What Sage Infrastructure Solutions Group does

Sage Infrastructure Solutions Group (Sage ISG) is a privately held Canadian cybersecurity firm headquartered in Calgary, Alberta. Founded in 2013 by Cory Merritt, the company sells a portfolio of five core products — OrbitalCyber (an open-source-powered vulnerability assessment platform with virtual-appliance scanners and usage-based pricing), SIEM Logging Layer (a containerized, Kubernetes-ready log filtering and enrichment tool), Managed Anti-Virus (a zero-trust endpoint protection service leveraging Xcitium), Network Security (Fortinet/WatchGuard-powered firewalls, SD-WAN, NAC, IDS/IPS), and a Human Risk Management training platform — alongside professional services including penetration testing, risk and gap assessments, policy development, threat modelling, and security incident management. Technology is anchored on open-source scanning/logging cores, containerized deployment, and integrations with strategic vendors Microsoft, Fortinet, and Xcitium.

Sage ISG monetizes through a hybrid of subscription/usage-based SaaS (OrbitalCyber with a $30 starter balance and pay-as-you-go scanning credits), recurring managed services with customizable SLAs, subscription-based security awareness training, and project-based professional services priced via consultation. Its go-to-market is consultative direct enterprise field sales, anchored in a free security assessment as lead generation, targeting Canadian organizations across ten verticals: oil & gas, insurance, education, finance, legal, mining, retail, utilities, aviation, and government. The firm claims operational scale of managing over 18,000 retail endpoints without a security incident and supports customers with ISACA COBIT-based maturity assessments and virtual CISO (vCISO) engagements.

The company is bootstrapped and founder-controlled, with no disclosed funding rounds, no institutional investors, and a headcount of 1–10. Two named customer testimonials both reference an unnamed "Government Organization" (Director of IT), indicating that despite vertical breadth, government accounts appear to be a primary revenue anchor. Marketing is content-driven via a blog and newsletter, with geographic reach confined to Canada.

Name

Sage Infrastructure Solutions Group

Legal name

Sage Infrastructure Solutions Group Inc

Website

https://sageisg.com

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

1–10 employees

Short description

Sage Infrastructure Solutions Group is a Calgary-based, privately held Canadian cybersecurity firm that sells vulnerability assessment (OrbitalCyber), SIEM logging, managed antivirus, network security, and security awareness products alongside penetration testing and advisory services to Canadian enterprises and government organizations across ten verticals.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (54151), Other Scientific and Technical Consulting Services (54169)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG)

akta.pro secondary industries

IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC) (HDABAHAI)

Keywords

• Managed security services
• Vulnerability assessment
• Penetration testing
• Cybersecurity consulting
• Incident response

Headquarters

HQ city

Calgary

HQ country

Canada

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Professional Cybersecurity Services: Consulting and advisory services including penetration testing, vulnerability assessments, risk and gap assessments, policy review and development, threat modelling, and security incident management. Delivered by certified professionals with decades of experience in IT, risk, and security across various industries.
2. OrbitalCyber SaaS Platform: Subscription-based vulnerability assessment platform with a usage model. New accounts receive a $30 starting balance. Customers deploy virtual appliance scanners to internal networks and cloud environments, with costs based on scanning usage and deployment scale.
3. Managed Security Services: 24/7 monitoring and managed services including SIEM logging layer management, antivirus management, and incident response. Offered with service level agreements (SLAs) and incident response commitments. Includes expert onboarding and application/cloud environment integration support.
4. End-User Training Services: Human Risk Management platform offering phishing assessments and security awareness training. Delivered through automated training programs and user-tailored content to cultivate security-minded workforce culture.

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels3 records

Core offering

Sage Infrastructure Solutions Group (Sage ISG) is a Canadian cybersecurity firm that delivers professional security services—penetration testing, vulnerability assessments, risk and gap assessments, policy review and development, advisory services, threat modelling, and security incident management—alongside a portfolio of proprietary and open-source-powered products including the OrbitalCyber vulnerability assessment platform, SIEM Logging Layer, Managed Anti-Virus, Network Security, and End-User Training. The company targets Canadian enterprises and government organizations with vendor-agnostic, certified-professional-led security advisory and 24/7 managed security services.

Product overview

Sage Infrastructure Solutions Group offers a portfolio of five core cybersecurity products: OrbitalCyber (vulnerability assessment solution for scanning internal networks and cloud environments), SIEM Logging Layer (open-source-powered log filtering and enrichment solution), Managed Anti-Virus (zero-trust antivirus management), Network Security (next-generation firewalls, SD-WAN, NAC, IDS/IPS), and End-User Training (Human Risk Management platform with phishing assessments). The company also provides professional services including penetration testing, vulnerability assessments, risk and gap assessments, policy review and development, advisory services, threat modelling, and security incident management.

Differentiator

Problem solved

Functional benefit

Brands

• OrbitalCyber: Vulnerability assessment solution that allows customers to deploy vulnerability scanners to internal networks and cloud environments. Powered by open-source software, it offers comprehensive vulnerability assessments with daily database updates.

