What does Third Wave Innovations sell?

Third Wave Innovations sells Security Awareness Training. Security Awareness Training: Training that builds employee cyber knowledge and meets compliance training requirements.

Who does Third Wave Innovations fit?

From its own pages, Third Wave Innovations sells mainly to growing businesses, including small and midsized organizations without a full security team. The pages describe customers such as a mid-sized technology company operating in the healthcare space, a services-based organization, and a manufacturing company. Third Wave Innovations aligns security controls with what insurers expect, so organizations that want to maintain cyber insurance coverage and pass underwriting are part of its audience. Security Awareness Training addresses the training requirements of compliance standards including SOC2, PCI DSS, and HIPAA. Automated Detection & Response works with existing tools for network, identity, cloud, endpoint, and office productivity.

How does CISO Tribune file Third Wave Innovations?

CISO Tribune files Third Wave Innovations under MDR and managed SOC, with Security awareness training, Vulnerability management and Third-party risk and security ratings as secondary categories.

Company record · security vendor

Who leads security at Third Wave Innovations

CISO Tribune company record: Third Wave Innovations, current seat holder not yet confirmed

The most recent move CISO Tribune has on record at Third Wave Innovations was announced on September 7, 2023: too long ago to say who holds the seat today. The history below stands; the current holder is not yet confirmed.

Tracked by the Wire since September 7, 2023 · 1 recorded move · every claim links to a sourced record · Updated October 19, 2026

Where Third Wave Innovations appears on the record (170)

Every page on CISO Tribune and its network that carries this company, 170 in all.

On the Wire: Mark Abbott named Chief Information Security Officer at Third Wave Innovations · 2023-09-07
Compared with (164): vs AccessIT Group, vs Acronis, vs Adaptive Security, vs Agile Defense, vs Anchore, vs Anecdotes, vs Apptega, vs Archer, vs Arctic Wolf, vs Astra Security, vs Atos, vs Attaxion, vs Axonius, vs Barracuda Networks, vs Binary Defense, vs Bitdefender, vs Bitsight, vs Black Kite, vs BlackCloak, vs Blackpoint Cyber, vs Blue Mantis, vs Brinqa, vs Brite, vs Coalfire, vs Cofense, vs Cognition, vs ConnectSecure, vs Copla, vs Critical Start, vs CyberKord, vs CyberProof, vs CyberSaint, vs Cyderes, vs Cynet, vs Cynomi, vs Cyrenity, vs D3 Security, vs Daylight, vs DeepSeas, vs Deepwatch, vs Defendify, vs DefenseStorm, vs Dispel, vs Doppel, vs Drata, vs DXC Technology, vs Dynatrace, vs Eclypsium, vs Elbit Systems, vs eSentire, vs Exaforce, vs Expel, vs FireMon, vs Flashpoint, vs Forte Technologies, vs Fortified Health Security, vs Frame Security, vs FRSecure, vs Google, vs Guardare, vs Guardz, vs HackenProof, vs HackerOne, vs Halo Security, vs HCLSoftware, vs Helix, vs Hilt, vs Hive Pro, vs Honeywell, vs Hornetsecurity, vs Hoxhunt, vs Huntress, vs Hyperproof, vs I-TRACING, vs IANS, vs ICF, vs iCOUNTER, vs Immersive, vs Indurex, vs Infosys, vs Intezer, vs Intruder, vs Inversion6, vs Jericho Security, vs Judy Security, vs JupiterOne, vs Keepnet Labs, vs KnowBe4, vs Kovrr, vs Kroll, vs Kyndryl, vs Lansweeper, vs Leidos, vs Leonardo, vs Living Security, vs LogicGate, vs Malwarebytes, vs MetricStream, vs Miggo, vs Millennium Corporation, vs NCC Group, vs NINJIO, vs NopSec, vs Nucleus Security, vs OneTrust, vs Onspring, vs Optro, vs Orange Cyberdefense, vs Osano, vs Panorays, vs Parsons, vs Pentio, vs Prevalent, vs Proficio, vs Proximus NXT, vs Qualys, vs Quorum Cyber, vs Rackspace Technology, vs RAD Security, vs Rapid7, vs RapidFort, vs Reach Security, vs Recorded Future, vs Red Canary, vs Red Hat, vs Red Sentry, vs Reflex Security, vs RegScale, vs RiskRecon, vs Rival Security, vs Safe Security, vs Scrut Automation, vs Scytale, vs Secureframe, vs Secureworks, vs SecurityScorecard, vs SentinelOne, vs ServiceNow, vs SOCRadar, vs SonicWall, vs Sophos, vs SoSafe, vs Sprinto, vs Stellar Cyber, vs Sygnia, vs Tenable, vs Tenfold Security, vs Thoropass, vs Threat Intelligence, vs ThreatDefence, vs ThreatLocker, vs Trustifi, vs Trustwave, vs UltraViolet Cyber, vs UnderDefense, vs UpGuard, vs Vanta, vs Vodafone, vs VulnCheck, vs Whistic, vs White Hat IT Security, vs WithSecure, vs YesWeHack, vs Zafran Security
In the vendor directory (5): MDR and managed SOC vendors · primary category
Security awareness training vendors · category
Vulnerability management vendors · category
Third-party risk and security ratings vendors · category
SOC vendors: who they are and how CISOs compare them, from MDR to SIEM · vendor guide

