What LaScala does

LaScala is a privately held, Veteran-Owned Small Business founded in 2010 in Temperance, Michigan, that provides co-managed IT, cybersecurity, and compliance services to mid-market and enterprise organizations across regulated industries. The company's service portfolio spans three integrated pillars: Co-Managed IT (24/7/365 technical support, backup and recovery, infrastructure monitoring, patching, and performance tuning); Co-Managed Security (Managed Detection & Response, SIEM, EDR, vulnerability management, penetration testing, security awareness training, and firewall management); and Managed Compliance (CMMC 2.0, NIST SP 800-171, HIPAA, PCI-DSS, FTC Safeguards Rule, and FINRA). LaScala is a CMMC Registered Practitioner Organization, positioning it to assist defense contractors with certification, and operates a Third-Party Risk Management (TPRM) platform with AI-powered vendor risk scoring. The company also offers a secure compliance portal for ongoing tracking and assigns dedicated compliance officers to client engagements.

The business model is recurring managed services: LaScala sells monthly subscription contracts via direct B2B sales to mid-market and enterprise clients in defense, healthcare, finance, manufacturing, and automotive dealerships, with pricing determined through custom consultation rather than public tiers. Sales are driven by a dedicated team including Executive Account Managers, supported by inbound channels (website contact forms, phone, HubSpot-powered lead capture). GTM is sales-led and consultative, with prospects qualified against compliance needs (CMMC, HIPAA, PCI, FTC Safeguard, FINRA) and cybersecurity skill gaps before engagement. LaScala's distribution is exclusively direct — no channel partners or resellers are disclosed — though its VOSB status provides preferential access to federal and defense contracting procurement.

The company employs a team spanning Network & Systems Engineers, IT & Security Analysts, Business Analysts, vCIOs, vCISOs, and a Corporate Controller, and markets a combined 400+ years of IT experience as a differentiator. LaScala operates from a 50,000 square foot repurposed facility in Temperance, Michigan that functions as its digital operations center. Strategic priorities visible in the data include deepening the Defense Industrial Base vertical (ongoing CMMC content, partnership with the Michigan Defense CyberSmart Program), expanding the TPRM product surface, and leveraging VOSB status for federal market access. No external funding rounds, acquisitions, or institutional investors are disclosed; the company appears to be bootstrapped under founder-CEO Gregory LaScala.

Name

LaScala

Legal name

LaScala, Inc.

Website

https://lascala.com

Company type

Private

Founded year

2010

Operating status

Operating

Short description

LaScala is a Veteran-Owned, privately held co-managed IT, cybersecurity, and compliance services provider serving mid-market and enterprise organizations in defense, healthcare, finance, manufacturing, and auto dealerships across the United States, with CMMC RPO credentials and a recurring managed-services revenue model.

Ownership category

akta.pro rank

Product category

Managed Cybersecurity and IT Services

NAICS

Computer Facilities Management Services (541513), Computer Systems Design and Related Services (54151)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Managed Detection & Response (MDR) & SOC Services (HDADAGAG)

akta.pro secondary industries

Privacy, Consent & Data Protection Management (BPAEAPAF), Risk Management (ERM), Operational Risk & Business Continuity (BPAEAPAJ), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)

Keywords

• Managed IT services
• Managed cybersecurity services
• Compliance management
• Third-party risk management
• Vulnerability management

Headquarters

HQ city

Temperance

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Co-Managed IT Services: LaScala acts as an extension of a client's internal IT team, providing 24/7/365 technical support, backup and recovery, configuration management, infrastructure monitoring and alerting, problem management, and patching and performance tuning. This is a recurring managed service where clients pay predictable monthly fees for ongoing IT support.
2. Co-Managed Security Services: Round-the-clock security monitoring and management services including MDR, EDR, SIEM, incident investigation and remediation, vulnerability management, penetration testing, and security awareness training. Provided as a 24/7/365 subscription service, typically sold alongside Co-Managed IT services.
3. Managed Compliance Services: Implementation and maintenance of compliance frameworks (CMMC 2.0, NIST SP 800-171, HIPAA, PCI, FTC Safeguard, FINRA) including gap assessments, System Security Plan documentation, POA&M roadmaps, compliance officer services, SPRS score assistance, and pre-audit assessments. Can be sold as a standalone managed service or bundled with IT and security programs.
4. Third-Party Risk Management (TPRM): Vendor risk management platform and services that automate due diligence, contract management, continuous monitoring, and audit workflows for organizations managing third-party vendor relationships. Revenue is generated through platform usage and consulting support.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels6 records

Core offering

LaScala provides co-managed IT, cybersecurity, and compliance services to mid-market and enterprise organizations in regulated industries such as defense, healthcare, finance, and manufacturing. Its core offerings combine Managed Detection and Response (MDR), EDR, SIEM, vulnerability management, penetration testing, and security awareness training delivered through a 24/7/365 Security Operations Center, alongside managed compliance programs for frameworks including CMMC 2.0, NIST SP 800-171, HIPAA, PCI-DSS, FTC Safeguards Rule, and FINRA. The company operates from a 50,000 sq. ft. digital operations center in Temperance, Michigan, serving clients throughout the United States.

