Lionfish Cyber Security

What Lionfish Cyber Security does

Lionfish Cyber Security is a private, SDVOSB-certified, Indianapolis-based cybersecurity firm that helps defense subcontractors achieve and maintain CMMC (Cybersecurity Maturity Model Certification) readiness and offers the certifications, workforce training, and GRC tooling required to support that work. Its core product is the Cyber Tackle Box, an AI-augmented multi-tenant SaaS platform that consolidates CMMC, NIST 800-171, HIPAA, and SOC 2 control tracking, evidence collection, policy automation, POA&M management, and cyber awareness training in a single system. The platform embeds a patent-pending AI training methodology that personalizes employee learning paths and is supported by a content library of 52 awareness modules (including a first-of-its-kind music-based training format) and 1,000+ hours of video. Lionfish also operates as a Cyber AB Accredited Training Provider delivering official CCP and CCA certification curricula, runs a DOL-registered apprenticeship program, and partners with Purdue CERIAS, Ball State, and Northern Virginia Community College on the Cyber Sentinel Program, through which students are deployed to protect real organizations.

The company makes money across four streams: (1) CMMC Rapid Deployment professional services — gap assessment, remediation planning, and C3PAO assessment readiness for defense contractors, priced by quote after a free 30-minute readiness call; (2) Cyber Tackle Box subscription revenue, including white-label multi-tenant MSP pricing billed annually; (3) one-time/perpetual training licenses for CCP ($1,999), CCA, and CompTIA certification tracks with separate exam vouchers; and (4) grant-eligible workforce development and apprenticeship programs. Go-to-market combines enterprise field sales targeting defense contractors ahead of the November 10, 2026 CMMC Phase 2 deadline, direct self-serve online enrollment for individual certifications, an expanding MSP/channel reseller motion, and a community-led talent pipeline via university partnerships and the AFCEA Indiana chapter (where founder Jeremy Miller is founding president). The company was founded in 2018 by Miller, a U.S. Army Special Forces veteran, and operates with 51–100 employees.

Name

Lionfish Cyber Security

Legal name

Lionfish Cyber Security

Website

https://lionfishcybersecurity.com

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

11–50 employees

Short description

Lionfish Cyber Security is a private, SDVOSB-certified Indianapolis firm that provides CMMC compliance consulting, CCP/CCA certification training, and the Cyber Tackle Box GRC platform to DoD subcontractors, MSPs, and cyber professionals ahead of the November 2026 Phase 2 deadline.

Ownership category

akta.pro rank

Product category

Cybersecurity GRC and Compliance Software

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro industry

PRIMARYHDAEALAK

IT Governance, Risk & Compliance (IT GRC) Platforms

Hardware, Technology & Telecom/Enterprise Platforms & Databases/Enterprise Service Management (ITSM/ESM) Platforms

SECONDARYBPAHAFAF

Privacy, Data Protection & Cyber Governance (GRC)

Business & Public Services/Professional Services (Legal, Accounting, Consulting)/Risk, Compliance & Governance Advisory

SECONDARYHDADAGAG

Managed Detection & Response (MDR) & SOC Services

Hardware, Technology & Telecom/Cybersecurity/Security Operations & Threat Intelligence (SIEM/SOAR/UEBA)

SECONDARYEDAOAIAI

Security Operations (SOC), Incident Response & Threat Hunting

Education/Vocational, Technical & Trade Education/IT, Networking & Cybersecurity Certifications

Keywords

• CMMC compliance consulting
• CCP CCA certification training
• GRC compliance platform
• Cybersecurity awareness training
• Defense industrial base compliance

Headquarters

HQ city

Indianapolis

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. CMMC Rapid Deployment Consulting: Professional services for defense contractors including gap assessment, remediation planning, evidence preparation, and C3PAO assessment readiness. Pricing is quote-based after initial readiness call.
2. Cyber Tackle Box™ Platform Subscription: SaaS platform subscription for GRC and workforce training. Multi-tenant pricing for MSPs managing multiple client compliance programs. Subscription model with recurring revenue.
3. CCP & CCA Certification Training: Self-paced certification training courses for Cyber AB credentials. CCP course at $1,999. Exam vouchers purchased separately through Cyber AB.
4. CompTIA Certification Training: Certification tracks for ITF+, A+, Network+, Security+, CySA+, PenTest+, Cloud+ and more. Includes business-skills courses.
5. DOL-Registered Apprenticeship Programs: Department of Labor registered cybersecurity apprenticeships with 140+ hours of related training. May be grant-funded through workforce development programs.

