CISO Tribune

Vendor comparison · 2 companies

NGC Risk vs Optiv

NGC Risk provides fractional executives and risk programs for mid-market businesses. Optiv sells cybersecurity services that advise on, deploy and operate security programs for organizations. CISO Tribune files both under Security consulting and advisory. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • NGC Risk
  • Optiv
NGC Risk vs Optiv: Products, Customers and Funding Compared
NGC RiskNGC Risk provides fractional executives and risk programs for mid-market businesses.ngcrisk.comOptivOptiv sells cybersecurity services that advise on, deploy and operate security programs for organizations.optiv.com
What it sells
  • Fractional Leadership[3][4]Provides a part-time senior executive to fill a CISO, CIO/CTO, or CRO seat and own the client's security, technology, or risk strategy.
  • Digital Risk Programs[1][3]Defined-scope engagements covering disaster recovery and operational resilience, AI governance, framework readiness such as ISO 27001, ISO 42001 and SOC 2, SDLC governance, and audit response.
  • The Wardroom[1][3]An enterprise risk reasoning platform currently offered in closed beta.
  • Application Security[3][6]Services that protect applications, APIs and development pipelines.
  • Identity Security[2][3]Services for managing identities and securing access.
  • Co-Managed SIEM Service[5]A managed SIEM service with access to SIEM experts.
Categories
Headquarters
United States[2]Not stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • October 21, 2026Optiv launched CyberBOT, a free cybersecurity awareness training program for classrooms, nonprofits and communities.[10]
  • August 5, 2026Optiv announced Optiv Agentic Security Operations, formerly Optiv MDR, a managed security operations model combining agentic AI and practitioner expertise.[9]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, NGC Risk sells mainly to mid-market businesses. NGC Risk places executives in the CISO, CIO/CTO, and CRO seats that those businesses cannot yet fill full-time. NGC Risk also offers defined-scope work such as framework readiness, SDLC governance, and audit response and remediation. NGC Risk describes a setting in which boards, regulators, clients, and insurers ask who owns the risk.Optiv describes services for small organizations just getting started and for large corporations well into security maturity. Optiv states that security teams are managing more tools, more telemetry and more AI-driven pressure than their operating models were built to absorb. Optiv states that it is tool agnostic and works within a client's existing technology environment. Optiv says it delivers expertise to organizations across every major industry.
Last verified
October 16, 2026November 4, 2026

Where they overlap

  • Security consulting and advisory is the primary category of both NGC Risk and Optiv.

Where they differ, field by field

  • NGC Risk is also filed under AI governance. Optiv is also filed under Managed security service providers, Incident response and forensics and Penetration testing and red team services.
  • NGC Risk lists Fractional Leadership, Digital Risk Programs and The Wardroom. Optiv lists Application Security, Identity Security and Co-Managed SIEM Service.
  • NGC Risk is headquartered in United States.

How they differ

CISO Tribune files NGC Risk under Security consulting and advisory and AI governance, and files Optiv under Security consulting and advisory, Managed security service providers, Incident response and forensics, and Penetration testing and red team services. NGC Risk sells fractional leadership, a part-time senior executive who fills a CISO, CIO/CTO, or CRO seat and owns the client's security, technology, or risk strategy. NGC Risk also sells defined-scope programs covering disaster recovery, AI governance, SDLC governance, audit response, and framework readiness for ISO 27001, ISO 42001, and SOC 2. It offers The Wardroom, an enterprise risk reasoning platform that is in closed beta.

Optiv sells services that advise on, deploy and operate security programs. Its listed offerings include application security, identity security, and a co-managed SIEM service in which the SIEM sends alerts to threat analysts in the SOC. Optiv also names data security, cloud security, and SOC modernization as areas of expertise. NGC Risk centers on placing an executive in the seat, while Optiv centers on operating and monitoring services.

NGC Risk is headquartered in the United States and says it sells mainly to mid-market businesses. Optiv says it serves small organizations and large corporations, and it names financial services, health care, government, energy and retail among its industries. Optiv states that it serves 73% of the Fortune 100 and is backed by KKR. On August 5, 2026, Optiv announced Optiv Agentic Security Operations, formerly Optiv MDR. On October 21, 2026, Optiv launched CyberBOT, a free cybersecurity awareness training program for classrooms, nonprofits and communities.

