S

Security Risk Advisors

Cybersecurity consulting and managed security services

Overview

SRA provides cybersecurity consulting with offensive and defensive services, including red/purple teams, pen testing, cloud and OT security, plus 24x7 managed security. It combines advisory services with proprietary software like VECTR and SCALR to create security data lakes that can lower SIEM costs. They work with Financial Services, Healthcare, Pharmaceuticals, Technology across the US, Ireland, and Australia, and are members of the Microsoft Intelligent Security Association. In 2025, Recognize invested to accelerate growth in advisory, managed security, and software offerings, with a goal to improve clients’ cyber resilience through hands-on testing, continuous monitoring, and data-driven security operations.

Work here?Claim your company

About Security Risk Advisors

Simplify's Rating
Why Security Risk Advisors is rated
B-
Rated B on Competitive Edge
Rated B on Growth Potential
Rated C on Differentiation

Industries

Data & AnalyticsConsultingEnterprise SoftwareCybersecurity

Company Size

201-500

Company Stage

N/A

Total Funding

N/A

Headquarters

Philadelphia, PA

Founded

2010

Get referred to Security Risk Advisors

See people who can refer or advise you

Simplify Jobs

Simplify's take

What believers are saying

  • Recognize's Oct. 13, 2025 investment funds software, managed security, and advisory expansion.
  • SRA's March 2026 Purple Perspective benchmarked 160 exercises and 8,300 TTPs.
  • GitLab named SRA's Oct. 22, 2026 AI Gateway patch work critical and urgent.

What critics are saying

  • Free SCALR AI commoditizes SRA's software moat and trains buyers toward zero-license pricing.
  • Microsoft specialization dependence deepens platform lock-in; a partner policy shift would squeeze margins fast.
  • A major incident inside SRA's own products would destroy trust and stall enterprise sales.

What makes Security Risk Advisors unique

  • SRA pairs consulting with SCALR and VECTR, unlike pure-services boutiques.
  • On Nov. 5, 2026, SRA earned all four Microsoft Security specializations.
  • SCALR AI launched Aug. 24, 2026 inside customer Azure tenants, not shared SaaS.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Mental Health Support
  • Remote Work Options

Company News

831B
Oct 6th, 2026
Watch on demand: don't let cyber risk haunt your business.

Watch on demand: don't let cyber risk haunt your business. Cyber criminals don't wait for Halloween to start their tricks. In this 34-minute webinar, Steven Allport, Regional Account Executive at SRA, is joined by DJ and Kevin from SpearTip, SRA's cybersecurity partner, to walk through two real attacks on businesses and what every owner can do before, during, and after an incident. The first story is a ransomware attack on a Wyoming health system that started with a single phishing email. Surgeries were canceled, patients were diverted, and weak backups stretched recovery to about two months, with roughly $1.5 million in operational losses. The second is a business email compromise at a car dealership, where attackers posed as another dealership to redirect a wire transfer, then talked their way into picking up three vehicles. The total: $170,000 and three cars gone. In this session, you'll learn: * What to do in the first 24 hours after a ransomware attack, from isolating infected computers to preserving evidence and contacting your insurer * Why phishing-resistant multifactor authentication is the strongest defense against email compromise * How to verify bank account changes and add monitoring that catches threats early * How an 831(b) Plan helps your business prepare financially for cyber risks that commercial policies leave uninsured or underinsured SRA clients also have access to complimentary services from SpearTip, including a dark web scan, a website vulnerability assessment, and an incident response planning workshop. Free cybersecurity support from its partner, SpearTip. SRA partners with SpearTip, a cybersecurity firm that helps businesses prevent, detect, and respond to cyberattacks. Their team handles proactive work like penetration testing and tabletop exercises, 24/7 managed security monitoring, and hands-on incident response when an attack hits. As an SRA client, you have access to a complimentary SpearTip package that includes: * A 60-minute cybersecurity briefing * An incident response planning workshop * An identity threat detection trial * A dark web scan * A website vulnerability assessment To get started, email [email protected] and let them know you're an SRA client. Don't get spooked: protect your success this october. Cybersecurity Awareness Month is a reminder, not a finish line. Before the trick-or-treaters arrive, take one step: tighten your payment verification process, enroll your team in Wizer, or review whether your current cyber policy actually covers social engineering losses. If you're not sure where your coverage gaps are, SRA can help you find them. Its experienced risk managers will walk you through how the Data Breach Liability & Loss of Income Plan fits within an 831(b) Plan, with no impact to day-to-day operations. In the news. * The AI Risk Management Gap Is Here & Businesses Are About To Feel It (Forbes, August 2026): SRA CEO Van Carlson on why new AI exclusions are following the same path cyber insurance took over the past decade. * AI, Fraud and Other Hidden Risks Are Leaving Businesses Exposed as Insurance Coverage Gaps Grow (Smartech Daily, September 2026): Van Carlson on social engineering fraud, AI liability, and the growing list of exclusions in commercial policies. * Taco Bell's Parent Company Refused to Say 1 Word on Its Earnings Call. Crisis Experts Think They Know Why (Inc., July 2026): SRA President Dustin Carlson weighs in on how a crisis can damage a brand long after the headlines fade.

