What ATOM does

The ATOM Group is a private software and cybersecurity services firm headquartered in Portsmouth, New Hampshire, with a second office (ATOM West) in Concord, NH. The firm operates three core service pillars: custom software development (web, mobile, and CMS modernization including Kentico-to-Umbraco migration), cybersecurity consulting (penetration testing, breach counsel and ransomware negotiation, incident response, virtual CISO, and a National Security Program covering critical-infrastructure and OT/ICS risk), and user experience design. A fourth specialized practice, the Municipal Cyber Defense Program (MCDP), was co-developed with the U.S. Department of Homeland Security and the New Hampshire Department of Information Technology to deliver grant-funded cyber risk assessments, tabletop exercises, and incident-response planning to NH municipalities.

ATOM's customer base spans regulated industries — financial services (Bank of America, Intuit, Heartland), healthcare (Partners Healthcare), media/technology (Roku), and the public sector (NH municipalities, Concord School District) — and the firm maintains affiliations with CISA, FBI InfraGard, and the Overwatch Foundation to access federal threat-intelligence channels and OT/ICS training infrastructure. The business model is professional services: project-based, fixed-scope engagements sold through a consultative, sales-led motion with no publicly disclosed rates or productized pricing. The firm does not publish revenue, has not raised priced funding rounds, and operates with a headcount in the 11–50 band.

The firm uses a Vanta-powered Trust Center to publish attestations across ISO 27001, NIST, CMMC L1–L5, GDPR, PCI, and C2M2, signaling a deliberate procurement-readiness posture for regulated buyers and federal work. Disclosed leadership includes co-founder Tom Herer, Partner and COO Alyssa Rosenzweig, Chief of Product and Senior Partner Matt Chepeleff, and Project Manager Kristin Martin. No M&A activity, leadership changes, or capital-raise events are disclosed in the input data.

Name

ATOM

Legal name

The ATOM Group

Website

https://theatomgroup.com

Company type

Private

Founded year

2023

Operating status

Operating

Headcount range

11–50 employees

Short description

The ATOM Group is a Portsmouth, NH-based private software and cybersecurity services firm serving critical-infrastructure, financial, healthcare, and public-sector clients through custom development, cyber advisory, and the DHS-partnered Municipal Cyber Defense Program.

Ownership category

akta.pro rank

Product category

Cybersecurity and Custom Software Services

NAICS

Security Systems Services (56162)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)

akta.pro secondary industries

Managed OT Security Services (MSSP/MDR for ICS/OT) (HDADAJAN), Security Risk Assessment, Vulnerability Analysis & DBT/Threat Modeling (design-basis threat) (EUAKAJAJ)

Keywords

• Cybersecurity consulting
• Incident response
• Penetration testing
• Virtual CISO services
• Custom software development

Headquarters

HQ city

Portsmouth

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Cybersecurity Services: Professional services including penetration testing, breach counsel, incident response, virtual CISO, and national security program consulting for critical infrastructure
2. Software Development: Custom software development including web tech, modernization, mobile apps, and Kentico to Umbraco migrations
3. User Experience Services: UX design, strategy, and business design consulting services
4. MCDP Grant-Funded Training: Grant-funded cybersecurity training programs for NH municipalities, educators, and public sector workers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels3 records

Core offering

ATOM provides custom software development, cybersecurity consulting, and user experience services to enterprise and government clients. Cybersecurity offerings include penetration testing, breach counsel, virtual CISO and fractional CIO services, incident response with threat-actor negotiation, and a National Security Program focused on critical infrastructure. The Municipal Cyber Defense Program (MCDP) is a grant-funded cybersecurity readiness initiative delivered for New Hampshire municipalities in partnership with the US Department of Homeland Security and the NH Department of Information Technology.

Product overview

ATOM is a custom software development and cybersecurity consulting firm that operates as a unified services practice rather than a software product company. The company offers three core service pillars: Software Development (web tech, modernization, mobile, Kentico-to-Umbraco migrations), Cybersecurity (pen testing, breach counsel, national security program, virtual CISO, incident response), and User Experience services. The flagship program is the Municipal Cyber Defense Program (MCDP), a grant-funded initiative in partnership with the US Department of Homeland Security and NH Department of Information Technology providing cybersecurity training and emergency preparedness to New Hampshire communities. The Trust Center, powered by Vanta, provides compliance and security documentation management. The portfolio also includes specialized incident response services with threat actor negotiation capabilities and a national security program focused on critical infrastructure protection.

Differentiator

Problem solved

Functional benefit

Brands

• MCDP: Municipal Cyber Defense Program - a grant-based partnership between ATOM, the US Department of Homeland Security, and the NH Department of Information Technology to enhance cybersecurity protection of communities and critical infrastructure.