What it sells: Optiv

What Application Security does[3][6]
Optiv's application security services protect applications, APIs and development pipelines by identifying vulnerabilities and improving secure coding practices throughout the software lifecycle. Optiv AppSec services help organizations design and build application security programs.
What Identity Security does[2][3]
Optiv's identity security services secure access across an organization. Identity Security covers managing identities, enforcing least privilege and improving authentication, governance and visibility.
What Co-Managed SIEM Service does[5]
Optiv's co-managed SIEM service helps monitor security events with just-in-time threat intelligence. In the service, the SIEM sends alerts to threat analysts in the SOC for human analysis.

Questions about NGC Risk and Optiv

What do NGC Risk and Optiv sell?
NGC Risk sells Fractional Leadership, Digital Risk Programs and The Wardroom. Optiv sells Application Security, Identity Security and Co-Managed SIEM Service.
Are NGC Risk and Optiv in the same category?
Yes. Security consulting and advisory is the primary category of both on CISO Tribune.
Where are NGC Risk and Optiv headquartered?
NGC Risk is headquartered in United States.
Who are NGC Risk and Optiv sold to?
From its own pages, NGC Risk sells mainly to mid-market businesses. Optiv describes services for small organizations just getting started and for large corporations well into security maturity.
What have NGC Risk and Optiv announced recently?
October 21, 2026: Optiv launched CyberBOT, a free cybersecurity awareness training program for classrooms, nonprofits and communities.

About NGC Risk

NGC Risk provides fractional executives and risk programs for mid-market businesses.[3]

NGC Risk puts experienced executives into the CISO, CIO/CTO, and CRO seats that mid-market businesses cannot yet fill full-time. NGC Risk then builds the risk, resilience, and governance programs underneath those executives. NGC Risk steps into the executive seat and builds the governance and resilience programs underneath it.[3][4]

NGC Risk works across the whole of digital risk: cyber, technology, AI, and resilience. NGC Risk says cyber, technology, AI, and resilience used to sit in separate lanes. Boards, regulators, clients, and insurers now ask one question across all of them: who owns the risk?[3][4]

For the executive seat, NGC Risk places a senior executive in the security, technology, or risk seat of a client, part-time. NGC Risk states that it owns the strategy and the program and is the accountable voice with the client's board and clients.[3]

NGC Risk also sells defined-scope builds for disaster recovery and operational resilience, AI governance, SDLC governance, and audit response and remediation. These builds include framework readiness for ISO 27001, ISO 42001, and SOC 2.[1][3]

Dan Gorecki is the principal at NGC Risk and runs every engagement himself. Senior advisors with the same operator background join Dan Gorecki when the work needs more hands. Everyone on the NGC Risk bench has sat in the chair, answered to a board, and lived with the program afterward.[1][3][4]

NGC Risk on the record

Sources

NGC Risk full record

  1. [1]ngcrisk.comNGC Risk · ngcrisk.com · undated page, accessed October 16, 2026 · Tier A
  2. [2]PrivacyNGC Risk · ngcrisk.com · published October 2, 2026 · Tier A
  3. [3]NGC Risk | Leadership that sees what's comingNGC Risk · undated page, accessed November 10, 2026 · Tier A
  4. [4]About | NGC RiskNGC Risk · undated page, accessed November 10, 2026 · Tier A

Optiv full record

  1. [1]Optiv sells advisory consulting and transformation act business vobisOptiv · optiv.com · published June 2, 2026 · Tier A
  2. [2]About Us | OptivOptiv · undated page, accessed November 10, 2026 · Tier A
  3. [3]Optiv Services | OptivOptiv · undated page, accessed November 10, 2026 · Tier A
  4. [4]Optiv | Cybersecurity Consultants and SolutionsOptiv · undated page, accessed November 10, 2026 · Tier A
  5. [5]Co-Managed SIEM Services Improve Security | Optiv | Learn MoreOptiv · undated page, accessed November 10, 2026 · Tier A
  6. [6]Threat & Vulnerability Remediation Solutions | OptivOptiv · undated page, accessed November 10, 2026 · Tier A
  7. [7]Cybersecurity Solutions | Innovation and Risk Reduction | OptivOptiv · undated page, accessed November 10, 2026 · Tier A
  8. [8]Our Leadership Team | OptivOptiv · undated page, accessed November 10, 2026 · Tier A
  9. [9]Optiv Introduces Agentic Security Operations, Redefining Managed Security Services with the Power of Google Security Operations and Extensive Wiz IntegrationPRNewswire · published August 5, 2026 · Tier A
  10. [10]Optiv Launches CyberBOT®, A Free Cybersecurity Awareness Training Program for Classrooms, Nonprofits and Communities | OptivOptiv · published October 21, 2026 · Tier A

Spot a factual error? Request a correction.