Point Solutions Security
Point Solutions Security is a women-owned cybersecurity services firm in Denver, Colorado, providing outsourced security leadership — including CaaS, vCISO, penetration testing, and GRC — to small and mid-sized businesses and select government and defense-industrial-base clients.
- Company typePrivate
- Founded2017
- HeadquartersDenver, United States
- Headcount1–10
- GTM typeB2B
- OfferingServices
What Point Solutions Security does
Point Solutions Security is a privately held, women-owned cybersecurity services firm headquartered in Denver, Colorado, founded in 2017 by Paige Goss. The firm delivers outsourced cybersecurity leadership and operational security services to small and mid-sized businesses, with secondary penetration into aerospace and defense contractors, municipal government, high-tech manufacturing, and e-commerce verticals. There is no proprietary software platform; the offering is human-led expert engagement structured around a three-phase methodology (Assessment, Testing, Remediation) and standards-based frameworks including SOC 2, HIPAA, ISO 27001, NIST CSF, NIST 800-171, CMMC, and PCI-DSS. Tooling comprises industry-standard vulnerability scanning, SIEM integration, endpoint detection and response, and cloud security posture management.
The core product is Cybersecurity as a Service (CaaS), a tiered managed security bundle that packages expert protection, annual penetration testing, and compliance checks at an average annual price of $108,000. Surrounding service pillars include Penetration Testing (with a specialized AI Penetration Testing line), Governance Risk and Compliance, Digital Infrastructure Integration, vCISO/Fractional CISO (and a blended Converge vCISO offering), Incident Response, Audit Readiness, and Cybersecurity Risk Assessment. Engagements are priced per project for pen tests and risk assessments (with web app tests running 1–2 weeks and full network engagements 3–4 weeks) and on monthly retainers for CaaS and vCISO, with no long-term contracts required.
Go-to-market is consultative direct sales supported by a content-led organic acquisition motion — an extensive paginated blog, SEO around pen-testing and vCISO keywords, success-story case studies across five verticals, and a free dark web scan offered as a low-friction top-of-funnel entry point. The firm holds EDWOSB, WBENC, and NGLCC certifications supporting supplier-diversity procurement access, and counts a SaaS company, a water and sanitation provider, the City of Centennial, Sanity Solutions, and a U.S. Defense Contractor as named reference clients. As of the most recent data, the company operates with 7 employees and has not raised external funding.
Point Solutions Security firmographics
Firmographics- Name
- Point Solutions Security
- Legal name
- Point Solutions Security
- Website
- https://pointsolutions-security.com
- Company type
- Private
- Founded year
- 2017
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Point Solutions Security is a women-owned cybersecurity services firm in Denver, Colorado, providing outsourced security leadership — including CaaS, vCISO, penetration testing, and GRC — to small and mid-sized businesses and select government and defense-industrial-base clients.
- Ownership category
- akta.pro rank
Point Solutions Security industry classification
Industry- Product category
- Cybersecurity Services
- NAICS
- Other Computer Related Services (541519)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Vulnerability Management & Penetration Testing Services (BPAEADAD)
- akta.pro secondary industries
- Security Operations Center (SOC) as a Service (BPAEADAB), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH)
Keywords
Where Point Solutions Security is headquartered
LocationHeadquarters
- HQ city
- Denver
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Point Solutions Security business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Penetration Testing & Risk Assessments: Project-based engagements priced per engagement based on scope. A focused web application test takes one to two weeks from kickoff to final report; a comprehensive network engagement for a larger organization runs three to four weeks. Pricing varies by scope and a custom quote is provided per engagement.
- Cybersecurity as a Service (CaaS) and vCISO Retainers: Ongoing services including Cybersecurity as a Service (CaaS) and virtual CISO/Fractional CISO are offered on a monthly retainer basis. CaaS averages $108,000 per year and includes expert protection, annual penetration tests, and compliance checks. The company also offers a free dark web scan as an entry point to the retainer relationship.
- Audit Readiness & GRC Services: Compliance and governance services including SOC 2, HIPAA, ISO 27001, NIST, and PCI-DSS audit readiness, gap assessments, policy updates, and evidence collection. These are project-based or bundled into the CaaS retainer.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| One time/ perpetual license | Pay-as-you-go | Project-based penetration testing and risk assessments |
| Subscription | Monthly | CaaS (Cybersecurity as a Service) and vCISO retainer |
| Other | Pay-as-you-go | Audit readiness and GRC services |
Go-to-market motion1 record
Distribution channels2 records
Marketing channels5 records
Point Solutions Security product offering
Product offeringCore offering
Point Solutions Security delivers Cybersecurity as a Service (CaaS) bundles for small and mid-sized organizations, combining penetration testing, governance/risk/compliance advisory, virtual CISO (vCISO) leadership, and digital infrastructure protection. Services are sold as project-based engagements or recurring monthly retainers across three tiered packages, with no long-term contract requirement.
Product overview
Point Solutions Security is a cybersecurity services firm, not a software product company. The core offering is Cybersecurity as a Service (CaaS) — a three-tier managed security package that bundles expert protection, annual penetration tests, and compliance checks. Surrounding this centerpiece are five specialized service pillars: Penetration Testing (including AI Penetration Testing), Governance Risk and Compliance (GRC), Digital Infrastructure Integration, vCISO/Fractional CISO, and Cybersecurity for Small Businesses. These services function as standalone offerings that can also be packaged together under the CaaS umbrella, enabling clients to mix and match coverage based on their size and risk profile.
