New York, New York
Cybersecurity Services in New York, New York
New York City reached the largest number of small businesses in its history in 2024. Any company licensed under the state Banking, Insurance or Financial Services Law must follow the DFS cybersecurity regulation, 23 NYCRR Part 500, and state law requires breach notice to residents within thirty days of discovery.
What should a New York business know before hiring a cybersecurity provider?
- New York City saw the largest number of small businesses in its history in 2024, with one in five created since 2022. Source: NYC Small Business Services, December 20, 2024
- New York State has 2.2 million small businesses, 99.8 percent of all New York businesses. Source: SBA Office of Advocacy: 2023 Small Business Profile, New York
- On March 1, 2017, DFS issued 23 NYCRR Part 500, which it calls a first in the nation cybersecurity regulation for financial services companies. Source: NY DFS: Cybersecurity Resource Center
- Part 500 applies to anyone licensed or registered under the New York Banking Law, Insurance Law or Financial Services Law, even if other agencies also regulate them. Source: NY DFS: Cybersecurity Resource Center
- Fort Hamilton in Brooklyn is the only active duty military installation in the greater New York City area. Source: Military OneSource: Fort Hamilton overview
What does New York breach law require?
A business must notify affected New York residents in the most expedient time possible and without unreasonable delay, and within thirty days after the breach is discovered, except for the legitimate needs of law enforcement. It must also notify the state Attorney General, the Department of State and the Division of State Police. Source: New York General Business Law, section 899-aa
Where can a New York business get local help?
- NYC SBS APEX Accelerator: One on one government contracting help from NYC Small Business Services.
- New York SBDC centers in NYC: No cost business advising at centers across the five boroughs.
- NY DFS Cybersecurity Resource Center: Guidance, FAQs and filing instructions for Part 500 covered entities.
Which cybersecurity providers serve New York?
These providers serve New York, New York from New York locations or remotely. Listings are not ranked.
- Featured provider
Capital Cyber
Full Spectrum Cybersecurity Services
Full spectrum cybersecurity services including CMMC compliance, managed IT, penetration testing, and vCSO services.
- CMMC Compliance
- Managed IT Services
- Penetration Testing
- vCSO Services
- CMMC specialist
CMMC Ready Now
Specialized CMMC Compliance Consulting
Specialized CMMC compliance consulting to help defense contractors meet certification requirements and win federal contracts.
- CMMC Gap Assessment
- CMMC Certification Prep
- System Security Plans
- Policy Development
- Managed IT
Telco United
Cybersecurity and CMMC Compliance for Government Contractors
Telco United helps defense and government contractors with CMMC compliance, cyber risk assessments, penetration testing, managed security and vCSO services.
- CMMC Compliance
- Cyber Risk Assessments
- Penetration Testing
- Managed Security
- Grant partner
Cyber Grants Alliance
Connecting Businesses with In-Kind Cybersecurity Grants
The Cyber Grants Alliance (CGA) connects small businesses and defense contractors with in-kind cybersecurity grants, including CGA grants and CMMC Gap Assessment grants..
- Grant Navigation
- CGA Grant Applications
- CMMC Gap Assessment Grants
- Grant Consultation
What do businesses in New York ask about cybersecurity providers?
How do I find a cybersecurity company in New York, New York?
Start with the providers listed on this page, which serve New York either from New York locations or remotely. Compare at least two on the services they include, their experience with businesses your size, how they handle incidents, and references from similar clients. Our guide on how to choose a cybersecurity provider lists the questions to ask.
Who offers CMMC compliance help in New York?
Providers in this directory that list CMMC services and serve New York include Capital Cyber and CMMC Ready Now and Telco United. We do not rank providers or describe any of them as CMMC certified, because CMMC is a Department of Defense program that assesses defense contractors. Ask any consultant to explain the current DoD requirements: on July 13, 2026 DoD suspended CMMC Phase II, and Phase I self-assessments remain in place.
What does New York General Business Law 899-aa require after a data breach?
A business must notify affected New York residents in the most expedient time possible and without unreasonable delay, and within thirty days after the breach is discovered, except for the legitimate needs of law enforcement. It must also notify the state Attorney General, the Department of State and the Division of State Police. Source: New York General Business Law, section 899-aa.
Where can a small business in New York get local help with government contracting and security?
NYC SBS APEX Accelerator: One on one government contracting help from NYC Small Business Services. New York SBDC centers in NYC: No cost business advising at centers across the five boroughs. NY DFS Cybersecurity Resource Center: Guidance, FAQs and filing instructions for Part 500 covered entities.
Can a small business in New York get cybersecurity help at no cost?
Yes, some options cost nothing. CISA offers no-cost Cyber Hygiene vulnerability scanning to U.S. public and private sector critical infrastructure organizations and keeps a list of no-cost services and tools. Eligible small businesses and defense contractors can also apply for Cyber Grants Alliance in-kind grants, delivered at no cost to them.
Do I need a cybersecurity provider located in New York?
Not always. Monitoring, policy work, and most assessments can be delivered remotely, while on-site network or hardware work is easier with a provider nearby. Several providers on this page serve New York remotely, so ask each one whether they offer on-site visits if you need them.
Read more: how to choose a cybersecurity provider, how to choose a managed security provider, CMMC gap assessment grants, cybersecurity help for nonprofits.
Sources: DoD CIO: About CMMC; CISA Cyber Hygiene Services; CISA no-cost cybersecurity services and tools
Last reviewed:
Need cybersecurity help in New York?
Talk to the team behind this directory, or apply for an in-kind grant if budget is the blocker.
Or email info@cybersecuritynearme.ai