VISTA InfoSec

Founded in 2004, VISTA InfoSec is a cybersecurity company based in New York, United States working in grc & compliance, penetration testing, offensive security +4 more.

VISTA InfoSec is an information security consultancy offering compliance, audit, certification, technical assessment and managed security services. It is known for PCI DSS consulting and QSA-led audits, and also provides PCI SSF advisory and certification for payment software vendors. Its services cover SOC 2, ISO 27001, GDPR, HIPAA, NIS2, DORA, NIST CSF and other regulatory frameworks. Technical offerings include penetration testing, web and mobile application security testing, source code review, red team assessments and vulnerability assessments. The firm also provides training, DPO consultancy and CISO advisory. It operates through offices in the United States, United Kingdom, Singapore, India, the UAE and Estonia, serving clients across banking, financial services, healthcare, fintech and SaaS. The company positions itself as vendor-neutral and states it does not outsource client engagements. It also runs a partnership programme for referral, delivery and strategic alliance partners.