null

null

null

null

null

null

null

null

null

null

null

null

null

null

0.94x Total Debt / Equity (Moderate leverage)

Moderate-high; CISO Global carries significant debt relative to revenue (~$30M revenue), so a 200bps rate rise could increase annual interest expense by ~$500K-$1M, pressuring already negative EBITDA margins

Medium intensity; US-China trade tariffs on metals and components disrupt supply chains.

US-Israel cybersecurity technology corridor (key vendor relationships) and US-India managed services delivery pipeline represent primary geopolitical chokepoints

Minimal sovereign currency devaluation exposure; revenue is overwhelmingly USD-denominated from US SMB/mid-market clients with negligible non-US revenue concentration

Predominantly US-based (~95%+ revenue); limited international footprint means currency devaluation risk is near-zero but also signals limited global diversification

Medium intensity; commodities: Steel, Aluminum, Copper, Crude Oil (fuel), Rare Earth Elements, Plastics/Resins; geopolitical: US-China trade tariffs on metals and components disrupt supply chains.

High; reliance on Microsoft Security stack, CrowdStrike, and select SIEM/SOAR platforms likely exceeds 30% of delivery input cost with limited short-term substitutability

Managed Security Services Provider (MSSP) — recurring managed service delivery with professional services overlay

Cloud infrastructure termination would severely disrupt SOC operations, threat monitoring platforms, and client portal delivery; recovery timeline estimated 60-90 days minimum

Moderate-high API coupling risk; integrations with Microsoft Sentinel, CrowdStrike Falcon, and ConnectWise create sticky dependencies that increase client and operational migration costs

Low Howey Test risk; revenue model is fee-for-service cybersecurity managed services and consulting, not investment contracts or profit-sharing arrangements

Medium

Moderate; handles client sensitive security telemetry and PII-adjacent data requiring GDPR/CCPA compliance programs, but primary exposure is as a processor not controller, limiting direct liability

Low; CISO Global is a sub-scale MSSP in a highly fragmented market with no dominant market share position that would attract antitrust scrutiny

Medium burden; regimes: FAA, DOT, OSHA, EPA, ITAR, FTC; Export controls and defense procurement rules create contract concentration risk.

Estimated 55-65% recurring (managed service retainers, SOC-as-a-Service contracts) versus 35-45% transactional (professional services, incident response engagements)

Monthly/annual managed security retainers plus time-and-materials professional services; upsell via incident response and compliance advisory engagements

Time-and-materials plus per-device/per-user managed service tiers; vulnerable to margin compression if headcount costs rise faster than contracted retainer rates

Low-moderate; commodity pressure in SMB MSSP market limits pricing power; differentiation via proprietary frameworks (Cybervisit) provides limited but real premium justification

25.6% Gross Margin (Moderate (20-40%))

Moderate churn risk; SMB and mid-market clients face budget pressure and may consolidate vendors; no evidence of significant free-rider leakage given service delivery model

Revenue growth is largely headcount-linear; professional services and SOC analyst delivery requires proportional staffing increases, limiting operating leverage at scale

High marginal cost; each incremental revenue dollar requires additional analyst, engineer, or consultant headcount, making sublinear scaling difficult without significant platform automation investment

Not applicable; CISO Global operates as a direct-delivery services company without a franchise network model

CAC likely $15K-$40K per client given consultative sales cycle; at 10x scale, LTV/CAC ratio improvement depends on reducing direct sales dependency through channel partnerships

Weak network effects; threat intelligence sharing across client base provides marginal data network benefit, but MSSP services are not inherently network-effect-driven businesses

-32.3% Return on Assets (Negative equity)

Tier 2 moderate resilience; cybersecurity is increasingly viewed as essential infrastructure, but SMB clients may reduce retainer scope or defer upgrades during severe downturns

SMB and mid-market enterprises (50-2,500 employees) seeking outsourced security operations, compliance, and risk management

Regulated industries including healthcare, financial services, and government contractors requiring compliance-driven security programs (HIPAA, CMMC, SOC2)

["11-0000 Management Occupations", "13-0000 Business and Financial Operations Occupations", "15-0000 Computer and Mathematical Occupations", "17-0000 Architecture and Engineering Occupations", "23-0000 Legal Occupations", "33-0000 Protective Service Occupations", "37-0000 Building and Grounds Cleaning and Maintenance Occupations", "41-0000 Sales and Related Occupations", "43-0000 Office and Administrative Support Occupations", "47-0000 Construction and Extraction Occupations", "49-0000 Installation, Maintenance, and Repair Occupations", "51-0000 Production Occupations", "53-0000 Transportation and Material Moving Occupations"]

0.3 (HIL — ~30% of characteristic roles agent-automatable)

0.0% CapEx / Revenue (Low-CapEx Asset-Light)

0001777319

CISO