Armor

About Armor

Armor operates as a global, cloud-native managed detection and response (MDR) provider, offering a suite of cybersecurity and compliance services. The company was founded in 2009 by Chris Drake, who currently serves as the CEO. Drake's inspiration to start the company, previously known as FireHost, stemmed from a personal experience when a client at his previous interactive marketing firm was hacked. This event shaped Armor's mission to prevent other companies from similar damaging cyber incidents. His background includes service as a paratrooper in the U.S. Army's 82nd Airborne Division, where he built some of the Army's first private secure websites.

The firm serves a diverse client base, including Fortune 500 companies and startups, with over 1,500 clients across more than 40 countries. Its business model centers on providing managed security services, cybersecurity and compliance consulting, and professional services. A key component of its offering is a 24/7/365 Security Operations Center (SOC) that leverages non-proprietary frameworks to address cybersecurity complexities at cloud scale. The company aims to challenge the traditional managed security service provider (MSSP) model, which can lock clients into proprietary systems, by allowing customers to retain control over their logging data, tuning, playbooks, and automation.

Armor's services portfolio is comprehensive, covering endpoint, network, server, and hybrid cloud environments. The core offering is its Armor MDR service, which integrates with security platforms like Microsoft Defender XDR and Microsoft Sentinel for adaptive threat management. This service focuses on contextual threat prioritization and uses AI and machine learning to speed up incident response. Other services include continuous vulnerability assessments and penetration testing (VAPT) based on the MITRE ATT&CK framework, data protection through continuous discovery and classification, and risk management support for compliance standards like PCI, HIPAA, and GDPR. In early 2025, the company launched its Nexus portal, providing clients with real-time visibility into the actions taken by the SOC to neutralize threats. Strategic initiatives include a 2022 partnership with Microsoft and the 2023 acquisition of Quantum Security, a Singapore-based firm specializing in cloud automation, to expand its global reach and technical capabilities.