Products and services

• OrbitalCyber An affordable, easy-to-deploy, and scalable vulnerability assessment solution that enables organizations to deploy vulnerability scanners to internal networks and cloud environments, providing comprehensive vulnerability assessments and critical insights to strengthen security posture.
• SIEM Logging Layer An open-source-powered logging solution that transforms how organizations collect, filter, and enrich log data before it reaches the SIEM, helping security teams identify and mitigate potential threats effectively.
• Managed Anti-Virus A comprehensive antivirus management solution that secures, monitors, and scans organizational IT assets using a zero-trust approach, where executables run in virtual containers or are blocked until cloud analysis confirms they are not malicious.
• Network Security Advanced network security solutions integrating next-generation firewalls, Software Defined WAN (SD-WAN), Network Access Control (NAC), and Intrusion Detection/Prevention Systems (IDS/IPS) to safeguard business digital assets.
• End-User Training A Human Risk Management (HRM) platform featuring phishing assessments that simulate real-world phishing attacks, gauge user security awareness, and provide automated training programs to foster a security-minded workforce.
• Penetration Testing Expert penetration testing services delivered by certified ethical hackers to test the efficacy of organizational security controls and identify exploitable weaknesses.
• Vulnerability Assessments Service to identify and prioritize cybersecurity risks across organizational assets, complementing the OrbitalCyber platform's automated scanning capability.
• Risk & Gap Assessments Service in which ethical hackers evaluate organizational security controls against threats and compliance requirements to identify remediation gaps.
• Policy Review & Development Development and review of comprehensive cybersecurity policies tailored to organizational needs in rapidly evolving digital and regulatory landscapes.
• Advisory Services (including vCISO) Strategic security advisory including virtual CISO (vCISO) services and Cybersecurity Maturity Level Assessments using the ISACA COBIT framework, leveraging decades of IT, risk, and security experience across multiple industries and business sizes.
• Threat Modelling Proactive service to identify and mitigate potential security threats by modelling attacker behaviour against organizational systems and assets.
• Security Incident Management Rapid-response incident management with customizable service-level agreements and flexible response times for organizational security events.

Quantifiable outcome

• Managed and protected over 18,000 retail systems without a single security incident
• +2 more outcomes

Named customers2 records

Segments10 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

Three partnerships are on record, tiered core.

• MicrosoftcoreTechnology or IntegrationStrategic partnership enabling Sage ISG to offer Microsoft security solutions including Microsoft Defender Advanced Threat Protection (ATP), Azure Security Center, and Microsoft 365 Security. Combined technologies leverage Microsoft's advanced AI and machine learning capabilities for intelligent threat detection and response.
• FortinetcoreTechnology or IntegrationStrategic partnership providing next-generation firewalls, Secure SD-WAN, and Fortinet's Security Fabric for comprehensive security solutions. Fortinet's Security Fabric enables real-time threat detection and response to help organizations stay ahead of evolving cybersecurity risks.
• Xcitium (formerly Comodo)coreTechnology or IntegrationStrategic partnership leveraging Xcitium's robust antivirus platform for endpoint security. Xcitium's zero-trust approach runs executables in virtual containers or blocks until cloud analysis confirms safety, supporting Sage ISG's managed antivirus solution with emphasis on zero-trust architecture.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Cycura: Toronto-based cybersecurity professional services firm (now part of Optiv) providing penetration testing, incident response, and offensive security — directly comparable in professional services scope to Sage ISG's consulting offering.
• GoSecure: Canadian-headquartered MSSP offering managed detection and response, penetration testing, and advisory — directly overlapping Sage ISG's professional and managed services portfolio in the Canadian market.
• Arctic Wolf: Large managed security operations provider offering a concierge SOC model that overlaps with Sage ISG's 24/7 managed security, SIEM logging, and incident response services for SMB and mid-market.
• Rapid7: Public cybersecurity vendor combining vulnerability management (InsightVM), SIEM (InsightIDR), and managed services — overlaps with OrbitalCyber, SIEM Logging Layer, and Sage ISG's managed security offering.
• eSentire: Waterloo, Ontario-based pure-play MDR/MSSP focused on mid-market and enterprise customers; competes with Sage ISG for Canadian managed security, incident response, and SOC services work.
• Tenable: Industry-leading vulnerability management platform (Nessus, Tenable One) and a direct competitor to Sage ISG's OrbitalCyber product on both feature breadth and enterprise credibility.
• Field Effect Software: Ottawa-based Canadian cybersecurity firm offering managed detection and response, vulnerability management, and endpoint protection to SMB and mid-market — directly comparable in geography, size, and target customer profile.
• KnowBe4: Market-leading security awareness and Human Risk Management platform — directly competes with Sage ISG's End-User Training / HRM product line in phishing simulation and training.

Broad incumbents

• Herjavec Group: Toronto-based, larger Canadian cybersecurity services firm (now private-equity-backed) offering managed security, advisory, and identity services — comparable offerings to Sage ISG but at significantly greater scale.
• Optiv: Large US-headquartered MSSP and security solutions integrator with significant Canadian operations; competes with Sage ISG across managed services, advisory, and enterprise GRC engagements but at substantially greater scale.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/SageISG
• LinkedInlinkedin.com/company/sage-infrastructure-solutions-group-inc.

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Sage Infrastructure Solutions Group