Vulnerability assessment and management in Canada

Arista Cyber

Industrial cybersecurity firm for OT and ICS: risk assessments, gap analysis, IEC 62443 zone and conduit design, vulnerability assessments and incident response planning for energy and industrial operators.

• OT and ICS
• GRC advisory
• Vulnerability mgmt
• IR and forensics

• IEC 62443
• NERC CIP
• NIST CSF

CyberHunter Solutions

Penetration testing (web, network, cloud, mobile), threat hunting, protection and monitoring, vulnerability scanning and framework-based security assessments.

• Pen testing
• Vulnerability mgmt
• GRC advisory
• Cloud security

• NIST CSF
• CIS Controls

Digital Fort

Winnipeg consultancy offering fractional CISO, SOC 2, ISO 27001 and PCI DSS readiness, risk and maturity assessments, awareness training, and vulnerability and penetration testing.

• GRC advisory
• Audit and certification
• Training
• Pen testing
• Vulnerability mgmt

• SOC 2

EthiSecure Services Inc.

Quebec firm offering audit and compliance, security consulting and advising (architecture, vulnerability assessment, risk analysis, policies, virtual CISO and privacy officer roles) and training and certification.

• Audit and certification
• GRC advisory
• Architecture
• Vulnerability mgmt
• Privacy

• ISO 27001
• PCI DSS
• HIPAA
• SOC 2

ISA Cybersecurity

Compliance management, risk and privacy assessments, penetration testing, vulnerability management, cloud and data security, incident response and readiness, managed EDR and SIEM, awareness training.

• GRC advisory
• Privacy
• Pen testing
• Vulnerability mgmt
• Cloud security
• +4

Mirai Security

Application security testing, red team and vulnerability assessment, incident response, cloud security, GRC and security awareness training.

• AppSec
• Red team
• Vulnerability mgmt
• IR and forensics
• Cloud security
• +2

• SOC 2
• ISO 27001

OKIOK

Offensive security (penetration testing, vulnerability assessment), incident response, digital forensics, cybersecurity consulting, compliance and governance, and identity compliance as a service.

• Pen testing
• Vulnerability mgmt
• IR and forensics
• GRC advisory
• IAM
• +1

• ISO 27001
• SOC 2
• PCI DSS
• CPCSC

Plurilock

Cybersecurity services firm covering adversary simulation, cloud and data protection, identity and compliance readiness, including CPCSC and CMMC readiness for defence suppliers.

• Pen testing
• Red team
• Cloud security
• IAM
• GRC advisory
• +2

• CPCSC
• CMMC
• NIST 800-171
• MITRE ATT&CK
• OWASP

SAV Associates

Toronto CPA firm and ISO certification body offering SOC 1/2/3 attestation, ISO certification, IT audit, GRC consulting, CMMC and CPCSC readiness, and penetration testing and incident response.

• Audit and certification
• GRC advisory
• Pen testing
• Vulnerability mgmt
• IR and forensics

• SOC 2
• ISO 27001
• CMMC
• CPCSC

Secur-IT Data Solutions

Toronto managed security provider offering OT security for industrial and utility networks alongside network, cloud, endpoint and email security, penetration testing and risk assessment.

• OT and ICS
• MSSP
• Pen testing
• Vulnerability mgmt
• Cloud security
• +1

Secur01

Anjou, Quebec firm offering managed protection and SOC-as-a-service, vulnerability scanning, penetration testing, vCISO, incident response planning, awareness training and Law 25 compliance evaluation; French and English.

• MDR and SOC
• Pen testing
• Vulnerability mgmt
• GRC advisory
• Privacy
• +3

• Law 25

SecureOps

Boutique managed security services provider offering co-owned MDR, custom 24/7 SOC services, infrastructure security (firewall, VPN, segmentation, SASE), vulnerability management and security staffing.

• MDR and SOC
• MSSP
• Vulnerability mgmt

• GDPR

Vumetric

Penetration testing and security assessment provider covering network, application, API, specialized (medical device, IoT, SCADA/ICS), red team and social engineering testing, plus vulnerability assessment.

• Pen testing
• Red team
• Vulnerability mgmt
• AppSec
• OT and ICS

• PCI DSS
• SOC 2
• ISO 27001
• GDPR
• OWASP
• +1