# Privaxi

> Privaxi assesses, engineers, validates, and continuously sustains security and compliance programs across HIPAA, HITRUST, PCI DSS, SOC 2, ISO 27001, CMMC, NIST, and more — powered by the CYRIK platform. Privaxi is a full-lifecycle partner (Assess → Engineer → Validate → Sustain), a GSA Multiple Award Schedule contract holder, a HITRUST Authorized Readiness Licensee, and a Cyber AB CMMC Registered Practitioner Organization (RPO).

## Core Services
- [All Services](https://www.privaxi.com/services): Overview of Privaxi's full service catalog
- [Governance as a Service (GaaS)](https://www.privaxi.com/services/governance-as-a-service): Leadership, accountability, policy, risk, and reporting structure to govern at scale
- [Compliance as a Service (CaaS)](https://www.privaxi.com/services/compliance-as-a-service): Preparing for and sustaining compliance across relevant frameworks
- [Cybersecurity as a Service (CSaaS)](https://www.privaxi.com/services/cybersecurity-as-a-service): Engineering and operating security controls that reduce risk and support compliance
- [Continuous Assurance Management Program (CAMP)](https://www.privaxi.com/services/continuous-assurance-management-program): Year-round audit readiness with continuous evidence, monitoring, and executive visibility
- [Penetration Testing (PTaaS)](https://www.privaxi.com/tools/ai-pen-testing): AI-automated and expert-led penetration testing, plus red team exercises
- [Testing & Assessment Services](https://www.privaxi.com/services/testing-and-assessment-services): Network, web app, API, and cloud penetration testing
- [vCISO (Virtual CISO)](https://www.privaxi.com/services/vciso): On-demand strategic security leadership and compliance guidance
- [Managed Security Services](https://www.privaxi.com/services/managed-security-services): Ongoing managed security operations
- [Cloud Engineering & Security](https://www.privaxi.com/services/comprehensive-cloud-security): Cloud-native security engineering and assessment
- [Integrated Risk Management](https://www.privaxi.com/services/integrated-risk-management): Enterprise risk management program support
- [Policies & Procedures Development](https://www.privaxi.com/services/policies-procedures-development): Security and compliance policy development

## Compliance Frameworks
- [HIPAA](https://www.privaxi.com/services/hipaa): Healthcare compliance and security services
- [HITRUST](https://www.privaxi.com/services/hitrust-compliance): HITRUST CSF readiness and certification support
- [PCI DSS](https://www.privaxi.com/services/pci-dss-compliance): Payment card industry compliance services
- [ISO 27001](https://www.privaxi.com/services/iso27001): Information security management certification support
- [ISO 42001](https://www.privaxi.com/services/iso-42001): AI management system compliance
- [NIST](https://www.privaxi.com/services/nist): NIST framework alignment services
- [CMMC](https://www.privaxi.com/services/cmmc-compliance): Cybersecurity Maturity Model Certification readiness for defense contractors
- [SOC 2](https://www.privaxi.com/services/soc-2-compliance): SOC 2 Type I/II audit readiness and support

## Platform (CYRIK)
- [CYRIK — Cybersecurity & Compliance Hub](https://www.privaxi.com/tools/cyrik): Central platform tying together assessment, engineering, and evidence
- [CYRIK AI Recon — AI Pen Testing](https://www.privaxi.com/tools/ai-pen-testing): AI-driven continuous penetration testing platform
- [CYRIK AI Shield — SIEM](https://www.privaxi.com/tools/shieldsoc): Managed SIEM and SOC-as-a-Service offering
- [CYRIK AI Assure — GRC](https://www.privaxi.com/tools/cyrik-ai-assure): Governance, risk, and compliance management tool

## Industries Served
- [Financial Services & Insurance](https://www.privaxi.com/industries/financial-services-insurance)
- [Banking](https://www.privaxi.com/industries/banking)
- [Retail & E-Commerce](https://www.privaxi.com/industries/retail-ecommerce)
- [Healthcare & Life Sciences](https://www.privaxi.com/industries/healthcare-life-sciences)
- [Collections & Receivables](https://www.privaxi.com/industries/collections-receivables)
- [Telecommunications](https://www.privaxi.com/industries/telecommunications)
- [Government & Public Sector](https://www.privaxi.com/industries/government-public-sector)
- [Private Equity & Venture Capital](https://www.privaxi.com/private-equity-venture-capital-firms)
- [GSA Schedule](https://www.privaxi.com/industries/gsa-schedule): GSA Multiple Award Schedule contract details for federal, state, and local agencies

## Resources
- [Blog](https://www.privaxi.com/blog): Articles on compliance, cybersecurity, HIPAA, HITRUST, CMMC, SOC 2, and penetration testing
- [Resource Library](https://www.privaxi.com/resources): Guides and downloadable resources
- [Free Executive Pen Testing Report](https://www.privaxi.com/ai-penetration-testing): Complimentary board-ready security posture report
- [Free Dark Web Exposure Report](https://www.privaxi.com/services/free-dark-web-exposure-report): Complimentary dark web exposure assessment

## Company
- [About Privaxi](https://www.privaxi.com/company/about-us): Company background and mission
- [Careers](https://www.privaxi.com/company/careers): Open roles at Privaxi
- [Partner Program](https://www.privaxi.com/company/partner-program): Partnership opportunities
- [Our Trusted Partners](https://www.privaxi.com/company/our-trusted-partners): Partner ecosystem
- Contact: info@privaxi.com — 66 West Flagler St, Suite 900, Miami, FL 33130

## Optional
- [Terms and Conditions](https://www.privaxi.com/terms-and-conditions)