Cyber Security Services (CSS) is an independent cybersecurity consulting firm based in Columbus, Ohio, providing penetration testing, Virtual CISO (vCISO) services, cybersecurity risk assessments and regulatory compliance advisory to organizations nationwide since 2014. We help clients align with NIST CSF, NIST SP 800-53, SOC 2, HIPAA, CMMC, PCI DSS, ISO 27001 and GLBA.
CSS was founded by Matt Santill, CISSP, a former Chief Information Security Officer and an original contributor to the NIST Cybersecurity Framework. We serve healthcare, financial services, technology and critical infrastructure organizations, from startups to global enterprises, including roughly 10% of the top 100 companies on the Forbes Global 2000.
Penetration Testing
• External and internal network penetration testing
• Web application and API penetration testing
• Mobile application testing
• Cloud security testing for AWS, Azure, Google Cloud and Microsoft 365
• AI and LLM application testing
• Social engineering and phishing simulations
• Red team engagements
Every finding is validated by an experienced consultant, not just a scanner. Reports include an executive summary for leadership plus evidence, reproduction steps, remediation guidance and retest verification for technical teams.
Virtual CISO (vCISO Services)
Ongoing security leadership without a full-time hire, including security strategy, policy development, board and executive reporting, vendor risk management, audit support and compliance roadmaps.
Risk Assessments and Compliance
• Enterprise cybersecurity risk assessments against NIST CSF and NIST SP 800-53
• HIPAA security risk assessments
• SOC 2 readiness and audit preparation
• CMMC readiness for defense contractors
• PCI DSS, ISO 27001 and GLBA programs
• Vendor and third-party risk assessments
Incident Response
Containment, evidence preservation, investigation support and recovery planning, plus incident response retainers and tabletop exercises.
AI Security
Governance and secure adoption of AI tools, including policies, risk assessments and testing of AI applications.
Our Products
• AILeakShield discovers, controls and protects AI use across your business
• SOC2audit.ai takes companies from SOC 2 gap assessment to signed report
Why Clients Choose CSS
• Senior practitioners lead every engagement, not just the sales call
• Independent advice, since we never resell third-party security products
• Every engagement is scoped to the client's environment, risk and goals
• Fast proposals and white-label delivery for IT providers and MSPs
• Long-term relationships, with clients returning year after year
Cybersecurity Services, LLC DBA Cyber Security Services
Who Is the Company Behind Cyber Security Services?