RipRap Security
RipRap Security is a US-based cybersecurity advisory firm providing NIST-aligned security assessments, penetration testing, virtual CISO services, and training exclusively to nonprofits, B Corps, foundations, and purpose-driven organizations. The founder-owned LLC operates on professional-services revenue with discounted pricing for mission-driven clients and a pro bono grant program.
- Company typePrivate
- Founded2020
- HeadquartersFairfax, United States
- Headcount1–10
- GTM typeB2B
- OfferingServices
What RipRap Security does
RipRap Security, LLC is a US-based cybersecurity advisory and professional services firm founded in 2020 that exclusively serves nonprofits, B Corps, foundations, think tanks, and purpose-driven organizations. The firm delivers human-first cyber risk management services including NIST Cybersecurity Framework-aligned Roadmap Assessments (starting at $5,000 for small organizations), 4-6 week evidence-based security audits, penetration testing, cyber compromise/incident response assessments, security architecture reviews, Virtual CISO retainers, secure configuration engagements, and employee training programs. There is no proprietary software product; the firm recommends and configures best-fit third-party tools (Google Workspace, Microsoft 365, FlowCrypt, 1Password, Cloudflare Project Galileo, Block Party) on a vendor-agnostic basis.
The business operates on a multi-stream revenue model: project-based professional services with tiered pricing that includes discounted rates for nonprofits and B Corps, a cohort-based Cyber Security Foundations Bootcamp delivered via learning.riprapsecurity.com with pay-what-you-can pricing ($750 suggested), and ongoing Virtual CISO managed-service retainers. The firm also operates the Cyber Security For Good grant program, delivering up to $25,000 in pro bono in-kind services to qualifying mission-driven organizations (24 grantees served since 2024, $220k+ delivered). Since 2024 the program has scaled to deliver $135,500 in services to 12 grantees in 2025 alone, representing approximately 11% of team hours.
The firm is co-founded and led by Steve Sharer (CEO) and Garrett Miller (CTO), who together bring 25+ years of cybersecurity experience defending government agencies and Fortune 500 companies across aviation, tech, automotive, manufacturing, media, and financial services, along with multiple top-tier certifications and CVE discoveries. The firm is a Certified B Corporation (since 2023), a 1% for the Planet member, and operates as a founder-owned private LLC with no external funding rounds disclosed. Marketing is entirely community- and content-led via blog, newsletter, monthly Cyber Security Office Hours, the Midterms Hub, and external co-presentations with NGO-ISAC and TAGtech — with no paid advertising channel.
RipRap Security firmographics
Firmographics- Name
- RipRap Security
- Legal name
- RipRap Security, LLC
- Website
- https://riprapsecurity.com
- Company type
- Private
- Founded year
- 2020
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- RipRap Security is a US-based cybersecurity advisory firm providing NIST-aligned security assessments, penetration testing, virtual CISO services, and training exclusively to nonprofits, B Corps, foundations, and purpose-driven organizations. The founder-owned LLC operates on professional-services revenue with discounted pricing for mission-driven clients and a pro bono grant program.
- Ownership category
- akta.pro rank
RipRap Security industry classification
Industry- Product category
- Cybersecurity Consulting Services
- NAICS
- Computer Systems Design and Related Services (54151)
- akta.pro primary industry
- Penetration Testing & Red Teaming (BPAKAHAF)
- akta.pro secondary industries
- Vulnerability Management & Penetration Testing Services (BPAEADAD), Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM), Security Awareness, Training & Compliance Attestation (HDADAIAJ), Governance, Risk & Compliance (GRC) Managed Services (BPAEADAJ)
Keywords
Where RipRap Security is headquartered
LocationHeadquarters
- HQ city
- Fairfax
- HQ country
- United States
- HQ region
- North America
Markets served
RipRap Security business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Marketing or Sales, Technology or R&D, Others
Revenue model
- Professional Services (Cyber Security Roadmap Assessments): Evidence-based security assessments delivered over 4-6 weeks, resulting in prioritized recommendations and an interactive report. Pricing starts at $5,000 for small organizations, scaling by organization size and complexity. Includes special pricing for nonprofits, B Corps, and 1% for the Planet members.
