CynergisTek

What CynergisTek does

CynergisTek, now operating as Clearwater (legal entity Clearwater Security & Compliance LLC), is a healthcare-focused cybersecurity and compliance firm headquartered in Austin, Texas. Founded in 2004 and rebranded to Clearwater in 2018 to signal expansion beyond compliance consulting into comprehensive security services, the company combines four interlocking offerings: managed security services (24/7 MSSP, ClearAdvantage and ClearConfidence programs), managed cloud services built on Microsoft Azure and Microsoft 365, professional services (vCISO, incident response, NIST CSF maturity assessments, medical device security, technical security testing), and a proprietary compliance software platform called IRM|Pro Suite with modules for analysis, privacy, security, performance, and 405(d) HICP. Revenue is generated through subscription-based managed services (annual billing), professional services engagements, and recurring IRM|Pro Suite platform subscriptions, all delivered via direct enterprise field sales with quote-based pricing.

The company targets the full healthcare ecosystem rather than a single vertical, selling to hospitals and integrated delivery networks, physician practice management groups, digital health companies, medical device manufacturers, healthcare-focused private equity and venture investors, health plans, and healthcare attorneys. It claims a 100% success rate with HHS Office for Civil Rights risk analysis engagements, an installed base of 500+ healthcare customers, and recognition including 2026 Best in KLAS for Security and Privacy Consulting Services, Black Book 2025 top healthcare cybersecurity consultants, and MSSP Alert Top 250. Distribution is exclusively consultative direct enterprise sales, supplemented by a healthcare attorney referral channel and a content-led marketing engine of webinars, books, podcasts, and case studies.

The firm operates with 51-100 employees per available firmographics and trades under NYSEMKT:CTEK according to those same firmographics, though a separate data block characterizes the entity as a privately held LLC incorporated in Tennessee — a discrepancy that should be reconciled before any investment decision. Public reporting on revenue, ARR, and customer-level economics is not present in the supplied data.

Name

CynergisTek

Legal name

Clearwater Security & Compliance LLC

Website

https://cynergistek.com

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

51–100 employees

Short description

Clearwater (formerly CynergisTek) is a healthcare-focused cybersecurity and compliance firm combining managed security services, Azure-based managed cloud, professional services, and the proprietary IRM|Pro Suite compliance platform to serve 500+ hospitals, IDNs, physician practices, digital health firms, MedTech, and healthcare investors.

Ownership category

akta.pro rank

Product category

Healthcare Cybersecurity and Compliance

NAICS

Computer Systems Design and Related Services (54151), Software Publishers (51321), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518210)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Prepackaged Software (7372)

akta.pro primary industry

Cloud Security (CSPM/CWPP/CIEM) for Health IT (HLACAJAG)

akta.pro secondary industries

Medical Device & IoT Security (Connected Devices/RPM/OT) (HLACAJAI), Consent, Preference & Data Rights Management (incl. HIPAA/GDPR support) (HLACAIAG), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)

Keywords

• Healthcare cybersecurity
• HIPAA compliance consulting
• Managed security services
• Compliance risk management
• Healthcare cloud security

Headquarters

HQ city

Austin

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Managed Security Services (MSSP): 24/7 monitoring, threat detection, vulnerability management, firewall management, and incident response delivered as a managed service program. This forms the core MSSP offering for healthcare organizations.
2. Managed Cloud Services: Ongoing management and optimization of Microsoft Azure Cloud and Microsoft 365 environments for healthcare security and compliance, with continuous operational oversight.
3. Cybersecurity Consulting Services: Expert security assessments, testing, remediation, and execution services including vCISO, incident response, NIST CSF maturity assessments, medical device security, technical security testing, and resiliency services.
4. Compliance Services: Rigorous compliance solutions helping organizations achieve and maintain compliance with HIPAA, HITRUST, SOC 2, PCI DSS, CMMC, and other key regulations and standards. Includes HIPAA Risk Analysis, compliance program effectiveness, and compliance staffing and training.
5. IRM|Pro Suite (Compliance Platform SaaS): Award-winning software platform providing insights and solutions to reduce risk and optimize security investments while enabling compliance. Delivered as an integrated software suite with multiple module components.
6. Privacy Services: Privacy risk assessment, patient privacy monitoring services, privacy program development, and privacy staffing and training services for healthcare organizations.
7. Vendor Risk Management as a Service: Third-party vendor risk management services delivered as a managed service to assess and monitor vendor security posture.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels8 records

Core offering

CynergisTek (operating as Clearwater) provides healthcare-focused cybersecurity, compliance, and privacy services delivered through four integrated lines: managed security services (24/7 MSSP monitoring, threat detection, vulnerability management, incident response), managed cloud services for Microsoft Azure and Microsoft 365 environments, expert cybersecurity and compliance consulting (vCISO, OCR-Quality Risk Analysis, HIPAA/HITRUST/SOC 2/PCI DSS/CMMC certification), and the proprietary IRM|Pro Suite compliance software platform. Services are sold primarily to hospitals, health systems, physician practice groups, digital health companies, medical device manufacturers, and healthcare investors across the United States.

