CynergisTek
Clearwater (formerly CynergisTek) is a healthcare-focused cybersecurity and compliance firm combining managed security services, Azure-based managed cloud, professional services, and the proprietary IRM|Pro Suite compliance platform to serve 500+ hospitals, IDNs, physician practices, digital health firms, MedTech, and healthcare investors.
- Company typePrivate
- Founded2004
- HeadquartersAustin, United States
- Headcount51–100
- GTM typeB2B
- OfferingServices
What CynergisTek does
CynergisTek, now operating as Clearwater (legal entity Clearwater Security & Compliance LLC), is a healthcare-focused cybersecurity and compliance firm headquartered in Austin, Texas. Founded in 2004 and rebranded to Clearwater in 2018 to signal expansion beyond compliance consulting into comprehensive security services, the company combines four interlocking offerings: managed security services (24/7 MSSP, ClearAdvantage and ClearConfidence programs), managed cloud services built on Microsoft Azure and Microsoft 365, professional services (vCISO, incident response, NIST CSF maturity assessments, medical device security, technical security testing), and a proprietary compliance software platform called IRM|Pro Suite with modules for analysis, privacy, security, performance, and 405(d) HICP. Revenue is generated through subscription-based managed services (annual billing), professional services engagements, and recurring IRM|Pro Suite platform subscriptions, all delivered via direct enterprise field sales with quote-based pricing.
The company targets the full healthcare ecosystem rather than a single vertical, selling to hospitals and integrated delivery networks, physician practice management groups, digital health companies, medical device manufacturers, healthcare-focused private equity and venture investors, health plans, and healthcare attorneys. It claims a 100% success rate with HHS Office for Civil Rights risk analysis engagements, an installed base of 500+ healthcare customers, and recognition including 2026 Best in KLAS for Security and Privacy Consulting Services, Black Book 2025 top healthcare cybersecurity consultants, and MSSP Alert Top 250. Distribution is exclusively consultative direct enterprise sales, supplemented by a healthcare attorney referral channel and a content-led marketing engine of webinars, books, podcasts, and case studies.
The firm operates with 51-100 employees per available firmographics and trades under NYSEMKT:CTEK according to those same firmographics, though a separate data block characterizes the entity as a privately held LLC incorporated in Tennessee — a discrepancy that should be reconciled before any investment decision. Public reporting on revenue, ARR, and customer-level economics is not present in the supplied data.
CynergisTek firmographics
Firmographics- Name
- CynergisTek
- Legal name
- Clearwater Security & Compliance LLC
- Website
- https://cynergistek.com
- Company type
- Private
- Founded year
- 2004
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Clearwater (formerly CynergisTek) is a healthcare-focused cybersecurity and compliance firm combining managed security services, Azure-based managed cloud, professional services, and the proprietary IRM|Pro Suite compliance platform to serve 500+ hospitals, IDNs, physician practices, digital health firms, MedTech, and healthcare investors.
- Ownership category
- akta.pro rank
CynergisTek industry classification
Industry- Product category
- Healthcare Cybersecurity and Compliance
- NAICS
- Computer Systems Design and Related Services (54151), Software Publishers (51321), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518210)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Prepackaged Software (7372)
- akta.pro primary industry
- Cloud Security (CSPM/CWPP/CIEM) for Health IT (HLACAJAG)
- akta.pro secondary industries
- Medical Device & IoT Security (Connected Devices/RPM/OT) (HLACAJAI), Consent, Preference & Data Rights Management (incl. HIPAA/GDPR support) (HLACAIAG), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)
Keywords
Where CynergisTek is headquartered
LocationHeadquarters
- HQ city
- Austin
- HQ country
- United States
- HQ region
- North America
Markets served
CynergisTek business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Managed Security Services (MSSP): 24/7 monitoring, threat detection, vulnerability management, firewall management, and incident response delivered as a managed service program. This forms the core MSSP offering for healthcare organizations.
- Managed Cloud Services: Ongoing management and optimization of Microsoft Azure Cloud and Microsoft 365 environments for healthcare security and compliance, with continuous operational oversight.
- Cybersecurity Consulting Services: Expert security assessments, testing, remediation, and execution services including vCISO, incident response, NIST CSF maturity assessments, medical device security, technical security testing, and resiliency services.