About Third Wave Innovations

CISO Tribune's Leadership Bench files Third Wave Innovations under Cybersecurity Vendors and North America. The Wire has one security-leadership move at Third Wave Innovations on record, announced on September 7, 2023.

Security leadership timeline

2023-09-07

Mark Abbott named Chief Information Security Officer at Third Wave Innovations

Third Wave Innovations, a cybersecurity and risk assurance solutions provider, appointed Mark Abbott as Chief Information Security Officer.

Security leaders of Third Wave Innovations on our record

Mark Abbott: named Chief Information Security Officer, announced on September 7, 2023 record

Security chiefs at other Cybersecurity Vendors organizations

Other organizations CISO Tribune files under Cybersecurity Vendors with a named security chief on record: those in North America first, in alphabetical order from Third Wave Innovations onward.

Trellix: David Soto, Chief Information Security Officer.
UltraViolet Cyber: Andrew Park, Chief Information Security Officer (CISO).
Upwind: Rinki Sethi, Chief Security Officer (CSO).
Zscaler: Deepen Desai, EVP, Chief Security Officer.
1Kosmos: Roger Hale, Chief Information Security Officer.
1Password: Jacob DePriest, CISO & CIO.
7AI: Israel Barak, Chief Information Security Officer (CISO).
Assail: Ken Pfiel, Chief Information Security Officer.

The full Cybersecurity Vendors bench

What the company sells

Third Wave Innovations helps growing businesses understand cyber risk, reduce exposure, stay insurable, and recover when something goes wrong. Third Wave Innovations was founded in 2017. Third Wave Innovations helps small and midsized organizations build a security capability without having to build an entire security organization themselves. Third Wave Innovations connects cybersecurity, continuous monitoring, risk management, response, and cyber insurance readiness.

Third Wave Innovations says most businesses don’t have a clear picture of their cyber risk. Third Wave Innovations offers protection designed for growing businesses without a full security team.

Third Wave Innovations identifies the gaps attackers could exploit and helps fix them before they become real problems. Third Wave Innovations implemented attack surface monitoring to identify and continuously track external exposures across assets and applications. Third Wave Innovations deployed Cyber Risk Management capabilities to provide continuous visibility into vulnerabilities, threats, and exposures.

Third Wave Innovations offers Automated Detection & Response. Automated Detection & Response works with existing tools for network, identity, cloud, endpoint, and office productivity. Every alert from Automated Detection & Response includes a record of what happened, why, and how it was resolved. Automated Detection & Response includes executive dashboards that summarize key performance and incident trends.

Third Wave Innovations implemented MDR for continuous monitoring, rapid detection, and response. Third Wave Innovations deployed MDR to provide 24/7 monitoring, automated containment, and verified response actions. Third Wave Innovations integrated monitoring across Microsoft 365, identity systems, and endpoint controls without replacing existing tools. Third Wave Innovations conducted a HIPAA-focused compliance readiness review that translated regulatory requirements into operational controls and workflows.

