CISO Global Inc (NASDAQ: CISO) is a cybersecurity services company that provides managed security, compliance, risk management, penetration testing, and proprietary software solutions to enterprise clients. Revenue is generated through service contracts spanning managed IT security, integrated risk management, IT audits, and compliance services, supplemented by proprietary software including the CHECKLIGHT platform. The company has grown primarily through acquisition, completing more than a dozen deals between 2019 and the early 2020s, absorbing firms across Arizona, Texas, Virginia, Illinois, Georgia, Missouri, New Jersey, New York, Florida, Oklahoma, and Chile. As of the 10-K filed March 30, 2026, CISO Global served more than 437 clients across diverse sectors. The company positions itself as technology-agnostic, meaning it works with clients' existing tools rather than requiring proprietary hardware or platform lock-in. Recurring revenue is a stated strategic priority, supported by cross-selling and upselling across the acquired client base.

Revenue model

Service fees from managed cybersecurity, integrated risk management, IT audits, compliance management, and security assessments. Supplementary revenue from proprietary software, including the CHECKLIGHT product. The company targets recurring revenue growth through cross-selling within its 437-plus client base (as of 10-K filed 2026-03-30).

Products and services

Managed cybersecurity services, integrated risk management, IT audits, managed compliance services, penetration testing and security assessments, managed IT services, and proprietary software including CHECKLIGHT. Services are described as technology-agnostic and delivered by acquired operating units across multiple U.S. states and Chile.

Customers and end markets

More than 437 clients across diverse sectors as of the 10-K filed 2026-03-30. No single customer concentration figures are disclosed in the excerpts. End markets span enterprises requiring cybersecurity posture improvement, regulatory compliance, and risk management.

Value-chain role

Direct cybersecurity services provider and compliance advisor sitting between enterprise clients and the broader threat and regulatory environment. The company acts as a managed service provider and consulting organization rather than a technology vendor reseller, using acquired talent and proprietary software to deliver integrated solutions.

Geographic exposure

Primarily United States, with operations across Arizona, Texas, Virginia, Illinois, Georgia, Missouri, New Jersey, New York, Florida, and Oklahoma through acquired entities. International presence in Santiago, Chile through the Arkavia acquisition (acquired December 1, 2021).

Source: SEC 10-K, filed 2026-03-30

Industry: Services-Management Consulting Services Peers: AgileThought, Inc. Hackett Group Inc Grid Dynamics Holdings Inc Information Services Group Inc International Business Machines Corp Kyndryl Holdings Inc PFSWEB INC Unisys Corp