What Compass Cyber Guard does

Compass Cyber Guard is a US-based, Veteran-Owned Small Business (VOSB) operating as an affiliate of Compass IT Compliance, LLC, focused on delivering professional cybersecurity services to enterprise, mid-market, and government clients. The firm provides a broad service catalog across three functional pillars: assurance (SOC 1/2/3 reporting, penetration testing, vulnerability management including web application and API scanning, firewall review, Microsoft 365 assessments, EDR, and wireless assessments); compliance advisory (PCI DSS, NIST, HIPAA, CMMC, HECVAT, GLBA, CJIS, FTC Safeguards Rule, ISO 27002, GDPR, CIS Critical Security Controls, and MA 201 CMR 17); and risk and business resiliency (IT risk assessments, incident response planning, business continuity, IT policy templates, the Managed Risk Operations Center (mROC), vendor management, AI governance, and application risk assessments). Additional lines include virtual CISO (vCISO) advisory, social engineering and security awareness training, cloud security assessments, and white label security services for partner resellers.

The firm operates a sales-led, consultative go-to-market, accepting engagements through a "Get a Quote" web form with no public pricing. Customer segmentation is vertical-based, explicitly targeting Financial Services, Higher Education, Retail, Healthcare, Technology, Manufacturing, Hospitality, Nonprofit, Government (federal, state, local, and contractors), and Automotive Dealerships — a breadth of coverage that suggests reliance on multiple smaller engagements rather than concentration on a few large anchors. Marketing and demand generation are supported by content (blog, case studies, datasheets, tools), a YouTube channel (Compass IT Compliance), and event participation including live hacking demonstrations by senior practitioners.

The business is led by SVP of Cybersecurity Jesse Roberts, a former professor of Network Engineering & Cyber Security at the New England Institute of Technology with 20+ years of experience. Revenue is not publicly disclosed, no headcount is available, and no external funding, M&A, or IPO activity is recorded. The core competitive positioning rests on three dimensions: a wide compliance framework portfolio (regulatory moat), senior practitioner credentials (talent moat), and VOSB status, which enables access to federal and defense contractor set-aside procurements.

Name

Compass Cyber Guard

Legal name

Compass IT Compliance, LLC

Website

https://compasscyberguard.com

Company type

Private

Operating status

Operating

Headcount range

1–10 employees

Short description

Compass Cyber Guard is a US-based Veteran-Owned Small Business cybersecurity professional services firm, affiliated with Compass IT Compliance, offering penetration testing, vulnerability management, compliance advisory, vCISO, and incident response across ten verticals including government, healthcare, and financial services.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Other Scientific and Technical Consulting Services (54169), Security Systems Services (56162), Computer Systems Design and Related Services (54151)

SIC

Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG)

akta.pro secondary industries

Security Systems Monitoring & Dispatch (SOC/Remote Guarding) (IMAIAEAF), Cyber Defense & Information Security (National Security) (BPAIAHAE), Security Risk Assessment, Auditing & Security Consulting Training (BPAKAOAH), Penetration Testing, Red Team & Ethical Hacking (EDAOAIAH), Cybersecurity (EDAAAPAC)

Keywords

• Cybersecurity services
• Penetration testing
• Vulnerability management
• Compliance auditing
• Incident response

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Professional Cybersecurity Services: Revenue generated through consulting engagements including penetration testing, vulnerability assessments, compliance audits, vCISO services, incident response, and security training. These are typically project-based or retainer engagements with enterprise and government clients.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

Compass Cyber Guard is a veteran-owned professional cybersecurity firm delivering IT security and compliance services to enterprise, government, and regulated-industry clients. Its core engagements include penetration testing, vulnerability management, SOC 1/2/3 audit reporting, virtual CISO (vCISO) advisory, digital forensics and incident response, social engineering assessments, cloud security reviews, and white-label security services. The company operates as an affiliate of Compass IT Compliance, LLC, and emphasizes military-disciplined delivery and broad multi-framework compliance expertise.

Product overview

Compass Cyber Guard provides a comprehensive suite of IT security and compliance services as a Veteran-Owned Small Business. The offering consists of professional security services rather than a unified software product. Core service areas include SOC audit reporting, penetration testing, vulnerability management (encompassing vulnerability assessments, web application scanning, firewall security reviews, API scanning, Microsoft 365 security assessments, EDR, and wireless network assessments), virtual CISO advisory, regulatory compliance (covering PCI DSS, NIST, HIPAA, CMMC, HECVAT, GLBA, CJIS, FTC Safeguards Rule, ISO 27002, GDPR, CIS Controls, and state regulations), risk and business resiliency planning, social engineering and security awareness training, cloud security, and white label services for partners. The company is an affiliate of Compass IT Compliance.

