Managed Risk Partners (2019) Ltd.

What Managed Risk Partners (2019) Ltd. does

Managed Risk Partners (2019) Ltd. ("MRP") is a boutique cybersecurity and compliance consultancy founded in 2019 and headquartered in Ottawa, Canada. The firm sells risk-based SOC 2 compliance and trust posture consulting to B2B SaaS companies whose enterprise pipelines have stalled due to customer security reviews, procurement objections, and IT due diligence failures. The core offering is the proprietary "Strategic SOC 2 System™," a three-phase methodology covering Risk & Business Alignment, Right-sized Roadmapping, and Rapid Remediation, designed to align IT and security risks with revenue objectives rather than treating compliance as a checkbox exercise.

MRP delivers its services through three recurring subscription tiers — Direct Access (advisory-only with weekly calls and Slack support for teams with 1-2 IT/security FTEs), Trust Advantage (done-with-you/done-for-you SOC 2 delivery with a "Pipeline Unlocked™ Guarantee"), and Group & Custom Workshops (half-day executive intensives). Adjacent managed services include Audit Concierge (claimed 88% reduction in audit evidence organization time and 2x faster audit phases) and Managed Cyber Resilience Programs that bundle macOS MDM (via Kandji/iru and Jamf), enterprise password management (1Password), 24/7 MDR (CrowdStrike), threat intelligence (Flare), browser-based BYOD/DLP (Island), and privacy consent management (Osano), with GRC platform integration through Thoropass, Carbide Secure, and Safebase. Pricing is quote-based across subscription tiers with monthly billing; no public price list is disclosed.

The firm operates a founder-led, sales-led GTM: Adam Lomas (Founder & Chief Trust Officer) drives outreach via personal LinkedIn and a HubSpot meeting scheduler, targeting revenue teams and founders at enterprise and mid-market B2B SaaS companies. Customer references span entertainment, sports, CPG, logistics, retail, healthcare, and medical device sectors, and the firm claims to have supported more than $100 million in client B2B SaaS revenue. The business is bootstrapped, privately held, and operates globally, with no disclosed institutional investors, parent company, or material headcount beyond the founder.

Name

Managed Risk Partners (2019) Ltd.

Legal name

Managed Risk Partners (2019) Ltd.

Website

https://managedrisk.ca

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

1–10 employees

Short description

Managed Risk Partners is a boutique Ottawa-based consultancy that helps B2B SaaS companies unblock stalled enterprise deals through risk-based SOC 2 compliance and trust posture programs, delivered via subscription tiers and partner-integrated Managed Cyber Resilience services.

Ownership category

akta.pro rank

Product category

Compliance & Security Consulting

akta.pro primary industry

Risk, Compliance & Internal Controls Consulting (BPAHACAJ)

akta.pro secondary industries

Fraud Risk & Financial Crime Controls Advisory (BPAKADAL), Supply Chain Risk, Resilience & Business Continuity (BPAHAHAH)

Keywords

• SOC 2 compliance consulting
• Trust posture management
• Cybersecurity advisory services
• Compliance risk management
• Security audit support

Headquarters

HQ city

Ottawa

HQ country

Canada

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Others

Revenue model

1. Direct Access Subscription: Weekly calls, priority clarification, progress acceleration, loss/save reviews, Slack support. Designed for B2B SaaS with 1-2 IT/Security FTEs needing expert guidance.
2. Trust Advantage Subscription: Done-with-you SOC 2 with done-for-you delivery, risk-based priorities, credible trust posture, and Pipeline Unlocked™ guarantee.
3. Group & Custom Workshops: Half-day intensives for executive alignment and Trust Roadmap building, with ROI calculator and live feedback. Limited availability format.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels3 records

Core offering

Managed Risk Partners (2019) Ltd. is a compliance and trust assurance consulting firm that helps B2B SaaS companies achieve SOC 2 compliance and build credible trust postures to unblock stalled enterprise sales pipeline. The firm delivers its proprietary Strategic SOC 2 System™ methodology through subscription tiers (Direct Access and Trust Advantage), half-day workshops, managed cyber resilience programs, and an Audit Concierge service that reduces evidence organization time by 88%.

Product overview

Managed Risk Partners is a compliance and trust assurance firm offering a unified portfolio centered on the Strategic SOC 2 System™ — a methodology for achieving SOC 2 compliance through risk-based roadmapping and remediation. The portfolio includes three subscription tiers: Direct Access (advisory-only with weekly calls and Slack support), Trust Advantage (done-with-you/done-for-you SOC 2 delivery with Pipeline Unlocked™ guarantee), and Group/Custom Workshops (half-day executive alignment intensives). Supporting services include Managed Cyber Resilience Programs (MDM, threat monitoring, SaaS/AI risk inventories) and Audit Concierge (full-service SOC 2 audit support reducing evidence organization by 88%). The firm partners with platforms including Thoropass, Carbide Secure, Safebase, Kandji/iru, Jamf, 1Password, CrowdStrike, Flare, Island, and Osano to deliver integrated compliance outcomes.