Products and services

• Software Development Services Custom software development services covering web technology, application modernization, mobile development, and Kentico-to-Umbraco migrations, delivered to enterprise and government clients.
• Cybersecurity Services Comprehensive cybersecurity offerings including penetration testing, breach counsel, incident response, virtual CISO, and National Security Program services for regulated industries and critical infrastructure.
• User Experience Services UX design and consulting services focused on cultivating visionary ideas into vital experiences, including engagement strategy and business design for enterprise and government clients.
• Municipal Cyber Defense Program (MCDP) Grant-based cybersecurity training and emergency response program for New Hampshire municipalities, educators, and public-sector workers, delivered in partnership with US DHS and the NH Department of Information Technology.
• Incident Response Services Emergency response services for critical infrastructure, businesses, families, and communities including onsite expert teams, threat removal, incident leadership, threat actor negotiations (averaging more than 60% savings on extortion demands), and ransom settlement handling with full transparency and payment delivery guarantee.
• Virtual CISO Services Fractional cybersecurity and privacy expert consulting including Data Protection Officer services, fractional CISO/CIO, expert witness, breach coaching, and compliance framework services (ISO27001, ISO13485, CMMC, NIST, GDPR, PCI) for regulated industries.
• National Security Program Program focused on defending and securing critical infrastructure and the American way of life through governance and strategy review, risk management framework assessments, defense-in-depth operations, personnel security training, and incident response continuity planning using CISA and FBI InfraGard resources.

Quantifiable outcome

• Threat actor negotiations saving clients more than 60% on average on extortion demands
• +1 more outcomes

Named customers7 records

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature10 records

Partnerships

Five partnerships are on record, tiered core and minor.

• US Department of Homeland SecuritycoreStrategic or Co-development PartnerGrant-based partnership for the Municipal Cyber Defense Program (MCDP). DHS provides grant funding and program framework for cybersecurity training and emergency response services to NH municipalities.
• NH Department of Information TechnologycoreStrategic or Co-development PartnerState-level partnership for the Municipal Cyber Defense Program, co-funding cybersecurity training and protection services for New Hampshire communities.
• CISA (Cybersecurity and Infrastructure Security Agency)coreStrategic or Co-development PartnerATOM leverages CISA resources, tools, and guidelines including Cyber Resilience Review (CRR) assessments for vulnerability identification.
• FBI InfraGardcoreStrategic or Co-development PartnerThreat intelligence partnership leveraging FBI InfraGard resources for threat identification and risk assessment across New England.
• Overwatch FoundationminorStrategic or Co-development PartnerPartnership for SCADA OT/ICS Cyber Training as part of the Overwatch Foundation Grant Program for critical infrastructure protection.

Scale indicators2 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Pondurance: MDR and incident response provider focused on mid-market and regulated industries including critical infrastructure, healthcare, and financial services. Directly comparable to ATOM's incident response, vCISO, and regulated-industry compliance practices.
• Claroty: Cybersecurity platform purpose-built for industrial control systems and operational technology across critical infrastructure sectors. Overlaps directly with ATOM's OT/ICS segmentation, monitoring, and Purdue Model-based network protection services.
• Nozomi Networks: OT and IoT cybersecurity vendor providing visibility, threat detection, and asset intelligence for critical infrastructure and industrial operators. Comparable to ATOM's cyber-physical convergence approach for utilities and similar regulated operators.
• Dragos: OT/ICS cybersecurity vendor specializing in critical infrastructure protection, asset discovery, and threat detection for industrial environments. Directly comparable to ATOM's National Security Program and OT/ICS hardening practice serving utilities and critical infrastructure operators.
• eSentire: Managed detection and response and incident response provider focused on mid-market and regulated industries, with deep expertise in ransomware response and threat actor engagement. Directly comparable to ATOM's incident response and threat actor negotiation capabilities.
• GuidePoint Security: Cybersecurity services firm offering advisory, incident response, vCISO, and managed security services to federal, healthcare, financial, and critical infrastructure clients. Closely comparable to ATOM's mix of cybersecurity advisory, vCISO, and federal/public sector work.

Broad incumbents

• NCC Group: Global cybersecurity and software resilience firm offering incident response, threat intelligence, and OT/ICS advisory to critical infrastructure and regulated industries. Comparable in OT/ICS cyber and incident response scope, though operating at significantly greater scale than ATOM.
• Mandiant (Google Cloud): Global leader in incident response, threat intelligence, and cyber advisory, now part of Google Cloud. Sets the market benchmark ATOM competes against on high-stakes breach response, ransomware negotiation, and critical infrastructure engagements.
• Arctic Wolf: Scaled managed detection and response and security operations provider serving mid-market and enterprise customers across regulated industries. Operates broadly across the same customer verticals as ATOM and competes for incident response and managed security engagements.
• ReliaQuest: Enterprise cybersecurity operations platform with strong incident response, threat intelligence, and managed detection capabilities. Competes with ATOM for enterprise and regulated-industry incident response and managed security mandates.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/the-atom-group

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ATOM