- Cyber Security Foundations Bootcamp: 4-week cohort-based course with weekly 1-hour live Zoom sessions. Pay-what-you-can model with a suggested price of $750. Discount codes available: PAYTHREEQUARTER (25% reduction) and PAYHALF (50% reduction). Financial assistance available upon email request. Pro-bono access may be provided for grantees.
- Penetration Testing & Cyber Compromise Assessments: Time-and-materials or fixed-scope engagements involving ethical hacking, phishing simulations, dark web monitoring, and productivity suite compromise audits. Includes free re-testing and one-on-one coaching for penetration testing clients.
- Virtual CISO & Security Architecture Review: Ongoing advisory retainer engagements providing strategic security oversight, governance alignment, and architecture review for organizations seeking ongoing security leadership.
- Cyber Security For Good Grant (Pro Bono): In-kind grant program offering up to $25,000 worth of cyber security services (not cash). Recipients receive roadmap assessments, foundations training, staff training, and incident response support. Delivered at no cost to qualifying 501(c)(3), 501(c)(4), certified B Corps, and global purpose-driven organizations.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| One time/ perpetual license | Pay-as-you-go | Cyber Security Roadmap Assessment — starting price for small organizations |
| Subscription | Pay-as-you-go | Cyber Security Foundations Bootcamp — full price |
| Other | Pay-as-you-go | Cyber Security For Good Grant — pro bono |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels6 records
RipRap Security product offering
Product offeringCore offering
RipRap Security delivers tailored cybersecurity consulting and advisory services — primarily Cyber Security Roadmap Assessments, Penetration Testing, Cyber Compromise Assessments, Security Architecture Review, Virtual CISO, Secure Configuration, and Employee Training — to nonprofits, B Corps, and other purpose-driven organizations. Engagements follow a NIST CSF-aligned, evidence-based methodology and are delivered as fixed-scope projects or ongoing retainers, with a separate cohort-based Cyber Security Foundations Bootcamp.
Product overview
RipRap Security is a human-first cybersecurity consulting firm that provides advisory and training services to nonprofits, B Corps, and purpose-driven organizations. The company operates as a services firm rather than a software product company, offering a portfolio of professional services including Cyber Security Roadmap Assessments (evidence-based security strategy development), Cyber Security Foundations Bootcamp (4-week cohort-based training), Cyber Compromise Assessments (incident response), Penetration Testing, Employee Training & Awareness Programs, Security Architecture Review, Virtual CISO services, and Secure Configuration services. The company also operates a pro bono Cyber Security For Good Grant program providing up to $25,000 in services to eligible organizations. Additional offerings include the Midterms Hub (election security resource portal), a Newsletter, and a Nonprofit Cyber Security Calendar.
Differentiator
Problem solved
Functional benefit
Brands
- Cyber Security For Good®: A grant program offering up to $25,000 worth of in-kind cyber security services to purpose-driven organizations including 501(c)(3) nonprofits, 501(c)(4) nonprofits, certified B Corps, and organizations globally.
Products and services
- Cyber Security Roadmap Assessments Evidence-based 4-6 week assessment that evaluates an organization's cybersecurity posture against the NIST Cybersecurity Framework and delivers a prioritized recommendations report with actionable next steps for nonprofits, B Corps, and purpose-driven organizations. Starting price is $5,000 for small organizations, with special pricing for nonprofits, B Corps, and 1% for the Planet members.
- Cyber Security Foundations Bootcamp 4-week cohort-based training course with weekly 1-hour live Zoom sessions that teaches cybersecurity fundamentals to growing organizations. Uses pay-what-you-can pricing with a suggested price of $750, discount codes PAYTHREEQUARTER (25% off) and PAYHALF (50% off), and email-based financial assistance. Includes homework, checklists, and a certificate of completion.
