CISO Tribune

Vendor comparison · 2 companies

DeepSeas vs Kroll

DeepSeas sells cybersecurity services that range from strategic guidance to offensive testing and 24/7 defense, aimed at lean teams protecting complex environments. Kroll is a global financial and risk advisory firm. CISO Tribune files both under MDR and managed SOC. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • DeepSeas
  • Kroll
DeepSeas vs Kroll: Products, Customers and Funding Compared
DeepSeasDeepSeas sells cybersecurity services that range from strategic guidance to offensive testing and 24/7 defense, aimed at lean teams protecting complex environments.deepseas.comKrollKroll is a global financial and risk advisory firm.kroll.com
What it sells
  • Threat Intelligence[1][4][9]DeepSeas analysts study how adversaries operate and gather the data on the DeepSeas platform.
  • CyberFusion SOC[1][8]A dedicated SOC where intelligence, detection and response work as one loop.
  • DeepSeas Complete[1][5][6]A cyber defense program that starts with Endpoint MDR and puts 50+ services within reach under one agreement.
  • Enterprise Security Risk Management[7]A Kroll team for proactive threat and risk mitigation and crisis response.
  • Kroll Responder MDR[1][5]Managed detection and response with 24/7 security monitoring.
  • Cyber Risk Retainer[1][5]A retainer with credits usable across Kroll's professional services portfolio.
  • Cybersecurity Risk Assessments[16]Reviews of an information security program using the NIST Cybersecurity framework as guidance.
  • Complex Digital Events[15]Bespoke services for complex incident response, regulatory investigations and litigation support.
  • Enterprise Risk Retainer[14]A retainer for cyber insurance partners and their clients.
  • AI Report Validation[18]Independent verification of AI-generated research by investigators.
Categories
Headquarters
Not stated on its pagesNew York, United States[2][10][12]
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • August 31, 2026Kroll launched APEX, a capability on the CrowdStrike Falcon platform that quantifies effort, cost and value of AI and automation for cyber investment decisions.[11]
  • July 15, 2026Kroll acquired ABC economics, an economics and competition advisory firm headquartered in Berlin, Germany.[12]
  • January 29, 2026Kroll launched two new practices, Kroll Economics and Decision Intelligence.[9]
  • November 17, 2025Kroll completed its acquisition of Madison Pacific, a corporate trust and agency services specialist headquartered in Hong Kong.[10]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, DeepSeas sells mainly to growing organizations with mixed environments that are run by lean security teams. DeepSeas addresses organizations that are not small businesses but do not have enterprise-sized teams and budgets. DeepSeas MDR covers IT, cloud, identity, mobile devices and OT environments, including production floors and medical systems. For buyers who already run an EDR or SIEM, DeepSeas says it operates and tunes that tooling, and it brings its own where none exists. DeepSeas offers audit readiness and compliance support to regulated industries.Kroll supports thousands of law firms and corporate cyber clients. Kroll's Cyber Insurance Services Team serves carriers, brokers, breach counsel and policyholders. Kroll offers a baseline review aimed at small and medium businesses. Kroll performs security assessments for global clients from nearly every industry and government agency. Kroll's M&A advisory team works with public corporations, private equity investors, financial sponsors, family-owned businesses and other private companies in middle-market transactions.
Last verified
November 11, 2026September 27, 2026

Where they overlap

  • DeepSeas and Kroll are both filed under MDR and managed SOC.

Where they differ, field by field

  • DeepSeas's primary category is MDR and managed SOC; Kroll's is Incident response and forensics.
  • DeepSeas is also filed under Penetration testing and red team services, Threat intelligence and Vulnerability management.
  • DeepSeas lists Threat Intelligence, CyberFusion SOC and DeepSeas Complete. Kroll lists Enterprise Security Risk Management, Kroll Responder MDR, Cyber Risk Retainer, Cybersecurity Risk Assessments, Complex Digital Events and 2 more.
  • Kroll is headquartered in New York, United States.

