Cybersecurity companies in Canada
15 companies in the directory are based in Canada. 10 are vendors and 5 are service firms. Of these, 1 is a public company and 3 belong to another company or an investor.
The list runs largest first. We rank by revenue from annual reports where a listed company files one, then by staff numbers. Companies with no revenue or staff figure come last.
15 companies, largest first
| Company | Category | Size | Ownership | Revenue |
|---|---|---|---|---|
 Open Text Corporation OpenText provides software and services for managing information across an organisation. | Backup and cyber recovery | Public, OTEX | $5.2bn (FY2026) | |
 Packetlabs CREST-accredited Canadian pen testing firm with a 95% manual-first approach. All testers hold OSCP minimum certification. Zero false positive guarantee. | Penetration testing | 51-200 staff | Private | |
 Vumetric (TELUS) ISO 9001-certified Canadian pen testing firm conducting 500+ tests annually. Now part of TELUS, serving Fortune 1000 to SMBs. | Penetration testing | 51-200 staff | Owned by TELUS | |
 Cyber Security Pentesting Inc. Toronto-based CREST-certified pen testing firm focused on Canadian financial services. OSCP and OSEP certified testers; OSFI, PCI DSS, and SOC 2 specialism. | Penetration testing | 11-50 staff | Private | |
 Stingrai Toronto-based PTaaS provider delivering continuous penetration testing for Canadian fintech, SaaS, and OSFI-regulated organisations. | Penetration testing | 11-50 staff | Private | |
 Factero Advisory Services Factero Advisory Services is an independent IT governance and cybersecurity advisory firm. | Security consulting and vCISO | 10 staff | Private | |
 1Password Provides a password manager and platform for securing credentials and access. | Password managers | Private | ||
 D3 Security D3 Security provides an agentic SOC platform that autonomously triages, investigates, and responds to security alerts. | Agentic SOC tools | Private | ||
 eSentire eSentire provides managed detection and response services to protect organisations from cyber threats. | Managed detection and response | Private | ||
 Flowtriq Flowtriq provides real-time DDoS detection and automatic mitigation for servers and network infrastructure. | DDoS protection | Private | ||
 LoginRadius LoginRadius provides a customer identity and access management platform for enterprises to authenticate and manage users. | Customer identity | Private | ||
 Nasdaq Verafin Nasdaq Verafin provides cloud-based software for fraud detection and anti-money laundering compliance. | Fraud and payment fraud prevention | Owned by Nasdaq | ||
 BlackBerry Certicom BlackBerry subsidiary providing cryptographic key management, managed PKI and code signing for vehicle supply chains and in-car networks. | Encryption and key management | Owned by BlackBerry | ||
 BlueCat Networks Policy driven DNS security and threat protection through BlueCat Edge, alongside DNS, DHCP and IP address management and network observability software. | DNS security | Private | ||
 Echoworx Echoworx provides email encryption and secure communication services for regulated enterprises. | Email security | Private |