Product overview

LaScala is a co-managed security and IT services provider offering a unified portfolio of cybersecurity, IT management, and compliance solutions. The core offering centers on Managed Detection & Response (MDR) combined with Co-Managed IT Services and Managed Compliance. These programs work together: Co-Managed IT handles daily operations and productivity, while Co-Managed Security provides 24/7 threat monitoring, incident response, vulnerability management, and penetration testing. Managed Compliance extends both programs with regulatory framework implementation (CMMC, NIST 800-171, HIPAA, PCI, FTC Safeguard, FINRA). Additional services include Third-Party Risk Management (TPRM), SIEM, Endpoint Detection & Response (EDR), Security Awareness Training, Firewall Management, and Incident Investigation & Remediation. LaScala is a CMMC Registered Practitioner Organization (RPO) and certified Veteran-Owned Small Business (VOSB).

Differentiator

Problem solved

Functional benefit

Quantifiable outcome

• Organizations using security awareness training can reduce the average phish-prone percentage from 32.4% to 17.6% after 90 days and to 5% after one year, with an 85% average improvement rate from baseline testing (KnowBe4 benchmarking data cited by LaScala).
• +3 more outcomes

Named customers5 records

Segments6 records

Ideal customer profiles6 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature7 records

Partnerships

Two partnerships are on record, tiered core and minor.

• KnowBe4coreTechnology or IntegrationKnowBe4 is LaScala's primary security awareness training content partner. LaScala uses KnowBe4's phishing simulation platform, benchmarking data, and educational materials as part of its managed security awareness training service. KnowBe4 data cited by LaScala indicates that organizations can reduce average phish-prone percentages from 32.4% to 5% after one year of training. KnowBe4 resources including the Ransomware Hostage Rescue Manual and phishing benchmarking reports are referenced and shared by LaScala.
• Michigan Defense CyberSmart ProgramminorStrategic or Co-development PartnerThe Michigan Defense CyberSmart Program is a grant funding program for Michigan-based companies in the DoD supply chain that need assistance with cybersecurity compliance. LaScala assists clients with the application process for this grant funding, which helps defense contractors offset the cost of CMMC compliance initiatives. This is a government-supported economic development program rather than a commercial partnership.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• CrowdStrike (Falcon Complete): Endpoint and security platform leader whose Falcon Complete MDR offering competes with LaScala's EDR/MDR services. Operates at vastly larger scale with proprietary platform versus LaScala's wrapped third-party stack.
• Secureworks: Large publicly-traded MSSP offering MDR, managed XDR, and broader security operations services. Competes with LaScala's MDR/SOC services but at a much larger scale and with a wider portfolio.

Direct peers

• Red Canary: Security operations vendor delivering MDR across endpoint, cloud, identity, and SaaS with a strong mid-market foothold. Overlaps with LaScala's EDR-led detection and response offering for similar buyer profiles.
• eSentire: MDR specialist providing 24/7 threat detection, hunting, and response across endpoint, network, cloud, and log. Closely aligned with LaScala's MDR/SOC core, targeting regulated mid-market and enterprise clients.
• Arctic Wolf Networks: Leading venture-backed MDR and managed security services provider delivering 24/7 SOC-as-a-service to mid-market and enterprise. Directly comparable to LaScala's MDR/SIEM/EDR stack and mid-market GTM, but at vastly greater scale and capital.
• Expel: Cloud-native MDR provider delivering transparent 24/7 SOC services to mid-market and enterprise. Comparable MDR product positioning with similar buyer personas in regulated industries.
• Binary Defense: MDR provider focused on 24/7 SOC monitoring, threat hunting, and detection engineering for mid-market and enterprise. Direct overlap with LaScala's MDR/SIEM capability and similar compliance-adjacent positioning.
• Huntress: Managed detection and response platform purpose-built for mid-market organizations and the MSP channel. Competes head-to-head with LaScala's co-managed security offering for SMB and mid-market security buyers.
• Blackpoint Cyber: Managed detection and response provider delivering 24/7 SOC services primarily through the MSP channel. Direct competitor for the co-managed security model LaScala offers to internal IT teams and partner MSPs.

Regional players

• Cybersafe Solutions: Michigan-based managed security and compliance provider serving mid-market organizations with similar CMMC, HIPAA, and FTC Safeguards compliance offerings. Comparable regional MSSP competing in LaScala's home geography.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/lascala-it

Compliance11 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles7 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about LaScala