Drawbridge
Drawbridge is a cybersecurity company focused on providing strategic, expert advice combined with evolving technology to enhance credibility and protect assets for alternative investment managers. They serve a broad client base including asset managers, private equity sponsors, and other financial firms, emphasizing continuous monitoring, risk assessment, policy development, technical assessments, and regulatory readiness to transform cybersecurity from a concern into a business asset.
Industries
Nr. of Employees
medium (51-250)
Drawbridge
Palm Beach Gardens, Florida, United States, North America
Products
SaaS cybersecurity platform
A cloud-hosted subscription platform that integrates risk assessments, technical scanning, policy management, continuous monitoring, and peer benchmarking to manage and evidence cybersecurity programs.
SaaS cybersecurity platform
A cloud-hosted subscription platform that integrates risk assessments, technical scanning, policy management, continuous monitoring, and peer benchmarking to manage and evidence cybersecurity programs.
Services
Software platform that centralizes risk assessments, analytics, policy management, and continuous monitoring to manage and evidence cybersecurity programs.
Comprehensive assessment engagements with technical and operational teams to identify vulnerabilities, document controls, and deliver remediation roadmaps and formal findings reports.
Evaluation of third-party providers' cybersecurity posture through data collection, analysis, and remediation guidance, working directly with providers when necessary.
Continuous network and endpoint vulnerability scanning and cloud configuration assessments aligned to recognized standards to identify and prioritize technical risks.
Simulated attacker engagements against publicly facing systems and internal assets to validate technical controls and reveal exploitable vulnerabilities.
Creation and maintenance of written information security policies, incident response plans and business continuity plans to align with regulatory and investor expectations.
Software platform that centralizes risk assessments, analytics, policy management, and continuous monitoring to manage and evidence cybersecurity programs.
Comprehensive assessment engagements with technical and operational teams to identify vulnerabilities, document controls, and deliver remediation roadmaps and formal findings reports.
Evaluation of third-party providers' cybersecurity posture through data collection, analysis, and remediation guidance, working directly with providers when necessary.
Continuous network and endpoint vulnerability scanning and cloud configuration assessments aligned to recognized standards to identify and prioritize technical risks.
Simulated attacker engagements against publicly facing systems and internal assets to validate technical controls and reveal exploitable vulnerabilities.
Creation and maintenance of written information security policies, incident response plans and business continuity plans to align with regulatory and investor expectations.
Expertise Areas
- Cybersecurity for alternative investment managers and wealth managers
- Risk assessment and remediation planning
- Peer benchmarking and analytics for cyber posture
- Vendor and third-party cybersecurity risk management
Key Technologies
- SaaS cybersecurity platform
- Continuous vulnerability scanning
- Penetration testing (red team/blue team methodologies)
- Cloud configuration and CIS-aligned assessments
News & Updates
Webinar & Events on the SEC cyber rule.
Press Release about cybersecurity benchmarks and forecasting capabilities.
In the news article about cybersecurity mistakes during ODD review.
Webinar & Events on the SEC cyber rule.
Press Release about cybersecurity benchmarks and forecasting capabilities.
In the news article about cybersecurity mistakes during ODD review.