CISO Tribune

Vendor comparison · 2 companies

Hold Security, LLC vs Kroll

Hold Security, LLC is an Information Security, Threat Intelligence, Penetration Testing, Risk Management and Incident Response company, helping businesses of all sizes stay secure. Kroll is a global financial and risk advisory firm. CISO Tribune files both under Incident response and forensics. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Hold Security, LLC
  • Kroll
Hold Security, LLC vs Kroll: Products, Customers and Funding Compared
Hold Security, LLCHold Security, LLC is an Information Security, Threat Intelligence, Penetration Testing, Risk Management and Incident Response company, helping businesses of all sizes stay secure.holdsecurity.comKrollKroll is a global financial and risk advisory firm.kroll.com
What it sells
  • Threat Intelligence Services[1][4][6]Indexes and correlates public and private resources on the Dark Web and Internet to identify malicious and threatening events.
  • Domain Integrity Service[2][4]Provides monitoring and alerting of domain names.
  • Enterprise Security Risk Management[7]A Kroll team for proactive threat and risk mitigation and crisis response.
  • Kroll Responder MDR[1][5]Managed detection and response with 24/7 security monitoring.
  • Cyber Risk Retainer[1][5]A retainer with credits usable across Kroll's professional services portfolio.
  • Cybersecurity Risk Assessments[16]Reviews of an information security program using the NIST Cybersecurity framework as guidance.
  • Complex Digital Events[15]Bespoke services for complex incident response, regulatory investigations and litigation support.
  • Enterprise Risk Retainer[14]A retainer for cyber insurance partners and their clients.
  • AI Report Validation[18]Independent verification of AI-generated research by investigators.
Categories
Headquarters
Not stated on its pagesNew York, United States[2][10][12]
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • August 31, 2026Kroll launched APEX, a capability on the CrowdStrike Falcon platform that quantifies effort, cost and value of AI and automation for cyber investment decisions.[11]
  • July 15, 2026Kroll acquired ABC economics, an economics and competition advisory firm headquartered in Berlin, Germany.[12]
  • January 29, 2026Kroll launched two new practices, Kroll Economics and Decision Intelligence.[9]
  • November 17, 2025Kroll completed its acquisition of Madison Pacific, a corporate trust and agency services specialist headquartered in Hong Kong.[10]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Hold Security sells mainly to companies of all sizes. Hold Security designs its Threat Intelligence Services to assist organizations in monitoring the Dark Web. Companies that develop their own software, or want to verify that vendor software contains no undiscovered vulnerabilities, are among those Hold Security says it can help. Hold Security also directs its incident response work at companies that encounter ransomware, APTs, Nation State targeting or suspected cyber fraud or theft. Organizations that want to verify organizational controls around regulatory levels, human resources and data classification are another group Hold Security addresses.Kroll supports thousands of law firms and corporate cyber clients. Kroll's Cyber Insurance Services Team serves carriers, brokers, breach counsel and policyholders. Kroll offers a baseline review aimed at small and medium businesses. Kroll performs security assessments for global clients from nearly every industry and government agency. Kroll's M&A advisory team works with public corporations, private equity investors, financial sponsors, family-owned businesses and other private companies in middle-market transactions.
Last verified
October 30, 2026September 27, 2026

Where they overlap

  • Hold Security, LLC and Kroll are both filed under Incident response and forensics.

Where they differ, field by field

  • Hold Security, LLC's primary category is Threat intelligence; Kroll's is Incident response and forensics.
  • Hold Security, LLC is also filed under Digital risk protection and Penetration testing and red team services. Kroll is also filed under MDR and managed SOC.
  • Hold Security, LLC lists Threat Intelligence Services and Domain Integrity Service. Kroll lists Enterprise Security Risk Management, Kroll Responder MDR, Cyber Risk Retainer, Cybersecurity Risk Assessments, Complex Digital Events and 2 more.
  • Kroll is headquartered in New York, United States.

What it sells: Hold Security, LLC

What Domain Integrity Service does[2][4]
Hold Security's Domain Integrity Service provides monitoring and alerting of domain names. Domain Integrity Service offers portal access or customized reports created by Hold Security analysts.

