Cybersecurity Services for Clearwater

Clearwater bought two companies in 2022 and both were older than Clearwater. CynergisTek dated to 2004 and TECH LOCK to 2008, while Clearwater itself was founded in Nashville in 2009 by Bob Chaput. Altaris Capital invested in 2018. Sunstone Partners followed with a strategic investment in 2025, and the firm's place on MSSP Alert's Top 250 climbed from number 75 in 2022 to number 36 in 2025. KLAS rated it best in security and privacy consulting services in 2026

Acquiring upward leaves a company with several delivery cultures and one brand promise. Clearwater now runs risk management software in IRM|Pro, a consulting practice, a managed services business, and Redspin, which in 2021 became the first authorized C3PAO under the CMMC program and therefore carries independence obligations the consulting side does not. The customer base runs from hospitals and health plans to digital health companies and medical device manufacturers, and the certification work they buy against HITRUST, PCI DSS, SOC 2 and CMMC is pinned to audit dates rather than spread evenly through the year. Sunstone's money implies a growth rate. Assessment revenue grows only as fast as qualified assessors are free in the weeks a client's auditor is available

CWS staffs the weeks you cannot. Engagements go out under the Clearwater brand against one written delivery standard, across the United States and Canada, and in French when a Quebec or Canadian federal client requires it. Corova is where scope, price and project status live, which counts for something when a single account has a software renewal, a managed services contract and an assessment running at the same time