Carson & SAINT

Founded in 1998 and based in Rockville, MD, Carson & SAINT provides cyber security and risk-management services spanning security assessments, penetration testing, third-party vendor risk assessments, and supply chain risk management. Work extends into regulatory compliance, Cyber Essentials Plus, vCISO services, data protection and privacy, cloud security, security engineering, and incident response, serving government, healthcare, education, financial, MSP/MSSP, and retail clients. The firm holds PCI Approved Scanning Vendor (ASV) and Qualified Security Assessor (QSA) status.

Delivery runs through its own product line, including the SAINT Risk Navigator for vulnerability risk management, the SAINT Security Suite, and SAINT for AWS, giving clients a vulnerability management platform alongside advisory and testing services.