Vendor comparison · 2 companies
Leonardo provides cyber security and digital resilience offerings including managed SOC services, incident response, threat intelligence, investigation support systems and secure analytics platforms for governments, critical infrastructure operators and enterprises. Tenfold Security provides Active Penetration Testing, Real-Time Risk Assessment, Managed SIEM and CrowdStrike services. CISO Tribune files both under MDR and managed SOC and Security consulting and advisory. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.
Up to four companies side by side.
| LeonardoLeonardo provides cyber security and digital resilience offerings including managed SOC services, incident response, threat intelligence, investigation support systems and secure analytics platforms for governments, critical infrastructure operators and enterprises.leonardo.com | Tenfold SecurityTenfold Security provides Active Penetration Testing, Real-Time Risk Assessment, Managed SIEM and CrowdStrike services.tenfoldsecurity.com | |
|---|---|---|
| What it sells | ||
| What it sells |
|
|
| Categories | ||
| Categories | ||
| Headquarters | ||
| Headquarters | Not stated on its pages | Not stated on its pages |
| Founded | ||
| Founded | Not stated on its pages | Not stated on its pages |
| Ownership and funding | ||
| Ownership and funding | Not stated on its pages | Not stated on its pages |
| Named customers | ||
| Named customers | Not stated on its pages | Not stated on its pages |
| Recent news | ||
| Recent news |
| Not stated on its pages |
| G2 and Gartner Peer Insights | ||
| G2 and Gartner Peer Insights |
| |
| Who it fits | ||
| Who it fits | Not written yet | Not written yet |
| Last verified | ||
| Last verified | October 12, 2026 | October 21, 2026 |
CISO Tribune files both Leonardo and Tenfold Security under MDR and managed SOC as the primary category, and both also appear under security consulting and advisory. Leonardo sells SOC Managed Services, described as round-the-clock detection and monitoring for national and international customers. Tenfold Security sells Managed SIEM, which gives 24/7 visibility across a customer's systems and applications, and CrowdStrike services that include a dedicated SOC.
Beyond monitoring, Leonardo sells incident handling and response, threat intelligence drawn from the open web and dark web, Investigation Support Systems for government and law enforcement agencies, and Secure Analytics platforms. Tenfold Security instead adds Active Penetration Testing, which simulates real-world attacks, and Real-Time Risk Assessment, which automates compliance with standards such as HIPAA, PCI and SOX. Leonardo lists governments, critical infrastructure operators and enterprises as its audience, and its registered head office is in Rome, Italy. Tenfold Security's one described client is a mid-size public university in the Midwest, which it helped after a ransomware attack.
On the recent side, Leonardo US Cyber & Security Solutions introduced SignalTrace on August 4, 2026 as the new name for its electronic signature detection solution, previously called EOC Plus. Leonardo also presented an update to its Industrial Plan to 2030 to the financial community on March 12, 2026.
Leonardo provides cyber security and digital resilience offerings including managed SOC services, incident response, threat intelligence, investigation support systems and secure analytics platforms for governments, critical infrastructure operators and enterprises. Its registered head office is in Rome, Italy.[1][2]
Leonardo on the recordTenfold Security provides Active Penetration Testing, Real-Time Risk Assessment, Managed SIEM and CrowdStrike services. Tenfold Security works with organizations on cybersecurity challenges that range from ransomware attacks and security gaps to ongoing risk management. The Tenfold team is made up of security professionals and security-minded business professionals who want to provide a service that protects the vulnerable, in business and community.[1][3][4][5]
Aaron Weissenfluh is passionate about securing SMBs with practical security solutions. Aaron Weissenfluh, COO of Tenfold Security, has served as a CISO for a major stock exchange.[6]
Tenfold Security's Active Penetration Testing Services simulate real-world attacks to test a customer's detection and response capabilities. Tenfold Security's Active Penetration Testing identifies and rates vulnerabilities and provides real-time mitigation. Tenfold Security's Active Penetration Testing includes continuous monitoring and analyses.[3]
Tenfold Security's Real-Time Risk Assessment automates compliance with standards such as HIPAA, PCI and SOX.[3]
Tenfold Security's Managed SIEM gives 24/7 visibility into what is happening across a customer's systems and applications. Tenfold Security's Managed SIEM collects and monitors security logs in real time and alerts the Tenfold Security team to suspicious activity before it becomes a business-impacting incident. Tenfold Security's Managed SIEM is a cloud-native solution that integrates with existing tools. Tenfold Security's Managed SIEM supports compliance requirements and includes two years of secure log storage.[3]
Tenfold Security's CrowdStrike services deliver cloud-native endpoint protection, AI-powered detection and continuous monitoring. Tenfold Security's CrowdStrike services include a dedicated SOC that provides around-the-clock visibility. Tenfold Security's CrowdStrike services include access to the full CrowdStrike product suite.[1][3]
A mid-size public university in the Midwest, serving thousands of students across multiple campuses, was a Tenfold Security client. Tenfold Security was engaged on the day of the university's full network failure. The response to the university's ransomware attack used a parallel workstream model in which different response teams worked simultaneously on network analysis, device triage, forensics and communication. Tenfold Security deployed Sentinel One and Velociraptor across all university devices. Tenfold Security used Sentinel One for real-time endpoint detection and response and Velociraptor for rapid forensic collection and hunting for persistence mechanisms. Tenfold Security's response included identifying and closing the open RDP port and auditing all vendor access paths. Tenfold Security's response included disabling compromised accounts and resetting all credentials with enforced MFA. Tenfold Security's response included assessing which data was recoverable and which was lost through the vendor breach. Tenfold Security's response included coordinating with cyber insurance to document the incident and manage communications. Tenfold Security's response included establishing an internal communication protocol to stop the spread of misinformation. Tenfold Security built the response around the university's infrastructure, vendor relationships and operational priorities. Five days after engagement, all devices were clean and the network was fully restored.
The university now operates with continuous managed detection and response, vendor management and tested incident response procedures.
Tenfold Security on the recordSpot a factual error? Request a correction.