- Penetration Testing Security testing engagement that simulates real-world attacks to identify weaknesses across systems, networks, and applications, followed by prioritized remediation guidance. Includes free re-testing and one-on-one coaching. Delivered as time-and-materials or fixed-scope engagements.
- Cyber Compromise Assessments Incident response and breach investigation service that identifies attackers in networks, gauges the scope of their impact, and provides remediation steps to remove threats for organizations that suspect or have experienced a breach.
- Employee Training & Awareness Programs Engaging training sessions and realistic phishing simulations that build a security culture across an organization and turn staff into active defenders against phishing and other cyber threats.
- Security Architecture Review Comprehensive examination of custom software and cloud-based systems to ensure defense-in-depth protection, covering device security through threat monitoring for organizations running modern cloud and custom software estates.
- Virtual CISO Ongoing advisory retainer that provides strategic security oversight, aligning organizational strategic needs with appropriate security processes, technology, and governance for organizations that need senior security leadership without a full-time hire.
- Secure Configuration Service that reviews critical software, systems, and IT environments (including Google Workspace and Microsoft 365) to identify misconfigurations and recommend fixes that strengthen the organization's digital foundations.
- Cyber Security For Good Grant Pro bono grant program delivering up to $25,000 of in-kind cybersecurity services — including roadmap assessments, Foundations training, staff training, and incident response support — at no cost to qualifying 501(c)(3) and 501(c)(4) nonprofits, certified B Corps, and global purpose-driven organizations.
Quantifiable outcome
- MFA can prevent approximately 90% of cyber attacks
- +4 more outcomes
Companies that use RipRap Security
Customer profileNamed customers7 records
Segments4 records
Ideal customer profiles4 records
RipRap Security technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
RipRap Security partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered minor.
- Defending Digital CampaignsminorDefending Digital Campaigns provides free Titan Security Keys to qualifying organizations. RipRap Security references this program as a resource for organizations needing hardware security keys for Google Advanced Protection enrollment — part of RipRap's Google Workspace hardening recommendations for high-risk nonprofit staff.
- NGO-ISACminorNGO-ISAC (Information Sharing and Analysis Center for the NGO sector) is a nonprofit security community. RipRap Security co-presented a simulated incident response tabletop exercise with NGO-ISAC at an event hosted with the Technology Association of Grantmakers, serving 60 leaders from nonprofits, foundations, and advocacy organizations.
- Technology Association of Grantmakers (TAGtech)minorThe Technology Association of Grantmakers (TAGtech) hosts events for foundation technology leaders. RipRap co-presented a tabletop incident response exercise with NGO-ISAC at a TAGtech-hosted event, reaching foundation and nonprofit leaders.
- Cloudflare Project GalileominorProject Galileo is a free Cloudflare service specifically for nonprofits, protecting websites from attacks. RipRap Security recommends this free resource to nonprofit clients as part of website security hardening, noting Cloudflare often partners with local organizations to provide implementation support.
- 1Password for Nonprofitsminor1Password offers a nonprofit discount program. RipRap Security recommends 1Password as a must-have password manager for nonprofits in 2026, noting the nonprofit discount makes it accessible for organizations of all sizes.
Scale indicators7 records
Recent moves4 records
Expansion highlights6 records
RipRap Security competitors and assessment
Company assessmentBroad incumbents
- Huntress: Huntress provides managed cybersecurity detection and response targeted at SMBs and the MSP channel. Comparable to RipRap's SMB-focused advisory posture and similar price-sensitive buyer, though Huntress sells proprietary technology rather than pure advisory.
- Arctic Wolf: Arctic Wolf is a large managed detection and response provider serving SMB and mid-market customers. Comparable to RipRap because it sells security operations and advisory to organizations without dedicated security teams, though it serves a far broader commercial market rather than the nonprofit vertical.
- Schellman: Schellman is a cybersecurity and compliance assessment provider offering penetration testing, vCISO, and advisory services. Comparable to RipRap because both run assessment- and advisory-led cybersecurity practices, though Schellman focuses on enterprise compliance frameworks.
