CYCSAS

What CYCSAS does

CYCAS (Consultoría y Capacitación en Soluciones Avanzadas de Seguridad Informática, S.A. de C.V.), operating as CYCSAS, is a Mexico City-based cybersecurity consulting firm founded in 2007. The company positions itself as the first IT security consultancy in Mexico and historically built its client base around Mexican banks and financial institutions before broadening to large enterprises and SMBs. CYCSAS delivers a portfolio of six core services: a 24/7 Cyber Defense Center (managed SOC covering network, endpoint, email, SIEM, log management, forensics, and orchestration/automation), Security Assessment (vulnerability scanning and compliance mapping to PCI, HIPAA, GDPR), Security Awareness Training (microlearning modules under five minutes), Managed Security Services (7x24 remote or on-premise administration), Professional Services (project implementation using PMI methodology plus tiered technical support), and Enterprise Security Architecture (turnkey security design and implementation). A Data Loss Prevention capability and a dedicated CSIRT incident response team extend the offering.

The firm operates a vendor-agnostic delivery model underpinned by partnerships with 35+ global cybersecurity vendors, including CrowdStrike, Fortinet, Check Point, Proofpoint, Tenable, Trellix, Cisco, Sophos, Trend Micro, CyberArk, Netskope, Rapid7, Imperva, RSA, Thales, Cloudflare, and others. Differentiators cited include SANS Institute-certified personnel, a Best Places to Work Mexico 2020 recognition, SSAE 18 SOC 2 certification, and ISO 27001-aligned services.

CYCSAS earns revenue through three streams: professional consulting (assessments, architecture design, compliance advisory), recurring managed security services (24/7 SOC and infrastructure monitoring), and training services. Pricing is quote-based with multi-year enterprise contracts; no public pricing exists. The company is privately held with no disclosed investors, funding rounds, or M&A activity, and operates exclusively within Mexico with 11-50 employees based out of its Mexico City headquarters.

Name

CYCSAS

Legal name

CONSULTORÍA Y CAPACITACIÓN EN SOLUCIONES AVANZADAS DE SEGURIDAD INFORMÁTICA, S. A. DE C.V.

Website

https://cycsas.com.mx

Company type

Private

Founded year

2007

Operating status

Operating

Headcount range

11–50 employees

Short description

CYCAS is a Mexico City-based cybersecurity consulting firm founded in 2007 that delivers managed SOC, vulnerability assessment, security training, managed security, and enterprise security architecture services to Mexican financial institutions, large corporations, and SMBs via a multi-vendor, SANS-certified delivery model.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting Services

NAICS

Computer Systems Design and Related Services (54151), Other Scientific and Technical Consulting Services (54169)

akta.pro primary industry

Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG)

akta.pro secondary industry

IT Operations, Event & Incident Management (NOC/SOC-to-ITSM) (BPAEAJAH)

Keywords

• Cybersecurity consulting
• Managed security services
• Security operations center
• Security assessments
• Security awareness training

Headquarters

HQ city

Mexico City

HQ country

Mexico

HQ region

Latin America

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Cybersecurity Consulting Services: Professional cybersecurity consulting including risk assessments, security architecture design, and compliance advisory (PCI, HIPAA, GDPR). Provided by certified SANS Institute personnel.
2. Managed Security Services (MSS): Ongoing 7x24 managed security monitoring and administration services for client IT infrastructure, delivered remotely or on-premise.
3. Security Training Services: Security awareness training and cybersecurity education services for corporate personnel, using microlearning modules.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels5 records

Core offering

CYCSAS is a Mexico-based cybersecurity consulting firm that provides advisory, managed, and training services to organizations. Its core offerings include a Cyber Defense Center (SOC), security assessments, security awareness training, managed security services, professional services, enterprise security architecture, and data loss prevention.

Product overview

CYCSAS offers a suite of six integrated cybersecurity consulting services: Cyber Defense Center (SOC services with 24/7 monitoring, SIEM, forensics, and automation), Security Assessment (vulnerability scanning and network analysis), Security Awareness Training (micro-learning courses under 5 minutes for employee education), Managed Security Services (remote or on-premise architecture administration), Professional Services (implementation, support, and project deployment), and Enterprise Security Architecture (consulting for security design and implementation). The company also provides Data Loss Prevention technology capabilities. CYCSAS operates as a Mexican IT security consulting firm with 17 years of experience serving financial institutions.

