IGI Cybersecurity

What IGI Cybersecurity does

IGI Cybersecurity (legally Infinite Group, Inc., OTC: IMCI) is a US-based cybersecurity technology and services provider founded in 1986 and rebranded under its current name in March 2021. The company operates through two main units: IGI Cybersecurity, which delivers professional services including vCISO/CISO Team-as-a-Service, CMMC readiness, penetration testing (branded PenLogic), risk and compliance readiness, incident response, and proactive compromise assessments; and IGI CyberLabs, a wholly-owned subsidiary established in June 2021 that serves as the OEM of Nodeware, the company's flagship product.

Nodeware is an AI-driven continuous vulnerability management SaaS platform that scans internal and external networks to identify critical vulnerabilities, build asset inventories, and provide actionable remediation guidance. The platform features a multi-tenant dashboard purpose-built for Managed Service Providers (MSPs), API-based integrations with eight major Professional Services Automation (PSA) platforms (ConnectWise, Kaseya BMS, Autotask, HaloPSA, Syncro, Pulseway, Tigerpaw, Accelo), and Windows patch management functionality added in June 2024. IGI was granted a patent for Nodeware's scanning methodology in May 2021.

The company makes money through two primary streams: recurring Nodeware SaaS subscriptions (sold via the MSP channel and ConnectWise marketplace) and project-based professional services engagements (sold directly to enterprise). Distribution is channel-led, with Integris (440+ employees across ten states), Telarus master agent, Xerox Services, and dozens of smaller MSPs reselling Nodeware. In February 2022, IGI announced the acquisition of Pratum, Inc., a SOC/XDR and cybersecurity consulting firm with approximately $4.3 million in annual sales, expanding delivery capacity into managed detection and response. The company executed a 75-to-1 reverse stock split in October 2022 to position for a planned Nasdaq uplisting, and operates from its headquarters at 175 Sully's Trail, Suite 202, Pittsford, NY, with a distributed remote US workforce.

Name

IGI Cybersecurity

Legal name

Infinite Group, Inc.

Website

https://igicybersecurity.com

Company type

Public

Founded year

1986

Operating status

Operating

Headcount range

51–100 employees

Short description

IGI Cybersecurity is a US-based cybersecurity provider selling Nodeware, an AI-driven vulnerability management SaaS, alongside vCISO, penetration testing, CMMC readiness, and incident response services to SMBs, MSPs, and mid-market enterprises primarily through channel partners.

Ownership category

akta.pro rank

Product category

Vulnerability Management Software

NAICS

Computer Systems Design and Related Services (5415), Other Computer Related Services (541519)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Prepackaged Software (7372)

akta.pro primary industry

Vulnerability Management & Penetration Testing Services (BPAEADAD)

akta.pro secondary industries

Threat Intelligence Services (BPAEADAC), Cybersecurity Architecture & Security Integration (BPAEAAAL), Cybersecurity (EDAAAPAC)

Keywords

• Vulnerability management software
• Cybersecurity consulting services
• Managed security services
• Penetration testing services
• Compliance readiness services

Headquarters

HQ city

Pittsford

HQ country

United States

HQ region

North America

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Others

Revenue model

1. Professional Cybersecurity Services: IGI delivers professional services including CISO services, CMMC readiness, penetration testing, risk management, compliance readiness, and vulnerability management. These are delivered through expert consultants and practitioners.
2. Nodeware SaaS Subscription: Nodeware vulnerability management solution is sold as a SaaS platform with subscription pricing, providing recurring revenue. The solution is available globally and supported by US-based teams.
3. Acquisition of Pratum: IGI entered into a definitive agreement to acquire Pratum, Inc., an information security company with approximately $4.3 million in annual sales providing SOC/XDR services and cybersecurity consulting.

Pricing tiers

Go-to-market motion3 records

Distribution channels5 records

Marketing channels5 records

Core offering

IGI Cybersecurity provides a portfolio of managed cybersecurity services—including CISO advisory, CMMC readiness, penetration testing (PenLogic), risk management, compliance readiness, incident response, and vulnerability management—alongside its proprietary Nodeware AI-driven continuous vulnerability management SaaS platform. Offerings are delivered through direct enterprise engagements and through a deep MSP and channel partner network including Integris, Telarus, and ConnectWise-integrated resellers.