Third Wave Innovations sells Security Awareness Training to build employee cyber knowledge and meet compliance training requirements. Security Awareness Training offers a regularly-refreshed library of over 200 short videos available in multiple languages. Security Awareness Training teaches employees the signs of phishing tactics such as email scams, fraudulent messages, invoice change requests, and gift card requests. Security Awareness Training includes customizable simulations that test employees’ ability to identify and report phishing emails from their inboxes. Security Awareness Training provides pre-designed courses and dashboards and reports for tracking employee progress. Security Awareness Training addresses the cybersecurity training requirements of compliance standards, including SOC2, PCI DSS, and HIPAA. Third Wave Innovations integrates training into its cyber risk program so human security risks and other cyber threats are managed in one unified platform.^[1][3][4][5]

Categories: MDR and managed SOC (primary category)
Security awareness training
Vulnerability management
Third-party risk and security ratings
Compare Third Wave Innovations with companies in the same category
Headquarters: Not established from our sources
Founded: Not established from our sources
Ownership: Not established from our sources
CISO on record: Not yet on our record. Send a verified source
Website: 3rdwave.io

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

Security Awareness Training^[1][5]
Training that builds employee cyber knowledge and meets compliance training requirements.
Security Awareness Training offers a library of over 200 short videos available in multiple languages. It includes customizable phishing simulations and pre-designed courses with dashboards and reports for tracking employee progress. It addresses training requirements of compliance standards including SOC2, PCI DSS, and HIPAA.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Third Wave Innovations's categories, then alphabetical. A list from the record, never a ranking.

On mdr and managed soc, Third Wave Innovations competes with Arctic Wolf, Blackpoint Cyber, CyberProof, Cyrenity, DeepSeas, Proficio, Agile Defense, Binary Defense, Critical Start, Daylight and 54 more.
On security awareness training, Third Wave Innovations competes with NINJIO, Adaptive Security, Frame Security, Google, Immersive, Jericho Security, KnowBe4, SoSafe, Defendify, Arctic Wolf and 14 more.
On vulnerability management, Third Wave Innovations competes with Rapid7, Cognition, ConnectSecure, Dynatrace, Intruder, Nucleus Security, Qualys, Tenable, Defendify, Attaxion and 43 more.
On third-party risk and security ratings, Third Wave Innovations competes with Bitsight, Black Kite, iCOUNTER, Panorays, Prevalent, RiskRecon, SecurityScorecard, UpGuard, Whistic, Attaxion and 28 more.

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

[1]3rdwave.ioThird Wave Innovations · 3rdwave.io · undated page, accessed October 19, 2026 · Tier A: the company, a regulator or a filing
[2]About Us | Third Wave InnovationsThird Wave Innovations · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
[3]Home | Third Wave InnovationsThird Wave Innovations · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
[4]Case Studies | Third Wave InnovationsThird Wave Innovations · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
[5]Security Awareness Training | Third Wave InnovationsThird Wave Innovations · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing

Last verified October 19, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded October 19, 2026, expanded November 10, 2026 from the references above.

Work for Third Wave Innovations? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Questions CISOs ask about Third Wave Innovations

Who are the security chiefs at other Cybersecurity Vendors organizations?: On CISO Tribune's record they include David Soto at Trellix, Andrew Park at UltraViolet Cyber, Rinki Sethi at Upwind and Deepen Desai at Zscaler.
What does Third Wave Innovations sell?: Third Wave Innovations sells Security Awareness Training. Security Awareness Training: Training that builds employee cyber knowledge and meets compliance training requirements.
Who does Third Wave Innovations fit?: From its own pages, Third Wave Innovations sells mainly to growing businesses, including small and midsized organizations without a full security team. The pages describe customers such as a mid-sized technology company operating in the healthcare space, a services-based organization, and a manufacturing company. Third Wave Innovations aligns security controls with what insurers expect, so organizations that want to maintain cyber insurance coverage and pass underwriting are part of its audience. Security Awareness Training addresses the training requirements of compliance standards including SOC2, PCI DSS, and HIPAA. Automated Detection & Response works with existing tools for network, identity, cloud, endpoint, and office productivity.
How does CISO Tribune file Third Wave Innovations?: CISO Tribune files Third Wave Innovations under MDR and managed SOC, with Security awareness training, Vulnerability management and Third-party risk and security ratings as secondary categories.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.