SBS CyberSecurity

US cybersecurity consulting, audit and testing firm founded in 2004, focused on community banks and credit unions, with penetration testing plus CMMC Level 1 and 2 readiness work for defense contractors.

CompanyPenetration Testing FirmsFeaturedVendor-verified

Pricing: Custom (contact sales)

Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below and information provided directly by the vendor · Last reviewed September 2026 · How we review listings

What is SBS CyberSecurity?

SBS CyberSecurity is a US cybersecurity consulting, audit and testing firm founded in Madison, South Dakota in 2004. Its core market is regulated financial institutions, community banks and credit unions, served through risk management programmes, IT and network security audits, penetration testing, and the TRAC governance, risk and compliance platform. Co-founders Chad Knutson and Jon Waldman acquired full ownership of the company in July 2022. Penetration testing covers external network, internal network, web application, wireless, and PCI DSS Requirement 11 engagements, aligned to NIST, OWASP and PTES. Alongside testing, SBS runs red team, purple team and social engineering assessments, and advisory work including virtual CISO, NIST Cybersecurity Framework assessments, cybersecurity maturity assessments, and vendor risk management. For defense contractors, SBS provides CMMC readiness for Level 1 and Level 2: gap identification, documentation and preparation for assessment. Certification itself is completed by a separate Certified Third Party Assessment Organization (C3PAO); SBS is not listed on the Cyber AB Marketplace as an RPO or C3PAO.

Best for: Community banks, credit unions and other regulated financial institutions that want testing, audit and governance from one firm, plus organizations preparing for a CMMC Level 1 or Level 2 assessment

Pros

✓ Two decades focused specifically on regulated financial institutions, with reporting built for board and examiner audiences
✓ Platinum Member of the American Bankers Association Partner Network, with preferred provider relationships across more than 20 state banking associations
✓ TRAC GRC platform used by more than 1,500 organizations, bundling testing findings into ongoing risk management rather than a standalone report
✓ CMMC readiness work maps directly to Level 1 and Level 2 gap preparation for defense contractors

Key Features

External and internal network penetration testing

Web application penetration testing

Wireless penetration testing

PCI DSS Requirement 11 testing

Red team, purple team and social engineering assessments

CMMC Level 1 and 2 readiness (gap assessment, documentation, assessment preparation)

Virtual CISO and NIST Cybersecurity Framework assessments

TRAC governance, risk and compliance platform

"SBS CyberSecurity is focused on empowering your cybersecurity decisions. We provide robust risk management programs, IT audit services, and cybersecurity testing solutions, enabling you to protect your organization."