CISO Tribune

Vendor comparison · 2 companies

FRSecure vs Kroll

FRSecure is an information security services company that helps organizations build security programs. Kroll is a global financial and risk advisory firm. CISO Tribune files both under Incident response and forensics and MDR and managed SOC. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • FRSecure
  • Kroll
FRSecure vs Kroll: Products, Customers and Funding Compared
FRSecureFRSecure is an information security services company that helps organizations build security programs.frsecure.comKrollKroll is a global financial and risk advisory firm.kroll.com
What it sells
  • Incident Response[1][6][11]An organized approach to responding to a cybersecurity breach, incident, or attack.
  • Risk Assessment[1][2][4][6]An assessment designed to discover and quantify information security risk.
  • Penetration Testing[1][8]Emulated real-world attacks used to discover and exploit weaknesses.
  • PCI DSS[12]Review and advice on PCI DSS compliance from a Qualified Security Assessor Company.
  • Vendor Risk Management[7]Services that evaluate the risk that vendors present to an organization.
  • Enterprise Security Risk Management[7]A Kroll team for proactive threat and risk mitigation and crisis response.
  • Kroll Responder MDR[1][5]Managed detection and response with 24/7 security monitoring.
  • Cyber Risk Retainer[1][5]A retainer with credits usable across Kroll's professional services portfolio.
  • Cybersecurity Risk Assessments[16]Reviews of an information security program using the NIST Cybersecurity framework as guidance.
  • Complex Digital Events[15]Bespoke services for complex incident response, regulatory investigations and litigation support.
  • Enterprise Risk Retainer[14]A retainer for cyber insurance partners and their clients.
  • AI Report Validation[18]Independent verification of AI-generated research by investigators.
Categories
Headquarters
Not stated on its pagesNew York, United States[2][10][12]
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • August 31, 2026Kroll launched APEX, a capability on the CrowdStrike Falcon platform that quantifies effort, cost and value of AI and automation for cyber investment decisions.[11]
  • July 15, 2026Kroll acquired ABC economics, an economics and competition advisory firm headquartered in Berlin, Germany.[12]
  • January 29, 2026Kroll launched two new practices, Kroll Economics and Decision Intelligence.[9]
  • November 17, 2025Kroll completed its acquisition of Madison Pacific, a corporate trust and agency services specialist headquartered in Hong Kong.[10]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
FRSecure points to heavily regulated industries such as healthcare and financial as ones that often require providers to meet the more thorough audit standards. FRSecure states that organizations processing cardholder data involving any of the major card brands have PCI DSS requirements to meet. FRSecure describes its RPM program as intended for new or growing IR programs.Kroll supports thousands of law firms and corporate cyber clients. Kroll's Cyber Insurance Services Team serves carriers, brokers, breach counsel and policyholders. Kroll offers a baseline review aimed at small and medium businesses. Kroll performs security assessments for global clients from nearly every industry and government agency. Kroll's M&A advisory team works with public corporations, private equity investors, financial sponsors, family-owned businesses and other private companies in middle-market transactions.
Last verified
November 6, 2026September 27, 2026

Where they overlap

  • FRSecure and Kroll are both filed under Incident response and forensics and MDR and managed SOC.

Where they differ, field by field

  • FRSecure's primary category is Security consulting and advisory; Kroll's is Incident response and forensics.
  • FRSecure is also filed under Penetration testing and red team services.
  • FRSecure lists Incident Response, Risk Assessment, Penetration Testing, PCI DSS and Vendor Risk Management. Kroll lists Enterprise Security Risk Management, Kroll Responder MDR, Cyber Risk Retainer, Cybersecurity Risk Assessments, Complex Digital Events and 2 more.
  • Kroll is headquartered in New York, United States.