Differentiator

Problem solved

Functional benefit

Products and services

• SOC 1, 2, & 3 Reports Audit reporting service covering SOC 1 (financial controls), SOC 2 (security, availability, confidentiality, privacy), and SOC 3 (security and availability) for service organizations.
• Penetration Testing Offensive security testing service that simulates real-world attacks against systems, networks, and applications to identify exploitable vulnerabilities for enterprise and government clients.
• Vulnerability Management Comprehensive vulnerability assessment program bundling vulnerability assessments, web application scanning, firewall security reviews, API scanning, Microsoft 365 security assessments, EDR, and wireless network assessments.
• Virtual CISO (vCISO) On-demand fractional CISO service providing strategic security leadership, program development, and governance guidance without the cost of a full-time executive hire.
• Compliance Services Regulatory compliance advisory across PCI DSS, NIST, HIPAA, CMMC, HECVAT, GLBA, CJIS, FTC Safeguards Rule, ISO 27002, GDPR, CIS Critical Security Controls, and MA 201 CMR 17.
• Risk & Business Resiliency Risk and resilience services including IT risk assessments, outsourced IT audits, incident response planning, business continuity planning, IT policy templates, Managed Risk Operations Center (mROC), data insights, vendor management, business resilience review, AI governance, and application risk assessments.
• Social Engineering & Awareness Human-factor security service covering phishing assessments, security awareness training, and social engineering assessments to evaluate and improve employee security behavior.
• Cloud Security Security assessment and advisory engagements for cloud infrastructure and SaaS environments, including configuration review and cloud posture evaluation.
• White Label Security Services Delivery of cybersecurity services under partner brands for resale by IT providers, MSSPs, and consultancies to their own end customers.

Segments10 records

Ideal customer profiles1 record

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

One partnership is on record.

• Compass IT CompliancecoreStrategic or Co-development PartnerCompass Cyber Guard is an affiliate of Compass IT Compliance, operating as a separate brand focused specifically on cybersecurity services while sharing resources and expertise with the parent company. The relationship allows cross-referrals between cybersecurity and IT compliance service lines.

Recent moves5 records

Expansion highlights5 records

Broad incumbents

• Rapid7: Rapid7 combines a security analytics platform with managed services including penetration testing, vulnerability management and incident response. Its service arm competes with Compass, but the company is fundamentally a product-led incumbent rather than a pure services peer.
• NCC Group: NCC Group is a global cybersecurity consultancy providing penetration testing, compliance assurance, managed detection and incident response. It is comparable in service mix but materially larger and broader geographically than Compass Cyber Guard.
• Optiv: Optiv is a large security solutions integrator delivering advisory, managed security, and cyber operations across enterprise and government clients. It overlaps Compass's offerings but at a much broader portfolio and scale, and does not specialize in the VOSB set-aside niche.

Direct peers

• Arctic Wolf: Arctic Wolf is a managed security services provider offering a Managed Risk Operations-style offering (Arctic Wolf Managed Risk), continuous vulnerability management, and vCISO services. Direct overlap with Compass's mROC, vulnerability management and vCISO lines.
• IOActive: IOActive is a security services firm specializing in penetration testing, vulnerability research, hardware/OT security and incident response. Strong overlap with Compass's offensive security and incident response offerings.
• A-LIGN: A-LIGN is a cybersecurity and compliance firm specializing in SOC 1/2/3 audits, ISO 27001, HITRUST, PCI DSS and penetration testing. Its service mix, audit-heavy compliance focus and SMB-to-enterprise segment closely mirror Compass Cyber Guard's offering.
• Kudelski Security: Kudelski Security delivers managed detection and response, penetration testing, advisory and incident response to enterprise and government clients. Comparable service mix and similar reliance on multi-framework compliance expertise.
• Coalfire: Coalfire is a cybersecurity advisory and compliance services firm offering penetration testing, vulnerability management, SOC audits and CMMC/FedRAMP advisory. It directly overlaps Compass Cyber Guard's core services and target verticals including financial services, healthcare and government.
• Trustwave: Trustwave is an MSSP offering managed detection and response, vulnerability management, penetration testing, incident response and compliance advisory. It is a direct competitor across most of Compass Cyber Guard's service lines and verticals.
• Schellman & Co. Schellman is a top-tier SOC 2/3, ISO and HITRUST assessor that also provides penetration testing and compliance advisory. Its compliance-anchored services portfolio and multi-framework depth are highly comparable to Compass Cyber Guard's positioning.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks6 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/c/CompassITCompliance
• LinkedInlinkedin.com/company/compass-cyber-guard

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Compass Cyber Guard