- Compliance Services: Rigorous compliance solutions helping organizations achieve and maintain compliance with HIPAA, HITRUST, SOC 2, PCI DSS, CMMC, and other key regulations and standards. Includes HIPAA Risk Analysis, compliance program effectiveness, and compliance staffing and training.
- IRM|Pro Suite (Compliance Platform SaaS): Award-winning software platform providing insights and solutions to reduce risk and optimize security investments while enabling compliance. Delivered as an integrated software suite with multiple module components.
- Privacy Services: Privacy risk assessment, patient privacy monitoring services, privacy program development, and privacy staffing and training services for healthcare organizations.
- Vendor Risk Management as a Service: Third-party vendor risk management services delivered as a managed service to assess and monitor vendor security posture.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | ClearAdvantage Program - Managed Services for Regional & Critical Access Hospitals |
| Subscription | Annual | ClearConfidence Program - Managed Services |
| Subscription | Annual | Managed Security Services (Healthcare MSSP) |
| Subscription | Annual | IRM|Pro Suite - Compliance Platform |
Go-to-market motion1 record
Distribution channels2 records
Marketing channels8 records
CynergisTek product offering
Product offeringCore offering
CynergisTek (operating as Clearwater) provides healthcare-focused cybersecurity, compliance, and privacy services delivered through four integrated lines: managed security services (24/7 MSSP monitoring, threat detection, vulnerability management, incident response), managed cloud services for Microsoft Azure and Microsoft 365 environments, expert cybersecurity and compliance consulting (vCISO, OCR-Quality Risk Analysis, HIPAA/HITRUST/SOC 2/PCI DSS/CMMC certification), and the proprietary IRM|Pro Suite compliance software platform. Services are sold primarily to hospitals, health systems, physician practice groups, digital health companies, medical device manufacturers, and healthcare investors across the United States.
Product overview
Clearwater offers a comprehensive healthcare cybersecurity and compliance platform called IRM|Pro Suite, which is the company's award-winning compliance software providing insights and solutions to reduce risk and optimize security investments. The suite includes multiple modules: IRM|Analysis (risk analysis), IRM|Privacy (privacy compliance), IRM|Security (security compliance), IRM|Performance (compliance performance tracking), and IRM|405(d) HICP (405(d) framework implementation). The company also provides Managed Security Services including 24/7 monitoring, threat detection, vulnerability management, and incident response, along with Managed Cloud Services built on Microsoft Azure. Consulting services encompass vCISO, Incident Response, NIST CSF assessments, Medical Device Security, Technical Security Testing, and HIPAA/HITRUST/SOC 2/CMMC certification services. This is a platform-plus-modules architecture combining proprietary software with managed services and expert consulting.
Differentiator
Problem solved
Functional benefit
Brands
- ClearAdvantage Program: Managed Services Program for Regional & Critical Access Hospitals, winner of the 2025 Cybersecurity Excellence Award
- ClearConfidence Program
- IRM|Pro Suite
- IRM|Analysis
- IRM|Privacy
- IRM|Security
- IRM|Performance
- IRM|405(d) HICP
- OCR-Quality Risk Analysis
- OCR-Quality Risk Response
Products and services
- IRM|Pro Suite
Quantifiable outcome
- 100% success rate with Office for Civil Rights in risk analysis engagements
- +2 more outcomes
Companies that use CynergisTek
Customer profileNamed customers3 records
Segments7 records
Ideal customer profiles6 records
CynergisTek technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability1 record
Feature5 records
CynergisTek partnerships and signals
Strategic signalScale indicators3 records
Recent moves6 records
Expansion highlights5 records
CynergisTek competitors and assessment
Company assessmentEmerging players
- Protenus: Healthcare privacy analytics and patient privacy monitoring platform used by hospitals to detect EHR access abuse. Comparable to Clearwater's Patient Privacy Monitoring Services line and the IRM|Privacy module.
Broad incumbents
- Optum (UnitedHealth Group): Health-services arm of UnitedHealth Group delivering cyber risk management, HIPAA compliance, and security services to providers and payers at massive scale. Competes as a broader incumbent that can bundle Clearwater-style services into enterprise payer-provider deals.