Pricing tiers

Go-to-market motion5 records

Distribution channels6 records

Marketing channels9 records

Core offering

Lionfish Cyber Security is a Cyber AB Accredited Training Provider that sells CMMC Rapid Deployment consulting, official CCP and CCA certification training, and the Cyber Tackle Box™ SaaS platform — an AI-powered multi-tenant GRC system combining compliance management, policy automation, evidence collection, and workforce awareness training across CMMC, NIST 800-171, HIPAA, and SOC 2 frameworks. Customers are U.S. Department of War subcontractors handling CUI, managed service providers serving those contractors, and individual cyber professionals seeking Cyber AB credentials.

Differentiator

Problem solved

Functional benefit

Brands

• Cyber Tackle Box™: All-in-one GRC and training platform for managing CMMC, NIST, HIPAA, and SOC 2 compliance, policies, awareness training, and workforce development. Multi-tenant for MSPs. Features patent-pending AI training methodology.

Products and services

• CMMC Rapid Deployment Professional services engagement for Department of War subcontractors handling Controlled Unclassified Information (CUI). Scoped engagements covering CMMC Level 1 and Level 2 gap assessment, remediation planning, SPRS score improvement, evidence preparation, and C3PAO assessment readiness. Customers are defense industrial base companies needing certification before the November 10, 2026 Phase 2 deadline.
• CCP Certification Training Cyber AB Authorized self-paced certification training for the Certified CMMC Professional (CCP) credential. Geared toward consultants, MSP staff, compliance leads, and veterans transitioning into CMMC consulting careers. Includes official Cyber AB curriculum, instructor support, practice exams, and study materials.
• CCA Certification Training Cyber AB Authorized self-paced certification training for the Certified CMMC Assessor (CCA) credential. Requires the CCP credential as a prerequisite. Includes official Cyber AB curriculum, assessor scenario walk-throughs, and practice exams. Targets cyber professionals pursuing CMMC assessment careers.
• Cyber Tackle Box™ Platform All-in-one multi-tenant SaaS GRC and training platform that manages CMMC, NIST 800-171, HIPAA, and SOC 2 compliance, policies, awareness training, risk assessment, and workforce development in a single system. Powered by a patent-pending AI training methodology (#17941843) that personalizes employee learning paths in real time. Multi-tenant edition available for MSPs to manage multiple client compliance programs under white-label.
• Training That Rocks Music-based cyber awareness training that delivers security lessons through song lyrics as a module within the Cyber Tackle Box platform. Includes 52 cyber awareness training modules in total covering EnABLE micro-learning methodology with infographics and embedded video workflows.
• Lionfish Training Academy (CompTIA & DOL Apprenticeship Programs) State-accredited career and technical school regulated by the Indiana Office for Career and Technical Schools offering CompTIA certification tracks (ITF+, A+, Network+, Security+, CySA+, PenTest+, Cloud+), DOL-registered cybersecurity apprenticeships, and grant-funded workforce development programs for employers.

Quantifiable outcome

• Phase 2 deadline: November 10, 2026 — third-party C3PAO assessments become mandatory for Level 2 CUI contracts
• +3 more outcomes

Named customers3 records

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability7 records

Feature6 records

Partnerships

Eight partnerships are on record, tiered core.