What it sells: DeepSeas

What Threat Intelligence does[1][4][9]
DeepSeas has a team of reverse engineers, threat analysts and forensics experts that continuously strengthens its threat intelligence base. Analysts write a new detection rule when a hypothesis is confirmed. Validated findings become detection rules that deploy automatically across every monitored environment.
What CyberFusion SOC does[1][8]
The CyberFusion SOC emphasizes proactive threat hunting, engaging across different teams to stay ahead of potential threats. The CyberFusion SOC provides solutions based on client-specific needs, industry verticals and risk appetites. The CyberFusion SOC uses an integrated, cyclical model with interconnected components like threat intelligence, detection engineering and incident response.
What DeepSeas Complete does[1][5][6]
Endpoint MDR is the only service a buyer has to buy, and everything else is optional. Every service in DeepSeas Complete runs on credits, which buyers purchase in blocks sized to their program. Elective Credits can be applied across 50+ services, including security testing, assessments and advisory engagements.

What it sells: Kroll

What Enterprise Security Risk Management does[7]
Kroll's global Enterprise Security Risk Management team works on proactive threat and risk mitigation and reacts to crises, offering personnel, expertise, advisory and bandwidth. Kroll's Threat Life Cycle Management uses end-to-end cyber and physical risk solutions to uncover exposures, validate defenses, implement new or updated controls and fine-tune detections. Kroll describes itself as senior advisers to clients on all security and threat-related issues.
What Kroll Responder MDR does[1][5]
Kroll Responder MDR delivers 24/7 security monitoring and response that includes understanding the root cause, hunting for further evidence of compromise and eradication. Kroll Responder MDR for Microsoft provides enriched MDR for Microsoft Security. Kroll offers a complimentary $1 million incident protection service warranty with no vendor-specific hardware requirement.
What Cyber Risk Retainer does[1][5]
Kroll offers a Cyber Risk Retainer with credits that can be used across its professional services portfolio. Kroll states that up to 20% of unused services credit may be applied to the following year upon renewal. Kroll's retainer includes access to a global team of 700+ incident response, litigation and breach notification experts.
What Cybersecurity Risk Assessments does[16]
Kroll's Cybersecurity Risk Assessments include a detailed review of the information security program, from policies and procedures to technical controls, including people, processes and technologies. At the conclusion of an assessment, clients receive a summary report designed to communicate security posture to senior management. Kroll offers a baseline review aimed at small and medium businesses.
What Complex Digital Events does[15]
Kroll provides bespoke services for complex incident response, regulatory investigations, litigation support, board-level engagements and national security matters. Kroll's Complex Digital Events services use a combination of non-practising attorneys and technical experts to guide and deliver complex investigations. Kroll provides forensic investigations and expert testimony supporting data breach litigation, trade secret/intellectual property theft and employment disputes.
What Enterprise Risk Retainer does[14]
Kroll offers an Enterprise Risk Retainer to cyber insurance partners and their clients. The retainer includes a pre-negotiated agreement for instant access to risk expertise. The retainer includes service credits to proactively strengthen risk posture before an incident occurs.
What AI Report Validation does[18]
Kroll's AI Report Validation practice centers investigators who deconstruct AI-generated narratives, test their claims against professional-grade sources and determine what was fabricated, distorted or omitted. Kroll conducts original research to fill gaps.

Questions about DeepSeas and Kroll

What do DeepSeas and Kroll sell?
DeepSeas sells Threat Intelligence, CyberFusion SOC and DeepSeas Complete. Kroll sells Enterprise Security Risk Management, Kroll Responder MDR, Cyber Risk Retainer, Cybersecurity Risk Assessments, Complex Digital Events and 2 more.
Are DeepSeas and Kroll in the same category?
They share MDR and managed SOC. DeepSeas's primary category is MDR and managed SOC and Kroll's is Incident response and forensics.
Where are DeepSeas and Kroll headquartered?
Kroll is headquartered in New York, United States.
Who are DeepSeas and Kroll sold to?
From its own pages, DeepSeas sells mainly to growing organizations with mixed environments that are run by lean security teams. Kroll supports thousands of law firms and corporate cyber clients.
What have DeepSeas and Kroll announced recently?
August 31, 2026: Kroll launched APEX, a capability on the CrowdStrike Falcon platform that quantifies effort, cost and value of AI and automation for cyber investment decisions.

