FAQ
Frequently asked questions
What does KN Cyber do?
KN Cyber is a Cybersecurity Advisory and R&D firm in Clark, New Jersey. Our advisory practice provides fractional CISO leadership, SOC 2 and HITRUST readiness, PCI DSS compliance support, NIST SP 800-171 implementation support, customer and vendor security reviews, penetration testing, AI security assessments, and cloud security. Our research and development practice runs the APSOS™ programs in continuous product security assurance and runtime trust for autonomous AI, develops technology for licensing, and works with universities on joint research.
Is KN Cyber an advisory firm or a research firm?
Both, as two co-equal practices with one team. The advisory work keeps our research grounded in real security programs, and the research shapes how we assess products and AI.
Who do you work with?
Fintech, technology and SaaS, insurance, manufacturing, and healthcare organizations on the advisory side, and universities, labs, and technology companies on the research side.
What is a fractional CISO?
A senior security leader who works part time for your company, owning strategy, the security program, compliance, and buyer and board conversations, without a full-time executive salary.
Do you perform SOC 2 audits?
No. Independent CPA firms perform SOC 2 examinations. We prepare you, build the controls and evidence, and coordinate with your auditor.
Do you help with PCI DSS?
Yes. We provide PCI DSS compliance support for fintech and payment companies: scoping the cardholder data environment, gap assessment, remediation, and evidence for your assessment.
Do you help manufacturers with NIST SP 800-171?
Yes. We provide NIST SP 800-171 implementation support for manufacturers that handle controlled unclassified information for defense customers. That work lays the groundwork for CMMC, because CMMC Level 2 assessments evaluate the same requirements.
Can you help with a customer's security questionnaire?
Yes, whether it comes from an enterprise customer, a bank or partner, an insurer, a prime contractor, or a health plan. We triage it, draft accurate answers with evidence, plan any gaps, and join the follow-up call.
Do you do penetration testing?
Yes. We test web applications, APIs, mobile apps, cloud environments, and networks, and retest after fixes. Send scope details to pentest@kncyber.com.
Are APSOS™ programs products we can buy?
No. They are research and development programs. KN Cyber's intended path is licensing to companies that can carry the technology into products.
Where are you located?
100 Walnut Avenue, Suite 210, Clark, NJ 07066. We work remotely across the U.S., with some on-site work in NJ, NYC, and the tri-state area.
How does pricing work?
Pricing is scoped to your organization's size and needs. Fractional CISO work is a monthly retainer. Projects such as SOC 2, HITRUST, PCI DSS, or NIST SP 800-171 readiness, an AI security assessment, or a pentest are scoped as fixed projects. We don't publish starting prices because two companies of the same size can need very different things. Book a 30-minute consultation and we'll give you a quote.
How long does SOC 2 take?
SOC 2 readiness typically takes 2–4 months, depending on your organization's size and starting point. A Type 2 report also includes an observation period after readiness, during which the auditor tests that controls operated over time.
Do you offer HITRUST readiness?
Yes. We help you confirm which HITRUST assessment your customers require, map it to your SOC 2 and HIPAA controls, close gaps, and prepare you for the assessor.
Do you do AI security assessments?
Yes. We assess LLM and agent features for data exposure, prompt injection, excessive tool permissions, and vendor risk, and we prepare clients for HITRUST's AI Security Assessment.
Who will we work with?
A team of KN Cyber practitioners (security leaders, security analysts, and auditors) assigned to your engagement, with a consistent lead you can reach directly.