Trimarc

Trimarc is a professional services company based in Washington, DC that helps organizations secure their Microsoft platforms, both on-premises and in the cloud. Founded by Sean Metcalf, a Microsoft Certified Master in Active Directory, the firm focuses on a 'reality-based security model' to combat evolving attack techniques. All current work is performed under the TrustedSec banner, though Trimarc personnel still execute the tasks.

The company offers specialized security assessments including the Microsoft Cloud Security Assessment (MCSA) for Entra ID and Microsoft Office 365, as well as the Active Directory Security Assessment (ADSA) to identify privilege escalation risks. These services target the systems that most organizations depend on, such as Active Directory, Entra ID, Microsoft Office 365, and VMware.

Trimarc's assessment process typically takes 4 to 6 weeks depending on the environment size, with larger setups requiring 6 to 8 weeks. The engagement breaks down into five phases, starting with initial access or configuration data receipt and ending with internal team and SME/QA review before final report preparation.

The assessment timeline is usually 4 to 6 weeks, though smaller environments can be completed in 3 to 4 weeks while large ones take around 6 to 8 weeks. Prior to starting, the Operations Team determines whether to use remote access or a contactless approach requiring no connectivity.

Trimarc's reports are distinguished by a rigorous review process that can take up to a week to ensure all potential security issues are explored and documented. Every report is reviewed by a Subject Matter Expert, discussed with all SMEs for that assessment type, and checked by at least one Red Team member.

The assessment requires only read-only or view-only rights to the system being evaluated, minimizing the impact on the customer's operations. Once the assessment begins, the team needs only a few hours of the customer's time to complete the initial access phase.

Trimarc customers report resolving over half of the High priority findings within days to weeks, rather than months or years. They are also able to resolve over 95% of Critical priority findings relatively quickly after receiving the report.

The firm's methodology identifies security issues attackers could exploit to fully compromise an environment and provides custom recommendations to mitigate them. Their core value proposition is understanding operational concerns alongside having the security vision to discover issues, ensuring recommendations are feasible and actionable.

Trimarc works with Fortune 50 companies and beyond to fortify Active Directory and Identity infrastructure with unparalleled precision. The team consists of subject matter experts with 10 to 20 years of operational experience across the platforms they focus on.

The company's name references an ancient Celtic military cavalry tactic where a rider was always ready to mount a fallen soldier's horse, symbolizing multiple defensive layers. This 'reality-based security model' ensures that if one defense fails, others compensate to provide additional detection and mitigation.

Trimarc has been featured in various press outlets including Microsoft Tech Community, Yahoo News, and Infosec Magazine. Their research has been cited in discussions about securing identities in Azure Active Directory and hybrid cloud complexity risks.

Recent Trustburn reviews from 2023 show a mix of ratings, with many customers praising the team's professionalism, efficiency, and responsiveness. Reviewers consistently highlight the team's dedication and ability to provide top-notch security solutions tailored to specific needs.

Some reviewers on Trustburn mention that Trimarc's team is highly skilled and provides excellent security solutions that exceed expectations. Others note the team's promptness in responding to needs and their commitment to prioritizing customer satisfaction.

The official website of Trimarc is trimarcsecurity.com.

On Trustburn, Trimarc has a rating of 3.9 out of 5 based on 10 reviews.