• Ball State UniversitycoreStrategic or Co-development Partner · 1 January 2024Statewide Cyber Guardian deployment partnership. Ball State student assessors complete real-world engagements through the Cyber Sentinel Program.
• Northern Virginia Community College (NOVA)coreStrategic or Co-development Partner · 1 January 2024Statewide Cyber Guardian deployment partnership. Students train as Cyber Sentinels and deploy as Cyber Guardians protecting real businesses, local governments, and defense contractors.
• Purdue University CERIAScoreStrategic or Co-development Partner · 1 January 2022Strategic partnership with Purdue University's Center for Education and Research in Information Assurance and Security. Collaborates on research and the Cyber Sentinel Program where students deploy to protect real organizations.
• AFCEA IndianacoreStrategic or Co-development Partner · 1 January 2021Jeremy Miller is founding president of AFCEA's Indiana chapter, connecting the state's defense, intelligence, and industry professionals.
• Cyber AB / CAICOcoreStrategic or Co-development PartnerCyber AB Accredited Training Provider (ATP) authorized to deliver official CCP and CCA certification training. Uses Cyber AB authorized training materials.
• Indiana Office for Career and Technical SchoolscoreStrategic or Co-development PartnerState-regulated career and technical school accredited by Indiana OCTS. Subject to state oversight, with published refund, grievance, and enrollment policies.
• U.S. Department of LaborcoreStrategic or Co-development PartnerDOL-registered apprenticeship sponsor for cybersecurity occupations. Offers 140+ hours of related training with mentorship and KPI tracking.
• CompTIAcoreStrategic or Co-development PartnerCompTIA Authorized Academy and certification training partner. Offers ITF+, A+, Network+, Security+, CySA+, PenTest+, Cloud+ and more.

Scale indicators8 records

Recent moves9 records

Expansion highlights6 records

Broad incumbents

• Vanta: Vanta is a leading automated compliance and GRC platform supporting SOC 2, ISO 27001, HIPAA, and more, with emerging federal framework coverage. It competes in the broader GRC platform category where Cyber Tackle Box also plays.

Direct peers

• Pivot Point Security: Pivot Point Security is a CMMC consulting, training, and assessment preparation firm serving defense industrial base clients, overlapping directly with Lionfish's CMMC consulting and CCP/CCA training offerings.
• RegScale: RegScale is a continuous compliance and GRC platform purpose-built for federal frameworks including CMMC, NIST 800-171, and FedRAMP. It directly competes with Cyber Tackle Box as an integrated compliance platform targeting the same DoD subcontractor buyer.
• Ignyte Assurance Platform: Ignyte is a GRC and cyber risk platform built specifically for defense contractors and the CMMC ecosystem, offering compliance tracking, evidence management, and supplier risk workflows comparable to Cyber Tackle Box.
• Netizen Corporation: Netizen is an SDVOSB cybersecurity firm providing CMMC assessment preparation, managed security, and cyber compliance services to defense and federal customers, sharing both the SDVOSB angle and CMMC services overlap.
• CyberSheath Services International: CyberSheath provides managed CMMC compliance services and a CMMC-focused GRC platform to defense industrial base customers. It is one of the most direct competitors in CMMC Level 2 rapid deployment and managed compliance.
• Exostar: Exostar operates a supplier risk and compliance platform purpose-built for the aerospace and defense industry, including CMMC-related workflows. It is a broader, more established player serving the same defense contractor compliance buyer.
• Ardalyst: Ardalyst delivers CMMC and NIST 800-171 consulting, managed compliance services, and training to defense contractors, overlapping directly with Lionfish's CMMC Rapid Deployment consulting practice.

Emerging players

• Hyperproof: Hyperproof is a SaaS GRC platform that supports multiple compliance frameworks including CMMC and NIST 800-171. It is a peer in the multi-framework GRC platform category with a broader enterprise GTM.

Others

• SANS Institute: SANS Institute is a leading cybersecurity training and certification provider offering GIAC credentials and courses. While not a CMMC-specific platform, it competes with Lionfish Training Academy for cyber professional certification dollars.

Market position

Strengths1 record

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/lionfishcybersecurity
• Xx.com/LionfishCyber

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Lionfish Cyber Security