Case studies

Case studies

Engagements across fintech, technology, insurance, and healthcare. We identify clients by industry only, and each summary uses only facts we can state plainly.

Fintech

A payment-processing technology firm: continuous infrastructure security management

The situation

A payment-processing technology firm that works with merchants needed its infrastructure security managed continuously, not checked once a year.

What we did

KN Cyber provides continuous infrastructure security management and posture maintenance, keeping the firm's environment aligned with its security baseline as it changes.

Where it stands

An ongoing engagement: the firm has a team keeping its infrastructure posture maintained over time.

Healthcare technology

A payer-facing health-tech company: from no formal security program to SOC 2 Type 2

The situation

A health-tech company whose customers are health plans needed to satisfy the security reviews that come with selling to payers. It had no formal security program and no independent audit report to show buyers.

What we did

KN Cyber stepped in as the company's fractional CISO in 2025. We built the security program from the ground up, including the policies, the controls, and the evidence behind them, and led the company through its SOC 2 examination with an independent CPA firm.

Where it stands

The company completed its SOC 2 Type 2 audit and now has a report it can share with health-plan customers. KN Cyber continues as its fractional CISO, keeping the program running and handling customer security reviews.

Insurance

An insurance firm: cloud security assessment and implementation

The situation

An insurance firm needed a clear picture of the security of its cloud environment and help putting the right protections in place.

What we did

KN Cyber assessed the firm's cloud security and then supported the implementation of the improvements the assessment identified.

Where it stands

The firm moved from assessment to implementation, with its cloud security improvements put in place with KN Cyber's support.

Technology

A hardware virtualization and SaaS company: strengthening application security

The situation

A hardware virtualization company that also delivers software as a service wanted a stronger application security program across its products.

What we did

KN Cyber worked with the company to strengthen its application security program: how security is built into development, how products are assessed, and how findings are handled.

Where it stands

The company came away with a more mature application security program for both its virtualization products and its SaaS offering.

Healthcare technology

A health technology firm serving individuals and employers: security program management and SOC 2

The situation

A health technology firm that provides software to individuals and employers needed experienced people to run its information security program and to support its SOC 2 attestation.

What we did

KN Cyber took on the management of the firm's information security program and supported the SOC 2 attestation process.

Where it stands

The firm gained day-to-day security program leadership from experienced practitioners and support through its SOC 2 attestation, without building a full in-house security function.

Related: Industries · SOC 2 readiness · Fractional CISO · Product security · AI and cloud security