CANDA Solutions
CANDA Solutions provides Fresh Haystack, a FedRAMP-authorized COTS risk management platform, alongside investigation and advisory services for U.S. national security enterprises. It serves federal agencies and defense contractors requiring DCSA, NISPOM, and Trusted Workforce 2.0 compliance.
- Company typePrivate
- Founded2008
- HeadquartersColumbia, United States
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What CANDA Solutions does
CANDA Solutions, LLC is a privately held Columbia, Maryland–based provider of integrated risk management solutions for U.S. national security enterprises, founded in 2008. The company's core product is Fresh Haystack, a Commercial Off-The-Shelf (COTS) risk management platform deployed on AWS and Azure Gov Clouds with FedRAMP and FISMA High ATO authorizations. Fresh Haystack provides preconfigured workflows for insider threat, workplace violence, personnel security, and clearance processing, augmented by an AI-powered "Risk Integration & Decision Engine" (RIDE) that applies structured analytic models to produce risk scorecards and predictive forecasts. CANDA complements the platform with four service lines: Risk Advisory Services, Investigation Services & Technology (notably a five-year CACI subcontract for DCSA Background Investigation Fieldwork Services covering all 50 states), Digital Transformation, and Enterprise Security & Architecture.
The business model combines transaction-based modular software licensing under multi-year contracts with professional services revenue. CANDA sells primarily through direct enterprise field sales to federal agencies and defense contractors, supplemented by channel partners — most notably Government Acquisitions Inc — and a broad set of federal procurement vehicles including GSA Schedule 70 (47QTCA18D00GP, through 10/2028), C5 OTA (through 4/2027), NASA SEWP V, CIO-CS, ITES-3H, 2GIT, FirstSource II, and US Navy SeaPort-NxG. The company holds SOC 2 Type 2 attestation and has been recognized in three consecutive Gartner Market Guides for Insider Risk Management (2019, 2022, 2023), in addition to a 2024 Inc. 5000 listing.
CANDA operates with approximately 19 employees organized into five core teams, with no disclosed outside funding, parent company, or M&A activity. The leadership team — Principal Andrew Razumovsky, COO Chris Leonard, and VP of Risk Programs Sharese Walker — anchors a founder-led structure that has sustained the business for 15+ years through a focused vertical strategy in personnel security and insider risk management for federal and defense customers.
CANDA Solutions firmographics
Firmographics- Name
- CANDA Solutions
- Legal name
- CANDA Solutions, LLC
- Website
- https://candasolutions.com
- Company type
- Private
- Founded year
- 2008
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- CANDA Solutions provides Fresh Haystack, a FedRAMP-authorized COTS risk management platform, alongside investigation and advisory services for U.S. national security enterprises. It serves federal agencies and defense contractors requiring DCSA, NISPOM, and Trusted Workforce 2.0 compliance.
- Ownership category
- akta.pro rank
CANDA Solutions industry classification
Industry- Product category
- National Security Risk Management Software
- NAICS
- Computer Systems Design and Related Services (54151), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- SIC
- Services-Computer Integrated Systems Design (7373), Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Identity Threat Detection & Response (ITDR) (HDAEAJAH)
- akta.pro secondary industries
- Insider Threat Program Design & Risk Assessments (BPAKADAM), Access Security & Identity Threat Detection (ITDR, UEBA for Identity) (HDADAAAI)
Keywords
Where CANDA Solutions is headquartered
LocationHeadquarters
- HQ city
- Columbia
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
CANDA Solutions business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations
Revenue model
- Software Platform (Fresh Haystack): Fresh Haystack is sold as a modular software platform to national security enterprises. Transaction-based pricing model with low-risk investment structure. Customers can purchase specific modules based on operational needs.
- Risk Advisory Services: Consulting services for enterprise risk management including assessments, road-mapping, and vetting efficiency best practices. Provided alongside the software platform as part of integrated risk management suite.
- GSA IT Schedule 70 Contract: Information Technology Professional Services delivered under GSA Schedule 70 contract (47QTCA18D00GP for SIN 132-51) covering the period 12/10/2023 to 10/09/2028.
- Investigation Services: Background investigation fieldwork services provided as subcontractor to CACI supporting DCSA Background Investigation Fieldwork Services contract covering all 50 states and territories.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Transaction based/ take rate | Multi-year contract | Modular platform with transaction-based pricing |
| Other | Multi-year contract | GSA Schedule 70 Contract |
Go-to-market motion2 records
Distribution channels5 records
Marketing channels8 records
CANDA Solutions product offering
Product offeringCore offering
CANDA Solutions sells the Fresh Haystack COTS risk management platform, a modular software suite for national security enterprises that manages Insider Threat, Workplace Violence, and personnel security cases end-to-end. The platform pairs AI-driven RIDE (Risk Integration & Decision Engine) predictive scoring and preconfigured investigation workflows with FedRAMP- and FISMA High ATO-authorized deployment on AWS and Azure Gov Clouds. CANDA bundles this software with Risk Advisory Services, Investigation Services & Technology, Digital Transformation consulting, and Enterprise Security & Architecture, delivered under a proprietary FARM methodology to federal agencies and defense contractors.