GitLab
Oct 2nd, 2026
GitLab AI Gateway critical patch release: 19.2.4, 19.3.2, and 19.4.1.

GitLab AI Gateway critical patch release: 19.2.4, 19.3.2, and 19.4.1. Security Risk Advisors Intl. has released versions 19.2.4, 19.3.2, and 19.4.1 of the GitLab AI Gateway. These versions contain a critical security fix for GitLab Self-Hosted AI Gateway, and Security Risk Advisors Intl. strongly recommend that all GitLab Self-Managed customers with GitLab Self-Hosted AI Gateway installations update to one of these versions immediately. Security Risk Advisors Intl. has conducted targeted outreach to Self-Hosted AI Gateway customers prior to this release post with this guidance. A fix has already been deployed for GitLab-hosted AI Gateways. Customers using GitLab.com, GitLab Dedicated, and GitLab Self-Managed instances using a GitLab-hosted AI Gateway are protected and do not need to take action. Recommended action. Security Risk Advisors Intl. strongly recommend that all GitLab Self-Hosted AI Gateway installations running a version affected by the issue described below are upgraded to one of the patched versions listed above as soon as possible. Security fixes. Table of security fixes. CVE-2026-90970 - Improper Neutralization issue in custom flow prompt template impacts AI Gateway. GitLab has remediated an issue in the GitLab AI Gateway that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, leading to arbitrary command execution on the AI Gateway. Impacted Versions: GitLab AI Gateway: all versions from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 CVSS 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Thanks invisiblemeerkat for responsibly disclosing this issue. Updating.

Yahoo Finance
Aug 24th, 2026
Security Risk Advisors launches SCALR AI as free SOC platform with agent-based automation

Security Risk Advisors has launched SCALR AI, a free platform for security operations centre teams available through Azure Marketplace. The agentive workbench automates security tasks including incident triage, enrichment, threat hunting and vulnerability management. SCALR AI deploys within a customer's Azure tenant, keeping security data and AI workflows private rather than in shared software-as-a-service instances. The platform carries no licence fee; customers pay only for Azure compute at standard rates. The company, which previously released the free VECTR platform, designed SCALR AI to help chief information security officers navigate over 70 commercial security operations centre AI platforms currently available. The platform uses multi-agent workflows rather than single chatbot interfaces, with each agent specialising in specific tasks. Security teams can configure workflows, agents and tools without manual coding. Built-in cost visibility allows teams to monitor spending per workflow, agent and model.

Cryptika
Jul 27th, 2026
Security Risk Advisors named a finalist in crn's 2026 Best of the Channel Awards.

