IT Security
IT Security, Inc. is a Pittsburgh-based, SDVOSB and HUBZone-certified cybersecurity consulting firm delivering penetration testing, compliance, and managed security services — alongside its ITS Safe inline security appliance — to U.S. federal, financial, healthcare, manufacturing, and education clients.
- Company typePrivate
- Founded2013
- HeadquartersPittsburgh, United States
- Headcount11–50
- GTM typeB2B
- OfferingServices
What IT Security does
IT Security, Inc. is a Pittsburgh-based cybersecurity consulting firm founded in 2013 by Albert E. Whale, providing advisory and managed security services to government agencies, financial institutions, healthcare organizations, manufacturers, and educational institutions. The company's stated mission is to help clients solidify their security posture before a breach occurs, with particular emphasis on bridging the gap between regulatory compliance (FISMA, NIST, HIPAA, PCI, FFIEC, GLB) and actual security effectiveness. Service offerings include penetration testing, compliance audits, security assessments, CSO-as-a-Service, incident response, and cybersecurity training, delivered under a vendor-agnostic, quote-based engagement model.
On the product side, IT Security markets a portfolio of proprietary tools — most notably the ITS Safe inline security appliance (introduced around 2020) that inspects active network traffic and blocks communications with foreign countries, the dark web, TOR, and hijacked IP addresses — alongside complementary offerings including Active Defense (layered Unix/Linux hardening), Clean Content (web content filtering), Server Safe (adaptive firewall/IPS), SpamZapper, Wireless Security, and Server Admin. The firm also resells third-party security software, notably Cimcor's CimTrak file integrity monitoring and Code Dx's vulnerability management system, which carry federal-grade certifications (FIPS 140-2 Level 2, Common Criteria EAL4+, DISA UC-APL).
The business model blends professional services, hardware appliance sales, recurring cloud hosting (Secure Cloud, US-based, multi-location redundancy), and software resale. A wholly-owned federal division (IT Security Federal, opened November 2016), HUBZone and SDVOSB certifications (April 2017), and named engagements with the Department of Veterans Affairs, US Steel, Carnegie Mellon University, and AmeriServ Financial indicate the firm's core commercial anchor is regulated U.S. buyers. The company has no disclosed external funding, operates from a single headquarters in Pittsburgh, and runs on a small team of 11–50 professionals.
IT Security firmographics
Firmographics- Name
- IT Security
- Legal name
- IT Security, Inc.
- Website
- https://it-security-inc.com
- Company type
- Private
- Founded year
- 2013
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- IT Security, Inc. is a Pittsburgh-based, SDVOSB and HUBZone-certified cybersecurity consulting firm delivering penetration testing, compliance, and managed security services — alongside its ITS Safe inline security appliance — to U.S. federal, financial, healthcare, manufacturing, and education clients.
- Ownership category
- akta.pro rank
IT Security industry classification
Industry- Product category
- Cybersecurity Consulting Services
- NAICS
- Computer Systems Design and Related Services (54151), Computer Systems Design Services (541512)
- akta.pro primary industry
- Security Consulting, Risk Assessment & Security Program Design (BPABAMAE)
- akta.pro secondary industries
- Cybersecurity Architecture & Security Integration (BPAEAAAL), Cyber Defense & Information Security (National Security) (BPAIAHAE), Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG)
Keywords
Where IT Security is headquartered
LocationHeadquarters
- HQ city
- Pittsburgh
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
IT Security business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Professional Services: Consulting services including penetration testing, security assessments, compliance auditing, CSO as a Service, and incident response. Delivered by experienced professionals on a project or retainer basis.
- Security Appliance Sales: Sale of ITS Safe security appliance hardware with ongoing configuration and monitoring support. One-time hardware purchase with potential recurring support services.
- Secure Cloud Services: US-based cloud hosting with security services including network security, web-based security, compliance support, and encryption. Monthly service with multi-location hosting for redundancy.
