CISO Global history: an acquisition-built cyber consultancy shifts toward software
CISO Global was built in reverse from the way many software companies grow. It did not begin with one product and then add services around it. The company first assembled cybersecurity expertise through more than a dozen acquisitions, creating a collection of compliance, managed IT, incident response, penetration-testing and security-operations businesses. Only after that roll-up did it make proprietary software a central part of its growth plan.
That distinction explains both the opportunity and the risk. CISO Global has real service capabilities and hundreds of customer relationships, but it must integrate businesses that arrived with different teams and specialities while funding a transition toward higher-margin software. Its 2026 filings show that this work remains unfinished.
Cerberus Cyber Sentinel starts in 2019
The company was incorporated in Delaware on 5 March 2019 as Cerberus Cyber Sentinel Corporation. Chief executive David Jemmett was central to the strategy: acquire specialist cybersecurity firms, keep their experienced practitioners and combine their services into a wider offering.
The first transactions established the corporate base. Cerberus acquired GenResults, a cybersecurity-services company previously owned by an entity affiliated with Jemmett, and merged with VCAB Six Corporation in April 2019. VCAB was in bankruptcy and had minimal assets; Cerberus said the merger expanded its shareholder base and helped it work toward the requirements of a national exchange. TalaTek followed in October 2019, adding risk assessments, IT audits, cybersecurity and managed-compliance services.
That beginning matters. CISO Global’s origin was not a newly invented security platform. It was an acquisition vehicle designed to consolidate people-intensive cyber and compliance expertise.
The roll-up accelerates
Between 2020 and 2023, Cerberus bought a long list of operating companies. Technologyville added managed IT; Clear Skies Security brought security assessments and penetration testing; Alpine Security contributed integrated risk management; and VelocIT, Atlantic Technology Systems and RED74 expanded managed and advisory services.
The company also moved outside the United States. Arkavia in Chile arrived in December 2021, followed in 2022 by the South American CUATROi and NLT groups. In the US, True Digital Security added cybersecurity and compliance, Creatrix brought identity management, biometrics and systems integration, and CyberViking contributed application security, incident response, threat hunting and security-operations-centre expertise. SB Cyber Technologies, acquired in July 2023, added managed services and compliance.
Cerberus listed on Nasdaq under the ticker CISO in January 2022. The listing gave it another route to capital during the busiest stage of the acquisition programme, but buying many companies also created integration costs, debt and a complex collection of operations.
In July 2024, CISO Global disposed of the South American entities acquired through Arkavia, CUATROi and NLT. The company completed no acquisitions in either 2024 or 2025, marking a clear change from expansion by dealmaking to consolidation and organic development.
Why the name changed
The company announced the CISO Global identity in late 2022 and formally changed its name in April 2023. Its Nasdaq ticker was already CISO, so the rebrand aligned the corporate name with the exchange symbol and the role of the chief information security officer.
The current business is organised around three revenue categories:
- Security managed services, including managed IT, cloud work, security operations, monitoring, architecture and ongoing compliance support.
- Professional services, including incident response, digital forensics, penetration testing, red- and purple-team exercises, risk assessments and training.
- Cybersecurity software, which CISO Global describes as its scalable, higher-margin growth layer.
This mix makes CISO Global different from a pure security-appliance vendor. A product such as a Fortinet FortiGate firewall supplies a specific enforcement platform; CISO Global’s teams may instead help an organisation assess risk, design controls, monitor systems, respond to incidents and coordinate several vendors’ tools.
The proprietary software portfolio
CISO Global’s software strategy grew out of the data and workflows handled by its service teams. Argo Security Management is designed to aggregate information from security tools, SOC services, vulnerability management, managed IT and penetration tests into a central view. CHECKLIGHT monitors endpoints for suspicious processes and alerts users to threats. CISO Edge is positioned as an AI-assisted cloud-security platform, while DISC is a remote-access product and Skanda automates parts of breach assessment.
These descriptions show what the products are intended to do; they do not by themselves establish market adoption or technical superiority. The more useful evidence is revenue, deployment and retention. In the first six months of 2026, CISO Global recorded $389,139 of cybersecurity-software revenue. That was 34% higher than a year earlier, but it represented only about 3% of the company’s $12.0 million total revenue for the period.
Managed services remained the economic centre, producing $10.67 million in the same six months. Professional services generated $949,496. The figures show a business that is still primarily a services provider even as management tries to build a more scalable software contribution.
Revenue pressure and a smaller loss
CISO Global’s first-half 2026 revenue fell 13% from $13.88 million to $12.01 million. Management attributed the largest decline to the loss of several higher-revenue managed-services customers; new engagements did not fully replace them. Professional-services revenue also declined because the company completed fewer projects.
The operating loss improved from $4.04 million in the first half of 2025 to $2.93 million in the same period of 2026, helped by lower payroll, marketing and stock-based compensation. Net loss from continuing operations was $3.20 million, compared with $8.39 million a year earlier, when interest and convertible-note accounting created much heavier expense.
Those improvements did not remove the liquidity problem. At 30 June 2026, CISO Global had $721,771 in cash and an $8.52 million working-capital deficit. Its filing said that operating losses, cash use and the deficit created substantial doubt about its ability to continue as a going concern. The company expected further losses through the end of 2026 and said it depended on additional equity, debt or other financing.
Nasdaq compliance added another deadline. After the share price stayed below $1, the exchange granted CISO Global a second compliance period through 28 December 2026. The company said it could use a reverse stock split if necessary. It had already completed a 1-for-15 reverse split in March 2024.
Key milestones
- March 2019: Cerberus Cyber Sentinel is incorporated in Delaware.
- 2019–2022: the company builds its service portfolio through acquisitions in the US and South America.
- January 2022: its shares begin trading on Nasdaq under CISO.
- April 2023: Cerberus Cyber Sentinel formally becomes CISO Global.
- July 2024: the South American operations are disposed of; the company shifts away from acquisition-led expansion.
- 2025–2026: management emphasises integration, cost control and commercialising proprietary software.
- June 2026: the balance sheet still carries a working-capital deficit and a going-concern warning.
What CISO Global has to prove
The company’s acquisition phase gave it a broad set of skills, but breadth is not the same as integration. The first test is whether customers buy multiple services from a single CISO Global relationship rather than treating the acquired units as separate consultancies. The second is retention: losing several large managed-services clients was enough to push first-half 2026 revenue lower.
The third test is whether software becomes material. CISO Global’s products could make service knowledge repeatable and improve gross margins, but software was still a small fraction of revenue in mid-2026. Finally, the company needs enough capital to reach that point without allowing financing needs, dilution or Nasdaq compliance to overwhelm the operating strategy.
CISO Global is therefore best understood as an acquisition-built cybersecurity services group attempting a software-led transition—not as a mature software platform that happens to offer consulting. That framing makes its next results easier to read: watch managed-services retention, software revenue, cash generation and the balance sheet together.