Product overview

Clearwater offers a comprehensive healthcare cybersecurity and compliance platform called IRM|Pro Suite, which is the company's award-winning compliance software providing insights and solutions to reduce risk and optimize security investments. The suite includes multiple modules: IRM|Analysis (risk analysis), IRM|Privacy (privacy compliance), IRM|Security (security compliance), IRM|Performance (compliance performance tracking), and IRM|405(d) HICP (405(d) framework implementation). The company also provides Managed Security Services including 24/7 monitoring, threat detection, vulnerability management, and incident response, along with Managed Cloud Services built on Microsoft Azure. Consulting services encompass vCISO, Incident Response, NIST CSF assessments, Medical Device Security, Technical Security Testing, and HIPAA/HITRUST/SOC 2/CMMC certification services. This is a platform-plus-modules architecture combining proprietary software with managed services and expert consulting.

Differentiator

Problem solved

Functional benefit

Brands

• ClearAdvantage Program: Managed Services Program for Regional & Critical Access Hospitals, winner of the 2025 Cybersecurity Excellence Award
• ClearConfidence Program
• IRM|Pro Suite
• IRM|Analysis
• IRM|Privacy
• IRM|Security
• IRM|Performance
• IRM|405(d) HICP
• OCR-Quality Risk Analysis
• OCR-Quality Risk Response

Products and services

• IRM|Pro Suite

Quantifiable outcome

• 100% success rate with Office for Civil Rights in risk analysis engagements
• +2 more outcomes

Named customers3 records

Segments7 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability1 record

Feature5 records

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Emerging players

• Protenus: Healthcare privacy analytics and patient privacy monitoring platform used by hospitals to detect EHR access abuse. Comparable to Clearwater's Patient Privacy Monitoring Services line and the IRM|Privacy module.

Broad incumbents

• Optum (UnitedHealth Group): Health-services arm of UnitedHealth Group delivering cyber risk management, HIPAA compliance, and security services to providers and payers at massive scale. Competes as a broader incumbent that can bundle Clearwater-style services into enterprise payer-provider deals.
• Deloitte (Cyber & Strategic Risk practice): Global consulting firm with a large healthcare cybersecurity practice delivering HIPAA, HITRUST, and managed security services to hospital systems. Competes against Clearwater in enterprise healthcare cyber where relationship scale and bundled delivery can outbid specialist firms.

Direct peers

• ClearDATA: Healthcare-exclusive cloud security and compliance provider with deep Azure and AWS expertise. Overlaps with Clearwater's Managed Cloud Services for healthcare on Microsoft Azure and 365 with cloud security posture management.
• A-LIGN: Cybersecurity and compliance firm delivering SOC 2, HITRUST, ISO 27001, and PCI DSS assessments plus managed GRC software. Comparable in certification and audit services and healthcare compliance delivery.
• Meditology Services: Healthcare cybersecurity and risk services firm offering HIPAA security risk assessments, penetration testing, and managed security for providers and payers. Direct competitor in healthcare-specific cyber consulting and MSSP delivery.
• Coalfire: Cybersecurity advisory and compliance firm with strong HITRUST, FedRAMP, and HIPAA practices serving healthcare and adjacent regulated industries. Comparable in compliance certification services and managed GRC offerings.
• Censinet: Healthcare-specific third-party risk management and vendor risk exchange for providers, payers, and digital health. Overlaps with Clearwater's Vendor Risk Management as a Service and healthcare investor due diligence offerings.
• Compliancy Group: HIPAA compliance software and services platform (formerly HIPAA One) for healthcare organizations of all sizes. Direct competitor in HIPAA compliance tooling, software-led pricing models, and healthcare buyer motion.
• Fortified Health Security: Healthcare-focused MSSP offering managed security services, compliance, and advisory for hospitals and digital health companies. Closely comparable to Clearwater in vertical specialization, MSSP-led delivery model, and HIPAA/HITRUST orientation.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/cynergistek
• Facebookfacebook.com/cynergistek
• LinkedInlinkedin.com/company/cynergistek-inc-

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CynergisTek