Cybersecurity PR

Cybersecurity PR Agency for Security and AI Security Startups

Growth Stack Media is a senior-led cybersecurity PR agency for VC-backed security, AI security and compliance companies. We turn your research, product news and executive expertise into coverage that CISOs, security teams and analysts trust, and that shows up when buyers ask AI search who to trust.

Schedule a call Send us a message

15-minute intro call with a senior strategist. No obligation.

What we do

Ongoing cybersecurity PR programs

Security buyers are skeptical by default. A steady program of credible coverage, expert commentary and research builds the trust that one announcement cannot.

Security media relations

Targeted, relationship-driven pitching to the reporters who cover your category at outlets such as Dark Reading, SecurityWeek, CSO and The Register, plus security podcasts and newsletters.

Research and data stories

We help you package original research, vulnerability findings and threat data into stories reporters can cover quickly: clear findings, real implications and practical advice.

Executive thought leadership

A bench of credible voices, from your CEO and CTO to your researchers, with bylines, expert commentary on breaking news and executive media training.

Conference and event PR

Plans for RSAC, Black Hat, VulnCon and the events your buyers attend: speaking submissions, on-site briefings and news timed to the show.

Awards and speaking

Award entries written as stories, not checklists, plus speaking proposals that put your experts in front of security leaders.

AI search visibility

Earned media is what ChatGPT, Perplexity and Google AI Overviews cite. We track the prompts your buyers use and build the coverage that answers them.

Funding and launch PR

Funding round or launch coming up?

Funding rounds, product launches and major research releases get one shot. We plan them as company milestones that reinforce your category story, not as one-off press releases.

  1. Story and proof

    We lock the news hook, the proof points and the spokespeople, and prep your executives for interviews.

  2. Embargoed briefings

    We brief the right reporters, podcasts and analysts under embargo, two to four weeks ahead where possible.

  3. Announcement day

    Coordinated release, exclusives, social and owned channels, with investors, customers and partners ready to amplify.

  4. Momentum after

    Bylines, podcast interviews, awards and follow-on stories that keep the news working for months, not days.

Plan your announcement
Proof

Cybersecurity PR results

Pangea: building a category leader in enterprise AI security

In nine months, Growth Stack Media secured 130+ PR hits for AI security startup Pangea and established it as an authoritative voice in enterprise AI security. Pangea was named a Fast Company Next Big Things in Tech 2025 honoree and won a SiliconANGLE TechForward 2025 award. In September 2025, CrowdStrike announced it would acquire Pangea, in a deal reported at $260 million.

The brief, set in January 2025, was to make Pangea the market authority in enterprise AI security. We built one category narrative, a bench of executive voices and a steady drumbeat of research, launches and awards. Coverage and interviews included The Register, CSO, IT Brew, TechRadar and NBC Press:Here, plus speaking slots at AI Risk Summit and AI Summit NYC. Pangea was also an InfoWorld Technology of the Year finalist.

“It was far above what I've seen much larger PR firms achieve in the past and that's testament to your experience and thoughtfulness.”

Founder and former CEO, Pangea
Read the Pangea case study
  • 130+ PR hits in nine months
  • $260M Reported value of the CrowdStrike acquisition
  • 2 Award wins: Fast Company Next Big Things in Tech 2025 and SiliconANGLE TechForward 2025

FIRST

Growth Stack Media is Agency of Record for FIRST, the global Forum of Incident Response and Security Teams. We support its vulnerability forecasts, conferences such as VulnCon and FIRSTCON, and produce the video series Improving Security Across Nations with FIRST.

FIRST announcement

Secureframe

We work with Secureframe, the compliance automation company, on PR and executive visibility for its security and compliance platform.

Growth Stack Media and its team have been featured in Forbes, MediaPost, The Drum, TechNewsWorld and Marketing Dive. See the latest in our newsroom.

Focus

Security companies we work with

VC-backed security and AI security startups, plus the nonprofits and standards bodies that shape the security community.

  • AI security and AI red teaming
  • Application and cloud security
  • Vulnerability management
  • Threat intelligence
  • Identity and data security
  • Compliance and GRC automation
  • Security nonprofits and standards bodies
How we work

A senior team from the first call

Growth Stack Media was founded in 2019 by Jordan Mitchell and is led by Jordan and managing partner Summer Mitchell, with offices in Raleigh and Oakland.

  1. Intro call

    A 15-minute call to understand your company, your stage and the news on your calendar. If we are not the right fit, we will say so.

  2. Narrative and 90-day  plan

    We sharpen your positioning, pick the outlets, podcasts, awards and events that matter to your buyers, and map the first 90 days.

  3. Ongoing program

    Senior people run your account week to week, with clear monthly reporting on coverage, share of voice and where you show up in AI search.

FAQ

Frequently asked questions

What does a cybersecurity PR agency do?

A cybersecurity PR agency helps security companies earn credible coverage with the reporters, analysts and communities their buyers trust. That includes media relations, research and data stories, executive thought leadership, conference PR, awards and speaking. Growth Stack Media also tracks how your company shows up in AI search tools such as ChatGPT and Perplexity.

How do security startups get covered by outlets like Dark Reading, SecurityWeek and CSO?

Security reporters cover news that helps defenders: new research, real vulnerabilities, clear data and expert analysis of breaking events. The fastest path is usually original research or a credible point of view from a technical expert, pitched to the right reporter with clear findings and implications. Product news lands best when it is tied to a problem security teams already care about.

How should we plan PR around RSAC or Black Hat?

Start six to eight weeks out. Reporters fill their show calendars early, so briefing requests, speaking submissions and embargoed news need to go out well before the event. We help you decide whether to announce at the show or around it, and line up meetings that fit your story.

How do you handle sensitive news like vulnerability research?

We work with your research and legal teams to follow responsible disclosure, coordinate timing with affected vendors where needed, and make sure the story is accurate and useful to defenders. Well-handled research builds credibility with both reporters and the security community.

Do you work with AI security companies?

Yes. AI security is one of our core areas. We helped AI security startup Pangea earn 130+ PR hits in nine months before CrowdStrike announced its acquisition, in a deal reported at $260 million.

How do you measure cybersecurity PR results?

We report on coverage quality and reach, share of voice against competitors, executive visibility, speaking and award wins, and how often your company appears in AI search answers for the prompts your buyers use. You get a clear monthly view of what is working.

Explore more