SI

SISAP

San José, Costa Rica

Managed SecurityDetection & ResponsePenetration TestingIncident Response24/7 SOC
Serves Enterprise, SMB
Profile last updated: June 3, 2026

About

SISAP is a cybersecurity company based in San José, Costa Rica working in managed security, detection & response, penetration testing +12 more.

SISAP is a cybersecurity company operating across roughly ten countries in Latin America and the United States, with more than four decades of experience in cybersecurity products, services and implementations for large, small and medium-sized enterprises. Its offerings span managed security services and a 24/7 Next-Generation Security Operations Center, NOC services, penetration testing and red team exercises, vulnerability management, incident response and digital forensics through its CERT, threat intelligence, OT/IoT security, identity and access management, network segmentation, security awareness training, and brand and anti-fraud protection services. SISAP also provides consulting on information security, risk management and business continuity, PCI DSS assessments as a Qualified Security Assessor, and cybersecurity training and certification programs through its academy. The company is a member of FIRST and participates in regional CERT and CSIRT affiliations. It publishes cybersecurity news, analysis and a podcast for its audience.

Location

San José, Costa Rica

Focus areas

SOCCERTmanaged securitypenetration testingincident responsedigital forensicsOT securitysecurity awarenessPCI DSSLatin America

Languages

ENES

Services & products

Security domains

Managed SecurityDetection & ResponsePenetration TestingIncident ResponseDigital ForensicsThreat IntelligenceEndpoint SecurityNetwork SecurityIdentity & AccessCloud SecurityApplication SecurityData ProtectionOT/ICS SecurityGRC & ComplianceSecurity Awareness

How they deliver

Managed ServicesProfessional ServicesConsultingTraining

Operations

Runs a 24/7 security operations centre

Products

X-Analytics

Risk quantification

Service that identifies threat exposure and estimates potential financial impact of cyber risk, tailored to the client's industry.

Customers

EnterpriseSMB

Industries served

Financial ServicesTelecommunications

Compliance & partners

Compliance frameworks

PCI DSSSWIFT CSPISO/IEC 27001ISO/IEC 27002ISO/IEC 27005ISO/IEC 27032ISO 31000ISO/IEC 22301NIST Cybersecurity FrameworkNIST SP 800-82IEC 62443SOC 2

Technology partners

Palo Alto NetworksImpervaKnowBe4Terranova SecurityLumuIBMVerizon

Credentials & affiliations

Certifications

PCI QSA

Issued by: PCI Security Standards Council

MSP Verify (Unified Certification Standard for Cloud and Managed Services Providers, SOC 2 Type 2 trust services principles)

Palo Alto Networks Certified Professional Services Partner (CPSP)

Issued by: Palo Alto Networks

Imperva Platinum Support Partner

Issued by: Imperva

Awards

Company of the Year in Cybersecurity

Frost & Sullivan

Industry memberships

FIRST