About Coalfire

Cybersecurity that fuels success

In 2001, a group of technology professionals came together with a simple idea – cyber threats are increasing, compliance mandates are getting more complicated, and a well-designed cybersecurity program can help you successfully achieve your objectives. We’ve been rethinking cyber risk management and compliance ever since.

We help public and private sector organizations avert threats, reduce risk, and even turn security into a competitive advantage. Our services span the cybersecurity lifecycle – from advisory and compliance, to technical testing and engineering, to ongoing monitoring and optimization. This breadth of services, coupled with independent, tailored advice and analysis, have made us the go-to partner for organizations across numerous industries, including technology, healthcare, and the public sector.

Coalfire professionals use a combination of technical expertise and tailored advice to provide a complete picture of the vulnerabilities and threats that face your organization. We also help you understand how these risks could impact your operations, assets, reputation, and more – and then give you unbiased, tailored recommendations for remediation. Armed with this information, you can solve your toughest cybersecurity challenges and fuel your overall success.

Featured Clients

Industry Associations & Affiliations


Experience and Accreditations

We have more than 15 years’ experience in IT security and compliance, serving thousands of client organizations across the United States and Europe. Our accreditations include:

  • Amazon Web Services Certified Solutions Architect - Associate and Professional
  • Amazon Web Services Certified DevOps Engineer - Professional
  • Amazon Web Services Certified Developer - Associate
  • Amazon Web Services Certified SysOps Administrator - Associate
  • ANSI-ASQ National Accreditation Board (ANAB) ISO 27001 Certification
  • Certified of Cloud Security Knowledge (CCSK)
  • Certified in the Governance of Enterprise IT® (CGEIT®)
  • Certified Ethical Hacker (CEH)
  • Certified Information Systems Auditor (CISA)
  • Certified Information Security Manager® (CISM®)
  • Certified Information Systems Security Professional (CISSP)
  • Certified Risk and Information Systems Control (CRISC)
  • Cisco Certified Network Associate (CCNA)
  • FedRAMP Accredited Third Party Assessment Organization (3PAO)
  • GIAC Web Application Penetration Tester (GWAPT)
  • GIAC Security Leadership (GSLC)
  • Health Information Trust Alliance (HITRUST) Common Security Framework (CSF) Assessor
  • Palo Alto Networks Accredited Configuration Engineer (ACE)
  • Palo Alto Networks Certified Network Security Engineer (PCNSE)
  • PCI SSC Approved Scanning Vendor (ASV)
  • PCI SSC Qualified Security Assessor Company (QSAC)
  • PCI SSC Payment Application Qualified Security Assessor (PA-QSA)
  • PCI SSC Payment Application Qualified Security Assessor Point-to-Point Encryption (PA-QSA P2PE)
  • Splunk Certified Architect
  • Splunk Certified Consultant Level 2
  • VMware Certified Professional (VCP5-DCP)