Alchemy Security
Procurement partnerAbout
Alchemy Security is a boutique cybersecurity firm founded in 2007 and headquartered in Denver, Colorado, dedicated to giving organizations a Defender's Advantage through a suite of innovative products and services. The company specializes in SIEM deployment and operations, managed detection and response, and Splunk-powered security solutions. It serves medium to large organizations across industries including technology, financial services, healthcare, public sector, retail, and manufacturing.
Details
VenSearch Intelligence
Ideal Customer
- Alchemy Security's stated sweet spot is mid- to upper-market organizations — specifically IT and security teams at medium to large organizations that need a higher level of customization and support than they can manage in-house.
- Their Splunk Solutions page explicitly targets 'mid- to upper-market teams with an established Splunk footprint,' and third-party profiles note ideal customers typically have a dedicated IT security team and an annual security budget ranging from $50,000 to $500,000.
Key Differentiators
- Alchemy Security's primary differentiator is its proprietary 'Defender's Advantage' philosophy paired with its Security Operating System (Lapis), which it claims is the world's first of its kind — an integrated risk management platform built on Splunk that unifies workflow automation, asset discovery, and executive risk reporting.
- A second major differentiator is the Athanor adversary intelligence platform, which tracks threat actors by sector and informs detection prioritization across MDR, Splunk, and assessment services, enabling an adversary-led (rather than generic) defense posture.
Industries Served
- Alchemy Security explicitly targets Technology & SaaS, Financial Services, Healthcare & Pharma, Public Sector (SLED), Retail, Sports & Entertainment, and Manufacturing verticals, as listed on its website.
- Case study references include a major payments provider (financial services) and engagements tied to cybersecurity awareness in financial services firms.
Service Coverage
- Alchemy Security is headquartered in Denver, Colorado and operates primarily as a U.S.-based firm, with all known employee locations in Colorado.
- The company serves clients on a nationwide basis rather than being limited to a specific regional footprint, and its services are delivered remotely as managed security-as-a-service offerings, enabling reach across the continental United States.
Partnerships
- Alchemy Security's most significant technology partnership is with Splunk — the firm holds Splunk Partnerverse Manage Elite status, which encompasses partner, reseller, and managed services provider roles, representing Splunk's top partner tier.
- The company is listed as a vendor on AVANT Communications' provider marketplace, indicating participation in at least one master agent/trusted advisor channel.
Company Size & Ownership
- Alchemy Security was founded in 2007 by Joe Bonnell and remains a small boutique firm.
- Multiple data sources consistently place headcount in the 11–50 employee range, with specific estimates around 21–23 employees.
Compliance & Certifications
- Alchemy Security assists clients in meeting a broad range of compliance and regulatory standards including CIS Top 20, NIST 800-53, NIST 800-171, ISO 27001/27002, PCI, HIPAA, CCPA, and GDPR, as documented in its AVANT partner profile.
- The firm has been recognized by Gartner, Inc. as a leading specialist in SIEM deployment and ongoing operations, which it prominently features as a third-party validation.
Compiled from public sources by VenSearch · Last researched October 13, 2026
Offerings
9 offeringsAthanor – Adversary Intelligence Platform
Athanor is Alchemy Security's proprietary adversary intelligence platform that tracks threat actors and maps their techniques, grouping them by motivation, origin, technique, and targeted sector. It serves as the evidence base for prioritization decisions, informing which adversaries are most likely to target a given client and which MITRE ATT&CK techniques they use. Athanor data is used across Alchemy's MDR, Splunk Solutions, and Cyber Resilience Assessment services to focus detection and testing efforts.
Atom – Asset Discovery and Inventory Management
Atom is a dynamic asset discovery and inventory management tool that leverages existing security and event log data, available as an additional feature within Lapis. It enables practitioners to understand all assets on the network, categorize devices by asset criticality, identify compliance and governance requirements, and perform risk management and vulnerability response functions. Atom redefines risk management by combining dynamic asset discovery with the ability to quickly pivot through different risk profiles within the organization.
Cyber Resilience Assessments
Alchemy Security's Cyber Resilience Assessment service identifies the adversaries most likely to target a client's sector and tests applications and networks against the techniques those adversaries use. Offerings include an Enterprise Cyber Resilience Assessment, a Microsoft Cloud assessment covering 33 controls across Entra ID, Azure, and M365, and adversary-led penetration testing and purple-team exercises mapped to MITRE ATT&CK. Clients receive an actionable report with every vulnerability, detection gap, and prioritized steps to close them.
Lapis – Security Operating System
Lapis is Alchemy Security's proprietary Integrated Risk Management solution built on Splunk, described as the world's first Security Operating System. It enables organizations to create, track, and automate workflows for periodic security tasks, monitor the health of their environment, and track progress toward various security controls from a single interface. Lapis provides a data-driven approach to cybersecurity program management with integrated decision-support dashboards for communicating operating risk to executives.
Managed Security Culture (MSC)
Alchemy Security's Managed Security Culture service cultivates an organization-wide cybersecurity mindset through continuous security awareness training, phishing simulations, and reinforcement programs. It is designed to embed secure practices into the daily habits of employees at all levels and quantifiably lower an organization's human risk factor. The service adapts difficulty levels over time and provides personalized support for at-risk users.
Managed Threat Detection and Response (MDR)
Alchemy Security's MDR service provides advanced 24/7 threat monitoring, detection, and response capabilities powered by seasoned security analysts and an extensive threat intelligence library. The service builds a fully customized threat detection strategy for each client, leveraging Splunk as the core analytics platform and mapping detections to MITRE ATT&CK. It includes highly transparent tracking and reporting using proprietary tools like Lapis and Atom.
Managed Vulnerability Intelligence (MVI)
Alchemy Security's Managed Vulnerability Intelligence service conducts comprehensive scans of an organization's entire perimeter, both externally and internally, using advanced scanning solutions and open-source intelligence gathering techniques. Experts help prioritize vulnerabilities based on risk level and provide remediation guidance, system hardening recommendations, and compensating controls when patching is not immediately possible. It is delivered as a security-as-a-service model augmented by subject matter experts.
Professional Services (Virtual CISO)
Alchemy Security provides senior-level cybersecurity strategy support through virtual CISO services, helping organizations better understand their cybersecurity readiness and develop new defenses. Services include a variety of reviews, assessments, and strategic advisory engagements tailored to each client's environment and maturity level. This offering is targeted at IT and security teams that need executive-level guidance without the cost of a full-time internal hire.
Splunk Solutions
Alchemy Security is a Splunk Partnerverse Manage Elite partner offering architecture, detection content engineering, managed Splunk operations, and SOAR services. The service focuses on pointing Splunk at the adversaries most likely to target the client, building and tuning detections mapped to MITRE ATT&CK, and keeping the platform healthy. Offerings include a Splunk Coverage Review that produces an adversary profile, a coverage map, detection quality analysis, and a ranked gap report.
Considering Alchemy Security?
Our team will work with you to determine if Alchemy Security is the right fit for your organization. From research and assessment through procurement negotiation and ongoing vendor management — we handle the entire process at no cost to you.