Security Risk Advisors named a finalist in crn's 2026 Best of the Channel Awards. Spread the love Philadelphia, Pennsylvania, July 27th, 2026, CyberNewswire Security Risk Advisors is proud to share that CRN, a brand of The Channel Company, has recognized Joe Cicero as a finalist in the second annual CRN Best of the Channel Awards in the Best Channel Visionary of the Year category. As a finalist, Joe is being spotlighted for his dedication to channel innovation and excellence through unifying marketing, alliances, and sales into a single growth engine, building a structured, partner-led Co-Sell model with Microsoft that influenced over $10M in services revenue, and driving meaningful growth in partner-sourced pipeline. The CRN Best of the Channel Awards honors individual leaders, teams, and companies setting an example with their visionary strategies and outstanding contributions to channel success. Winners will be announced at the Best of the Channel Awards Gala in Atlanta on Oct. 13, immediately following The Channel Company's XChange Best of Breed Conference. As Chief Marketing Officer at Security Risk Advisors, Joe Cicero leads marketing strategy, brand, and partner programs focused on clarity, credibility, and measurable impact. A former Microsoft security alumnus, Joe transformed SRA's alliance model into a unified, partner-led growth engine, driving deep go-to-market alignment across Microsoft Security, Sentinel, and Defender. Under his leadership, SRA advanced into MISA and achieved the MXDR Verified designation while expanding joint solution motions across enterprise markets. Joe bridges technical execution with strategic vision to operationalize scalable co-sell rhythms and deliver high-value outcomes for shared customers "The finalists of the CRN Best of the Channel Awards represent the very best of the IT channel," said Jennifer Follett, VP, U.S. Content and Executive Editor of CRN, The Channel Company. "Through innovation, exceptional leadership, and an unwavering commitment to partners and customers, these individuals, teams, and companies are helping shape the future of the channel. Cryptika is proud to recognize their accomplishments and the lasting impact they continue to make across the industry." "Joe quickly distinguished himself as a transformative leader, unifying marketing, alliances, and sales into a single, accountable growth engine. He doesn't just see where the market is going - he builds the systems necessary to get there." - Tim Wainwright, CEO, SRA"Joe stands out as a leader who actively works to evolve how partners operate in the channel. His focus on scalable co-sell and unified GTM reflects a forward-looking view of how solution providers must adapt in an AI & platform-driven world." - Maria Thomson, Director, MISA"Joe turns strategy into repeatable execution - the discipline that moves a partnership from ad hoc wins to a predictable, partner-led growth engine. He built an SRA motion that is security-first and tightly coupled to Microsoft priorities." - Joshua Shea, Sr. PDM, Microsoft The full list of CRN Best of the Channel Award finalists can be viewed online at crn.com/best-of-the-channel-awards. About Security Risk Advisors. Security Risk Advisors is a leading cybersecurity consulting firm specializing in innovative solutions to strengthen organizations' security posture. With expertise in Purple Team exercises, threat resilience, and detection engineering, SRA empowers teams to stay ahead of evolving cyber threats. About The Channel Company. The Channel Company (TCC) is the global leader in channel growth for the world's top technology brands. Cryptika accelerate success across strategic channels for tech vendors, solution providers, and end users with premier media brands, integrated marketing and event services, strategic consulting, and exclusive market and audience insights. TCC is a portfolio company of investment funds managed by EagleTree Capital, a New York City-based private equity firm. For more information, visit thechannelco.com. Follow The Channel Company: LinkedIn, X 2026 The Channel Company, Inc. The Channel Company logo is a registered trademark of The Channel Company, Inc. All other trademarks and trade names are the properties of their respective owners. All rights reserved. Contacts. Doug Webster Security Risk Advisors [email protected] Lindsay Sawyer The Channel Company [email protected] The post Security Risk Advisors named a finalist in crn's 2026 Best of the Channel Awards appeared first on cyber security News. Claymont, Delaware, December 1st, 2025, CyberNewsWire Lancaster's arrival brings significant North American channel experience and expertise, supporting usecure's ambition to cement its position as the market-leading human risk management solution for MSPs. usecure today announced the appointment of Kevin Lancaster as a Non-Executive Director. Kevin joins usecure with a wealth... December 1, 2025 In "Cybersecurity News - Original News Source is cybersecuritynews.com" June 2, 2026 Miami Beach, FL, USA, June 2nd, 2026, CyberNewswire Attack Surface Management Platform Recognized for Exceptional Innovation and Successful Deployment Through The Channel Halo Security today announced that its attack surface management solution has been named a 2026 MSP Today Product of the Year Award winner by TMC,... June 2, 2026 In "Cybersecurity News - Original News Source is cybersecuritynews.com" June 30, 2026 New York, United States, June 30th, 2026, CyberNewswire Building on the momentum of its Agent Identity Security launch, AppViewX invests in partner success through enhanced enablement and co-selling support AppViewX, the only machine and agent identity security company built for the AI and quantum era, today announced... June 30, 2026 In "Cybersecurity News - Original News Source is cybersecuritynews.com"

TechStartups
Jul 27th, 2026
Security Risk Advisors named a finalist in crn's 2026 Best of the Channel Awards.

