Carson & SAINT

Carson & SAINT

Richard S. Carson & Associates, Inc.

Rockville, MD, United States

Penetration TestingOffensive SecurityIncident ResponseDigital Forensics
Founded 1998Serves Enterprise, SMB, Public Sector
Profile last updated: April 14, 2026

About

Founded in 1998, Carson & SAINT is a cybersecurity company based in Rockville, United States working in penetration testing, offensive security, incident response +7 more.

Carson & SAINT is a United States cybersecurity company, headquartered in Rockville, Maryland, with an office in Bethesda, that has operated since 1998. It was formed through the merger of Richard S. Carson & Associates, a computer security consultancy, with SAINT Corporation, which developed an open-source vulnerability scanner. The company sells vulnerability management and risk management software, including SAINT VRM, SAINT VM, SAINTScanner, the SAINT Security Suite, SAINT ASV for PCI scanning and SAINT for AWS. It also provides cybersecurity services such as security assessments, penetration testing, network, wireless, application, cloud and physical security assessments, compliance assessments, incident response, digital forensics and managed security services. Its clients include US federal agencies and commercial organisations, and it operates a channel partner and affiliate program. Its AWS work includes AWS Level 1 Managed Security Service Provider status with specialties in Modern Compute and Digital Forensics & Incident Response.

Location

Rockville, United States

Founded

1998

Legal name

Richard S. Carson & Associates, Inc.

Focus areas

vulnerability managementvulnerability scanningPCI ASVpenetration testingsecurity assessmentsmanaged security servicesAWS securityrisk management

Languages

EN

Services & products

Security domains

Penetration TestingOffensive SecurityIncident ResponseDigital ForensicsCloud SecurityApplication SecurityNetwork SecurityGRC & ComplianceSecurity AwarenessManaged Security

How they deliver

SoftwareManaged ServicesProfessional ServicesConsultingTraining

Products

SAINT VRM

Vulnerability risk management

Vulnerability risk management tool that identifies threats and provides business-centric cybersecurity data.

SAINT VM

Vulnerability management

Vulnerability management system that analyzes assets across locations and networks, prioritizes remediation and provides remediation tutorials.

SAINTScanner

Vulnerability scanner

Economical vulnerability scanning tool that identifies vulnerabilities, weak passwords, sensitive data exposures and misconfigurations.

SAINT Security Suite

Vulnerability management platform

Cybersecurity platform for uncovering, assessing and mitigating security risks across an organization.

SAINT ASV

PCI scanning

PCI Approved Scanning Vendor service for PCI DSS external vulnerability scans and compliance submissions.

SAINT for AWS

Cloud vulnerability management

Vulnerability management solution designed for Amazon Web Services environments.

Customers

EnterpriseSMBPublic Sector

Industries served

HealthcareFinanceGovernmentDefense

Compliance & partners

Compliance frameworks

PCI DSSHIPAAFISMANISTGDPR

Technology partners

AWS

Credentials & affiliations

Certifications

PCI Approved Scanning Vendor (ASV)

Issued by: PCI Security Standards Council

PCI Qualified Security Assessor (QSA)

Issued by: PCI Security Standards Council

SOC 2 Type II

Issued by: Attested

AWS Level 1 Managed Security Service Provider

Issued by: Amazon Web Services

Awards

SC Magazine 5-Star Award

SC Magazine

SC Magazine Innovator Award

SC Magazine

People

Management & team (3)

Other cybersecurity companies in United States

View all