Coalfire
Compliance-focused cybersecurity advisory firm and FedRAMP 3PAO specializing in penetration testing that meets stringent regulatory requirements.
- Categories
- Penetration testing, Compliance audits (SOC 2, ISO 27001), GRC and compliance automation, Security consulting and vCISO
- Based in
- Westminster, United States
- Founded
- 2001
- Size
- 500+ staff
- Ownership
- Owned by Apax Partners since 2020
- Certifications
- FedRAMP 3PAO, PCI Qualified Security Assessor, ANAB accredited certification body
About Coalfire
Coalfire provides cybersecurity and compliance services. It sells assessment, advisory, and security services to enterprises, cloud providers, and government agencies. The company helps clients meet regulatory and security standards across many frameworks. It also offers offensive, defensive, and managed security through its DivisionHex team. Coalfire serves industries such as healthcare, financial services, government, retail, and technology. It works with partners like AWS, ServiceNow, and Vanta to embed controls and automate evidence collection. The company uses its own platforms and AI tools to streamline compliance work and reduce manual effort. Coalfire's approach combines deep expertise with practical guidance for complex environments.
Products
- Compliance EssentialsA platform that combines framework mapping and Audit AI to review policies and automate evidence collection.
- DivisionHexAn elite cybersecurity team offering offensive, defensive, and managed security services.
- ForgeAIEnables secure adoption of generative and agentic AI with enterprise-grade security and compliance.
- LegionAIAutomates security and compliance tasks to cut manual work and improve security posture.
- GuardianAIA lifecycle framework for securing AI systems and meeting regulatory expectations.
- RAMP/pak+Combines open-source code and early-stage services to optimise FedRAMP investment and resources.
Ownership and deals
- Coalfire acquired Denim GroupReport on Coalfire buying Denim Group (opens in a new tab)
- Coalfire acquired Neuralys CorporationReport on Coalfire buying Neuralys Corporation (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.