Differentiator
Problem solved
Functional benefit
Quantifiable outcome
- CaaS pricing of $108,000/year versus $350,000–$600,000/year for a top-tier full-time CISO
- +2 more outcomes
Companies that use Point Solutions Security
Customer profileNamed customers5 records
Segments6 records
Ideal customer profiles4 records
Point Solutions Security technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Point Solutions Security partnerships and signals
Strategic signalScale indicators4 records
Recent moves6 records
Expansion highlights6 records
Point Solutions Security competitors and assessment
Company assessmentDirect peers
- CynergisTek: CynergisTek is a healthcare-focused cybersecurity and compliance firm offering managed security, GRC, and pen testing to hospitals and life sciences. It is comparable to PSS as a vertical-specialized MSSP delivering CaaS-style packages and audit readiness work.
- Pivot Point Security: Pivot Point Security is a vCISO and GRC services firm focused on SMB and mid-market clients across regulated industries. It is a near-identical peer to PSS in business model: fractional CISO, CaaS retainers, SOC 2/HIPAA/CMMC readiness, and pen testing.
- Coalfire: Coalfire is a cybersecurity advisory firm specializing in compliance (FedRAMP, HITRUST, PCI, CMMC) and pen testing for cloud and regulated enterprises. It overlaps with PSS on CMMC readiness, GRC, and technical security testing across defense and SaaS clients.
- BARR Advisory: BARR Advisory is a cybersecurity and compliance consulting firm delivering SOC 2, ISO 27001, HITRUST, and pen testing for SaaS and growth-stage companies. It is comparable to PSS in target segment, framework expertise, and fractional security leadership positioning.
- Tevora: Tevora is a cybersecurity consulting firm offering pen testing, GRC advisory, and managed security services to mid-market and enterprise clients. It directly competes with PSS in pen testing, SOC 2 readiness, and vCISO engagements across SaaS and regulated verticals.
- A-LIGN: A-LIGN is a cybersecurity compliance and audit firm offering SOC 2, ISO 27001, HIPAA, and PCI readiness services plus managed security. It directly competes with PSS in the SMB-to-mid-market GRC and pen testing segment and uses a similar consultative, retainer-driven model.
- Schellman & Co: Schellman is a top-tier compliance and cybersecurity assessment firm offering SOC 2, ISO, FedRAMP, and pen testing engagements. It is highly comparable to PSS in target customer (SMB/mid-market), service mix (audit readiness + vCISO-adjacent advisory), and pricing model.
Broad incumbents
- Optiv Security: Optiv is a large-scale cybersecurity solutions integrator offering managed security, advisory, and risk services across enterprise and mid-market segments. It competes with PSS on managed security and vCISO services but operates at significantly greater scale and breadth.
- NCC Group: NCC Group is a global cybersecurity and risk advisory firm offering pen testing, managed detection, compliance, and incident response. It competes with PSS across pen testing, GRC, and incident response but at significantly larger scale and broader geographic reach.
- Kudelski Security: Kudelski Security provides managed detection and response, advisory, and compliance services to mid-market and enterprise clients in Europe and North America. It overlaps with PSS on GRC, pen testing, and CISO advisory but operates internationally with broader capability.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat6 records
Key risks5 records
Key highlights6 records
Customer concentration
Point Solutions Security social profiles
Digital presencePoint Solutions Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Point Solutions Security leadership team
Management profileNumber of profiles
Profiles3 records
Point Solutions Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Point Solutions Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Point Solutions Security
What does Point Solutions Security do?
Point Solutions Security delivers Cybersecurity as a Service (CaaS) bundles for small and mid-sized organizations, combining penetration testing, governance/risk/compliance advisory, virtual CISO (vCISO) leadership, and digital infrastructure protection. Services are sold as project-based engagements or recurring monthly retainers across three tiered packages, with no long-term contract requirement.
Is Point Solutions Security a public or private company?
Point Solutions Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Point Solutions Security founded?
Point Solutions Security was founded in 2017. It employs 1 to 10 people.
Where is Point Solutions Security based?
Point Solutions Security is headquartered in Denver, United States, in the North America region.
How does Point Solutions Security make money?
Three revenue lines are on record. Penetration Testing & Risk Assessments are the primary driver. The others are cybersecurity as a Service (CaaS) and vCISO Retainers and audit Readiness & GRC Services.
Who are Point Solutions Security's main competitors?
Direct peers on record are CynergisTek, Pivot Point Security, Coalfire, BARR Advisory, Tevora, A-LIGN and Schellman & Co. Broad incumbents are Optiv Security, NCC Group and Kudelski Security.
Does Point Solutions Security have an API?
No public API is recorded for Point Solutions Security.
What industry is Point Solutions Security in?
Point Solutions Security's product category is Cybersecurity Services. Its primary akta.pro industry code is BPAEADAD, Vulnerability Management & Penetration Testing Services, with a secondary code of BPAEADAB, Security Operations Center (SOC) as a Service. Its NAICS code is 541519 and its SIC code is 7370.