Westpoint Security Solutions

What Westpoint Security Solutions does

West Point Security, LLC (DBA Westpoint Security Solutions) is a Service-Disabled Veteran-Owned Small Business founded and led by Norman C. Massry that provides cybersecurity consulting, virtual CISO (vCISO) services, and regulatory compliance advisory to U.S. mid-market and public-sector clients. Its core service lines include vCISO On Demand, third-party vendor risk management, cyber governance and strategy, integrated GRC (using NIST, ISO 27001, and related frameworks), incident response, internal risk assessments, privacy services, penetration testing, and security awareness training. The firm specializes in regulatory-heavy verticals, with documented expertise in HIPAA/HITECH, NYDFS 23 NYCRR 500, DFARS, CMMC (Levels 1-3), NIST 800-53 and 800-171, the NY SHIELD Act, PCI-DSS, and ISO 27001, and holds SDVOSB certifications through the U.S. Department of Veterans Affairs, the NYS Office of General Services, and the Massachusetts Supplier Diversity Office.

The underlying "technology" is fundamentally human expertise wrapped in compliance frameworks rather than a software product: services are delivered by credentialed professionals (the CEO is a CISSP and licensed attorney with prior CISO tenure at the NYS Department of Health) and packaged into hourly consulting, task-specific engagements, and vCISO subscription models. The go-to-market is direct professional services engagement, sourced primarily through the firm website and personal networks, with a New York headquarters and a Miami satellite office. Referenceable clients include the Metropolitan Transportation Authority, NY/NJ Port Authority, NYS Empire Development Corporation, dozens of colleges and universities, and multiple healthcare organizations, with two disclosed mutual partnerships (DDCues LLC and BST and Co) supporting cross-referral. The firm is privately held by its founder, has 1-10 employees, has raised no outside capital, and operates on quote-based pricing that is not publicly disclosed.

Name

Westpoint Security Solutions

Legal name

West Point Security, LLC

Website

https://westpointsecurity.solutions

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

1–10 employees

Short description

Westpoint Security Solutions is a Service-Disabled Veteran-Owned Small Business that delivers virtual CISO, cybersecurity consulting, GRC, incident response, and regulatory compliance services to U.S. public-sector, healthcare, financial services, and defense contractor clients from offices in New York and Miami.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting Services

NAICS

Computer Systems Design and Related Services (5415)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF)

akta.pro secondary industries

Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG), IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)

Keywords

• Cybersecurity consulting services
• Virtual CISO services
• Governance risk compliance
• Incident response services
• Third-party risk management

Headquarters

HQ city

New York

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D

Revenue model

1. Professional Services - Hourly Consulting: Hourly-based vCISO services covering proactive cybersecurity needs including awareness trainings, ransomware education, incident response tabletops, third party vendor risk management, PCI-DSS compliance, HIPAA compliance, NYS 23 NYCRR Part 500 compliance, NIST 800-53 compliance, and security policy development.
2. Task-Specific Risk Assessments: NIST-based Risk Assessment services to help organizations understand, manage, and reduce cybersecurity risks. Benefits include identifying vulnerabilities, avoiding data breaches, improving reputation, preserving customer trust, ensuring compliance, and identifying threats.
3. Information Security Program/Policy Creation: Design of policies and procedures with optional RACI charts to match organizational cyber needs. Documents information security policies forming the foundation of company's information security program.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels1 record

Core offering

Westpoint Security Solutions is a cybersecurity consulting firm that delivers virtual CISO (vCISO) leadership and a suite of advisory services including third-party risk management, cyber governance and strategy, GRC, internal risk assessments, incident response, privacy, awareness training, and penetration testing. Engagements are delivered as hourly consulting, task-specific projects, and subscription-based vCISO retainers for organizations needing senior cybersecurity expertise without a full-time CISO.