- Deloitte (Cyber & Strategic Risk practice): Global consulting firm with a large healthcare cybersecurity practice delivering HIPAA, HITRUST, and managed security services to hospital systems. Competes against Clearwater in enterprise healthcare cyber where relationship scale and bundled delivery can outbid specialist firms.
Direct peers
- ClearDATA: Healthcare-exclusive cloud security and compliance provider with deep Azure and AWS expertise. Overlaps with Clearwater's Managed Cloud Services for healthcare on Microsoft Azure and 365 with cloud security posture management.
- A-LIGN: Cybersecurity and compliance firm delivering SOC 2, HITRUST, ISO 27001, and PCI DSS assessments plus managed GRC software. Comparable in certification and audit services and healthcare compliance delivery.
- Meditology Services: Healthcare cybersecurity and risk services firm offering HIPAA security risk assessments, penetration testing, and managed security for providers and payers. Direct competitor in healthcare-specific cyber consulting and MSSP delivery.
- Coalfire: Cybersecurity advisory and compliance firm with strong HITRUST, FedRAMP, and HIPAA practices serving healthcare and adjacent regulated industries. Comparable in compliance certification services and managed GRC offerings.
- Censinet: Healthcare-specific third-party risk management and vendor risk exchange for providers, payers, and digital health. Overlaps with Clearwater's Vendor Risk Management as a Service and healthcare investor due diligence offerings.
- Compliancy Group: HIPAA compliance software and services platform (formerly HIPAA One) for healthcare organizations of all sizes. Direct competitor in HIPAA compliance tooling, software-led pricing models, and healthcare buyer motion.
- Fortified Health Security: Healthcare-focused MSSP offering managed security services, compliance, and advisory for hospitals and digital health companies. Closely comparable to Clearwater in vertical specialization, MSSP-led delivery model, and HIPAA/HITRUST orientation.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
CynergisTek social profiles
Digital presenceCynergisTek compliance and trust
Trust signalCompliance5 records
CynergisTek financial estimates
Financial estimateRevenue estimate
Valuation estimate
CynergisTek leadership team
Management profileNumber of profiles
Profiles3 records
CynergisTek funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
CynergisTek M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about CynergisTek
What does CynergisTek do?
CynergisTek (operating as Clearwater) provides healthcare-focused cybersecurity, compliance, and privacy services delivered through four integrated lines: managed security services (24/7 MSSP monitoring, threat detection, vulnerability management, incident response), managed cloud services for Microsoft Azure and Microsoft 365 environments, expert cybersecurity and compliance consulting (vCISO, OCR-Quality Risk Analysis, HIPAA/HITRUST/SOC 2/PCI DSS/CMMC certification), and the proprietary IRM|Pro Suite compliance software platform. Services are sold primarily to hospitals, health systems, physician practice groups, digital health companies, medical device manufacturers, and healthcare investors across the United States.
Is CynergisTek a public or private company?
CynergisTek is a private company. It is classified as public and is currently operating.
When was CynergisTek founded?
CynergisTek was founded in 2004. It employs 51 to 100 people.
Where is CynergisTek based?
CynergisTek is headquartered in Austin, United States, in the North America region.
How does CynergisTek make money?
Seven revenue lines are on record. Managed Security Services (MSSP) is the primary driver. The others are managed Cloud Services, cybersecurity Consulting Services, compliance Services, IRM|Pro Suite (Compliance Platform SaaS), privacy Services and vendor Risk Management as a Service.
Who are CynergisTek's main competitors?
Protenus is listed as an emerging player. Broad incumbents are Optum (UnitedHealth Group) and Deloitte (Cyber & Strategic Risk practice). Direct peers are ClearDATA, A-LIGN, Meditology Services, Coalfire, Censinet, Compliancy Group and Fortified Health Security.
Does CynergisTek have an API?
No public API is recorded for CynergisTek.
What industry is CynergisTek in?
CynergisTek's product category is Healthcare Cybersecurity and Compliance. Its primary akta.pro industry code is HLACAJAG, Cloud Security (CSPM/CWPP/CIEM) for Health IT, with a secondary code of HLACAJAI, Medical Device & IoT Security (Connected Devices/RPM/OT). Its NAICS code is 54151 and its SIC code is 7370.