What it sells: FRSecure

What Incident Response does[1][6][11]
FRSecure describes incident response as an organized approach to rapidly responding to the aftermath of a cybersecurity breach, incident, or attack. FRSecure assists in the identification, containment, and recovery of ransomware. FRSecure incident response team assists with forensics when a compromise is suspected.
What Risk Assessment does[1][2][4][6]
FRSecure offers a risk assessment designed to discover and quantify information security risk. FRSecure uses a risk assessment methodology and platform called S2.
What Penetration Testing does[1][8]
Penetration testing from FRSecure uses emulated real-world attacks to discover and exploit weaknesses in systems, configurations, and processes. FRSecure experts follow Penetration Testing Execution Standard (PTES) methodology during penetration testing. FRSecure offers pen tests that expose vulnerabilities in internet-facing systems, networks, firewalls, devices, and web applications.
What PCI DSS does[12]
As a PCI DSS Qualified Security Assessor Company, FRSecure provides the expertise necessary to review and advise organizations on PCI DSS compliance. FRSecure certified professionals can help an organization define its PCI DSS environment, determine compliance gaps, and provide necessary attestations of compliance. FRSecure gap analysis identifies gaps in credit card processing and customer data storage methods that need to be addressed.
What Vendor Risk Management does[7]
FRSecure uses SecurityStudio for vendor risk management. FRSecure offers three different levels of vendor risk management services depending on needs and the number of vendors.

What it sells: Kroll

What Enterprise Security Risk Management does[7]
Kroll's global Enterprise Security Risk Management team works on proactive threat and risk mitigation and reacts to crises, offering personnel, expertise, advisory and bandwidth. Kroll's Threat Life Cycle Management uses end-to-end cyber and physical risk solutions to uncover exposures, validate defenses, implement new or updated controls and fine-tune detections. Kroll describes itself as senior advisers to clients on all security and threat-related issues.
What Kroll Responder MDR does[1][5]
Kroll Responder MDR delivers 24/7 security monitoring and response that includes understanding the root cause, hunting for further evidence of compromise and eradication. Kroll Responder MDR for Microsoft provides enriched MDR for Microsoft Security. Kroll offers a complimentary $1 million incident protection service warranty with no vendor-specific hardware requirement.
What Cyber Risk Retainer does[1][5]
Kroll offers a Cyber Risk Retainer with credits that can be used across its professional services portfolio. Kroll states that up to 20% of unused services credit may be applied to the following year upon renewal. Kroll's retainer includes access to a global team of 700+ incident response, litigation and breach notification experts.
What Cybersecurity Risk Assessments does[16]
Kroll's Cybersecurity Risk Assessments include a detailed review of the information security program, from policies and procedures to technical controls, including people, processes and technologies. At the conclusion of an assessment, clients receive a summary report designed to communicate security posture to senior management. Kroll offers a baseline review aimed at small and medium businesses.
What Complex Digital Events does[15]
Kroll provides bespoke services for complex incident response, regulatory investigations, litigation support, board-level engagements and national security matters. Kroll's Complex Digital Events services use a combination of non-practising attorneys and technical experts to guide and deliver complex investigations. Kroll provides forensic investigations and expert testimony supporting data breach litigation, trade secret/intellectual property theft and employment disputes.
What Enterprise Risk Retainer does[14]
Kroll offers an Enterprise Risk Retainer to cyber insurance partners and their clients. The retainer includes a pre-negotiated agreement for instant access to risk expertise. The retainer includes service credits to proactively strengthen risk posture before an incident occurs.
What AI Report Validation does[18]
Kroll's AI Report Validation practice centers investigators who deconstruct AI-generated narratives, test their claims against professional-grade sources and determine what was fabricated, distorted or omitted. Kroll conducts original research to fill gaps.