What it sells: Kroll

What Enterprise Security Risk Management does[7]
Kroll's global Enterprise Security Risk Management team works on proactive threat and risk mitigation and reacts to crises, offering personnel, expertise, advisory and bandwidth. Kroll's Threat Life Cycle Management uses end-to-end cyber and physical risk solutions to uncover exposures, validate defenses, implement new or updated controls and fine-tune detections. Kroll describes itself as senior advisers to clients on all security and threat-related issues.
What Kroll Responder MDR does[1][5]
Kroll Responder MDR delivers 24/7 security monitoring and response that includes understanding the root cause, hunting for further evidence of compromise and eradication. Kroll Responder MDR for Microsoft provides enriched MDR for Microsoft Security. Kroll offers a complimentary $1 million incident protection service warranty with no vendor-specific hardware requirement.
What Cyber Risk Retainer does[1][5]
Kroll offers a Cyber Risk Retainer with credits that can be used across its professional services portfolio. Kroll states that up to 20% of unused services credit may be applied to the following year upon renewal. Kroll's retainer includes access to a global team of 700+ incident response, litigation and breach notification experts.
What Cybersecurity Risk Assessments does[16]
Kroll's Cybersecurity Risk Assessments include a detailed review of the information security program, from policies and procedures to technical controls, including people, processes and technologies. At the conclusion of an assessment, clients receive a summary report designed to communicate security posture to senior management. Kroll offers a baseline review aimed at small and medium businesses.
What Complex Digital Events does[15]
Kroll provides bespoke services for complex incident response, regulatory investigations, litigation support, board-level engagements and national security matters. Kroll's Complex Digital Events services use a combination of non-practising attorneys and technical experts to guide and deliver complex investigations. Kroll provides forensic investigations and expert testimony supporting data breach litigation, trade secret/intellectual property theft and employment disputes.
What Enterprise Risk Retainer does[14]
Kroll offers an Enterprise Risk Retainer to cyber insurance partners and their clients. The retainer includes a pre-negotiated agreement for instant access to risk expertise. The retainer includes service credits to proactively strengthen risk posture before an incident occurs.
What AI Report Validation does[18]
Kroll's AI Report Validation practice centers investigators who deconstruct AI-generated narratives, test their claims against professional-grade sources and determine what was fabricated, distorted or omitted. Kroll conducts original research to fill gaps.

Questions about Hold Security, LLC and Kroll

What do Hold Security, LLC and Kroll sell?
Hold Security, LLC sells Threat Intelligence Services and Domain Integrity Service. Kroll sells Enterprise Security Risk Management, Kroll Responder MDR, Cyber Risk Retainer, Cybersecurity Risk Assessments, Complex Digital Events and 2 more.
Are Hold Security, LLC and Kroll in the same category?
They share Incident response and forensics. Hold Security, LLC's primary category is Threat intelligence and Kroll's is Incident response and forensics.
Where are Hold Security, LLC and Kroll headquartered?
Kroll is headquartered in New York, United States.
Who are Hold Security, LLC and Kroll sold to?
From its own pages, Hold Security sells mainly to companies of all sizes. Kroll supports thousands of law firms and corporate cyber clients.
What have Hold Security, LLC and Kroll announced recently?
August 31, 2026: Kroll launched APEX, a capability on the CrowdStrike Falcon platform that quantifies effort, cost and value of AI and automation for cyber investment decisions.

About Hold Security, LLC

Hold Security, LLC is an Information Security, Threat Intelligence, Penetration Testing, Risk Management and Incident Response company, helping businesses of all sizes stay secure. Hold Security works with companies around the world to enhance their security posture. Alex Holden worked for over 10 years as the Chief Information Security Officer for a large brokerage firm in the United States before joining the consulting world. Hold Security engineers play lead roles in investigations of major security breaches.[3]

Hold Security indexes and correlates public and private/confidential resources on the Dark Web and Internet to identify malicious and threatening events. Hold Security Threat Intelligence Analysts examine threat data and interpret it to eliminate false positives. Hold Security designs its Threat Intelligence Services to assist organizations in monitoring the Dark Web. Hold Security has profiled thousands of actors. Most data gathering and processing at Hold Security is conducted by native speakers of English, Russian, Ukrainian, Spanish, Portuguese, and Mandarin.[1][3]

Hold Security's Domain Integrity Service provides monitoring and alerting of domain names. Domain Integrity Service offers portal access or customized reports created by Hold Security analysts.[2]

Hold Security conducts assessments of infrastructure and software through its Information Security Assessment Services to identify critical vulnerabilities. Hold Security offers services that include Penetration Testing, Red Team, and Vulnerability Assessment. Hold Security conducts all of its assessments in accordance with industry regulations and customer requirements. Hold Security compares test results to industry security standards and continuously measures improvements over time.[2][5][6]

