SubRosa

SubRosa is a cybersecurity company founded in 2017 that provides advanced cybersecurity, cyber-risk advisory, compliance, and security technology solutions to organizations across the private, public, and government sectors. Founded by former intelligence professionals, the company focuses on making sophisticated cybersecurity capabilities accessible to organizations of different sizes. Its services include penetration testing, network and application security testing, social engineering, red-team assessments, vulnerability management, incident response, managed security operations, risk and compliance assessments, third-party/vendor risk management, vCISO and security advisory, cloud security assessments, AI governance, and incident readiness.
SubRosa also develops security technology through its Sable platform, which helps organizations and security service providers manage security and compliance programs, including risks, findings, controls, evidence, remediation, and multiple cybersecurity frameworks such as SOC 2, ISO 27001, CMMC, and HIPAA. The company serves industries including technology, financial services, healthcare, manufacturing, life sciences, and energy, helping clients identify vulnerabilities, strengthen their security posture, meet regulatory requirements, and improve resilience against evolving cyber threats.
SubRosa emphasizes practical, expert-led security engagements, combining offensive security testing, cybersecurity advisory, compliance support, and ongoing security operations to help organizations proactively identify and address cyber risks before they become major incidents. Its penetration-testing team has extensive experience conducting assessments across networks, applications, cloud environments, people, and physical infrastructure.