Product overview
CANDA Solutions offers an integrated risk management suite combining a COTS software product with professional services. The core product is Fresh Haystack, a modular risk management platform providing preconfigured, workflow-driven case management for national security enterprises. This is complemented by four service offerings: Risk Advisory Services (consultative assessments and strategy), Investigation Services & Technology (background investigations and BI automation), Digital Transformation (platform modernization and integration), and Enterprise Security & Architecture (strategic consulting). The modular architecture allows customers to acquire only the components they operationally need, with Fresh Haystack serving as the central platform that delivers preconfigured workflows, dynamic dashboards, automation, and risk scoring capabilities.
Differentiator
Problem solved
Functional benefit
Brands
- Fresh Haystack: A pragmatic risk management platform tailored to meet the needs of national security enterprises. Preconfigured and packaged for accelerated delivery, it addresses all key pressure points for keeping the bad guys out and maintaining compliance.
Products and services
- Fresh Haystack Fresh Haystack is a Commercial Off-The-Shelf (COTS) risk management platform purpose-built for national security enterprises. It delivers preconfigured, benchmarked workflows for Insider Threat, Workplace Violence, and other case types with SLA management, notifications/escalations, task and checklist management, dynamic dashboards, AI-driven risk scoring via the Risk Integration & Decision Engine (RIDE), and predictive analytics. It is FedRAMP and FISMA High ATO authorized, deployed on AWS and Azure Gov Clouds, and serves federal agencies, defense and intelligence contractors responsible for personnel security, insider risk, and compliance programs under DCSA, NISPOM, and Trusted Workforce 2.0.
- Risk Advisory Services Consultative risk advisory services for national security enterprises covering organizational risk landscape assessment, in-depth analysis for holistic risk views, customized risk mitigation strategy development, and digital transformation strategy. Targets strategic, operational, financial, and compliance-related risks for federal agencies and defense contractors.
- Investigation Services & Technology Background investigation technology and fieldwork services covering civilian and military applicants, Federal employees, and Government contractor personnel with national coverage. Includes BI capabilities supporting DCSA and NISPOM compliance requirements, delivered in combination with the Fresh Haystack platform.
- Digital Transformation Strategic digital modernization services leveraging the Fresh Haystack platform to connect business silos, automate repetitive tasks, and enable seamless integration with existing organizational systems for comprehensive enterprise-wide risk management.
- Enterprise Security & Architecture Enterprise architecture and security consulting focused on business strategy alignment, technical infrastructure development, stakeholder coordination, and reducing technical risks through direct customer relationships and market-aligned development practices.
- GSA IT Schedule 70 Contract - Information Technology Professional Services Information Technology Professional Services contract vehicle enabling federal agencies to procure CANDA's Fresh Haystack platform and risk management services under GSA Schedule 70, contract 47QTCA18D00GP for SIN 132-51, valid through 10/09/2028.
Quantifiable outcome
- Cycle time reduction of 2/3 in complex business case processing
- +3 more outcomes
Companies that use CANDA Solutions
Customer profileNamed customers2 records
Segments2 records
Ideal customer profiles2 records
CANDA Solutions technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration5 records
AI capability3 records
Feature6 records
CANDA Solutions partnerships and signals
Strategic signalPartnerships
Seven partnerships are on record, tiered core and minor.
- CACIcoreCANDA Solutions awarded a five-year subcontract to CACI supporting the largest federal Fieldwork Services contract to provide Background Investigation capabilities. Work covers all 50 states, Washington D.C., and all commonwealths and U.S. Trust Territories. CANDA brings significant investigative capacity with national coverage for conducting background investigations.
- Government Acquisitions Inc (GAI)coreStrategic partnership between CANDA Solutions and Government Acquisitions Inc (GAI), an experienced, award-winning value-added reseller. GAI provides optimized IT infrastructure solutions and helps CANDA reach government customers through various contract vehicles.
- UiPathcoreUiPath is listed as a market leader partner. CANDA Solutions utilizes UiPath's robotic process automation technology as part of its risk management ecosystem, integrating automation capabilities into the Fresh Haystack platform.
- AWS (Amazon Web Services)coreAWS is listed as a valued partner. Fresh Haystack is deployed to AWS cloud. CANDA has achieved FedRAMP authorization for cloud deployments.
- MicrosoftcoreMicrosoft is listed as a valued partner. Fresh Haystack data is stored in MS SQL server database and can connect with Microsoft Power BI for analytics.
- LeidosminorLeidos logo appears in partners section, indicating potential strategic partnership or integration relationship.
- C5 OTA ConsortiumcoreCANDA Solutions is a Prime Member of the C5 OTA (Consortium for Command, Control, and Communications in Cyberspace) with Other Transactional Authority for Department of Defense. Contract period: 4/2017 to 4/2027.
