IT Security

What IT Security does

IT Security, Inc. is a Pittsburgh-based cybersecurity consulting firm founded in 2013 by Albert E. Whale, providing advisory and managed security services to government agencies, financial institutions, healthcare organizations, manufacturers, and educational institutions. The company's stated mission is to help clients solidify their security posture before a breach occurs, with particular emphasis on bridging the gap between regulatory compliance (FISMA, NIST, HIPAA, PCI, FFIEC, GLB) and actual security effectiveness. Service offerings include penetration testing, compliance audits, security assessments, CSO-as-a-Service, incident response, and cybersecurity training, delivered under a vendor-agnostic, quote-based engagement model.

On the product side, IT Security markets a portfolio of proprietary tools — most notably the ITS Safe inline security appliance (introduced around 2020) that inspects active network traffic and blocks communications with foreign countries, the dark web, TOR, and hijacked IP addresses — alongside complementary offerings including Active Defense (layered Unix/Linux hardening), Clean Content (web content filtering), Server Safe (adaptive firewall/IPS), SpamZapper, Wireless Security, and Server Admin. The firm also resells third-party security software, notably Cimcor's CimTrak file integrity monitoring and Code Dx's vulnerability management system, which carry federal-grade certifications (FIPS 140-2 Level 2, Common Criteria EAL4+, DISA UC-APL).

The business model blends professional services, hardware appliance sales, recurring cloud hosting (Secure Cloud, US-based, multi-location redundancy), and software resale. A wholly-owned federal division (IT Security Federal, opened November 2016), HUBZone and SDVOSB certifications (April 2017), and named engagements with the Department of Veterans Affairs, US Steel, Carnegie Mellon University, and AmeriServ Financial indicate the firm's core commercial anchor is regulated U.S. buyers. The company has no disclosed external funding, operates from a single headquarters in Pittsburgh, and runs on a small team of 11–50 professionals.

Name

IT Security

Legal name

IT Security, Inc.

Website

https://it-security-inc.com

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

11–50 employees

Short description

IT Security, Inc. is a Pittsburgh-based, SDVOSB and HUBZone-certified cybersecurity consulting firm delivering penetration testing, compliance, and managed security services — alongside its ITS Safe inline security appliance — to U.S. federal, financial, healthcare, manufacturing, and education clients.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting Services

NAICS

Computer Systems Design and Related Services (54151), Computer Systems Design Services (541512)

akta.pro primary industry

Security Consulting, Risk Assessment & Security Program Design (BPABAMAE)

akta.pro secondary industries

Cybersecurity Architecture & Security Integration (BPAEAAAL), Cyber Defense & Information Security (National Security) (BPAIAHAE), Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG)

Keywords

• Cybersecurity consulting
• Penetration testing
• Compliance services
• Network security
• Managed security

Headquarters

HQ city

Pittsburgh

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Professional Services: Consulting services including penetration testing, security assessments, compliance auditing, CSO as a Service, and incident response. Delivered by experienced professionals on a project or retainer basis.
2. Security Appliance Sales: Sale of ITS Safe security appliance hardware with ongoing configuration and monitoring support. One-time hardware purchase with potential recurring support services.
3. Secure Cloud Services: US-based cloud hosting with security services including network security, web-based security, compliance support, and encryption. Monthly service with multi-location hosting for redundancy.
4. Software Resale: Resale of third-party security software including CimTrak, Code Dx, and other tools with professional implementation and integration services.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels6 records

Core offering

IT Security, Inc. is a Pittsburgh-based cybersecurity consulting firm that delivers security assessments, penetration testing, and compliance services (FISMA, NIST, FFIEC, PCI, HIPAA, GLB) to government and commercial organizations. The firm also offers proprietary and resold security products, including the ITS Safe inline security appliance, Active Defense for Unix/Linux, Clean Content filtering, Secure Cloud hosting, and CSO as a Service. Its mission is to help organizations solidify their security posture proactively, before a breach occurs.

Product overview

IT Security offers a portfolio of security products and consulting services. Their core products include the ITS Safe Security Appliance for inline network protection, Active Defense for layered Unix/Linux security, Clean Content for web content filtering, SpamZapper for email security, Server Safe for firewall/IPS protection, Wireless Security tools, Server Admin for server management, along with resold products Code Dx and CimTrak. Services include Compliance consulting, Penetration Testing, CSO as a Service, Secure Cloud, and Training programs.

