Who leads security at Kroll

What the company sells

Kroll is a global financial and risk advisory firm. Kroll provides reactive, advisory, transformation and managed security services to support clients at every stage of their path toward cyber and data resilience maturity. Kroll combines security and data risk expertise with intelligence from thousands of incident response, regulatory compliance, financial crime and due diligence engagements. Kroll says organizations across the globe face recurring and fluctuating risks to their cybersecurity posture and critical data, such as persistent cyberattacks, evolving compliance requirements, complex supply chains and emerging technology vulnerabilities. Kroll experts draw on their own experiences as consultants, CISOs, regulators, federal intelligence agents, SANS instructors and ethical hackers.

Kroll is CREST-accredited for Penetration Testing, SOC and IR Services. Kroll is certified as a Global PCI Forensic Investigator (PCI) Company. Kroll's Cyber Insurance Services Team serves as a central coordination point for carriers, brokers, breach counsel and policyholders. Kroll is included on more than 50 cyber insurance panels globally. Kroll offers a Cyber Risk Retainer with credits that can be used across its professional services portfolio. Kroll states that up to 20% of unused services credit may be applied to the following year upon renewal. Kroll's retainer includes access to a global team of 700+ incident response, litigation and breach notification experts.

Kroll Responder MDR delivers 24/7 security monitoring and response that includes understanding the root cause, hunting for further evidence of compromise and eradication. Kroll Responder MDR for Microsoft provides enriched MDR for Microsoft Security. Kroll offers a complimentary $1 million incident protection service warranty with no vendor-specific hardware requirement. Kroll and CrowdStrike deliver end-to-end implementation and ongoing security operations powered by CrowdStrike Falcon technologies. Kroll identifies previously undiscovered exposures across a digital footprint to reduce an attack surface. Kroll ethical hackers and incident responders apply the latest adversary techniques to craft tests, simulations and assessments unique to a client's environment. Kroll's Artifact Parser and Extractor (KAPE) collects and processes forensically useful artifacts. Kroll implements, configures and operates solutions and programs from Identity and Access Management and Threat Detection to Artificial Intelligence (AI) Governance and OT Security.

Kroll provides bespoke services for complex incident response, regulatory investigations, litigation support, board-level engagements and national security matters. Kroll's Complex Digital Events services use a combination of non-practising attorneys and technical experts to guide and deliver complex investigations. Kroll supports thousands of law firms and corporate cyber clients. Kroll's work includes targeted, nation-state sponsored cyberattack investigations and risk mitigation. Kroll provides forensic investigations and expert testimony supporting data breach litigation, trade secret/intellectual property theft and employment disputes. Kroll's cyber threat intelligence services draw on incident response intelligence and analysts to hunt and respond to threats.

Kroll's Cybersecurity Risk Assessments include a detailed review of the information security program, from policies and procedures to technical controls, including people, processes and technologies. Kroll's assessments use the NIST Cybersecurity framework as guidance and include interviews with internal stakeholders across technical and business teams. At the conclusion of an assessment, Kroll clients receive a summary report designed to communicate security posture to senior management, including an assessment of maturity level and an outline of critical risks identified. Kroll offers a baseline review aimed at small and medium businesses. Kroll offers an assessment of a cybersecurity incident response plan, processes and defensive controls. Kroll reviews the current security status of Active Directory deployments to mitigate possible attack paths. Kroll reviews AWS security groups, identity and access management (IAM), access control lists, relational databases and EC2 instance lifecycles. Kroll offers a virtual CISO service for security and technology teams. Kroll evaluates and hardens software supply chain security risks using DevSecOps, offensive security and incident response expertise. Kroll experts are Certified Information Systems Auditors, Certified Information Security Managers, Certified Information Systems Security Professionals and Certified Ethical Hackers.

