Blackpoint Cyber
Procurement partnerAbout
Blackpoint Cyber is a cybersecurity company that provides managed detection and response (MDR) services powered by a 24/7 human-led Security Operations Center (SOC) combined with patented detection technology and AI-enhanced alerts. Founded in 2014 by former NSA and military professionals, the company delivers its services through the CompassOne platform, which unifies prevention, detection, response, and compliance for managed service providers (MSPs). The platform serves over 1,800 MSPs worldw...
Details
VenSearch Intelligence
Ideal Customer
- Blackpoint Cyber's direct customers are MSPs of varying sizes — from those managing a few dozen endpoints to those overseeing several thousand — who white-label or bundle Blackpoint's MDR into their own service offerings.
- The MSPs' end-clients are predominantly SMBs and mid-market businesses in the 50–1,000 employee or endpoint range that lack in-house SOC capabilities.
Key Differentiators
- Blackpoint Cyber differentiates itself as an exclusively MSP-channel MDR provider built by former U.S. Department of Defense and NSA cybersecurity experts, delivering what it calls 'nation-state-grade' security to SMBs that could not otherwise afford it.
- Its key technical differentiator is patented lateral movement detection technology combined with a 24/7 human-led SOC that acts autonomously — containing and responding to threats without requiring MSP approval — reducing dwell time more aggressively than alert-only competitors.
Industries Served
- Blackpoint Cyber serves a broad range of industries through its MSP partner channel, including healthcare, financial services, legal, government and public sector, technology, manufacturing, education, energy and utilities, retail, and telecommunications.
- The company offers a HIPAA Business Associate Agreement for healthcare partners and actively supports compliance frameworks used in the Defense Industrial Base (DIB), such as CMMC, for government-adjacent clients.
Service Coverage
- Blackpoint Cyber operates primarily in North America, with a growing international presence.
- According to LeadIQ, the company has employees across 6 continents including North America, South America, and Europe, and one buyer profile notes their primary geographic coverage is 'North America and EMEA.' Their own website states they protect more than 1,800 MSPs worldwide, and their mission explicitly targets organizations globally, though the majority of their customer base — estimated at roughly two-thirds — is located in the United States.
Partnerships
- Blackpoint Cyber holds membership in the Microsoft Intelligent Security Association (MISA) and has deep integrations with Microsoft 365, Microsoft Defender, and the broader Microsoft security ecosystem.
- The company announced a formal technology partnership with NinjaOne in August 2025, combining MDR with NinjaOne's cloud-native automated endpoint management platform.
Company Size & Ownership
- Blackpoint Cyber was founded in 2014 by former NSA cybersecurity expert Jon Murchison and is headquartered in Denver, Colorado (with legacy roots in Ellicott City, Maryland).
- The company has approximately 195–207 employees as of 2025–2026, up from 156 in 2023, reflecting 15% year-over-year headcount growth.
Compliance & Certifications
- Blackpoint Cyber undergoes an annual SOC 2 Type 2 external audit, with the observation period most recently covering May 2023 through April 2024.
- The company offers a standard HIPAA Business Associate Agreement for healthcare partners and is GDPR compliant.
Compiled from public sources by VenSearch · Last researched October 13, 2026
Offerings
14 offeringsApplication Control
Application Control is a module within CompassOne that blocks unauthorized, risky, or abused applications from executing across client environments using an expert-curated ruleset maintained by Blackpoint's 24/7 SOC. It supports global and client-specific policies, offers both monitor-only and full blocking enforcement modes, and eliminates the management burden of maintaining traditional allow and deny lists. The module targets threats that bypass traditional antivirus and EDR by preventing execution before an attack begins.
Asset Inventory
The Asset Inventory module within CompassOne provides continuous discovery and visibility across all devices, identities, users, and applications in endpoint and cloud environments. It links assets to vulnerabilities, misconfigurations, and threats to provide contextual risk assessment rather than a static list. MSPs can use advanced relational search and automated risk prioritization to identify high-risk assets across all client tenants.
Blackpoint ITDR (Identity Threat Detection and Response)
Blackpoint ITDR protects Microsoft 365, Google Workspace, and Cisco Duo accounts from identity-based threats including account takeover, business email compromise, and session hijacking. It monitors cloud identity environments and provides rapid detection and response to identity attacks driven by the 24/7 SOC. It is included in the Essentials ITDR and higher CompassOne packages.