Product overview

IGI Cybersecurity is a cybersecurity technology and services provider offering a portfolio of managed security services and a proprietary SaaS product. The core product is Nodeware, an AI-driven continuous vulnerability management platform developed by IGI CyberLabs subsidiary. Nodeware provides continuous network scanning, asset inventory, and vulnerability detection with integrated patch management for Windows. The services portfolio complements the software with professional offerings including vCISO/CISO Services, CMMC Readiness, Penetration Testing (PenLogic), Risk Management, Compliance Readiness, Incident Response, and Vulnerability Management. The company operates as Infinite Group, Inc. (IGI) with subsidiaries including IGI CyberLabs (Nodeware OEM) and Pratum (SOC/XDR services acquired in 2022).

Differentiator

Problem solved

Functional benefit

Brands

• Nodeware: AI-driven continuous vulnerability management SaaS platform that continuously scans networks to identify critical vulnerabilities. Features include multitenant dashboard, streamlined deployment, asset inventory, and patch management for Windows.
• PenLogic
• CISO Team-as-a-Service (CISO TaaS)

Products and services

• Nodeware AI-driven continuous vulnerability management SaaS platform that continuously scans networks to identify critical vulnerabilities. Features a multitenant dashboard, deployment in under 30 minutes, asset inventory with deep scan information, CVE-based filtering, authenticated scanning, and actionable remediation guidance. Sold to MSPs, enterprises, and channel partners.
• CISO Services Virtual Chief Information Security Officer (vCISO) and CISO Team-as-a-Service providing executive-level security leadership without the cost of a full-time executive. Experts align strategy with business goals, ensure compliance, resilience, and board-level visibility.
• CMMC Readiness Preparation services for Cybersecurity Maturity Model Certification (CMMC) audits. Certified experts evaluate current practices, close compliance gaps, and build documentation and processes required for certification. Targeted at defense contractors and government suppliers.
• PenLogic Penetration Testing Penetration testing service providing annual comprehensive penetration tests, post-remediation penetration scanning, and monthly penetration maintenance testing. Goes beyond checklist assessments to deliver actionable insights that strengthen security posture.
• Risk Management Cyber risk management services including security assessments and third-party risk programs that deliver tailored solutions to enhance security posture and mitigate threats.
• Compliance Readiness Audit readiness services that assess policies and controls, identify gaps, and provide actionable insights to meet compliance requirements across key regulatory frameworks including PCI DSS, GLBA, NIST, and FFIEC.
• Vulnerability Management Continuous vulnerability scanning solution using the proprietary Nodeware platform to identify and prioritize vulnerabilities, helping teams address security gaps more efficiently with remediation guidance.
• Incident Response Cyber-incident response services for organizations that have been compromised, including ransomware recovery. Ensures quick response by an effective, trained, and prepared team to limit damage and restore operations.
• Proactive Compromise Assessments Services for organizations unsure if they have been compromised, designed for those experiencing strange or suspicious events to detect latent threats before they escalate.

Quantifiable outcome

• Organizations can identify and remediate vulnerabilities before exploitation, reducing cyber risk
• +2 more outcomes

Named customers8 records

Segments6 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration8 records

AI capability4 records

Feature6 records

Partnerships

14 partnerships are on record, tiered core and minor.

