Kernel Advisory

What Kernel Advisory does

Kernel Advisory is a Toronto-based cybersecurity management consulting firm founded in 2020, operating as a remote-first practice with 11-50 employees serving clients across North America, the UK, and Europe. The firm was acquired by AYCE Capital in May 2026, joining a portfolio of North American Managed Service Providers and gaining expanded operational capacity for cross-border engagements. Its core offer is split into two practices: Cyber M&A Advisory (investment thesis development, buy-side and sell-side due diligence, growth strategy, and pre- and post-close integration support) and Cyber Advisory (vCISO in three subscription tiers, 24/7 managed security operations, offensive security testing, and incident response).

The company's underlying technology is its proprietary Cyber M&A Advisory methodology, refined across 40+ transactions, 20+ PE-led deals, and 300+ company evaluations in cybersecurity, IT services, and cloud computing. Service delivery is practitioner-led by a team holding certifications such as OSWE, OSCP, CISSP, CISA, and CEH, with deliverables aligned to frameworks including NIST CSF, ISO 27001, CIS Controls, SOC 2, PCI DSS, HIPAA, GDPR, and CCPA. The vCISO offering is productized into Essential, Enhanced, and Premium tiers with defined device and identity scopes, monthly billing, and progressive features such as CIS benchmark assessments, dedicated consultants, and annual penetration testing.

Kernel Advisory operates a consultative, enterprise sales-led go-to-market targeting private equity firms, corporate executives, and security leaders, supported by content marketing (blog, quarterly market insights, newsletter) and earned media such as Globe and Mail Top Growing Companies recognition (2024 and 2025). Revenue is generated through a mix of project-based advisory fees tied to M&A transactions, recurring monthly vCISO subscriptions, managed security services contracts, project-based offensive security engagements, and as-needed incident response retainers. Customer concentration spans publicly traded firms across digital assets, financial services, retail, renewable energy, software, and PE sponsors, with regulated industries (financial services, healthcare, renewable energy, payments) as a secondary segment.

Name

Kernel Advisory

Legal name

Kernel Advisory Inc.

Website

https://kerneladvisory.com

Company type

Private

Founded year

2020

Operating status

Acquired

Headcount range

1–10 employees

Short description

Kernel Advisory is a Toronto-based cybersecurity management consulting firm offering cyber M&A due diligence and vCISO, managed security operations, offensive security, and incident response services to private equity sponsors, publicly traded enterprises, and regulated industries across North America, the UK, and Europe.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting Services

NAICS

Management Consulting Services (54161), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH)

akta.pro secondary industries

Corporate Strategy Advisory (BPAHADAA), Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG)

Keywords

• Cybersecurity advisory
• M&A due diligence
• VCISO services
• Managed security operations
• Incident response

Headquarters

HQ city

Toronto

HQ country

Canada

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales

Revenue model

1. M&A Advisory Services: Project-based advisory engagements for private equity and corporate clients covering due diligence, investment thesis development, and post-close integration. Revenue generated through consulting fees tied to transaction complexity and scope.
2. vCISO Services: Recurring subscription-based vCISO services offered in three tiers (Essential, Enhanced, Premium) with defined scopes for devices and identities, providing ongoing security leadership and management.
3. Managed Security Operations: Ongoing 24/7 monitoring, threat detection, and operational management services generating recurring revenue through managed services contracts.
4. Offensive Security Services: Penetration testing, red teaming, and breach simulation services delivered as project-based engagements.
5. Incident Response Services: Rapid incident containment, investigation, and recovery services, typically engaged on an as-needed basis for cyber incidents.

Pricing tiers

Go-to-market motion2 records

Distribution channels1 record

Marketing channels5 records

Core offering

Kernel Advisory is a cybersecurity management consulting firm that delivers two core service lines: Cyber M&A Advisory (buy-side and sell-side due diligence, investment thesis development, growth strategy, and pre- and post-close integration support) and Cyber Advisory services (fractional/virtual CISO leadership in tiered subscriptions, 24/7 managed security operations, offensive security testing including penetration testing and red teaming, and incident response). The firm serves private equity firms, corporate clients, and government entities with practitioner-led engagements bridging technical depth and business strategy.

Product overview

Kernel Advisory is a cybersecurity management consulting firm offering two primary service practices: Cyber M&A Advisory and Cybersecurity Advisory Services. The Cyber M&A Advisory practice includes Investment Thesis Development, Buy-Side and Sell-Side Due Diligence, Growth Strategy and Value Creation, and Pre- and Post-Close Advisory. The Cybersecurity Advisory practice provides vCISO Services (offered in Essential, Enhanced, and Premium tiers), Managed Security Operations (24/7 monitoring), Offensive Security Services (penetration testing and red teaming), and Incident Response Services. The company bridges technical expertise with business strategy to serve private equity funds, corporate clients, and government entities.

