tabletop incident response exercises. Every penetration testing engagement includes five complimentary re-tests over 12 months, and engagements are delivered with direct founder and principal consultant oversight.
Product overview
EliteSec Information Security Consultants, Inc. is a boutique cybersecurity consulting firm offering three core services: Penetration Testing (covering web application, network, and mobile testing with five included re-tests), Security Consulting (threat modeling, cloud migration, and best practices), and Gamified Tabletop Exercises. The company also provides a free Pentest Readiness Assessment tool and Second Opinion Reviews for reports from other firms. All services are delivered by OSCP and CISSP certified experts with 20+ years of experience, and engagements include five free re-tests over 12 months to verify remediation.
Differentiator
Problem solved
Functional benefit
Products and services
- Penetration Testing CREST-accredited penetration testing covering web application, internal/external network, and mobile application testing. Each engagement includes five free re-tests over 12 months to verify remediation. Target buyers are mid-market enterprises that need to validate security posture for their own clients and compliance.
- Security Consulting Cybersecurity advisory consulting covering threat modeling, cloud migration security, and best practices implementation for organizations building or maturing security programs. Intended for mid-market enterprises and growth-stage technology firms.
- Gamified Tabletop Exercises (TTX) Custom scenario-based incident response training using dice-based randomization to produce realistic uncertainty and multiple unique outcomes per scenario. Includes structured after-action reports suitable for compliance documentation. Intended for organizations stress-testing incident response plans.
- Pentest Readiness Assessment Free online self-service tool that allows organizations to evaluate their security readiness before engaging for paid penetration testing services. Used as a top-of-funnel lead generation asset.
- Second Opinion Reviews Independent expert review and validation of penetration test or vulnerability assessment reports from other firms, with interpretation of findings and remediation guidance. Intended for organizations that want a second perspective on prior vendor deliverables.
Quantifiable outcome
- Five free re-tests included with every engagement
- +2 more outcomes
Companies that use EliteSec Information Security Consultants, Inc.
Customer profileNamed customers12 records
Segments1 record
Ideal customer profiles2 records
EliteSec Information Security Consultants, Inc. technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature3 records
EliteSec Information Security Consultants, Inc. partnerships and signals
Strategic signalPartnerships
Three partnerships are on record, tiered minor.
- Intuit QuickbooksminorSubprocessor used for finance and accounting operations. Processes financial data for EliteSec as a service provider.
- DocuSignminorSubprocessor for collaboration and document management. Used for electronic signature and document workflows.
- Pro BackupminorSubprocessor for IT infrastructure and backup services. Used for data backup and disaster recovery operations.
Scale indicators3 records
Recent moves6 records
Expansion highlights5 records
EliteSec Information Security Consultants, Inc. competitors and assessment
Company assessmentDirect peers
- Packetlabs: Packetlabs is a Canadian boutique cybersecurity consultancy based in Toronto offering CREST-accredited penetration testing, red teaming, and security advisory services to enterprise clients. Highly comparable to EliteSec in scale, geographic focus on Canada, founder-led delivery model, and CREST-accredited penetration testing positioning.
- Bishop Fox: Bishop Fox is a US-based boutique offensive security firm offering penetration testing, red teaming, and security consulting to Fortune 500 and high-growth clients. Direct competitor in the boutique, expert-led penetration testing category with similar founder-driven quality positioning, though larger in scale.
- Trail of Bits: Trail of Bits is a US-based boutique cybersecurity firm specializing in application security, penetration testing, and security research with deep technical expertise. Comparable to EliteSec as a high-credibility, expert-led boutique serving technical clients, with a similarly strong research and consulting orientation.
- Rhino Security Labs: Rhino Security Labs is a US boutique cybersecurity firm focused on penetration testing, cloud security assessments, and red team engagements. Comparable to EliteSec in size, service mix, and target mid-market to enterprise buyers, though based in the Pacific Northwest.
