What convergentds does

ConvergentDS is a privately held global cybersecurity and risk advisory firm founded in 2004 and headquartered in Los Angeles, with regional hubs in London and Mumbai and additional offices across the US, UK, and India. The firm is built from the consolidation of three specialist practices: a media-and-entertainment assurance heritage dating back roughly 20 years (rooted in the MPA Trusted Partner Network), a financial services advisory practice focused on regulatory compliance (NCBA Committed to Security), and the Sanctum HUB platform that provides governance, risk, and compliance workflow automation with assessment evidence and remediation tracking.

The company delivers services across three pillars: offensive security testing (penetration testing, red teaming, AI testing, application security, secure code reviews, social engineering), assurance services (TPN assessments, cloud and site security, NCBA Committed to Security, vulnerability management, Zero Trust foundations), and advisory services (fractional CISO, ISO/NIST/SOC2 readiness, privacy compliance, managed remediation). Its proprietary technology stack includes the Sanctum HUB GRC platform, the Cyber CPR incident and case management platform, the Vetting Solutions background screening service, and the PIDGN hardware-based red-teaming device distributed in partnership with Grackle Labs.

Convergent generates revenue primarily through professional services engagements scoped to specific client environments on a fixed-fee basis, with multi-site and multi-year programs priced on a portfolio basis. Recurring revenue is supported by Sanctum HUB subscriptions carried across annual assessment cycles. Sales are direct and senior-practitioner-led, with no SDR layer, and the firm complements direct engagement with event presence (IBC, NAB, DEF CON, BSides) and thought leadership via its "Red Team Download" podcast and original security research. Named customers span major studios and content owners (Disney, NBCUniversal, BBC Studios, Paramount, HBO, Adobe, Framestore, DNEG, Aardman), financial services firms (Newrez, Cross Country Mortgage, Luxury Mortgage), and healthcare and public-sector organizations, with the firm operating across more than 30 countries.

Name

convergentds

Legal name

Convergent Risks, Inc.

Website

https://convergentds.com

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

11–50 employees

Short description

ConvergentDS is a global cybersecurity firm providing offensive security testing, regulatory compliance assessments (TPN, NCBA CTS), and advisory services to media, financial services, healthcare, and public-sector clients, underpinned by its proprietary Sanctum HUB GRC platform.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (54151), Computer Systems Design and Related Services (5415)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Penetration Testing & Red Teaming (BPAKADAE)

akta.pro secondary industries

Vulnerability Management & Penetration Testing Services (BPAEADAD), Application Security & DevSecOps Services (BPAKAHAJ), Third-Party/Vendor Risk Management (TPRM/VRM) (HDADAIAE), Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG)

Keywords

• Cybersecurity advisory services
• Penetration testing services
• TPN security assessments
• GRC platform solutions
• Offensive security testing

Headquarters

HQ city

Los Angeles

HQ country

United States

HQ region

North America

Offices8 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Security Assessment Services: Core revenue stream from offensive security testing (penetration testing, red teaming, application security, social engineering, AI testing), assurance services (TPN assessments, site security, cloud security, vulnerability management, Zero Trust), and advisory services (privacy compliance, managed remediation, fractional CISO, ISO/NIST/SOC2 readiness). Services are scoped to client environments with fixed-fee proposals. Engagement timelines range from 8-14 weeks for single-site TPN assessments.
2. Sanctum Platform Subscription: SaaS GRC platform provided as part of assessment engagements and potentially as standalone subscription. Sanctum workspace includes assessment evidence library and remediation tracking carried forward through annual cycles. Supports continuous coverage between formal assessments.
3. Hardware Product Sales: PIDGN red-teaming hardware device sold directly through Convergent's e-commerce store at $100-$115 per unit depending on model. Black, Electric, and Defcon pre-release variants available. Previously offered as out-of-stock pre-release at Defcon events.

Pricing tiers

Go-to-market motion2 records

Distribution channels1 record

Marketing channels5 records

Core offering

ConvergentDS is a global cybersecurity firm delivering offensive security testing, assurance assessments, and risk advisory services to regulated industries including Media & Entertainment, Financial Services, Healthcare, and Government. Its service portfolio covers penetration testing, red teaming, TPN assessments, NCBA Committed to Security, cloud security, vulnerability management, fractional CISO, and compliance readiness, supported by its proprietary Sanctum HUB GRC platform and related security tools.

Product overview

ConvergentDS is a global cybersecurity firm offering a comprehensive portfolio organized around three pillars: Testing Services (offensive security), Assurance Services, and Advisory Services. The core platform is Sanctum HUB, a governance, risk and compliance solution that unifies assessment tracking, evidence management, and remediation workflows. Supporting platforms include Cyber CPR for incident response management, Vetting Solutions for background screening, and PIDGN for hardware-based penetration testing. The company delivers specialized services across multiple regulated industries including Media & Entertainment (TPN assessments), Financial Services (NCBA Committed to Security), Healthcare, and Government/Education sectors.