Differentiator

Problem solved

Functional benefit

Products and services

• Cyber Defense Center (SOC) Managed security operations service that monitors, detects, and responds to cyber threats on behalf of client organizations.
• Security Assessment Evaluation of client systems, networks, and processes to identify vulnerabilities and security gaps.
• Security Awareness Training Educational programs designed to improve end-user awareness of cybersecurity risks and best practices within client organizations.
• Managed Security Services Ongoing outsourced management of security infrastructure and controls for client organizations.
• Professional Services Consulting and implementation services to help organizations plan, deploy, and improve cybersecurity programs.
• Enterprise Security Architecture Design of enterprise-wide security architecture to align security controls with business and technology requirements.
• Data Loss Prevention Solutions and services to prevent unauthorized disclosure or exfiltration of sensitive organizational data.

Quantifiable outcome

• Results delivered in 15 minutes on customer premises
• +2 more outcomes

Named customers2 records

Segments3 records

Ideal customer profiles1 record

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Partnerships

36 partnerships are on record, tiered core.

• TrellixcoreTechnology or IntegrationTechnology partnership for endpoint and network security solutions integrated into CYCSAS's managed security offerings.
• TenablecoreTechnology or IntegrationVulnerability management technology partner providing scanning and assessment tools used in CYCSAS security assessments.
• Check PointcoreTechnology or IntegrationFirewall and security gateway technology partner, integrated into enterprise security architecture implementations.
• ProofpointcoreTechnology or IntegrationEmail protection and data loss prevention partner, supporting CYCSAS's security architecture and managed services.
• CrowdStrikecoreTechnology or IntegrationEndpoint protection platform partner, used within CYCSAS's managed security and SOC services.
• NetskopecoreTechnology or IntegrationCloud security partner for secure access service edge (SASE) and cloud data protection integrated into CYCSAS solutions.
• SophoscoreTechnology or IntegrationCybersecurity technology partner offering next-gen firewall and endpoint solutions used in CYCSAS implementations.
• FortinetcoreTechnology or IntegrationNetwork security partner providing firewall, SD-WAN, and security fabric solutions integrated into CYCSAS managed services.
• Trend MicrocoreTechnology or IntegrationServer and endpoint security partner, integrated into CYCSAS's enterprise security architecture practice.
• CiscocoreTechnology or IntegrationNetworking and security technology partner for integrated security solutions within CYCSAS managed services.
• RSAcoreTechnology or IntegrationSecurity operations and GRC platform partner used in CYCSAS SOC services and risk management consulting.
• CyberArkcoreTechnology or IntegrationIdentity and access management / privileged access security partner used in enterprise security architecture implementations.
• Rapid7coreTechnology or IntegrationVulnerability detection and SIEM technology partner used in CYCSAS security assessments and managed services.
• ImpervacoreTechnology or IntegrationData security and DDoS protection partner for CYCSAS's data loss prevention and security architecture services.
• McAfeecoreTechnology or IntegrationEndpoint and network security technology partner, incorporated into CYCSAS's managed security offerings.
• FireEye / MandiantcoreTechnology or IntegrationAdvanced threat protection and incident response technology partner used in CYCSAS's Cyber Defense Center.
• ForcepointcoreTechnology or IntegrationData and cloud security partner integrated into CYCSAS's enterprise security architecture and DLP solutions.
• F5 NetworkscoreTechnology or IntegrationApplication delivery and security partner used in CYCSAS's enterprise security architecture implementations.
• CloudflarecoreTechnology or IntegrationDDoS protection and web security partner integrated into CYCSAS's managed security services.
• CheckmarxcoreTechnology or IntegrationApplication security testing partner used in CYCSAS's security assessment and enterprise security architecture services.
• Stellar CybercoreTechnology or IntegrationOpen XDR platform partner used in CYCSAS's SOC and threat detection managed services.
• ThalescoreTechnology or IntegrationEncryption and key management partner integrated into CYCSAS's data protection and security architecture services.
• ForescoutcoreTechnology or IntegrationNetwork security and device visibility partner used in CYCSAS's managed security services.
• Keysight TechnologiescoreTechnology or IntegrationNetwork testing and security validation partner integrated into CYCSAS's security assessment services.
• FireMoncoreTechnology or IntegrationFirewalls and security policy management partner used in CYCSAS's enterprise security architecture and compliance services.
• LogRhythmcoreTechnology or IntegrationSIEM and security analytics partner used in CYCSAS's Cyber Defense Center and managed security services.
• MalwarebytescoreTechnology or IntegrationEndpoint remediation and malware protection partner integrated into CYCSAS's managed security services.
• KasperskycoreTechnology or IntegrationAntivirus and endpoint security partner used in CYCSAS's managed security offerings.
• InfobloxcoreTechnology or IntegrationDNS management and network identity partner integrated into CYCSAS's managed security services.
• Terranova SecuritycoreTechnology or IntegrationSecurity awareness training platform partner used in CYCSAS's Security Awareness Training service.
• TrapX SecuritycoreTechnology or IntegrationDeception technology and breach detection partner integrated into CYCSAS's Cyber Defense Center.
• UtimacocoreTechnology or IntegrationHardware security module (HSM) and key management partner used in CYCSAS's data protection solutions.
• AppdomecoreTechnology or IntegrationMobile app security platform partner integrated into CYCSAS's enterprise security architecture services.
• CymulatecoreTechnology or IntegrationBreach and attack simulation platform partner used in CYCSAS's security assessment and validation services.
• Aruba NetworkscoreTechnology or IntegrationNetwork infrastructure and wireless security partner integrated into CYCSAS's enterprise security architecture.
• Extreme NetworkscoreTechnology or IntegrationNetwork switching and security partner used in CYCSAS's managed security and infrastructure services.

