CISO Tribune

Vendor comparison · 2 companies

Third Wave Innovations vs UnderDefense

Third Wave Innovations helps growing businesses understand cyber risk, reduce exposure, stay insurable, and recover when something goes wrong. UnderDefense sells UnderDefense MAXI, a security and compliance automation platform, and an MDR service in which security experts monitor, detect and respond to incidents. CISO Tribune files both under MDR and managed SOC. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Third Wave Innovations
  • UnderDefense
Third Wave Innovations vs UnderDefense: Products, Customers and Funding Compared
Third Wave InnovationsThird Wave Innovations helps growing businesses understand cyber risk, reduce exposure, stay insurable, and recover when something goes wrong.3rdwave.ioUnderDefenseUnderDefense sells UnderDefense MAXI, a security and compliance automation platform, and an MDR service in which security experts monitor, detect and respond to incidents.underdefense.com
What it sells
  • Security Awareness Training[1][5]Training that builds employee cyber knowledge and meets compliance training requirements.
  • UnderDefense MAXI[1][2][3][5][6]A security and compliance automation platform. UnderDefense MAXI integrates with SIEMs, firewalls and endpoint protection solutions.
  • UnderDefense Agentic AI SOC[4]AI agents investigate each alert. Analysts on shift 24/7 decide what happens next.
  • MDR[1][2][6]Security experts monitor, detect and respond to incidents.
  • Cloud-based SIEM[2]A cloud-based SIEM that collects, analyzes and responds to security events.
  • CIS AWS Benchmark assessment[8]A self-service assessment of AWS security.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[10]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Third Wave Innovations sells mainly to growing businesses, including small and midsized organizations without a full security team. The pages describe customers such as a mid-sized technology company operating in the healthcare space, a services-based organization, and a manufacturing company. Third Wave Innovations aligns security controls with what insurers expect, so organizations that want to maintain cyber insurance coverage and pass underwriting are part of its audience. Security Awareness Training addresses the training requirements of compliance standards including SOC2, PCI DSS, and HIPAA. Automated Detection & Response works with existing tools for network, identity, cloud, endpoint, and office productivity.UnderDefense MAXI integrates with a customer's security infrastructure, including SIEMs, firewalls and endpoint protection solutions. UnderDefense offers compliance templates to organizations working toward standards such as SOC2 and ISO 27001. UnderDefense MAXI provides executive-level reports for C-level readers.
Last verified
October 19, 2026October 26, 2026

Where they overlap

  • MDR and managed SOC is the primary category of both Third Wave Innovations and UnderDefense.

Where they differ, field by field

  • Third Wave Innovations is also filed under Security awareness training, Vulnerability management and Third-party risk and security ratings. UnderDefense is also filed under Penetration testing and red team services, Compliance automation and SOAR and security automation.
  • Third Wave Innovations lists Security Awareness Training. UnderDefense lists UnderDefense MAXI, UnderDefense Agentic AI SOC, MDR, Cloud-based SIEM and CIS AWS Benchmark assessment.

How they differ

CISO Tribune files both Third Wave Innovations and UnderDefense under MDR and managed SOC as the primary category. UnderDefense also appears under Penetration testing and red team services, Compliance automation, and SOAR and security automation.

Third Wave Innovations sells Security Awareness Training with a library of over 200 short videos, customizable phishing simulations, and reports for tracking employee progress. It also offers Automated Detection & Response, which works with existing tools for network, identity, cloud, endpoint, and office productivity. Third Wave Innovations was founded in 2017, and it says it serves small and midsized organizations without a full security team. Its pages describe customers such as a mid-sized technology company in the healthcare space, a services-based organization, and a manufacturing company.

UnderDefense sells UnderDefense MAXI, a security and compliance automation platform that integrates with SIEMs, firewalls and endpoint protection solutions. It also sells an MDR service, UnderDefense Agentic AI SOC in which AI agents investigate each alert, and a cloud-based SIEM. UnderDefense MAXI includes pre-built compliance templates for standards such as SOC2 and ISO 27001. UnderDefense also offers a self-service CIS AWS Benchmark assessment. UnderDefense serves organizations across five continents, and it took part in Incident Response cases with the Computer Emergency Response Team of Ukraine (CERT-UA). Both companies reference SOC2 in their compliance material, though Third Wave Innovations ties it to training and UnderDefense ties it to templates.

What it sells: Third Wave Innovations

What Security Awareness Training does[1][5]
Security Awareness Training offers a library of over 200 short videos available in multiple languages. It includes customizable phishing simulations and pre-designed courses with dashboards and reports for tracking employee progress. It addresses training requirements of compliance standards including SOC2, PCI DSS, and HIPAA.

What it sells: UnderDefense

What UnderDefense MAXI does[1][2][3][5][6]
UnderDefense MAXI natively monitors endpoints, networks, users and decoy beacons. UnderDefense MAXI provides ready-to-use playbooks, AI-powered alert enrichment and notifications through Slack, Jira or a preferred tool. UnderDefense MAXI provides pre-built compliance templates for standards such as SOC2 and ISO 27001.
What UnderDefense Agentic AI SOC does[4]
UnderDefense Agentic AI SOC uses AI agents that investigate each alert. Analysts on shift 24/7 decide what happens next.
What CIS AWS Benchmark assessment does[8]
UnderDefense offers a self-service CIS AWS Benchmark assessment. The assessment covers evaluating the maturity of cloud security controls, identifying misconfigurations, providing detailed mitigation instructions and giving a summary table with a final CVSS v3.0 score.