- Cure53: Cure53 is a German boutique cybersecurity firm specializing in web application and browser security penetration testing with a strong research reputation. Comparable to EliteSec as a small, expert-led, research-driven boutique specializing in application security testing for sophisticated clients.
- TrustedSec: TrustedSec is a US-based boutique offensive security consultancy offering penetration testing, red teaming, and incident response with strong founder credentials. Comparable to EliteSec in founder-led, expert-driven delivery and mid-market to enterprise focus, though larger and more US-centric.
- nVisium: nVisium is a US application security firm offering penetration testing, secure code review, and security training. Comparable to EliteSec in the application security testing niche, with a similar boutique scale and enterprise client focus, though it leans more heavily into developer-focused training offerings.
Broad incumbents
- NetSPI: NetSPI is a scaled North American penetration testing and attack surface management platform that has grown well beyond a boutique model. Overlaps with EliteSec in core penetration testing services but competes on a broader platform-enabled, multi-region delivery model with significantly more headcount and venture funding.
- NCC Group: NCC Group is a global cybersecurity consultancy with a substantial penetration testing, red team, and assurance practice serving large enterprise and government clients. Competes with EliteSec for the same CREST-accredited mandates but at significantly larger scale, broader geography, and with a wider service portfolio.
Regional players
- Security Compass: Security Compass is a Canadian application security and compliance company offering SD Elements, advisory services, and penetration testing. Comparable to EliteSec as another Canadian-headquartered security firm, though it has built a software platform (SD Elements) that gives it a more scalable business model.
Market position
Strengths5 records
Weaknesses4 records
Competitive moat4 records
Key risks5 records
Key highlights6 records
Customer concentration
EliteSec Information Security Consultants, Inc. social profiles
Digital presenceEliteSec Information Security Consultants, Inc. compliance and trust
Trust signalCompliance2 records
EliteSec Information Security Consultants, Inc. financial estimates
Financial estimateRevenue estimate
Valuation estimate
EliteSec Information Security Consultants, Inc. leadership team
Management profileNumber of profiles
Profiles1 record
EliteSec Information Security Consultants, Inc. funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
EliteSec Information Security Consultants, Inc. M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about EliteSec Information Security Consultants, Inc.
What does EliteSec Information Security Consultants, Inc. do?
EliteSec is a boutique cybersecurity consultancy delivering CREST-accredited penetration testing (web, network, mobile), security consulting (threat modeling, cloud migration), and gamified tabletop incident response exercises. Every penetration testing engagement includes five complimentary re-tests over 12 months, and engagements are delivered with direct founder and principal consultant oversight.
Is EliteSec Information Security Consultants, Inc. a public or private company?
EliteSec Information Security Consultants, Inc. is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was EliteSec Information Security Consultants, Inc. founded?
EliteSec Information Security Consultants, Inc. was founded in 2019. It employs 1 to 10 people.
Where is EliteSec Information Security Consultants, Inc. based?
EliteSec Information Security Consultants, Inc. is headquartered in Cambridge, Canada, in the North America region.
How does EliteSec Information Security Consultants, Inc. make money?
Four revenue lines are on record. Penetration Testing Services are the primary driver. The others are cybersecurity Consulting, gamified Tabletop Exercises and second Opinion Reviews.
Who are EliteSec Information Security Consultants, Inc.'s main competitors?
Direct peers on record are Packetlabs, Bishop Fox, Trail of Bits, Rhino Security Labs, Cure53, TrustedSec and nVisium. Broad incumbents are NetSPI and NCC Group. Security Compass is listed as a regional player.
Does EliteSec Information Security Consultants, Inc. have an API?
No public API is recorded for EliteSec Information Security Consultants, Inc..
What industry is EliteSec Information Security Consultants, Inc. in?
EliteSec Information Security Consultants, Inc.'s product category is Cybersecurity Consulting Services. Its primary akta.pro industry code is BPAKAHAF, Penetration Testing & Red Teaming, with a secondary code of BPAKADAE, Penetration Testing & Red Teaming. Its NAICS code is 54138.