- Software Resale: Resale of third-party security software including CimTrak, Code Dx, and other tools with professional implementation and integration services.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Custom enterprise engagement |
Go-to-market motion2 records
Distribution channels4 records
Marketing channels6 records
IT Security product offering
Product offeringCore offering
IT Security, Inc. is a Pittsburgh-based cybersecurity consulting firm that delivers security assessments, penetration testing, and compliance services (FISMA, NIST, FFIEC, PCI, HIPAA, GLB) to government and commercial organizations. The firm also offers proprietary and resold security products, including the ITS Safe inline security appliance, Active Defense for Unix/Linux, Clean Content filtering, Secure Cloud hosting, and CSO as a Service. Its mission is to help organizations solidify their security posture proactively, before a breach occurs.
Product overview
IT Security offers a portfolio of security products and consulting services. Their core products include the ITS Safe Security Appliance for inline network protection, Active Defense for layered Unix/Linux security, Clean Content for web content filtering, SpamZapper for email security, Server Safe for firewall/IPS protection, Wireless Security tools, Server Admin for server management, along with resold products Code Dx and CimTrak. Services include Compliance consulting, Penetration Testing, CSO as a Service, Secure Cloud, and Training programs.
Differentiator
Problem solved
Functional benefit
Brands
- ITS Safe: Security appliance that detects and blocks unwanted activities inside networks that firewalls and virus scanners cannot stop. Works on active traffic to protect all devices within the network.
- Active Defense
- Clean Content
- SpamZapper
- Server Safe
Products and services
- ITS Safe Security Appliance Inline security appliance that detects and blocks unwanted network activities, communications with foreign countries, the dark web, unregistered/hijacked IP addresses, and TOR network traffic. Works on active traffic to enable real-time protection for enterprise networks.
- Compliance Services Security audits, penetration testing and enterprise management solutions supporting FISMA, NIST, Nerc, FDIC, FFIEC, PCI, HIPAA, and GLB compliance requirements for government and regulated industries.
- Penetration Testing Services Testing of computer networks, systems, web and mobile applications to find vulnerabilities, including Black Box and White Box testing, SAST, DAST, and manual assessment techniques.
- CSO as a Service
- Secure Cloud
- Training Services
- ITS Safe Security Appliance (Sub-brand) Inline security appliance sub-brand that detects and blocks unwanted activities inside networks that firewalls and virus scanners cannot stop. Works on active traffic to protect all devices within the network.
- Active Defense
- Clean Content
- Server Safe
- SpamZapper
- Server Admin
- Wireless Security
- CimTrak Reseller Offering Reseller offering of Cimcor's advanced file integrity monitoring tool with change and configuration management for servers, workstations, network devices, databases, and VMware ESXi hosts with immediate alerting and remediation.
- Code Dx Reseller Offering Reseller offering of Code Dx software vulnerability management system that consolidates and normalizes vulnerabilities from multiple SAST and DAST tools and manual code reviews, with visual analytics for triage and prioritization.
Quantifiable outcome
- Saved VA more than $1 Million in 6 months through improved security controls implementation
Companies that use IT Security
Customer profileNamed customers5 records
Segments6 records
Ideal customer profiles4 records
IT Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature4 records
IT Security partnerships and signals
Strategic signalPartnerships
Two partnerships are on record, tiered core.
- CimcorcoreIT Security partners with Cimcor as a reseller of CimTrak, an advanced file integrity monitoring and change/configuration management tool. The partnership enables IT Security to offer clients immediate alerting and optional remediation capabilities for detecting unauthorized changes to servers, network devices, and other IT assets. Cimcor ranked #75 on Cybersecurity Ventures 2016 list of 500 Hottest Security Companies.
- Code DxcoreIT Security became a reseller of Code Dx Vulnerability Management System, a software tool that detects, consolidates and normalizes software vulnerabilities through code analysis. The partnership helps IT Security clients secure their software supply chain by combining Code Dx's application security solutions with IT Security's consulting expertise.