Questions about Third Wave Innovations and UnderDefense

What do Third Wave Innovations and UnderDefense sell?
Third Wave Innovations sells Security Awareness Training. UnderDefense sells UnderDefense MAXI, UnderDefense Agentic AI SOC, MDR, Cloud-based SIEM and CIS AWS Benchmark assessment.
Are Third Wave Innovations and UnderDefense in the same category?
Yes. MDR and managed SOC is the primary category of both on CISO Tribune.
Who are Third Wave Innovations and UnderDefense sold to?
From its own pages, Third Wave Innovations sells mainly to growing businesses, including small and midsized organizations without a full security team. UnderDefense MAXI integrates with a customer's security infrastructure, including SIEMs, firewalls and endpoint protection solutions.

About Third Wave Innovations

Third Wave Innovations helps growing businesses understand cyber risk, reduce exposure, stay insurable, and recover when something goes wrong. Third Wave Innovations was founded in 2017. Third Wave Innovations helps small and midsized organizations build a security capability without having to build an entire security organization themselves. Third Wave Innovations connects cybersecurity, continuous monitoring, risk management, response, and cyber insurance readiness.

Third Wave Innovations says most businesses don’t have a clear picture of their cyber risk. Third Wave Innovations offers protection designed for growing businesses without a full security team.[1][3]

Third Wave Innovations identifies the gaps attackers could exploit and helps fix them before they become real problems. Third Wave Innovations implemented attack surface monitoring to identify and continuously track external exposures across assets and applications. Third Wave Innovations deployed Cyber Risk Management capabilities to provide continuous visibility into vulnerabilities, threats, and exposures.[3][4]

Third Wave Innovations offers Automated Detection & Response. Automated Detection & Response works with existing tools for network, identity, cloud, endpoint, and office productivity. Every alert from Automated Detection & Response includes a record of what happened, why, and how it was resolved. Automated Detection & Response includes executive dashboards that summarize key performance and incident trends.[3]

Third Wave Innovations implemented MDR for continuous monitoring, rapid detection, and response. Third Wave Innovations deployed MDR to provide 24/7 monitoring, automated containment, and verified response actions. Third Wave Innovations integrated monitoring across Microsoft 365, identity systems, and endpoint controls without replacing existing tools. Third Wave Innovations conducted a HIPAA-focused compliance readiness review that translated regulatory requirements into operational controls and workflows.[4]

Third Wave Innovations sells Security Awareness Training to build employee cyber knowledge and meet compliance training requirements. Security Awareness Training offers a regularly-refreshed library of over 200 short videos available in multiple languages. Security Awareness Training teaches employees the signs of phishing tactics such as email scams, fraudulent messages, invoice change requests, and gift card requests. Security Awareness Training includes customizable simulations that test employees’ ability to identify and report phishing emails from their inboxes. Security Awareness Training provides pre-designed courses and dashboards and reports for tracking employee progress. Security Awareness Training addresses the cybersecurity training requirements of compliance standards, including SOC2, PCI DSS, and HIPAA. Third Wave Innovations integrates training into its cyber risk program so human security risks and other cyber threats are managed in one unified platform.[1][3][4][5]

Third Wave Innovations on the record

Sources

Third Wave Innovations full record

  1. [1]3rdwave.ioThird Wave Innovations · 3rdwave.io · undated page, accessed October 19, 2026 · Tier A
  2. [2]About Us | Third Wave InnovationsThird Wave Innovations · undated page, accessed November 10, 2026 · Tier A
  3. [3]Home | Third Wave InnovationsThird Wave Innovations · undated page, accessed November 10, 2026 · Tier A
  4. [4]Case Studies | Third Wave InnovationsThird Wave Innovations · undated page, accessed November 10, 2026 · Tier A
  5. [5]Security Awareness Training | Third Wave InnovationsThird Wave Innovations · undated page, accessed November 10, 2026 · Tier A

UnderDefense full record

  1. [1]underdefense.comUnderDefense · underdefense.com · undated page, accessed October 26, 2026 · Tier A
  2. [2]Compliance PricingUnderDefense · undated page, accessed November 10, 2026 · Tier A
  3. [3]Agentic AI SOC & Compliance Automation Platform | UnderDefenseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  4. [4]Elastic Cloud Pricing 2026: Serverless, Hosted, and SIEMUnderDefense · undated page, accessed November 10, 2026 · Tier A
  5. [5]Cloudflare Pricing 2026: WAF, Zero Trust, and EnterpriseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  6. [6]Palo Alto Networks Pricing 2026: Firewalls, SASE, and XDRUnderDefense · undated page, accessed November 10, 2026 · Tier A
  7. [7]2025 MXDR Pricing Guide: Choosing the Right MXDR providerUnderDefense · undated page, accessed November 10, 2026 · Tier A
  8. [8]Episode 4: Cyber Resilience 201 — AWS Cloud Security - UnderDefenseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  9. [9]E-Mail Under Attack - UnderDefenseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  10. [10]UnderDefense MAXI Reviews & Product DetailsG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.