Product overview

Westpoint Security Solutions offers a portfolio of cybersecurity consulting services centered around a vCISO (Virtual Chief Information Security Officer) platform. The core offerings include Third-Party Risk Management, Cyber Governance and Strategy, Cyber Risk Services, Governance Risk and Compliance (GRC), Incident Response, Internal Risk Assessments, Privacy Services, Awareness Training, and Penetration Testing. These services are delivered through cybersecurity professionals who provide flexible, cost-effective leadership without the overhead of a full-time CISO position. The company specializes in compliance with multiple frameworks including DFARS, NYDFS, NY SHIELD Act, HIPAA, NIST, and ISO 27001 standards.

Differentiator

Problem solved

Functional benefit

Products and services

• vCISO (Virtual CISO)
• Third-Party Risk Management
• Cyber Governance and Strategy
• Governance, Risk and Compliance (GRC)
• Incident Response
• Internal Risk Assessments
• Security Compliance Services
• Privacy Services
• Awareness Training
• Penetration Testing

Named customers5 records

Segments5 records

Ideal customer profiles5 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Two partnerships are on record, tiered minor.

• DDCues LLCminorStrategic or Co-development PartnerDDCues is a national risk management firm committed to protecting people, securing infrastructure, and defending the Nation. Leadership team brings careers in special operations, intelligence, law enforcement, and public service including former commander of Delta Force and former director of Defense Intelligence Agency. Private sector experience in financial services, education, oil & natural gas, investigations, and inter-agency contracting.
• BST and CominorStrategic or Co-development PartnerBST and Co is an accounting and financial services firm promoting financial stability and growth for businesses, organizations, and individuals since 1947. Services include accounting and auditing, advisory, CFO for Hire, CMO for Hire, and employee benefit plans. Professionals include CPAs, MBAs, and financial advisors offering business and asset valuation, forensic accounting, litigation support, wealth management, and outsourcing services.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Coalfire: Largest pure-play U.S. cyber risk advisory and compliance services firm, offering vCISO, GRC, FedRAMP, HIPAA, PCI, and CMMC services to enterprises and government. Most directly comparable peer given similar framework-driven advisory model and government/healthcare client mix.
• Schellman & Co: Top-tier compliance and cybersecurity assessment firm (SOC 2, ISO 27001, HITRUST, FedRAMP, PCI). Comparable as a high-end boutique GRC consultancy serving regulated industries with framework-driven engagements.
• A-LIGN: Cybersecurity and compliance firm offering SOC 2, ISO 27001, HITRUST, PCI, and vCISO services. Closely comparable GRC consulting portfolio, though A-LIGN has scaled significantly with proprietary compliance automation tooling.
• Tevora: Cybersecurity consulting firm providing vCISO, GRC, penetration testing, and incident response services to mid-market and enterprise clients. Direct comparable on vCISO-led service catalog and regulatory compliance focus.
• Cybersheath: Managed security and vCISO provider focused specifically on defense contractors and CMMC compliance. Highly comparable on DFARS/CMMC/NIST 800-171 service line and government-adjacent client base.
• Pivot Point Security: Specialized vCISO and GRC consulting firm with a fractional CISO service model comparable to Westpoint's vCISO offering. Similar size and target market in regulated mid-market.
• KRONOS Cybersecurity (K logix): Boutique cybersecurity advisory firm providing vCISO, risk assessments, and compliance services to mid-market organizations. Direct comparable in size, positioning, and service mix.

Broad incumbents

• Optiv: Large cybersecurity solutions provider offering advisory, managed security, and integration services. Broader portfolio but overlaps directly on vCISO, GRC, and risk advisory for mid-market and enterprise clients.
• NCC Group: Global cybersecurity consultancy offering risk advisory, compliance, and managed detection services. Overlaps with Westpoint on GRC and compliance advisory for enterprise and regulated customers, but at much larger scale and broader scope.

Emerging players

• Conquest Cyber: Cybersecurity firm offering managed security, CMMC, and compliance services with a focus on defense and government supply chain. Comparable on the regulated/defense segment but with a more product-led approach.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/west-point-security-llc

Compliance12 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Westpoint Security Solutions