Security Risk Advisors named a finalist in crn's 2026 Best of the Channel Awards. Philadelphia, Pennsylvania, July 27th, 2026, CyberNewswire Security Risk Advisors is proud to share that CRN, a brand of The Channel Company, has recognized Joe Cicero as a finalist in the second annual CRN Best of the Channel Awards in the Best Channel Visionary of the Year category. As a finalist, Joe is being spotlighted for his dedication to channel innovation and excellence through unifying marketing, alliances, and sales into a single growth engine, building a structured, partner-led Co-Sell model with Microsoft that influenced over $10M in services revenue, and driving meaningful growth in partner-sourced pipeline. The CRN Best of the Channel Awards honors individual leaders, teams, and companies setting an example with their visionary strategies and outstanding contributions to channel success. Winners will be announced at the Best of the Channel Awards Gala in Atlanta on Oct. 13, immediately following The Channel Company's XChange Best of Breed Conference. As Chief Marketing Officer at Security Risk Advisors, Joe Cicero leads marketing strategy, brand, and partner programs focused on clarity, credibility, and measurable impact. A former Microsoft security alumnus, Joe transformed SRA's alliance model into a unified, partner-led growth engine, driving deep go-to-market alignment across Microsoft Security, Sentinel, and Defender. Under his leadership, SRA advanced into MISA and achieved the MXDR Verified designation while expanding joint solution motions across enterprise markets. Joe bridges technical execution with strategic vision to operationalize scalable co-sell rhythms and deliver high-value outcomes for shared customers "The finalists of the CRN Best of the Channel Awards represent the very best of the IT channel," said Jennifer Follett, VP, U.S. Content and Executive Editor of CRN, The Channel Company. "Through innovation, exceptional leadership, and an unwavering commitment to partners and customers, these individuals, teams, and companies are helping shape the future of the channel. We are proud to recognize their accomplishments and the lasting impact they continue to make across the industry." "Joe quickly distinguished himself as a transformative leader, unifying marketing, alliances, and sales into a single, accountable growth engine. He doesn't just see where the market is going - he builds the systems necessary to get there." - Tim Wainwright, CEO, SRA "Joe stands out as a leader who actively works to evolve how partners operate in the channel. His focus on scalable co-sell and unified GTM reflects a forward-looking view of how solution providers must adapt in an AI & platform-driven world." - Maria Thomson, Director, MISA "Joe turns strategy into repeatable execution - the discipline that moves a partnership from ad hoc wins to a predictable, partner-led growth engine. He built an SRA motion that is security-first and tightly coupled to Microsoft priorities." - Joshua Shea, Sr. PDM, Microsoft The full list of CRN Best of the Channel Award finalists can be viewed online at crn.com/best-of-the-channel-awards. About Security Risk Advisors. Security Risk Advisors is a leading cybersecurity consulting firm specializing in innovative solutions to strengthen organizations' security posture. With expertise in Purple Team exercises, threat resilience, and detection engineering, SRA empowers teams to stay ahead of evolving cyber threats. About The Channel Company. The Channel Company (TCC) is the global leader in channel growth for the world's top technology brands. Tech Startups accelerate success across strategic channels for tech vendors, solution providers, and end users with premier media brands, integrated marketing and event services, strategic consulting, and exclusive market and audience insights. TCC is a portfolio company of investment funds managed by EagleTree Capital, a New York City-based private equity firm. For more information, visit thechannelco.com. Follow The Channel Company: LinkedIn, X 2026 The Channel Company, Inc. The Channel Company logo is a registered trademark of The Channel Company, Inc. All other trademarks and trade names are the properties of their respective owners. All rights reserved. Contacts. Doug Webster Security Risk Advisors [email protected] Lindsay Sawyer The Channel Company [email protected]

Recently Posted Jobs

Sign up to get curated job recommendations

Security Risk Advisors is Hiring for 9 Jobs on Simplify!

Find jobs on Simplify and start your career today

Don't see your dream role? Check out thousands of other roles on Simplify.Browse all jobs