Tidal Cyber is a cybersecurity company focused on Threat-Led Defense. Its platform helps organizations align security decisions to real adversary behavior by organizing threat intelligence against MITRE ATT&CK, mapping defensive coverage, and showing where controls are effective, redundant, or leaving residual risk.
Tidal Cyber positions its software and services around making ATT&CK practical for day-to-day defense. Across its commercial platform, free community offering, AI engine, and expert services, the company helps security teams prioritize the threats that matter, understand how existing tools perform against those threats, and improve readiness without relying only on vulnerability counts or generic exposure views.
Offerings, Capabilities, and Integrations
Tidal Cyber combines adversary intelligence, ATT&CK-aligned analysis, defensive stack visibility, and guided remediation into a threat-led workflow. Its capabilities center on identifying relevant threats, translating intelligence into usable defensive context, mapping coverage at the technique and procedure level, and helping teams measure confidence in their current posture.
The company supports both software-based and service-led engagements. It can ingest and structure unstructured intelligence, integrate test and evaluation data, and connect with tools across the existing defensive stack to improve visibility into detections, protections, gaps, and overlap. Tidal Cyber also supports solution providers that need their capabilities mapped clearly to ATT&CK for customer transparency and product positioning.
Products and Services
- Tidal Cyber Enterprise Edition: Commercial Threat-Led Defense platform for continuously assessing relevant threats against an organization’s defensive stack, generating coverage maps, highlighting gaps and overlap, and prioritizing remediation actions.
- Tidal Cyber Community Edition: Free platform for researching threat actors, software, and techniques, building custom technique sets, and using Tidal Cyber’s curated ATT&CK extensions and product registry to make threat-informed analysis more actionable.
- NARC AI: AI engine that converts unstructured intelligence such as CTI reports, incident response writeups, red-team findings, and other free text into structured, ATT&CK-aligned knowledge with connected procedures, groups, campaigns, and software.
- Breach and Attack Simulation (BAS) Integration: Integration that brings BAS test and evaluation results into Tidal Cyber Enterprise Edition so teams can compare tested outcomes with existing defensive visibility and target future validation efforts more effectively.
- Custom Threat Profiling: Service that builds an organization-specific threat profile using factors such as industry, geography, and business context to identify the adversaries and behaviors most relevant to that environment.
- Coverage Mapping: Service that maps relevant threats to the tools in an organization’s defensive stack to show current protection, identify gaps, and surface redundancies across the environment.
- MITRE ATT&CK Product Mapping: Service for solution providers that maps product capabilities to MITRE ATT&CK using documentation analysis, platform review, and, when needed, adversary emulation testing to improve mapping confidence.
Target Customers
Tidal Cyber primarily targets enterprise security organizations that want to operationalize MITRE ATT&CK and align defense programs to real-world adversary behavior. Its platform is suited to security leaders, security operations teams, cyber threat intelligence analysts, detection engineers, and teams responsible for measuring defensive coverage and reducing residual risk.
The company also serves organizations that want to get more value from existing security investments rather than simply add more tools. In addition, Tidal Cyber has offerings for security solution providers that need clear ATT&CK mappings to communicate how their products protect, detect, respond, or validate against specific adversary techniques and procedures.
Cloud Integrations and Marketplace
- CrowdStrike Marketplace: Tidal Cyber has marketplace presence through listed offerings for CrowdStrike environments, including Tidal Capability Insights for Falcon LogScale and Tidal Product Registry for Falcon.
Key People
- Rick Gordon: Chief Executive Officer, Co-Founder
- Richard Struse: Chief Technology Officer, Co-Founder
- Frank Duff: Chief Innovation Officer, Co-Founder
- Jessica Hall: Vice President of Product
- Mark Davidson: Vice President of Engineering
- Steven Gerry: Vice President of Sales
- Michelle Grider: Vice President of Customer Success
- Ann Chesbrough: Head of Product Marketing
- Jamie Duff: Head of Partnerships
- Cat Self: Senior Director of Adversary Research
- Harrison Van Riper: Senior Director of AI
Key Facts
- Headquarters: Reston, Virginia, United States
- Employees: Approximately 39
- Annual Revenue: Approximately $6.4M
- Parent Company: None
- Subsidiaries: Zero-Shot Security
- Publicly Listed: Privately held
