Stern Security

Stern Security is a cybersecurity firm offering penetration testing, third-party risk management, and security assessment services. The company works with organizations to identify vulnerabilities through penetration testing, distinguishing this from basic vulnerability scanning, and provides evidence validation for third-party risk management programs. The company also develops software products, including Velocity, a platform that received an NC TECH Cyber Security Award, and HealthcareBreaches.com, a dashboard tool that tracks and makes searchable healthcare data breaches by cause. Stern Security has completed a SOC 2 Type II audit for its Velocity platform. The team includes certified security professionals who have contributed to the MITRE ATT&CK Framework and authored security publications, including a book on penetration testing published by Cisco Press. Stern Security serves clients requiring compliance and risk assessment support, particularly in sectors like healthcare, and is involved with industry groups such as ISSA, ISC2, Cloud Security Alliance, and HIMSS. The company's work spans consulting services such as penetration testing and risk assessments, alongside software products for breach tracking and security program management, indicating a hybrid business model combining professional services with proprietary tools.