Differentiator

Problem solved

Functional benefit

Products and services

• Cyber M&A Advisory Comprehensive cybersecurity advisory services for M&A transactions including buy-side and sell-side due diligence covering cyber, IT, operational, and commercial dimensions, investment thesis development, growth strategy, and pre- and post-close integration support. Built for private equity firms, corporate acquirers, and investors managing deal risk and value.
• vCISO Services Fractional / virtual Chief Information Security Officer (vCISO) services providing enterprise-grade security leadership without a full-time hire. Offered in three monthly subscription tiers: Essential (up to 25 devices and 50 identities with core monitoring and Microsoft security management), Enhanced (up to 50 devices and 100 identities with advanced threat detection, quarterly CIS benchmark assessments, biweekly security updates, and custom projects), and Premium (50+ devices and 100+ identities with a dedicated security consultant, weekly meetings, annual penetration testing, and executive briefings).
• Managed Security Operations 24/7 continuous security monitoring, real-time threat detection, and ongoing operational management services designed to keep client environments protected around the clock. Delivered as managed services contracts for enterprises needing round-the-clock coverage.
• Offensive Security Services Proactive offensive security testing services including penetration testing, red teaming, and simulated cyberattacks designed to identify vulnerabilities before they can be exploited by adversaries. Delivered as project-based engagements.
• Incident Response Services Rapid incident response services to contain, investigate, and recover from cyber incidents, minimizing downtime, financial impact, and reputational damage. Typically engaged on an as-needed basis when a client experiences a cyber event.

Quantifiable outcome

• 487% three-year revenue growth rate
• +3 more outcomes

Named customers7 records

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Scale indicators7 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Bishop Fox: Bishop Fox is a specialist offensive security firm offering penetration testing, red teaming, and security assessments. It overlaps directly with Kernel's offensive security practice and shares a practitioner-led, deep-expertise positioning.
• Kroll Cyber Risk: Kroll's Cyber Risk practice delivers cyber due diligence for M&A, incident response, and managed security advisory to PE and corporate clients globally. It is one of the closest direct competitors to Kernel Advisory's cyber M&A diligence and incident response offerings.
• NCC Group: NCC Group provides cybersecurity consulting, managed detection and response, and cyber due diligence across the UK, Europe, and North America. Its combination of advisory, managed security, and deal-related cyber work makes it a close comparable to Kernel, especially for Kernel's UK and European expansion.
• Coalfire: Coalfire provides cybersecurity advisory, compliance, and managed security services with a strong presence in regulated industries. It is comparable to Kernel on vCISO, compliance-aligned advisory (SOC 2, ISO 27001, HIPAA, PCI DSS), and PE-adjacent cyber engagements.
• Aon / Stroz Friedberg Cyber Risk: Stroz Friedberg (now part of Aon) provides cyber M&A due diligence, incident response, and digital forensic services to law firms, PE sponsors, and corporates. Its scope and customer base overlap closely with Kernel's M&A advisory and incident response practices.

Broad incumbents

• Optiv Security: Optiv is a broad cybersecurity solutions provider offering advisory, managed security, and vCISO-style services to enterprise clients. It overlaps with Kernel's vCISO and managed security operations practices, though at much larger scale and with a less M&A-focused positioning.
• Mandiant (Google Cloud): Mandiant is a large incumbent in incident response, threat intelligence, and cyber advisory, now part of Google Cloud. It competes with Kernel on incident response and offensive security engagements and serves many of the same large enterprise and PE-adjacent customers.
• Booz Allen Hamilton Cybersecurity: Booz Allen Hamilton delivers large-scale cybersecurity consulting, M&A diligence, and managed security to government and commercial clients. Its PE-facing cyber diligence and incident response work overlaps with Kernel's enterprise and government-facing services.
• Deloitte Cyber Risk Services: Deloitte's Cyber Risk practice offers cyber M&A diligence, vCISO advisory, managed security, and incident response as part of a broader professional services portfolio. It competes with Kernel for enterprise and PE mandates and represents the larger incumbent benchmark Kernel is differentiated against.

Emerging players

• TrustedSec: TrustedSec is a niche cybersecurity consultancy specializing in offensive security, incident response, and advisory services. It is comparable to Kernel on offensive security and advisory positioning but is smaller in scope and not focused on M&A diligence.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/kernel-advisory

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Kernel Advisory