Is SISA Information Security profitable in 2026?

No public financials exist for SISA, a privately held, founder-led firm since 2003. No audited revenue or profit figures have been disclosed, and no institutional funding round has been confirmed as of mid-2026, consistent with a bootstrapped operating model.

Who owns SISA Information Security?

SISA is founded and led by Dharshan Shanthamurthy, who remains Founder and CEO as of May 2026. It is privately held with no confirmed outside investors or institutional equity financing found in public records.

Could AI replace SISA's compliance auditors?

Unlikely for attestation itself: SISA holds PCI SSC Qualified Security Assessor and Global Payment Forensic Investigator status, and became a CERT-In empanelled audit provider around May 2026, roles that require accredited human sign-off AI cannot substitute.

Who is SISA Information Security's biggest competitor?

Coalfire, a larger global PCI QSA with a cloud-first compliance platform, competes directly in assessments. In its newer MDR/SOC business, CyberProof (Agentic MXDR, July 7, 2026) and SentinelOne (Purple AI, June 30, 2026) pose the sharpest AI-driven threat.

What is SISA's ProACT platform and does it use AI?

ProACT MXDR is SISA's agentic SOC platform, launched at RSA Conference 2025 in April 2025. SISA claims (vendor-stated) it automates over 95% of threat detection and response tasks and cuts investigation time by up to 90%, per a July 2026 white paper.

Has SISA Information Security raised venture capital?

No confirmed funding round has been found in public records as of mid-2026. SISA appears to have grown organically since its 2003 founding, funding expansion into Singapore, Saudi Arabia, and the US through revenue rather than disclosed institutional investment.

Cybersecurity companies · India

SISA Information Security

sisainfosec.com ↗

PCI compliance auditor and forensics firm for payment security, based in India.

Protection under test

Assessed 26 July 2026 · Evidence as of 26 July 2026

Something worth protecting exists and is being tested right now.

On the recordSince 26 July 2026 · Checkable from 12-18 months from July 2026 · Every call on the record Checkpoint: CERT-In/MeitY joint Digital Threat Report renewal cycle and ProACT adoption vs SentinelOne/CyberProof

The call

SISA's audit credentials keep it in the room, but its new agentic SOC bet now sits next to funded rivals selling the same idea.

SISA checks security systems for banks and payment companies, and investigates hacks when they happen. Its core compliance work is hard to replace because the Indian government and banking regulators require specific certifications that SISA holds, and major tech companies cannot easily take over that role. But SISA is moving into a newer business of managing security threats with AI agents, which bigger companies like SentinelOne and CyberProof are also building and will launch in mid-2026 with way more money and resources. The big question is whether these new AI competitors will squeeze SISA's profit margins so much that it outweighs the stable cash flow from its government-backed compliance work.

Why

AI pressure: CyberProof Agentic MXDR and SentinelOne Purple AI. Rivals now sell autonomous SOC investigation as a product, the same ground SISA's ProACT MXDR just entered. Could AI do the core job? Only partly.

Bigger players: Coalfire and other larger regional QSA firms. Bigger, cloud-first assessors compete for the same BFSI audit and forensics contracts across the region. Could a giant copy it? Probably.

What protects it. PCI QSA and Global Payment Forensic Investigator accreditation plus CERT-In empanelment that only a licensed few hold.

What would change this call

Indian BFSI clients publicly switch MDR/SOC contracts to CyberProof or SentinelOne within 12-18 months. Would show SISA's agentic SOC bet is losing ground to better-funded platform rivals.
SISA announces an institutional funding round or PE investment. Would show SISA gaining capital to compete on platform economics against CyberProof/SentinelOne.
CERT-In/MeitY empanelment is renewed or lapses after the 2nd threat report cycle (expected July 2026). Would confirm whether SISA's regulatory moat with the Indian government remains intact.

Key numbers

Secures 1,000+ organizations across 40+ countries (2026-07-13)
ProACT RADAR covers 200,000+ endpoints, 50M+ people (2026-05-01)
CyberProof launched Agentic MXDR July 7, 2026 (2026-07-07)

Named risks

Agentic MDR commoditization by better-funded platform vendors could erode SISA's SOC service margins. Severity: high
No confirmed institutional funding limits capital available for global expansion into Singapore, Saudi Arabia, US. Severity: medium
Dependence on continued CERT-In and MeitY government relationship for distribution and credibility moat. Severity: medium
Conflicting third-party revenue, headcount, and entity-identity data creates transparency and diligence risk. Severity: low

Rivals, as read in July 2026

Rival	Direction	Evidence
Coalfire	contesting	Larger global PCI QSA with cloud-first Compliance Essentials platform, same GEAR accreditation tier as of 2026
CyberProof	gaining on	Launched competing Agentic MXDR with Anthropic, Microsoft, Google agents on July 7, 2026
SentinelOne	gaining on	Shipped Purple AI agentic SOC investigation feature by June 30, 2026, ahead of SISA's broader rollout
Trustwave (LevelBlue)	contesting	Combines PCI compliance with in-house SpiderLabs threat intelligence, per 2026 vendor comparisons

Questions people ask

Is SISA Information Security profitable in 2026?: No public financials exist for SISA, a privately held, founder-led firm since 2003. No audited revenue or profit figures have been disclosed, and no institutional funding round has been confirmed as of mid-2026, consistent with a bootstrapped operating model.
Who owns SISA Information Security?: SISA is founded and led by Dharshan Shanthamurthy, who remains Founder and CEO as of May 2026. It is privately held with no confirmed outside investors or institutional equity financing found in public records.
Could AI replace SISA's compliance auditors?: Unlikely for attestation itself: SISA holds PCI SSC Qualified Security Assessor and Global Payment Forensic Investigator status, and became a CERT-In empanelled audit provider around May 2026, roles that require accredited human sign-off AI cannot substitute.
Who is SISA Information Security's biggest competitor?: Coalfire, a larger global PCI QSA with a cloud-first compliance platform, competes directly in assessments. In its newer MDR/SOC business, CyberProof (Agentic MXDR, July 7, 2026) and SentinelOne (Purple AI, June 30, 2026) pose the sharpest AI-driven threat.
What is SISA's ProACT platform and does it use AI?: ProACT MXDR is SISA's agentic SOC platform, launched at RSA Conference 2025 in April 2025. SISA claims (vendor-stated) it automates over 95% of threat detection and response tasks and cuts investigation time by up to 90%, per a July 2026 white paper.
Has SISA Information Security raised venture capital?: No confirmed funding round has been found in public records as of mid-2026. SISA appears to have grown organically since its 2003 founding, funding expansion into Singapore, Saudi Arabia, and the US through revenue rather than disclosed institutional investment.

Timeline

2026-07-13SISA co-releases 2nd Digital Threat Report 2025-26 with MeitY, CERT-In, CSIRT-Fin
2026-07-07Rival CyberProof launches Agentic MXDR orchestrating Anthropic, Microsoft, Google agents
2026-06-30Rival SentinelOne ships Purple AI agentic investigation into its SOC offering
2026-05-01SISA becomes CERT-In empanelled information security audit service provider
2026-04-13SISA launches Quantum Security Certification program on World Quantum Day
2025-04SISA unveils ProACT MXDR Agentic SOC at RSA Conference 2025 in San Francisco
2024SISA launches AI-powered MXDR services at Saudi Payment Security Summit
2003SISA Information Security founded by Dharshan Shanthamurthy

Revision history

26 July 2026

First assessed. Protection under test. The text above is fixed as of this date and is not edited afterwards.

In the same band

Sangfor Technologies Beijing Topsec Technology SecureMetric