Hold Security testing methodologies require engineers to conduct in-depth manual reviews of test results and their own battery of tests. Hold Security never relies on automated scanning tools as a sole way for assessments. Hold Security uses its Threat Intelligence Services to obtain the latest tools and techniques employed by cyber criminals. Hold Security's Black Box assessment technique simulates real-life situations where electronic assets are tested for vulnerabilities and subversions using the most basic sets of information available. Hold Security's Grey Box assessment technique scans with as much knowledge about the systems as the customer is willing to share. Hold Security offers a White Box assessment to audit or test systems, performed from the system administrator level with access to all necessary resources.[6]

Hold Security conducts tests including regression testing, debug analysis and code review to test all inputs and outputs of software for vulnerabilities. Hold Security's services include examinations of patch levels across customer software and libraries. Hold Security provides specialized Red Teams focused on offense and Purple Teams that unite offense and defense. Hold Security can help customers verify that organizational controls around security are effective on regulatory levels, human resources, and data classification. Hold Security engineers help customers identify data types and how data moves inside the enterprise within its partners and for its customers.[6]

Hold Security offers Incident Response Services to provide support and expertise in the event of cyber incidents. Hold Security helps companies that suspect cyber fraud or theft, face APTs or Nation State targeting, or encounter issues with ransomware. Hold Security works with companies of all sizes, including Fortune Global 500 organizations.[2][3][5][6]

Hold Security, LLC on the record

Sources

Hold Security, LLC full record

  1. [1]holdsecurity.comHold Security · holdsecurity.com · undated page, accessed October 30, 2026 · Tier A
  2. [2]SolutionsHold Security · holdsecurity.com · undated page, accessed October 30, 2026 · Tier A
  3. [3]About Us | Hold SecurityHold Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]Hold Security - Information Security & Threat IntelligenceHold Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]Solutions | Hold SecurityHold Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]Information Security Assessment Services | Hold SecurityHold Security · undated page, accessed November 10, 2026 · Tier A

Kroll full record

  1. [1]Cyber riskKroll · kroll.com · published October 16, 2025 · Tier A
  2. [2]Kroll Announces Formation of Kroll Business ServicesKroll via Business Wire · businesswire.com · published April 20, 2021 · Tier A
  3. [3]Kroll | Financial and Risk Advisory SolutionsKroll · undated page, accessed October 26, 2026 · Tier A
  4. [4]Risk AdvisoryKroll · undated page, accessed October 26, 2026 · Tier A
  5. [5]Cyber Security Services | Cyber & Data Resilience | KrollKroll · undated page, accessed October 26, 2026 · Tier A
  6. [6]Application Security Services (AppSec) | Cyber and Data ResilienceKroll · undated page, accessed October 26, 2026 · Tier A
  7. [7]Enterprise Security Risk Management (ESRM) | KrollKroll · undated page, accessed October 26, 2026 · Tier A
  8. [8]Investigations, Diligence and Compliance | KrollKroll · undated page, accessed October 26, 2026 · Tier A
  9. [9]Kroll Launches New Practices Leveraging Technology and AI to Accelerate Decision-Making and Achieve Competitive AdvantageKroll · published January 29, 2026 · Tier A
  10. [10]Kroll Completes Acquisition of Madison Pacific GroupKroll · published November 17, 2025 · Tier A
  11. [11]Kroll Introduces APEX to Drive Measurable Business Outcomes from AI InvestmentKroll · published August 31, 2026 · Tier A
  12. [12]Kroll Bolsters Global Economics Capabilities with Acquisition of ABC economicsKroll · published July 15, 2026 · Tier A
  13. [13]Kroll Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 26, 2026 · Tier C
  14. [14]Cyber Insurance Services | Incident Response Partner | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  15. [15]Complex Digital Events | Cyber and Data Resilience | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  16. [16]Cyber Risk Assessments | Cyber Risk | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  17. [17]Data Risk, Discovery & Litigation Support | Cyber & Data Resilience | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  18. [18]AI Report Validation | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  19. [19]M&A Advisory Services | Corporate Finance | KrollKroll · undated page, accessed November 10, 2026 · Tier A
  20. [20]Valuation Services | Valuation AdvisoryKroll · undated page, accessed November 10, 2026 · Tier A
  21. [21]Business Valuation Services | KrollKroll · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.