Differentiator

Problem solved

Functional benefit

Products and services

• Strategic SOC 2 System™ A proprietary methodology for achieving credible SOC 2 compliance coverage quickly through risk and business alignment, right-sized roadmapping, and rapid remediation. Aligns business objectives and risks to unlock stalled pipeline deals for B2B SaaS companies.
• Direct Access Subscription Subscription tier offering weekly calls with expert guidance, priority clarification, progress acceleration, Loss/Save Reviews, and Slack support for B2B SaaS companies with 1-2 IT and/or Security FTEs who can execute but need guidance.
• Trust Advantage Subscription Premium subscription tier providing done-with-you and done-for-you SOC 2 delivery with risk-based priorities, credible trust posture development, and Pipeline Unlocked™ Guarantee. Includes Audit Concierge support.
• Group & Custom Workshops Half-day intensive sessions for executive alignment and Trust Roadmap building aligned to strategic account requirements, including a Pipeline Unlocked™ ROI calculator and live feedback.
• Managed Cyber Resilience Programs Managed services delivering compliance for less headache than internal teams, including macOS Mobile Device and Password Management, always-on threat monitoring and response, and SaaS and AI use inventories and risk reviews.
• Audit Concierge Full-service audit support during SOC 2 Type 1 and SOC 2 Type 2 evidence request periods, reducing evidence organization effort by 88% with 2x faster audit phases.

Quantifiable outcome

• 88% less time spent organizing evidence during audits
• +3 more outcomes

Named customers1 record

Segments4 records

Ideal customer profiles1 record

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration10 records

Feature4 records

Partnerships

Ten partnerships are on record, tiered core.

• ThoropasscoreTechnology or IntegrationGRC, Audit & Customer Trust Management platform partner providing fast lane access to assurance and trust management capabilities for clients.
• Carbide SecurecoreTechnology or IntegrationGRC platform partner enabling effective prioritization and collaboration on assurance activities.
• SafebasecoreTechnology or IntegrationTrust management platform partner for collaboration on customer assurance and trust management activities.
• Kandji (iru)coreTechnology or IntegrationmacOS Mobile Device Management (MDM) partner providing visibility and control of Macs for compliance requirements.
• JamfcoreTechnology or IntegrationmacOS MDM solution partner for enterprise Mac device management and compliance.
• 1PasswordcoreTechnology or IntegrationEnterprise Password Manager (EPM) partner for secure password management and secrets sharing.
• CrowdStrikecoreTechnology or IntegrationManaged Detection & Response (MDR) partner with Falcon sensor for 24/7/365 threat monitoring and response on company-owned Macs.
• FlarecoreTechnology or IntegrationDark web and deep web threat intelligence partner for proactive threat monitoring.
• IslandcoreTechnology or IntegrationBYOD (Bring Your Own Device) and Data Loss Prevention (DLP) browser partner enabling secure work on non-company devices.
• OsanocoreTechnology or IntegrationConsent Management Platform and Subject Rights Management software supporting GDPR and CCPA compliance in 50+ countries.

Scale indicators3 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Schellman: Larger, established CPA-based audit and advisory firm delivering SOC 2, ISO 27001, HITRUST and more; competes with MRP's Trust Advantage tier especially with more mature SaaS buyers.

Direct peers

• Drata: Compliance automation platform targeting SaaS buyers for SOC 2, ISO 27001, HIPAA and more; competes on price and speed of automated evidence collection against MRP's advisory approach.
• Tugboat Logic (OneTrust): GRC platform now part of OneTrust, offering SOC 2 automation plus policy and audit support; targets the same SaaS compliance buyer as MRP, often at the TPRM / trust-center layer.
• Safebase: Trust center and customer trust management platform used by SaaS companies to share SOC 2 evidence; partner of MRP but also a standalone solution in the same buyer workflow.
• Scytale: Compliance-as-a-service firm offering done-for-you SOC 2, ISO 27001, HIPAA and more for SaaS companies; competes head-on with MRP's Trust Advantage subscription in the same SMB SaaS buyer.
• Secureframe: Compliance and security platform automating SOC 2, ISO 27001, HIPAA, PCI and more, with a frame-work-first approach that competes with MRP for the same SaaS buyer.
• Vanta: Automated GRC platform with a growing services partner network for SOC 2/ISO 27001; competes for the same B2B SaaS compliance dollar and increasingly bundles advisory via partners.
• Laika: Compliance and certification platform with in-house audit services for SOC 2, ISO 27001, HIPAA and more; competes with MRP for done-for-you SaaS compliance engagements.
• Thoropass: GRC, audit and customer trust management platform listed as a core MRP partner; operates in the same SOC 2 buyer journey and offers its own audit-plus-software bundle.
• Carbide (Carbide Secure): GRC and trust management platform for SaaS companies pursuing SOC 2 and ISO 27001; listed as MRP partner, but also a competing platform option for the same buyer.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/managed-risk-partners

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Managed Risk Partners (2019) Ltd.