Questions about FRSecure and Kroll

What do FRSecure and Kroll sell?
FRSecure sells Incident Response, Risk Assessment, Penetration Testing, PCI DSS and Vendor Risk Management. Kroll sells Enterprise Security Risk Management, Kroll Responder MDR, Cyber Risk Retainer, Cybersecurity Risk Assessments, Complex Digital Events and 2 more.
Are FRSecure and Kroll in the same category?
They share Incident response and forensics and MDR and managed SOC. FRSecure's primary category is Security consulting and advisory and Kroll's is Incident response and forensics.
Where are FRSecure and Kroll headquartered?
Kroll is headquartered in New York, United States.
Who are FRSecure and Kroll sold to?
FRSecure points to heavily regulated industries such as healthcare and financial as ones that often require providers to meet the more thorough audit standards. Kroll supports thousands of law firms and corporate cyber clients.
What have FRSecure and Kroll announced recently?
August 31, 2026: Kroll launched APEX, a capability on the CrowdStrike Falcon platform that quantifies effort, cost and value of AI and automation for cyber investment decisions.

About FRSecure

FRSecure is an information security services company that helps organizations build security programs. FRSecure states that its mission is to fix the broken information security industry. FRSecure states that information security is all it does and that it does not do IT, sell hardware, or provide telco services. FRSecure has been in business for over 10 years, and its team has more than 300 years of combined experience working in information security and 30 different kinds of certifications. FRSecure describes many organizations as understanding that they need to do something around information security and data protection without knowing which risks pose the biggest threat or where to begin combatting them.[1][2][3][6]

FRSecure offers a risk assessment designed to discover and quantify information security risk. FRSecure uses a risk assessment methodology and platform called S2, and the final report of a gap assessment maps the specific controls to the corresponding controls in S2. Gap assessments from FRSecure are conducted with regulatory requirements in mind. FRSecure analysts work with the client team to understand which capabilities and controls are in place.[2][4][5][6]

FRSecure uses SecurityStudio for vendor risk management, and that software platform employs S2Vendor to measure and manage the security risk of an organization's vendors. FRSecure offers three different levels of vendor risk management services depending on needs and the number of vendors.[7]

Penetration testing from FRSecure uses emulated real-world attacks to discover and exploit weaknesses in systems, configurations, and processes. FRSecure experts follow Penetration Testing Execution Standard (PTES) methodology during penetration testing. FRSecure offers pen tests that expose vulnerabilities in internet-facing systems, networks, firewalls, devices, and web applications that could lead to unauthorized access. Red teaming from FRSecure is a real-world attack simulation focusing on defense evasion with a mix of social engineering and external and internal network-level testing. FRSecure social engineering exercises use techniques that include email, phone, and physical methods.[8][9]

FRSecure technical services team helps identify vulnerabilities through regular scanning. FRSecure describes vulnerability assessments as identifying technical vulnerabilities through a combination of automated tools, expert interpretation of the findings, and remediation recommendations. FRSecure web application scanning uses automated tools to evaluate web applications for vulnerabilities such as Cross-site scripting, SQL Injection, Command Injection, Path Traversal and insecure server configurations.[10]

FRSecure describes incident response as an organized approach to rapidly responding to the aftermath of a cybersecurity breach, incident, or attack. FRSecure assists in the identification, containment, and recovery of ransomware and helps organizations prevent and prepare for future incidents. FRSecure tabletop exercises are designed to practice and find weaknesses in plans such as disaster recovery, incident response, and more.[6][11]

As a PCI DSS Qualified Security Assessor Company, FRSecure provides the expertise necessary to review and advise organizations on PCI DSS compliance. FRSecure certified professionals can help an organization define its PCI DSS environment, determine compliance gaps, and provide necessary attestations of compliance. FRSecure helps prepare organizations for the SOC 2 audit and does not perform the actual audit itself. FRSecure overlays risk assessment results onto the five Cybersecurity Maturity Model Certification (CMMC) levels so an organization can see where it stands in each level. For organizations using Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP), or Microsoft 365 (M365), FRSecure provides configuration and security health checks based on CIS benchmarks.[3][6][12]

FRSecure notes that heavily regulated industries such as healthcare and financial often require their providers to comply with Type 2 standards. FRSecure states that organizations that process cardholder data involving any of the major card brands have PCI DSS requirements to meet. FRSecure states that it can support a wide range of requirements across almost any industry.[1][3][5][6][7][10][11][12]