- A-LIGN: A-LIGN is a cybersecurity compliance and advisory firm providing assessments, penetration testing, and virtual CISO services. Comparable to RipRap because both sell GRC advisory, pen testing, and vCISO engagements, though A-LIGN serves commercial and regulated industries rather than nonprofits.
Direct peers
- TechSoup: TechSoup delivers technology products, services, and support to nonprofits globally at reduced cost. Comparable because both focus on democratizing technology and security access for nonprofits and mission-driven organizations with limited budgets.
- NetHope: NetHope is a nonprofit consortium that builds cybersecurity capacity for the global nonprofit and humanitarian sector. Directly comparable to RipRap because both serve nonprofits with cybersecurity advisory, capacity-building, and incident response, addressing the same underserved vertical.
- Community IT Innovators: Community IT Innovators provides managed IT and cybersecurity services exclusively to nonprofits. Directly comparable to RipRap because both are services firms dedicated to the nonprofit vertical, offering similar advisory and security capabilities.
- NTEN (Nonprofit Technology Enterprise Network): NTEN provides technology training, professional development, and advisory resources for nonprofit professionals. Directly comparable to RipRap's Foundations Bootcamp and community-embedded GTM (office hours, newsletters, free resources) targeting the same nonprofit buyer.
Others
- Defending Digital Campaigns: Defending Digital Campaigns provides free cybersecurity tools, including Titan Security Keys, to qualifying campaigns and nonprofit organizations. Ecosystem-adjacent to RipRap because RipRap references this program as a resource for high-risk nonprofit staff, making it a referral partner rather than competitor.
- Cloudflare Project Galileo: Cloudflare's Project Galileo provides free DDoS protection and security services to nonprofits, journalists, and election-related organizations. Ecosystem-adjacent to RipRap because RipRap recommends Project Galileo to nonprofit clients as part of its security stack, making them channel-adjacent rather than direct competitors.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
RipRap Security social profiles
Digital presenceRipRap Security compliance and trust
Trust signalCompliance2 records
RipRap Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
RipRap Security leadership team
Management profileNumber of profiles
Profiles2 records
RipRap Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
RipRap Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about RipRap Security
What does RipRap Security do?
RipRap Security delivers tailored cybersecurity consulting and advisory services — primarily Cyber Security Roadmap Assessments, Penetration Testing, Cyber Compromise Assessments, Security Architecture Review, Virtual CISO, Secure Configuration, and Employee Training — to nonprofits, B Corps, and other purpose-driven organizations. Engagements follow a NIST CSF-aligned, evidence-based methodology and are delivered as fixed-scope projects or ongoing retainers, with a separate cohort-based Cyber Security Foundations Bootcamp.
Is RipRap Security a public or private company?
RipRap Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was RipRap Security founded?
RipRap Security was founded in 2020. It employs 1 to 10 people.
Where is RipRap Security based?
RipRap Security is headquartered in Fairfax, United States, in the North America region.
How does RipRap Security make money?
Five revenue lines are on record. Professional Services (Cyber Security Roadmap Assessments) is the primary driver. The others are cyber Security Foundations Bootcamp, penetration Testing & Cyber Compromise Assessments, virtual CISO & Security Architecture Review and cyber Security For Good Grant (Pro Bono).
Who are RipRap Security's main competitors?
Broad incumbents on record are Huntress, Arctic Wolf, Schellman and A-LIGN. Direct peers are TechSoup, NetHope, Community IT Innovators and NTEN (Nonprofit Technology Enterprise Network). Others are Defending Digital Campaigns and Cloudflare Project Galileo.
Does RipRap Security have an API?
No public API is recorded for RipRap Security.
What industry is RipRap Security in?
RipRap Security's product category is Cybersecurity Consulting Services. Its primary akta.pro industry code is BPAKAHAF, Penetration Testing & Red Teaming, with a secondary code of BPAEADAD, Vulnerability Management & Penetration Testing Services. Its NAICS code is 54151.