About DeepSeas

DeepSeas sells cybersecurity services that range from strategic guidance to offensive testing and 24/7 defense, aimed at lean teams protecting complex environments. DeepSeas Complete is a cyber defense program built on Endpoint MDR. DeepSeas Complete combines Vulnerability Management, Penetration Testing, Managed SIEM, Endpoint MDR, Threat Intelligence and a dedicated Strategic Advisor into one security program.[1][3][5][6][8][10]

DeepSeas offers 24/7 MDR for growing organizations with mixed environments, operated by lean security teams on the stack they already own. DeepSeas MDR is one service across IT, cloud, identity, mobile devices and OT environments, including production floors and medical systems. DeepSeas states that it is vendor agnostic: when a customer already runs an EDR or SIEM, DeepSeas operates and tunes it, and when a customer does not, DeepSeas brings its own. DeepSeas MDR begins monitoring in about two weeks, depending on environment complexity. DeepSeas contains threats on the customer's behalf, or gives the customer's team clear steps to handle them. DeepSeas MDR can optionally isolate a host or lock an account, on pre-approved playbooks. DeepSeas continuously tunes detection rules, uses AI to refine alerts, and has analysts validate what matters before it reaches the customer. Detections and alerts come together in the DeepSeas platform, a single place to view security operations.[1][7][12]

The CyberFusion SOC emphasizes proactive threat hunting, engaging across different teams to stay ahead of potential threats. The CyberFusion SOC provides solutions based on client-specific needs, industry verticals and risk appetites. The CyberFusion SOC uses an integrated, cyclical model with interconnected components like threat intelligence, detection engineering and incident response. DeepSeas threat intelligence analysts study how adversaries operate and gather the data on the DeepSeas platform. DeepSeas has a team of reverse engineers, threat analysts and forensics experts that continuously strengthens its threat intelligence base. DeepSeas analysts write a new detection rule when a hypothesis is confirmed. DeepSeas validated findings become detection rules that deploy automatically across every monitored environment. DeepSeas describes threat hunting as active and human-led, with analysts searching for adversaries that never triggered an alert. DeepSeas turns proprietary and public sources of threat intelligence into tuned detection rules. DeepSeas sources threat intelligence from government, commercial and dark-web channels.[6][8][9]

DeepSeas combines real attacker tradecraft with manual validation to uncover the hidden attack paths automated testing often misses. DeepSeas offensive testers work across networks, apps, APIs, wireless, cloud, people and physical access. DeepSeas states that its testers are continuously certified, with certifications such as OSCP, OSCE and OSWP. DeepSeas tests by hand to cut false positives and catch what automation misses.[10]

DeepSeas offers audit readiness and compliance support for SOC 2, ISO 27001, HIPAA, NIS2 and regulated industries. DeepSeas automated control mapping links controls to each standard, and continuous monitoring flags gaps as they surface. DeepSeas experts guide the fixes, get evidence in order, and stay through the external audit with advisory support. DeepSeas packages automated control mapping and evidence into auditor-ready reports. DeepSeas provides board-level guidance, security architecture and program design aligned with business risk.[11][12]

DeepSeas Complete starts with Endpoint MDR and puts 50+ services within reach, all under one agreement and one pool of credits. In DeepSeas Complete, Endpoint MDR is the only service a buyer has to buy, and everything else is optional. Every service in DeepSeas Complete runs on credits, which buyers purchase in blocks sized to their program. DeepSeas Complete managed services add SIEM, network, cloud and identity coverage as needed. Elective Credits can be applied across 50+ services, including security testing, assessments and advisory engagements. Elective Credits remain available throughout the contract term and carry between contract years on multi-year agreements. DeepSeas needs a user count to size the baseline for DeepSeas Complete, and deployment begins on signature.[1][2][5][7][9][10][12][13]