Differentiator

Problem solved

Functional benefit

Products and services

• AI Penetration Testing Offensive security testing service targeting AI systems, models, and deployments for enterprise clients.
• Application Security Testing Security testing for web, mobile, and software applications to identify exploitable vulnerabilities.
• Penetration Testing Traditional penetration testing services to identify and exploit vulnerabilities in client systems and networks.
• Red Teaming Adversary simulation and red team operations testing organizational defenses against realistic attack scenarios.
• Secure Code Reviews Source code security review services to identify vulnerabilities in application code.
• Social Engineering Testing Testing services targeting human-based security vulnerabilities including phishing and impersonation.
• TPN Assessments Trusted Partner Network security assessments for media and entertainment supply chain vendors.
• Site Security Assessments Physical site security assessments evaluating perimeter, access controls, and operational practices.
• Cloud Security Assessments Security assessments for cloud architecture on AWS, Azure, GCP, and hybrid environments.
• NCBA Committed to Security Program Security assessment program for creditor firms under the National Creditors Bar Association framework.
• Vulnerability Management Ongoing vulnerability identification, tracking, and remediation support services for enterprise clients.
• Zero Trust Foundation Zero Trust security architecture assessment and implementation guidance for organizations adopting zero trust models.
• Fractional CISO Virtual Chief Information Security Officer services providing strategic cybersecurity leadership and guidance on a fractional basis.
• ISO/NIST/SOC2 Readiness Compliance readiness services preparing organizations for ISO, NIST, and SOC2 audits and attestations.
• Privacy Compliance Advisory Advisory services for data privacy compliance including GDPR, CCPA, and other privacy regulations.
• Managed Remediation Guided remediation services to help organizations address security findings and gaps identified during assessments.
• Sanctum HUB A governance, risk and compliance platform managing business risk and security, providing workflow assurance, assessment evidence management, and remediation tracking for clients.
• Cyber CPR An incident and case management platform enabling distributed security teams to collaborate on sensitive information and files regardless of location.
• Vetting Solutions Pre-employment screening and background check services for public and private sectors supporting workforce vetting components of security assessments.
• PIDGN A plug-and-play red-teaming hardware device that merges USB-based pen-testing capabilities with a wireless (802.11) command hub, emulating a USB keyboard to deliver customizable payloads.
• The Red Team Download A weekly podcast providing insights on cybersecurity trends, research, and industry analysis from Convergent's practitioners.

Quantifiable outcome

• TPN Gold achieved across all 17 DNEG production facilities globally
• +3 more outcomes

Named customers22 records

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability1 record

Feature5 records

Partnerships

Five partnerships are on record, tiered core.

• OOONAcoreStrategic or Co-development Partner · 5 April 2024OOONA partnered with Convergent to launch a security course for the media localization industry covering key content security requirements. This educational partnership addresses the growing need for security training in media workflows.
• DPP (Digital Production Partnership)coreStrategic or Co-development Partner · 1 November 2021DPP partnered with Convergent for its 'Committed to Security Programme' delivered through Convergent's Sanctum platform. Provides suppliers with an interactive security self-assessment experience integrated with the DPP's program framework.
• Sanctum Hub (by Convergent)coreTechnology or IntegrationSanctum Hub is Convergent's proprietary GRC platform managing business risk and security workflow assurance. Provides all-in-one governance, risk and compliance solution for assessment management, evidence tracking, and remediation coordination.
• Cyber CPRcoreTechnology or IntegrationIncident and Case Management platform used by Convergent for sensitive information handling and team collaboration on security incidents and case management regardless of geographic location.
• Grackle LabscoreOEM/ Whitelabel/ Licensing PartnerGrackle Labs developed PIDGN, a plug-and-play red-teaming device. Convergent distributes and sells PIDGN as part of its hardware portfolio, marketing the product through its e-commerce platform and at security conferences like DEF CON.

Scale indicators6 records

Recent moves8 records

Expansion highlights5 records

Direct peers

• Bishop Fox: Boutique offensive security firm focused on penetration testing, red teaming, and adversary simulation; directly comparable to Convergent's offensive security practice with similar enterprise customer focus and elite-practitioner delivery model.
• NCC Group: UK-headquartered cybersecurity and assurance firm with strong heritage in media and entertainment security assessments; provides vendor security assurance, penetration testing, and managed security services directly comparable to Convergent's TPN-focused offerings.
• IOActive: Security consulting firm specializing in content security for studios and content owners; offers penetration testing, red teaming, and hardware security assessments closely aligned with Convergent's media and entertainment practice.
• Trail of Bits: Application security and cryptography-focused consulting firm; comparable to Convergent's AppSec, secure code review, and AI penetration testing services with a similar boutique specialist delivery model.
• Coalfire: Cybersecurity advisory and compliance firm with strong regulated-industry practice (PCI, HITRUST, FedRAMP); comparable to Convergent's advisory and assurance services across financial services and healthcare verticals.
• Schellman: Compliance and security attestation firm (SOC 2, ISO 27001, PCI, FedRAMP); comparable to Convergent's ISO/NIST/SOC2 readiness advisory and assurance services for enterprise clients.

Broad incumbents

• Rapid7: Cybersecurity firm offering vulnerability management, penetration testing, and SIEM products; comparable in penetration testing services and broader security advisory with a more product-led revenue mix.
• Mandiant (Google Cloud): Cybersecurity firm (now part of Google Cloud) with industry-leading incident response, threat intelligence, and security consulting; broader portfolio than Convergent but overlapping in incident response and offensive security.
• Optiv: Large managed security services provider offering advisory, integration, and managed detection; broader MSSP offering comparable to Convergent's assurance and advisory services for enterprise customers.
• Deloitte Cyber: Big Four cybersecurity advisory practice offering risk assessment, compliance, and managed security services at enterprise scale; broader portfolio but overlapping in regulated-industry assessments and TPN-style vendor assurance.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/results?search_query=convergentds

Revenue estimate

Valuation estimate

Number of profiles

Profiles17 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about convergentds