CREST-accredited California consultancy blending compliance expertise with penetration testing. First to earn ISO 17020 for MITRE ATT&CK and PTES frameworks.
- Categories
- Penetration testing, Security consulting and vCISO, Compliance audits (SOC 2, ISO 27001), GRC and compliance automation
- Based in
- Irvine, United States
- Founded
- 2003
- Size
- 51-200 staff
- Ownership
- Private
About Tevora
Tevora is a cybersecurity and compliance consultancy that supports Chief Information Security Officers and other security leaders. It sells advisory and assessment work rather than software, covering areas such as AI security programmes, compliance, threat management and response, security infrastructure, risk and strategic services, and resource augmentation. Clients include Fortune 500 firms, start-ups and small businesses. The company works across several regulated sectors, naming financial institutions, government and healthcare, plus a group of specialised industries. Its consultants learn about each organisation's pressures and challenges before recommending strategies. Tevora also helps clients choose security software, keeping an independent position and drawing on knowledge of many vendors and product categories. Tevora reports more than 2,000 clients served, over 10,000 audits performed and more than 20 years supporting CISOs. It also offers flexible staffing for governance, risk and compliance work, DevSecOps and executive-level CISO cover.