Overview
Malleum helps critical sectors like aviation, defense, finance, and energy improve their cybersecurity. It offers strategy, risk and compliance, enterprise security, and application/hardware protection, plus hands-on testing that simulates real attacks using methods like SAST, DAST, and IAST; it also runs MalleumOne for managed security with zero-trust, cloud protection, and MDR. The company distinguishes itself with researchers who test systems manually, and with government clearances, CMMC readiness, and partnerships such as IATA. Its goal is to reduce clients’ risk, safeguard essential infrastructure, and align cybersecurity with business objectives.
Work here?Claim your company
Simplify's take
What believers are saying
- October 2026 site updates show active commercialization across CMMC, strategy, and MalleumOne.
- September 2026 Aerotech MOU expands reach into Chilean aviation and critical infrastructure.
- Cyber AB RPO standing and IATA partnership strengthen trust with regulated buyers.
What critics are saying
- Malleum still lacks visible product scale; services revenue stays tied to headcount.
- A 28-person team limits delivery capacity for defense, aviation, and utilities pipelines.
- If client concentration tightens, one lost government contract can cripple revenue growth.
What makes Malleum unique
- Research-led red teaming from Ottawa, with Black Hat and DEF CON credibility.
- CMMC RPO status and NATO-cleared work separate it from generic pentest shops.
- MalleumOne bundles managed IT, MDR, and compliance for regulated Canadian buyers.
Help us improve and share your feedback! Did you find this helpful?