Kroll's global Enterprise Security Risk Management team works on proactive threat and risk mitigation and reacts to crises, offering personnel, expertise, advisory and bandwidth. Kroll's Threat Life Cycle Management uses end-to-end cyber and physical risk solutions to uncover exposures, validate the effectiveness of defenses, implement new or updated controls, fine-tune detections and respond to any threat. Kroll describes itself as senior advisers to clients on all security and threat-related issues. Kroll's services include developing and testing emergency response plans. Kroll provides expertise to address complex risks and challenges involving data, technology and corporate legal solutions, with services to support clients across the entire litigation lifecycle. Kroll helps corporate legal departments transform their operations and technology estate with operational consulting, digital transformation and managed services. Kroll's AI Report Validation practice centers investigators who deconstruct AI-generated narratives, test their claims against professional-grade sources and determine what was fabricated, distorted or omitted. Kroll's Investigations, Diligence and Compliance team supports clients with independent expert analysis, testimony, advice and intelligence in complex investigations, litigation and projects globally.^{[1][3][4][5][6][7][14][15][16][17][18][21]}

Categories

• Incident response and forensics (primary category)
• MDR and managed SOC
• Compare Kroll with companies in the same categoryside by side

Headquarters

New York, United States^[2][10][12]

Founded

Not established from our sources

Ownership

Not established from our sources

CISO on record

Not yet on our record. Send a verified source

Website

kroll.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Enterprise Security Risk Management^[7]

  A Kroll team for proactive threat and risk mitigation and crisis response.

  Kroll's global Enterprise Security Risk Management team works on proactive threat and risk mitigation and reacts to crises, offering personnel, expertise, advisory and bandwidth. Kroll's Threat Life Cycle Management uses end-to-end cyber and physical risk solutions to uncover exposures, validate defenses, implement new or updated controls and fine-tune detections. Kroll describes itself as senior advisers to clients on all security and threat-related issues.

• Kroll Responder MDR^[1][5]

  Managed detection and response with 24/7 security monitoring.

  Kroll Responder MDR delivers 24/7 security monitoring and response that includes understanding the root cause, hunting for further evidence of compromise and eradication. Kroll Responder MDR for Microsoft provides enriched MDR for Microsoft Security. Kroll offers a complimentary $1 million incident protection service warranty with no vendor-specific hardware requirement.

• Cyber Risk Retainer^[1][5]

  A retainer with credits usable across Kroll's professional services portfolio.

  Kroll offers a Cyber Risk Retainer with credits that can be used across its professional services portfolio. Kroll states that up to 20% of unused services credit may be applied to the following year upon renewal. Kroll's retainer includes access to a global team of 700+ incident response, litigation and breach notification experts.

• Cybersecurity Risk Assessments^[16]

  Reviews of an information security program using the NIST Cybersecurity framework as guidance.

  Kroll's Cybersecurity Risk Assessments include a detailed review of the information security program, from policies and procedures to technical controls, including people, processes and technologies. At the conclusion of an assessment, clients receive a summary report designed to communicate security posture to senior management. Kroll offers a baseline review aimed at small and medium businesses.

• Complex Digital Events^[15]

  Bespoke services for complex incident response, regulatory investigations and litigation support.

  Kroll provides bespoke services for complex incident response, regulatory investigations, litigation support, board-level engagements and national security matters. Kroll's Complex Digital Events services use a combination of non-practising attorneys and technical experts to guide and deliver complex investigations. Kroll provides forensic investigations and expert testimony supporting data breach litigation, trade secret/intellectual property theft and employment disputes.

• Enterprise Risk Retainer^[14]

  A retainer for cyber insurance partners and their clients.

  Kroll offers an Enterprise Risk Retainer to cyber insurance partners and their clients. The retainer includes a pre-negotiated agreement for instant access to risk expertise. The retainer includes service credits to proactively strengthen risk posture before an incident occurs.

• AI Report Validation^[18]

  Independent verification of AI-generated research by investigators.

  Kroll's AI Report Validation practice centers investigators who deconstruct AI-generated narratives, test their claims against professional-grade sources and determine what was fabricated, distorted or omitted. Kroll conducts original research to fill gaps.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Kroll's categories, then alphabetical. A list from the record, never a ranking.

