Let us match you
Thoropass will do all the work to match you with the best Experts.
Partner
CITSAP

CITSAP

CITSAP is a next-generation cybersecurity compliance professional services firm comprising of industry experts with decades of combined experience spanning various industries including financial services, healthcare, energy, oil & gas industries, etc. We partner with organizations as trusted advisors, helping our clients to address the many unique challenges with meeting compliance requirements such as SOC 1/2, ISO 27001, HITRUST, etc., while also providing advisory and technical support services in the design and implementation of risk-based compliance programs. For small and middle-size businesses (SMBs), we also lower the barrier to gaining accessibility to quality Cybersecurity experts, streamlined processes, and technologies for effective cybersecurity risk management. At CITSAP, we recognize that adequate protection of customer data is a foundational element for companies seeking to build and maintain digital trust. We partner with our clients as trusted advisors with a core goal of helping them to develop a strategic compliance approach for addressing a plethora of risks related to the protection of customer data. CITSAP Consulting’s approach leverages a holistic framework built around highly skilled professionals, a well-defined methodology for process execution, and the use of automation compliance software for proactive management of the client’s cybersecurity and privacy compliance requirements.
Partner
Integritum

Integritum

Integritum is your trusted partner for building a bulletproof security posture and maximizing your cybersecurity compliance and assessment efforts. With over a decade of solid performance and over 600 clients ranging from small businesses to industry giants, we have extensive experience in all facets of information technology and cybersecurity threats and prevention mechanisms. Our services include Compliance & Privacy, Risk Assessment, Policy Development, and Cybersecurity Training. Let us help you navigate the ever-changing landscape of data privacy regulations and ensure your organization is compliant and secure.
Partner
The Gnar Company

The Gnar Company

The Gnar partners with high-growth and enterprise companies to build secure, scalable, digital products -- faster. We're an experienced team of US-based product designers, full-stack engineers, and problem solvers who take pride in simplifying the gnarliest, most complex technical challenges. Whether you need to build an app from the ground up, want to confidently accelerate your roadmap, or simply have a technical challenge that's keeping you up at night: We're here for it. Our Focus: • Compliant Web & Mobile App Development • Product Design and Strategy • Complex Integrations • Technical Audits & Analysis
Partner
Consilium Labs

Consilium Labs

Consilium Labs works as a trust enabler between you and your clients by getting you ISO 27001 Certification with a seamless process. Consilium Labs helps you achieve ISO 27001 certification without complications while saving time and cost.
Partner
Beda Software

Beda Software

Beda Software focused on trust, security, and compliance for the Health Tech sector. Beda Software works as your technological partner tackling all aspects related to Healthcare Software development We know how to build SOC2/HITRUST-compliant infrastructure for your healthcare application. We are experienced with HIPAA and GDPR. Furthermore, we are a team of experienced engineers that leverage cutting-edge technologies in DevOps and software development.
Partner
Viridis Security

Viridis Security

Viridus Security = Common sense governance, risk & compliance for growth stage companies. There comes a point when proving security is necessary for closing deals. We can help you make security a competitive advantage. Automated compliance tools help, but there are plenty of decisions to make along the way: 1. How much time can I take away from core work? 2. What tools do I absolutely need immediately and which can wait (ticketing, IAM, HR, SDLC, etc)? 3. Which controls don’t apply to my business, and how to do I convey that to the auditor? 4. What kind of penetration testing makes sense? 5. How the heck do I run and document a tabletop exercise? Whether you need ground up creation of policies, controls, processes and procedure or if already have a great program and are looking for CISO advice without hiring a full-time resource, we can help. Virtual CISO (vCISO) Security Implementation advice and guidance: * Vendor (3rd Party) Assurance programs * Document management * Asset Management * Application Management * Risk Management * IAM Identity Access Management * Information Security outreach, training * SDLC Security Frameworks examples: * SOC2 * GDPR * PCI * ISO27001 * HIPAA
Partner
Sublett Consulting

Sublett Consulting

Certified cyber risk expert specializing in early to mid-stage health tech, medical device, digital health, and cybersecurity industries. Board advisory and consulting services delivering comprehensive expertise on the implementation and development of cyber risk strategy, programs, and initiatives.
Partner
Secur01 Inc.

Secur01 Inc.

As specialists in Governance, Risk, and Compliance (GRC), Secur01 guides organizations in optimizing their security posture. Our fully bilingual team (English/French) excels in transforming regulatory requirements into concrete and effective strategies, tailored to your business challenges. As a Managed Security Service Provider (MSSP), we complement our GRC expertise with managed cyber defense services and cyber attack simulations, delivering an integrated security approach. Our rigorous methodology ensures alignment between your compliance objectives and the proactive protection of your digital assets. Our holistic vision of cybersecurity, combined with our GRC expertise, makes us the ideal partner for organizations seeking to enhance their security and compliance maturity.
Partner
GlitchSecure

GlitchSecure

GlitchSecure is a real-time continuous security testing platform that helps you find and remediate software vulnerabilities and prevent breaches through year round security testing, expert driven insights, and verified reports to eliminate false positives.
Partner
Angel Cybersecurity

Angel Cybersecurity

• Woman-owned cybersecurity consulting company. • Experienced in building security programs for small organizations - anywhere from 2 people and up - through to large organizations of >1000 people. • CISSP, CISM, CCSP, CISA certified • Significant compliance experience with SOC2, ISO 27001, HIPAA and PCI.
Partner
Facient

Facient

Facient is a fractional consulting firm that provides on-demand implementation services to help founders navigate the challenges of growth and scale. Our customized solutions empower startups and small businesses to build capacity, drive revenue, and solve business challenges without the cost or commitment of a full-time hire. We mobilize the expertise of diverse, world-class operators building today’s most successful companies such as Meta, GE, and Calendly to supercharge small business growth and uplift underserved communities. Our core offerings include: • Operations Strategy & Execution • Sales Enablement • Business Development • Fractional Leadership