Differentiator

Problem solved

Functional benefit

Brands

• ITS Safe: Security appliance that detects and blocks unwanted activities inside networks that firewalls and virus scanners cannot stop. Works on active traffic to protect all devices within the network.
• Active Defense
• Clean Content
• SpamZapper
• Server Safe

Products and services

• ITS Safe Security Appliance Inline security appliance that detects and blocks unwanted network activities, communications with foreign countries, the dark web, unregistered/hijacked IP addresses, and TOR network traffic. Works on active traffic to enable real-time protection for enterprise networks.
• Compliance Services Security audits, penetration testing and enterprise management solutions supporting FISMA, NIST, Nerc, FDIC, FFIEC, PCI, HIPAA, and GLB compliance requirements for government and regulated industries.
• Penetration Testing Services Testing of computer networks, systems, web and mobile applications to find vulnerabilities, including Black Box and White Box testing, SAST, DAST, and manual assessment techniques.
• CSO as a Service
• Secure Cloud
• Training Services
• ITS Safe Security Appliance (Sub-brand) Inline security appliance sub-brand that detects and blocks unwanted activities inside networks that firewalls and virus scanners cannot stop. Works on active traffic to protect all devices within the network.
• Active Defense
• Clean Content
• Server Safe
• SpamZapper
• Server Admin
• Wireless Security
• CimTrak Reseller Offering Reseller offering of Cimcor's advanced file integrity monitoring tool with change and configuration management for servers, workstations, network devices, databases, and VMware ESXi hosts with immediate alerting and remediation.
• Code Dx Reseller Offering Reseller offering of Code Dx software vulnerability management system that consolidates and normalizes vulnerabilities from multiple SAST and DAST tools and manual code reviews, with visual analytics for triage and prioritization.

Quantifiable outcome

• Saved VA more than $1 Million in 6 months through improved security controls implementation

Named customers5 records

Segments6 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Two partnerships are on record, tiered core.

• CimcorcoreChannel Partner/ Reseller/ Distributor · 7 September 2016IT Security partners with Cimcor as a reseller of CimTrak, an advanced file integrity monitoring and change/configuration management tool. The partnership enables IT Security to offer clients immediate alerting and optional remediation capabilities for detecting unauthorized changes to servers, network devices, and other IT assets. Cimcor ranked #75 on Cybersecurity Ventures 2016 list of 500 Hottest Security Companies.
• Code DxcoreChannel Partner/ Reseller/ Distributor · 3 September 2015IT Security became a reseller of Code Dx Vulnerability Management System, a software tool that detects, consolidates and normalizes software vulnerabilities through code analysis. The partnership helps IT Security clients secure their software supply chain by combining Code Dx's application security solutions with IT Security's consulting expertise.

Scale indicators3 records

Recent moves7 records

Expansion highlights5 records

Broad incumbents

• Secureworks: Global cybersecurity services firm offering managed detection, incident response, and compliance consulting. Comparable to IT Security's CSO-as-a-Service and compliance offerings, but at enterprise scale.
• ManTech International: Federal IT and cybersecurity services provider with deep mission-focused cyber capabilities. Overlaps with IT Security's federal cyber consulting and compliance work, but competes as a top-tier prime.
• Booz Allen Hamilton: Large federal integrator with a substantial commercial and federal cybersecurity practice covering FISMA, RMF, and pen testing. Operates in the same federal cyber market as IT Security but as a broad incumbent at substantially greater scale.

Direct peers

• GuidePoint Security: Cybersecurity solutions integrator focused on federal and commercial customers, offering advisory, identity, and managed detection services. Comparable to IT Security in combining vendor-agnostic consulting with federal-civilian expertise.
• By Light Professional IT Services: SDVOSB IT services firm with deep federal-civilian and DoD cybersecurity engagements, including RMF and security engineering. Comparable to IT Security in set-aside status, federal focus, and cybersecurity services model.
• DirectViz Solutions: SDVOSB cybersecurity and IT services firm serving federal civilian and DoD customers. Direct comparable to IT Security on set-aside status, federal cyber services portfolio, and small-business scale.
• Coalfire: Cybersecurity advisory firm specializing in compliance (FedRAMP, FISMA, HIPAA, PCI) and pen testing, with a strong federal footprint. Direct overlap with IT Security's compliance and pen-testing services portfolio.
• Optiv Security: Large pure-play cybersecurity solutions integrator offering advisory, integration, and managed security services across enterprise and government. Closely matches IT Security's vendor-agnostic consulting-plus-product positioning, though at much greater scale.
• Millennium Corporation: SDVOSB providing IT and cybersecurity services to federal agencies, including risk management framework support. Matches IT Security on set-aside contracting status and federal cyber services delivery.

Emerging players

• Pondurance: Mid-market-focused cybersecurity firm offering managed detection, response, and compliance services. Comparable to IT Security's compliance and CSO-as-a-Service offerings, with similar mid-market and regulated-industry orientation.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/AWhalePgh
• Facebookfacebook.com/IT.SecurInc
• LinkedInlinkedin.com/company/albertwhale

Compliance8 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about IT Security