Scale indicators3 records
Recent moves7 records
Expansion highlights5 records
IT Security competitors and assessment
Company assessmentBroad incumbents
- Secureworks: Global cybersecurity services firm offering managed detection, incident response, and compliance consulting. Comparable to IT Security's CSO-as-a-Service and compliance offerings, but at enterprise scale.
- ManTech International: Federal IT and cybersecurity services provider with deep mission-focused cyber capabilities. Overlaps with IT Security's federal cyber consulting and compliance work, but competes as a top-tier prime.
- Booz Allen Hamilton: Large federal integrator with a substantial commercial and federal cybersecurity practice covering FISMA, RMF, and pen testing. Operates in the same federal cyber market as IT Security but as a broad incumbent at substantially greater scale.
Direct peers
- GuidePoint Security: Cybersecurity solutions integrator focused on federal and commercial customers, offering advisory, identity, and managed detection services. Comparable to IT Security in combining vendor-agnostic consulting with federal-civilian expertise.
- By Light Professional IT Services: SDVOSB IT services firm with deep federal-civilian and DoD cybersecurity engagements, including RMF and security engineering. Comparable to IT Security in set-aside status, federal focus, and cybersecurity services model.
- DirectViz Solutions: SDVOSB cybersecurity and IT services firm serving federal civilian and DoD customers. Direct comparable to IT Security on set-aside status, federal cyber services portfolio, and small-business scale.
- Coalfire: Cybersecurity advisory firm specializing in compliance (FedRAMP, FISMA, HIPAA, PCI) and pen testing, with a strong federal footprint. Direct overlap with IT Security's compliance and pen-testing services portfolio.
- Optiv Security: Large pure-play cybersecurity solutions integrator offering advisory, integration, and managed security services across enterprise and government. Closely matches IT Security's vendor-agnostic consulting-plus-product positioning, though at much greater scale.
- Millennium Corporation: SDVOSB providing IT and cybersecurity services to federal agencies, including risk management framework support. Matches IT Security on set-aside contracting status and federal cyber services delivery.
Emerging players
- Pondurance: Mid-market-focused cybersecurity firm offering managed detection, response, and compliance services. Comparable to IT Security's compliance and CSO-as-a-Service offerings, with similar mid-market and regulated-industry orientation.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
IT Security social profiles
Digital presenceIT Security compliance and trust
Trust signalCompliance8 records
IT Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
IT Security leadership team
Management profileNumber of profiles
Profiles2 records
IT Security subsidiaries and ownership
Company hierarchySubsidiaries1 record
IT Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
IT Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about IT Security
What does IT Security do?
IT Security, Inc. is a Pittsburgh-based cybersecurity consulting firm that delivers security assessments, penetration testing, and compliance services (FISMA, NIST, FFIEC, PCI, HIPAA, GLB) to government and commercial organizations. The firm also offers proprietary and resold security products, including the ITS Safe inline security appliance, Active Defense for Unix/Linux, Clean Content filtering, Secure Cloud hosting, and CSO as a Service. Its mission is to help organizations solidify their security posture proactively, before a breach occurs.
Is IT Security a public or private company?
IT Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was IT Security founded?
IT Security was founded in 2013. It employs 11 to 50 people.
Where is IT Security based?
IT Security is headquartered in Pittsburgh, United States, in the North America region.
How does IT Security make money?
Four revenue lines are on record. Professional Services are the primary driver. The others are security Appliance Sales, secure Cloud Services and software Resale.
Who are IT Security's main competitors?
Broad incumbents on record are Secureworks, ManTech International and Booz Allen Hamilton. Direct peers are GuidePoint Security, By Light Professional IT Services, DirectViz Solutions, Coalfire, Optiv Security and Millennium Corporation. Pondurance is listed as an emerging player.
Does IT Security have an API?
No public API is recorded for IT Security.
What industry is IT Security in?
IT Security's product category is Cybersecurity Consulting Services. Its primary akta.pro industry code is BPABAMAE, Security Consulting, Risk Assessment & Security Program Design, with a secondary code of BPAEAAAL, Cybersecurity Architecture & Security Integration. Its NAICS code is 54151.