Cloud MDR
Cloud MDR provides expert security monitoring and rapid, context-driven response specifically for cloud environments. It extends Blackpoint's 24/7 human-led SOC coverage to cloud infrastructure and services, detecting and containing threats in cloud environments before damage occurs. This service is part of Blackpoint's unified MDR approach that covers both endpoint and cloud through the CompassOne platform.
Cloud Posture
Cloud Posture is a Microsoft 365 security posture management module that continuously monitors M365 configurations for misconfigurations, policy drift, and compliance gaps across client tenants. It provides proactive security recommendations, alerts when security settings are weakened, and allows one-click rollback to restore preferred configurations. MSPs can use reusable policy templates to standardize cloud security across multiple tenants without increasing workload.
CompassOne Platform
CompassOne is a unified managed security platform built for MSPs that consolidates prevention, detection, response, and compliance into a single interface. It ingests tens of millions of security events daily and provides MSPs with a shared datastore and unified view across asset inventory, threat detection, identity protection, cloud posture, and compliance logging. The platform is offered in tiered packages: Essentials, Core, and Standard.
Endpoint MDR
Endpoint MDR uses Blackpoint's patented technology combined with the 24/7/365 MDR service to provide context-driven threat detection and resolution specifically at the endpoint layer. It includes the Blackpoint EDR agent, RMM and agent support, and integration with Microsoft Defender and Windows Security. This service is included in the CompassOne Core and Standard packages.
Integrations
CompassOne Integrations allow MSPs to connect security, identity, cloud, network, and business tools into the unified CompassOne platform, centralizing threat detection, response, and monitoring while reducing operational complexity. Integration tiers vary by CompassOne package, with endpoint security integrations available in Core, vulnerability management integrations in Core, network security integrations in Standard, and some integrations carrying additional terms and fees. The integrations eliminate data silos and extend the platform's contextual intelligence across third-party tools.
Managed Detection and Response (MDR)
Blackpoint MDR combines 24/7 human-led SOC response with contextual intelligence, patented detection logic, and AI-enhanced alerts to deliver active threat detection and response for MSPs. It covers both endpoint and cloud environments through a unified approach, reducing dwell time by combining automated detection with human analysts who investigate, contain, and respond to threats. It is priced on a per-seat, per-month subscription basis with no setup fees or long-term contracts.
Managed EDR
Managed EDR provides 24/7 monitoring and immediate response for continuous endpoint protection, extending Blackpoint's context-driven detection approach specifically to endpoints. It ensures that endpoint threats are actively monitored and responded to by Blackpoint's SOC team around the clock. This offering extends the same contextual intelligence used in the broader MDR service to the endpoint layer.
Security Posture Rating (SPR)
Security Posture Rating is a data-driven scoring module within CompassOne that measures cybersecurity maturity by pulling from integrations, activity logs, and monitored endpoints across a tenant's environment. It maps directly to the five core NIST Cybersecurity Framework 2.0 functions — Identify, Protect, Detect, Respond, and Recover — and provides actionable insights to expose gaps and prioritize improvements. MSPs can use the score to support cyber insurance requirements, compliance audits, and client budget conversations.
SIEM (LogIC)
Blackpoint's LogIC is a streamlined SIEM alternative for MSPs that provides hyper-efficient log collection, 365 days of tamper-proof encrypted log retention, and automated compliance mapping to HIPAA, CMMC, PCI DSS, and CIS Controls v8. It deploys and begins logging in under five minutes and generates audit-ready compliance reports and dashboards without the cost and complexity of a legacy SIEM. LogIC is included in the CompassOne Standard package.
Tenant Administrator
The Tenant Administrator module within CompassOne allows MSPs to identify at-risk client tenants, track billing and renewals, and take immediate action on time-sensitive security issues across their entire client base. It provides centralized oversight of multiple tenants from a single interface and is included in all CompassOne packages. This module helps MSPs manage security operations and business operations together in one view.
Vulnerability Management
CompassOne Vulnerability Management identifies vulnerabilities across devices, networks, and cloud environments and prioritizes them based on contextual relationships, exploitability, and business impact rather than raw severity scores alone. It offers scheduled and on-demand scanning, dark web monitoring for exposed credentials, automatic intelligence updates, and integration with third-party vulnerability scanners. The module is designed for multi-tenant MSP environments and maintains a prioritized remediation backlog.
Considering Blackpoint Cyber?
Our team will work with you to determine if Blackpoint Cyber is the right fit for your organization. From research and assessment through procurement negotiation and ongoing vendor management — we handle the entire process at no cost to you.