Stickley on Security
Procurement partnerAbout
Stickley on Security (powered by VYFI) provides cybersecurity, compliance, and risk management solutions built specifically for banks, credit unions, and fintechs. The company offers a range of services including penetration testing, security assessments, regulatory compliance support, and cybersecurity awareness training. Stickley on Security and VYFI merged to provide security assessments and education for financial institutions, fintechs, and more.
Details
Website
stickleyonsecurity.comOfferings
10 active
VenSearch Intelligence
Ideal Customer
- Stickley on Security's primary sweet spot is small to mid-sized financial institutions — particularly credit unions and community banks — regardless of asset size, with VYFI having previously served institutions ranging from $50 million to over $15 billion in assets.
- The Powered Cybersecurity Training (PCT) product is explicitly designed for small and medium-sized businesses that struggle to deploy and manage cybersecurity education internally.
Key Differentiators
- Stickley on Security's core differentiator is the combination of deep financial institution specialization and a fully automated, hands-off delivery model — its Powered Cybersecurity Training runs in the background without burdening employees or administrators.
- The company positions itself as a single trusted partner replacing the need for multiple cybersecurity vendors, offering education, phishing simulation, penetration testing, compliance, BCP/BCM, domain protection, and identity fraud prevention under one roof.
Industries Served
- Stickley on Security is most heavily focused on financial services — specifically credit unions, banks, and fintechs — and has been described as a trusted partner to financial institutions since 2007.
- CEO Jim Stickley's background includes thousands of security engagements across financial institutions, Fortune 100 corporations, healthcare facilities, legal firms, and insurance companies.
Service Coverage
- Stickley on Security operates nationwide across the United States, headquartered in the San Diego, California area (with addresses cited in El Cajon and La Mesa, CA).
- The company has served over 150,000 users nationwide since 2015, with reach extending across financial institutions of all asset sizes — from small community credit unions to institutions managing over $15 billion in assets (a scale brought in through the VYFI merger).
Partnerships
- Stickley on Security is a listed supplier on Telarus, one of the largest master agent/technology services distributors in the U.S., through which its security awareness training, phishing simulation, penetration testing, and DaaS/WaaS offerings are sold via the channel.
- Jim Stickley has been a featured keynote speaker at Telarus Partner Summits, reinforcing a close channel relationship.
Company Size & Ownership
- Stickley on Security is a small company; pre-merger employee counts ranged from 4 to 25 depending on the data source, with most recent figures (mid-2024) showing approximately 4 core employees.
- Revenue is estimated at under $5 million annually by ZoomInfo, while Adapt.io places it in the $1–10M range.
Compliance & Certifications
- Stickley on Security (powered by VYFI) maintains regulatory expertise across NCUA, FFIEC, NIST, GLBA, and PCI DSS frameworks, all of which are listed as areas of specialization on the company's website.
- The VYFI side of the combined organization has conducted over 1,000 credit union information security assignments aligned to these mandates, including FFIEC Cybersecurity Assessment Tool deliverables and Gramm-Leach-Bliley Act compliance support.
Compiled from public sources by VenSearch · Last researched October 14, 2026
Offerings
10 offeringsAdvanced Security
Identifies vulnerabilities across networks, applications, and systems through real-world penetration testing and security assessments. The service exposes exploitable gaps so organizations can remediate them before attackers can take advantage.
Advisory
Assesses the strength of an organization's security controls and validates its overall security posture while uncovering internal risks. Provides a clear path forward aligned with both operational reality and regulatory expectations.
BadPhish
Safely simulates real phishing attacks to reveal security gaps and build employee instinct over time through hands-on experience. The service turns potential security risks into conditioned reflexes so employees can recognize and respond to phishing attempts.
BCP/BCM
Helps organizations build, test, and maintain business continuity and disaster recovery plans designed to function in real-world scenarios. The service is aimed at keeping organizations resilient and operational regardless of what disruptions occur.
Compliance
Helps organizations stay aligned with federal and industry regulatory requirements through information security program development, policy creation, and ongoing maintenance. Covers evolving requirements so organizations remain prepared for regulatory scrutiny.
Domain Assure
Monitors and protects an organization's domain against hijacking, spoofing, and unauthorized changes. Keeps organizations in control of their domain and maintains their trusted status with customers and users.
Employee EDU
Provides continuous, practical security training designed to help employees recognize threats and act quickly. Training is structured to be easy to absorb so that security awareness becomes part of everyday employee behavior.
Powered Cybersecurity Training
Delivers ongoing cybersecurity education and phishing simulations automatically in the background without adding to employee workload. The service builds security awareness continuously over time so teams stay current without disrupting their normal workflow.
SoS Advisor
Provides executives and boards with clear, actionable cybersecurity insights covering risks, threats, and regulatory expectations. The service is designed to cut through noise and deliver only the information decision-makers need to act with confidence.
TrueMember
Uses Identity Intelligence to continuously verify in real time that the person logging in is the actual account holder and not a fraudster using stolen credentials. The service is designed to protect financial institution members from identity-based fraud.
Considering Stickley on Security?
Our team will work with you to determine if Stickley on Security is the right fit for your organization. From research and assessment through procurement negotiation and ongoing vendor management — we handle the entire process at no cost to you.