• On incident response and forensics, Kroll competes with Sygnia, BreachRx, CYPFER, Surefire Cyber, Arctic Wolf, BlackCloak, Cyrenity, eSentire, FRSecure, Inversion6 and 27 more.

• On mdr and managed soc, Kroll competes with Arctic Wolf, Cyrenity, eSentire, Inversion6, Kyndryl, Leonardo, Quorum Cyber, Secureworks, White Hat IT Security, Agile Defense and 54 more.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• G2 · 3.8 out of 5 · 3 reviews^[13]seen November 10, 2026

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• August 31, 2026

  Kroll launched APEX, a capability on the CrowdStrike Falcon platform that quantifies effort, cost and value of AI and automation for cyber investment decisions. Kroll^[11]

• July 15, 2026

  Kroll acquired ABC economics, an economics and competition advisory firm headquartered in Berlin, Germany. Kroll^[12]

• January 29, 2026

  Kroll launched two new practices, Kroll Economics and Decision Intelligence. Kroll^[9]

• November 17, 2025

  Kroll completed its acquisition of Madison Pacific, a corporate trust and agency services specialist headquartered in Hong Kong. Kroll^[10]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]Cyber riskKroll · kroll.com · published October 16, 2025 · Tier A: the company, a regulator or a filing
2. [2]Kroll Announces Formation of Kroll Business ServicesKroll via Business Wire · businesswire.com · published April 20, 2021 · Tier A: the company, a regulator or a filing
3. [3]Kroll | Financial and Risk Advisory SolutionsKroll · undated page, accessed October 26, 2026 · Tier A: the company, a regulator or a filing
4. [4]Risk AdvisoryKroll · undated page, accessed October 26, 2026 · Tier A: the company, a regulator or a filing
5. [5]Cyber Security Services | Cyber & Data Resilience | KrollKroll · undated page, accessed October 26, 2026 · Tier A: the company, a regulator or a filing
6. [6]Application Security Services (AppSec) | Cyber and Data ResilienceKroll · undated page, accessed October 26, 2026 · Tier A: the company, a regulator or a filing
7. [7]Enterprise Security Risk Management (ESRM) | KrollKroll · undated page, accessed October 26, 2026 · Tier A: the company, a regulator or a filing
8. [8]Investigations, Diligence and Compliance | KrollKroll · undated page, accessed October 26, 2026 · Tier A: the company, a regulator or a filing
9. [9]Kroll Launches New Practices Leveraging Technology and AI to Accelerate Decision-Making and Achieve Competitive AdvantageKroll · published January 29, 2026 · Tier A: the company, a regulator or a filing
10. [10]Kroll Completes Acquisition of Madison Pacific GroupKroll · published November 17, 2025 · Tier A: the company, a regulator or a filing
11. [11]Kroll Introduces APEX to Drive Measurable Business Outcomes from AI InvestmentKroll · published August 31, 2026 · Tier A: the company, a regulator or a filing
12. [12]Kroll Bolsters Global Economics Capabilities with Acquisition of ABC economicsKroll · published July 15, 2026 · Tier A: the company, a regulator or a filing
13. [13]Kroll Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 26, 2026 · Tier C
14. [14]Cyber Insurance Services | Incident Response Partner | KrollKroll · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
15. [15]Complex Digital Events | Cyber and Data Resilience | KrollKroll · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
16. [16]Cyber Risk Assessments | Cyber Risk | KrollKroll · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
17. [17]Data Risk, Discovery & Litigation Support | Cyber & Data Resilience | KrollKroll · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
18. [18]AI Report Validation | KrollKroll · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
19. [19]M&A Advisory Services | Corporate Finance | KrollKroll · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
20. [20]Valuation Services | Valuation AdvisoryKroll · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
21. [21]Business Valuation Services | KrollKroll · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 10, 2026 from the references above.

Work for Kroll? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.