DeepSeas on the record

Sources

DeepSeas full record

  1. [1]deepseas.comDeepSeas · deepseas.com · undated page, accessed November 11, 2026 · Tier A
  2. [2]New cyber defense brand deepseas to unite newly acquired commercial managed threat services business from booz allen hamilton with security on demandDeepSeas · deepseas.com · published December 8, 2022 · Tier A
  3. [3]Multinational pharma company chooses deepseas for vulnerability management attack surface reductionDeepSeas · deepseas.com · undated page, accessed November 11, 2026 · Tier A
  4. [4]Why Choose Our MDR Platform | DeepSeasDeepSeas · undated page, accessed November 11, 2026 · Tier A
  5. [5]DeepSeas Complete: Security That Keeps Pace | DeepSeasDeepSeas · undated page, accessed November 11, 2026 · Tier A
  6. [6]All-in-One Cyber Defense Platform | DeepSeasDeepSeas · undated page, accessed November 11, 2026 · Tier A
  7. [7]MDR Solution for Enterprise Teams | DeepSeasDeepSeas · undated page, accessed November 11, 2026 · Tier A
  8. [8]Cyber Fusion SOC Platform | DeepSeasDeepSeas · undated page, accessed November 11, 2026 · Tier A
  9. [9]Threat Intelligence & Threat Hunting Solution | DeepSeasDeepSeas · undated page, accessed November 11, 2026 · Tier A
  10. [10]Offensive Security & Pen Testing | DeepSeasDeepSeas · undated page, accessed November 11, 2026 · Tier A
  11. [11]Top MDR & Cyber Defense Solutions | DeepSeasDeepSeas · undated page, accessed November 11, 2026 · Tier A
  12. [12]GRC & Cyber Defense Integration | DeepSeasDeepSeas · undated page, accessed November 11, 2026 · Tier A
  13. [13]Strategic Security Advisory & Cyber Leadership | DeepSeasDeepSeas · undated page, accessed November 11, 2026 · Tier A

Kroll full record

  1. [1]Cyber riskKroll · kroll.com · published October 16, 2025 · Tier A
  2. [2]Kroll Announces Formation of Kroll Business ServicesKroll via Business Wire · businesswire.com · published April 20, 2021 · Tier A
  3. [3]Kroll | Financial and Risk Advisory SolutionsKroll · undated page, accessed October 26, 2026 · Tier A
  4. [4]Risk AdvisoryKroll · undated page, accessed October 26, 2026 · Tier A
  5. [5]Cyber Security Services | Cyber & Data Resilience | KrollKroll · undated page, accessed October 26, 2026 · Tier A
  6. [6]Application Security Services (AppSec) | Cyber and Data ResilienceKroll · undated page, accessed October 26, 2026 · Tier A
  7. [7]Enterprise Security Risk Management (ESRM) | KrollKroll · undated page, accessed October 26, 2026 · Tier A
  8. [8]Investigations, Diligence and Compliance | KrollKroll · undated page, accessed October 26, 2026 · Tier A
  9. [9]Kroll Launches New Practices Leveraging Technology and AI to Accelerate Decision-Making and Achieve Competitive AdvantageKroll · published January 29, 2026 · Tier A
  10. [10]Kroll Completes Acquisition of Madison Pacific GroupKroll · published November 17, 2025 · Tier A
  11. [11]Kroll Introduces APEX to Drive Measurable Business Outcomes from AI InvestmentKroll · published August 31, 2026 · Tier A
  12. [12]Kroll Bolsters Global Economics Capabilities with Acquisition of ABC economicsKroll · published July 15, 2026 · Tier A
  13. [13]Kroll Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 26, 2026 · Tier C
  14. [14]Cyber Insurance Services | Incident Response Partner | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  15. [15]Complex Digital Events | Cyber and Data Resilience | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  16. [16]Cyber Risk Assessments | Cyber Risk | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  17. [17]Data Risk, Discovery & Litigation Support | Cyber & Data Resilience | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  18. [18]AI Report Validation | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  19. [19]M&A Advisory Services | Corporate Finance | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  20. [20]Valuation Services | Valuation AdvisoryKroll · undated page, accessed November 10, 2026 · Tier A
  21. [21]Business Valuation Services | KrollKroll · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.