• Omega ATCcoreTechnology or Integration · 25 February 2026Technology alliance leveraging Nodeware and Omega's PCI Level 1 service provider capabilities to deliver PCI DSS v4.0.1 compliant authenticated vulnerability scanning for multi-location retailers. The combined solution addresses authentic vulnerability scanning requirements and provides consolidated reporting for retail environments.
• ConnectWisecoreTechnology or Integration · 7 November 2023Nodeware achieved certified PSA integration through ConnectWise Invent Program. The integration enables MSPs to efficiently manage Nodeware alerts in the ConnectWise PSA platform, centralizing alert management and improving response to security alerts.
• vCIOToolboxcoreTechnology or Integration · 5 October 2023Strategic partnership integrating Nodeware's enhanced vulnerability data into the vCIOToolbox platform for MSPs. The integration provides asset vulnerability scoring, vulnerability report dashboards, and supports compliance and business reviews for MSP partners.
• CysuranceminorGTM or Marketing Partner · 12 September 2022Partnership with Cysurance enables cyber insurance to be included in security stacks. Cysurance leverages Nodeware and SecurityStudio data to provide best-in-class cyber insurance to MSPs and their clients.
• Xerox ServicescoreChannel Partner/ Reseller/ Distributor · 5 May 2022Xerox Services brings the integrated Nodeware and SecurityStudio platforms to their client base. The combination provides continuous vulnerability scanning with risk management for underserved markets including K-12, Government, Healthcare, and small businesses.
• IntegriscoreChannel Partner/ Reseller/ Distributor · 22 March 2022Integris, one of the largest nationwide MSPs with 440+ employees in ten states, now includes Nodeware within their security stack and managed services. Partnership brings Nodeware to a larger market of small to midsize businesses across the U.S.
• Cowbell CyberminorGTM or Marketing Partner · 9 March 2022Partnership joining Cowbell Rx, Cowbell's referral marketplace for cyber risk management. Nodeware available at discount to policyholders, helping organizations meet safeguards for cyber insurance and improve cyber hygiene.
• Pratum, Inc.coreOthers · 2 February 2022IGI entered into a definitive agreement to acquire Pratum, Inc., an information security company founded in 2008. Pratum provides cybersecurity consulting services, security assessments, and SOC/XDR services with approximately $4.3 million in annual sales. Pratum to operate as wholly-owned subsidiary.
• SecurityStudiocoreTechnology or Integration · 18 January 2022Integration between Nodeware's patented vulnerability management technology and SecurityStudio's S2 risk management platform. Empowers organizations to identify and manage cybersecurity risks while saving time and money, particularly for K-12, Higher Education, Government, Healthcare, and Non-Profit sectors.
• BlueSky IT PartnersminorChannel Partner/ Reseller/ DistributorChannel partner leveraging IGI's cybersecurity expertise to help clients solve security problems. When BlueSky was targeted by an attack, they partnered with IGI for incident response.
• Streamline CommunicationsminorChannel Partner/ Reseller/ DistributorTechnology partner that brought IGI in to help a manufacturing client facing ransomware attack. IGI provided incident response and ongoing vCISO services.
• Blue Reef NetworksminorChannel Partner/ Reseller/ DistributorChannel partner based in Dallas, TX (17304 Preston Road, Suite 800, Dallas, TX 75252) that resells Nodeware to customers including the Town of Flower Mound, TX.
• Dicar NetworksminorChannel Partner/ Reseller/ DistributorPartner that engaged IGI to help a large electronics company recover from multiple ransomware incidents and bolster security posture.
• TelaruscoreChannel Partner/ Reseller/ DistributorTelarus is a large master agent through which IGI offers cybersecurity services and solutions. IGI is one of the first to offer cybersecurity services through Telarus and sponsors annual Telarus Partner Summit.

Scale indicators5 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• NetSPI: NetSPI is a penetration testing and vulnerability management provider serving enterprises and MSSPs. It directly overlaps with IGI's PenLogic penetration testing service and broader vulnerability management portfolio.
• Arctic Wolf: Arctic Wolf provides MDR, vulnerability management, and vCISO services primarily to SMB and mid-market customers. It is a direct peer in the "outsourced security operations for organizations without in-house teams" category that IGI targets with CISO TaaS and Nodeware.
• Huntress: Huntress is a cybersecurity platform purpose-built for MSPs serving SMBs, combining managed EDR, SIEM, and security awareness. It directly parallels IGI's MSP-channel-first GTM and SMB target customer, and competes for the same Nodeware-adjacent wallet share.
• ConnectSecure: ConnectSecure (formerly ConnectWise Vulnerability Management) offers continuous vulnerability scanning built specifically for MSPs. It is the closest direct competitor to Nodeware within the ConnectWise ecosystem.
• VikingCloud: VikingCloud provides cybersecurity and compliance services to SMBs and mid-market, with a strong PCI DSS practice. It directly overlaps with IGI's PCI DSS v4.0.1 authenticated scanning offering and broader compliance services.
• CISO Global: CISO Global (formerly known as Cerberus Cyber Sentinel) is a small-cap publicly traded cybersecurity services firm offering vCISO, penetration testing, and managed security. It is a relevant comparable as a small public peer with a similar services-led, multi-vertical SMB model.
• Blackpoint Cyber: Blackpoint Cyber delivers MDR, vulnerability management, and incident response exclusively through the MSP channel. It competes head-to-head with IGI/Nodeware for MSPs bundling security services for SMB end-customers.

Broad incumbents

• Rapid7: Rapid7 is a large public security platform offering vulnerability management (InsightVM), SIEM, and MDR. It competes broadly with Nodeware and IGI's services for mid-market and enterprise vulnerability management opportunities.
• Qualys: Qualys is a longstanding public VM and compliance cloud platform. It competes with Nodeware in continuous vulnerability scanning and with IGI services in compliance readiness use cases.
• Tenable: Tenable is a leading public vulnerability management platform (Nessus/Tenable One). It is a broad incumbent competitor to Nodeware in the same core vulnerability scanning category.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/IGIcyber
• Facebookfacebook.com/IGIcyber
• LinkedInlinkedin.com/company/igicyber

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles10 records

Subsidiaries2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about IGI Cybersecurity