FRSecure on the record

Sources

FRSecure full record

  1. [1]frsecure.comFRSecure · frsecure.com · undated page, accessed November 6, 2026 · Tier A
  2. [2]Information Security and Compliance Experts | FRSecureFRSecure · undated page, accessed November 10, 2026 · Tier A
  3. [3]SOC 2 Compliance Support Services | FRSecureFRSecure · undated page, accessed November 10, 2026 · Tier A
  4. [4]Cybersecurity Risk Assessment Services | FRSecureFRSecure · undated page, accessed November 10, 2026 · Tier A
  5. [5]Cybersecurity Gap Assessment Services | FRSecureFRSecure · undated page, accessed November 10, 2026 · Tier A
  6. [6]Information Security Consulting & Management Services | FRSecureFRSecure · undated page, accessed November 10, 2026 · Tier A
  7. [7]Cyber Vendor Risk Management (VRM) Services | FRSecureFRSecure · undated page, accessed November 10, 2026 · Tier A
  8. [8]Penetration Testing Services: External, Internal, Web App, & MoreFRSecure · undated page, accessed November 10, 2026 · Tier A
  9. [9]Social Engineering Attack Prevention | FRSecureFRSecure · undated page, accessed November 10, 2026 · Tier A
  10. [10]Cybersecurity Vulnerability Assessment Services | FRSecureFRSecure · undated page, accessed November 10, 2026 · Tier A
  11. [11]Cyber Incident Response Services | FRSecureFRSecure · undated page, accessed November 10, 2026 · Tier A
  12. [12]PCI DSS Compliance Consulting Services | FRSecureFRSecure · undated page, accessed November 10, 2026 · Tier A

Kroll full record

  1. [1]Cyber riskKroll · kroll.com · published October 16, 2025 · Tier A
  2. [2]Kroll Announces Formation of Kroll Business ServicesKroll via Business Wire · businesswire.com · published April 20, 2021 · Tier A
  3. [3]Kroll | Financial and Risk Advisory SolutionsKroll · undated page, accessed October 26, 2026 · Tier A
  4. [4]Risk AdvisoryKroll · undated page, accessed October 26, 2026 · Tier A
  5. [5]Cyber Security Services | Cyber & Data Resilience | KrollKroll · undated page, accessed October 26, 2026 · Tier A
  6. [6]Application Security Services (AppSec) | Cyber and Data ResilienceKroll · undated page, accessed October 26, 2026 · Tier A
  7. [7]Enterprise Security Risk Management (ESRM) | KrollKroll · undated page, accessed October 26, 2026 · Tier A
  8. [8]Investigations, Diligence and Compliance | KrollKroll · undated page, accessed October 26, 2026 · Tier A
  9. [9]Kroll Launches New Practices Leveraging Technology and AI to Accelerate Decision-Making and Achieve Competitive AdvantageKroll · published January 29, 2026 · Tier A
  10. [10]Kroll Completes Acquisition of Madison Pacific GroupKroll · published November 17, 2025 · Tier A
  11. [11]Kroll Introduces APEX to Drive Measurable Business Outcomes from AI InvestmentKroll · published August 31, 2026 · Tier A
  12. [12]Kroll Bolsters Global Economics Capabilities with Acquisition of ABC economicsKroll · published July 15, 2026 · Tier A
  13. [13]Kroll Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 26, 2026 · Tier C
  14. [14]Cyber Insurance Services | Incident Response Partner | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  15. [15]Complex Digital Events | Cyber and Data Resilience | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  16. [16]Cyber Risk Assessments | Cyber Risk | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  17. [17]Data Risk, Discovery & Litigation Support | Cyber & Data Resilience | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  18. [18]AI Report Validation | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  19. [19]M&A Advisory Services | Corporate Finance | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  20. [20]Valuation Services | Valuation AdvisoryKroll · undated page, accessed November 10, 2026 · Tier A
  21. [21]Business Valuation Services | KrollKroll · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.