Scale indicators6 records
Recent moves6 records
Expansion highlights4 records
CANDA Solutions competitors and assessment
Company assessmentDirect peers
- ObserveIT (Proofpoint): Proofpoint's ObserveIT (now part of Proofpoint's insider threat management suite) competes directly with Fresh Haystack in user activity monitoring and insider risk for federal and commercial buyers. Both vendors have appeared in Gartner Market Guides for insider risk management.
- DTEX Systems: DTEX is a direct competitor in insider risk and user behavior analytics, with a comparable federal go-to-market and recognition in Gartner's insider risk management market guides. It is one of the closest direct competitors to Fresh Haystack's core capability set.
- Haystax (now Resolver): Haystax built insider risk and threat analytics specifically for federal security and public safety buyers before being acquired by Resolver. It is the closest historical and product analog to Fresh Haystack, addressing personnel security and insider risk for national security clients.
Broad incumbents
- Booz Allen Hamilton: Booz Allen Hamilton delivers federal cyber, insider threat, and personnel security consulting alongside its broader defense and intelligence portfolio. It competes with CANDA at the program level and on adjacent insider risk management advisory engagements.
- Palantir Technologies: Palantir's Gotham and Foundry platforms are used across defense, intelligence, and civilian agencies for personnel vetting, insider risk analytics, and case management. As a listed CANDA partner and federal platform incumbent, it is the most consequential competitive and ecosystem reference for Fresh Haystack.
- CACI International: CACI is CANDA's prime contractor on the DCSA Background Investigation Fieldwork Services engagement and a broader federal IT and national security integrator. It is both a critical channel partner and a competitor for related personnel security and insider risk programs.
- Forcepoint: Forcepoint's insider threat and data loss prevention products compete with Fresh Haystack in federal and defense user-behavior analytics. It is a broader cybersecurity incumbent with overlapping use cases in personnel risk management.
- Leidos: Leidos is a Tier 1 federal integrator with deep DCSA, intelligence community, and personnel security work, including background investigation and insider risk programs. Listed as a CANDA partner, it competes as a prime while also serving as a potential channel for Fresh Haystack embedding.
Regional players
- Telos Corporation: Telos provides identity, credentialing, and personnel security solutions across the federal market, including offerings tied to National Security and insider risk programs. It is a US-focused federal security vendor with overlapping customer base and capability set.
Emerging players
- Recorded Future (Mastercard): Recorded Future delivers intelligence-driven risk analytics used by federal agencies and contractors for threat and personnel risk decisions. It overlaps thematically with Fresh Haystack's risk-scoring approach via AI RIDE and predictive forecasting.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
CANDA Solutions social profiles
Digital presenceCANDA Solutions compliance and trust
Trust signalCompliance3 records
CANDA Solutions financial estimates
Financial estimateRevenue estimate
Valuation estimate
CANDA Solutions leadership team
Management profileNumber of profiles
Profiles4 records
CANDA Solutions funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
CANDA Solutions M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about CANDA Solutions
What does CANDA Solutions do?
CANDA Solutions sells the Fresh Haystack COTS risk management platform, a modular software suite for national security enterprises that manages Insider Threat, Workplace Violence, and personnel security cases end-to-end. The platform pairs AI-driven RIDE (Risk Integration & Decision Engine) predictive scoring and preconfigured investigation workflows with FedRAMP- and FISMA High ATO-authorized deployment on AWS and Azure Gov Clouds. CANDA bundles this software with Risk Advisory Services, Investigation Services & Technology, Digital Transformation consulting, and Enterprise Security & Architecture, delivered under a proprietary FARM methodology to federal agencies and defense contractors.
Is CANDA Solutions a public or private company?
CANDA Solutions is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was CANDA Solutions founded?
CANDA Solutions was founded in 2008. It employs 101 to 250 people.
Where is CANDA Solutions based?
CANDA Solutions is headquartered in Columbia, United States, in the North America region.
How does CANDA Solutions make money?
Four revenue lines are on record. Software Platform (Fresh Haystack) is the primary driver. The others are risk Advisory Services, GSA IT Schedule 70 Contract and investigation Services.
Who are CANDA Solutions's main competitors?
Direct peers on record are ObserveIT (Proofpoint), DTEX Systems and Haystax (now Resolver). Broad incumbents are Booz Allen Hamilton, Palantir Technologies, CACI International, Forcepoint and Leidos. Telos Corporation is listed as a regional player. Recorded Future (Mastercard) is listed as an emerging player.
Does CANDA Solutions have an API?
No public API is recorded for CANDA Solutions.
What industry is CANDA Solutions in?
CANDA Solutions's product category is National Security Risk Management Software. Its primary akta.pro industry code is HDAEAJAH, Identity Threat Detection & Response (ITDR), with a secondary code of BPAKADAM, Insider Threat Program Design & Risk Assessments. Its NAICS code is 54151 and its SIC code is 7373.