Scale indicators4 records

Recent moves6 records

Expansion highlights5 records

Regional players

• Baufest: Latin American IT services and software firm with cybersecurity practices serving enterprises across Mexico and South America. Comparable to CYCSAS as a regional cybersecurity integrator/consultant with similar enterprise/SMB mix, though with a stronger software-development arm.

Direct peers

• Secureworks: Global pure-play MSSP delivering managed detection & response, SOC services, and security consulting to enterprises. Most directly comparable to CYCSAS on core managed SOC and security assessment offerings, though operating at vastly larger scale across multiple geographies.
• Trustwave: MSSP offering managed security services, security assessments, threat detection, and incident response. Closely comparable to CYCSAS on the bundled consulting + managed SOC + assessments model, with similar financial-services and enterprise target customer.
• Terranova Security: Cybersecurity awareness training vendor whose platform CYCSAS resells/delivers as part of its Security Awareness Training offering. Comparable to CYCSAS on the awareness/training revenue stream and partly complementary as an enablement partner.
• Arctic Wolf: Security operations vendor providing managed detection & response and security awareness as a subscription service. Comparable to CYCSAS in selling outcome-based security operations to mid-market and enterprise customers, though delivered as a SaaS-led platform rather than consulting-led.

Broad incumbents

• Accenture Security: Global consulting firm with a large cybersecurity practice delivering managed security, advisory, and architecture services. Comparable to CYCSAS as an enterprise cybersecurity consultant and integrator, but with vastly greater geographic and capability breadth.
• IBM Security Services: Global vendor and managed security services provider serving large enterprises with SOC, IAM, and security consulting. Overlaps with CYCSAS on managed SOC and enterprise security architecture, especially for large Mexican and multinational clients.
• KPMG Mexico (Cyber Security): Big Four advisory firm offering cybersecurity consulting, compliance, and managed services in Mexico. Comparable to CYCSAS on the consulting and compliance advisory side, especially for regulated financial-services clients in Mexico.
• Deloitte Cyber (Mexico/LatAm): Big Four cyber practice delivering security strategy, managed SOC, assessments, and incident response. Direct competitor to CYCSAS for Mexican enterprise and financial-services engagements, with stronger brand recognition on RFPs but a partner-led delivery model.

Emerging players

• CrowdStrike (Falcon Complete): CrowdStrike's Falcon Complete is an MDR offering delivered through partners and direct that competes for the same managed SOC wallet. CYCSAS is also a CrowdStrike partner, so the relationship is hybrid — competitor for end customers and partner for delivery.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights7 records

Customer concentration

• Facebookfacebook.com/cycsas
• Xx.com/cycsas
• Instagraminstagram.com/cycsas
• LinkedInlinkedin.com/company/cycsas

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CYCSAS