Gradient Cyber

Gradient Cyber is a cybersecurity services company headquartered in Southlake, Texas, that provides Managed Extended Detection and Response (MXDR) for mid-market organizations. Its service combines a proprietary XDR platform, branded Quorum AI, with a 24x7 in-house security operations center staffed by security analysts. The platform ingests telemetry from network, endpoint, cloud, SaaS and identity sources and processes it through an eight-stage detection and response pipeline: events are normalized to the open OCSF standard, enriched with asset and vulnerability context, evaluated by dual detection engines (rule-based and behavioral anomaly detection), and correlated into attack narratives mapped to the MITRE ATT&CK framework before a human analyst reviews the finding.

Beyond core detection and response, the company offers adjacent security services including risk and threat assessments, penetration testing, vulnerability assessment, incident response, security awareness training and virtual CISO (vCISO) advisory. Gradient Cyber positions its architecture as open and additive, integrating with tools customers already own rather than requiring replacement of an existing security stack. It also publishes a Situation Report (SitRep) API and data structures intended for use by other security teams, and shares threat findings at industry events.

Founding story

Founded in 2017 to address what the company describes as a gap for mid-sized businesses, which it says were underserved by traditional cybersecurity providers offering either overpriced enterprise solutions or standardized services poorly matched to their needs. James Hamilton is listed as founder, president and CEO.

Business model

B2B subscription and managed-services model: customers contract for ongoing MXDR monitoring and response delivered from Gradient Cyber's SOC on top of the Quorum AI platform, with additional professional services such as penetration testing, incident response and vCISO advisory available. Third-party profiles categorize the customer profile as subscription SaaS plus services and consulting.

Recurring managed security service subscriptions supplemented by project-based security services. One third-party data provider lists an estimated annual revenue of $7.5 million and revenue per employee of about $145,000; these figures are provider estimates rather than company-reported results.

Traction

The company reports analyzing more than three terabytes of telemetry daily and publishes customer testimonials from a multinational industrial company, a midsize medical group, a large US hospitality company, a regional bank and a retail business. Third-party sources place headcount at roughly 52 employees (51-100 range), with departmental data indicating concentrations in IT/security operations (16) and sales (10), and cite total funding of $10-12 million.

Latest developments

The most recent publicly dated development is the Quorum AI platform, announced in a company post dated January 18, 2026 and recorded by a market-data provider as launched January 20, 2026. The company continues to publish security research and awareness content, including an August 2026 post on autonomous frontier-model attack chains and network-level detection.