Provider Snapshot

Core services
Security Operations Center as a Service (SOCaaS), Managed Detection & Response (MDR), Vulnerability Management +5 more
Platforms
IBM QRadar, Fortinet, Palo Alto Networks +1 more
Client focus
SMB (51-200), Mid-Market (201-1000), Enterprise (1000+)
Response SLA
30 minutes
Website
sisap.com

Company Details

Headquarters
Guatemala City, Guatemala
Founded
2007
Employees
51-200
SOCs
1
Response SLA
30 minutes

Pricing

Pricing Model
Custom
Starting Price
Custom quote

About SISAP

SISAP is the premier cybersecurity services provider in Central America, headquartered in Guatemala City with operations throughout Latin America. They operate a fully staffed Security Operations Center providing 24/7 threat monitoring, incident response, and managed detection services. SISAP has built deep expertise in protecting organizations across the region from sophisticated cyber threats, with particular strength in financial services, telecommunications, and government sectors. Their bilingual team and understanding of regional regulatory requirements make them a trusted partner for organizations across Spanish-speaking Latin America.

Manage or promote this profile

Represent this provider? Claim and verify the profile, get Featured placement, or become a Top Provider.

Suggest an update

Industries Served

SISAP has experience serving 5 industries, including the regulatory requirements and security challenges unique to each.

Supported Platforms

SISAP supports 4 security platforms. MSSPs with hands-on experience in your tools can onboard faster and tune detections more accurately.

Client Company Sizes

SISAP serves SMB (51-200), Mid-Market (201-1000), Enterprise (1000+) organizations. Providers focused on your company size tend to offer pricing and service levels that match your budget and team capacity.

Compliance Frameworks Supported

SISAP provides compliance support for 4 frameworks. Compliance support typically includes control mapping, evidence collection, audit preparation, and ongoing monitoring to keep you audit-ready year-round.

ISO 27001PCI DSSSOC 2GDPR

Certifications Held

SISAP holds 2 certifications. Each certification means the provider passed an independent audit of their security practices, operations, or technical skills.

ISO 27001SOC 2 Type II

What Should You Ask When Evaluating SISAP?

Before engaging any MSSP, use these questions to assess whether the provider is the right fit for your organization. These apply to SISAP and any other provider on your shortlist.

  • What is included in the base service vs. what costs extra? Clarify whether incident response, compliance reporting, and additional log source onboarding are included or billed separately.
  • What response actions does the provider take directly? Some MSSPs only send alerts for your team to act on. Others take containment actions like host isolation or account lockout on your behalf.
  • What does the onboarding process look like? Ask about typical onboarding timelines, how much work your team needs to put in, and when full monitoring coverage goes live.
  • Can you provide references from similar organizations? Ask for references from companies in your industry and size segment. The experience of similar organizations is the best predictor of how the MSSP will perform for you.
  • What happens if we need to switch providers? Understand data portability, contract termination terms, and transition support. A transparent exit process is a sign of a provider that prioritizes long-term trust over lock-in.

Market Context

Selected insights from 401 MSSPs in our dataset

  • Platform18% of MSSPs support IBM QRadar
  • Platform48% of MSSPs support Fortinet
  • Capability44% of MSSPs offer Threat Hunting
  • Capability29% of MSSPs offer Managed XDR
  • Industry28% of MSSPs serve Telecommunications organizations

Market Intelligence

Market Intel Available

Market intelligence data for this provider is available through the MSSPProviders API. Pricing signals, coverage data, and sourced market insights.

Market intelligence available via API