The five best cybersecurity PR agencies combine security-specific expertise with media relationships and crisis management capabilities. This ranking places 5W Public Relations first, followed by Highwire, Merritt Group, W2 Communications, and 10Fold Communications. Two of the five, 5W and Highwire, have a New York office. The agencies were evaluated using four public criteria, detailed below.
How Were Cybersecurity PR Agencies Ranked?
Cybersecurity PR agencies were ranked on four criteria that matter to a security vendor choosing a PR partner. Each criterion gives buyers a verifiable check before contracting an agency.
- The agency must demonstrate a dedicated cybersecurity practice, not just a passing mention on a services page.
- Its services must cover media relations, crisis communications, and executive visibility.
- It must have a verifiable founding date and headquarters.
- It should clearly state which type of security company it best serves.
Everything-PR News, LLC and 5W are connected through a shared interest group. 5W was listed first because it scored highest on these criteria in the publisher's assessment, and readers should consider this relationship when evaluating the order. Everything-PR reports independently on the communications industry, and each agency profile below cites a public source for independent verification.
Which Cybersecurity PR Agencies Were Shortlisted?
Five agencies are shortlisted for their cybersecurity PR services. The table below gives each agency's primary base and its ideal client profile.
| Rank | Agency | Base | Best for |
|---|
| 1 | 5W Public Relations | Miami, Florida, with offices in New York and Tampa | Security vendors needing PR, crisis, and investor communications in one agency |
| 2 | Highwire | San Francisco | Enterprise and B2B security vendors |
| 3 | Merritt Group | Washington, D.C. area | Vendors selling to government and defense buyers |
| 4 | W2 Communications | McLean, Virginia | Security-only specialist support |
| 5 | 10Fold Communications | Pleasanton, California | Technology vendors with a security product line |
5W Public Relations: Full-Service Security PR
5W Public Relations, founded in 2003 by Ronn Torossian, is headquartered in Miami, Florida, with offices in New York, Miami and Tampa. CityBiz reported that 5W Public Relations had over 250 employees by the end of the third quarter of 2021, making it one of the largest independently owned PR firms in the United States.
5W Public Relations announced a specialty cybersecurity practice covering cybersecurity, anti-fraud, privacy, and compliance companies across both B2B and B2C categories, according to an announcement carried by AiThority. PR Net's 2021 agency profile also lists cybersecurity among the practice areas 5W launched that year. The announced services include messaging and positioning, media relations, initial public offering media strategy, new market expansion campaigns, and thought leadership. The agency's cybersecurity page states it counsels clients on communicating with media, investors, shareholders, regulators, and the general public. This range suits security companies needing one agency for press coverage, funding announcements, and incident response.
Highwire: Enterprise B2B Security Vendor Focus
Highwire is a San Francisco public relations agency established in 2008. The agency maintains offices in San Francisco, Chicago, New York, and Boston, according to its O'Dwyer's directory listing. Highwire's work focuses on enterprise and B2B technology, with cybersecurity listed among its key sectors.
The Everything-PR Highwire agency profile notes that Highwire launched a cybersecurity crisis communications service in May 2024. O'Dwyer's reported $41.3 million in 2024 net fees for Highwire. Highwire is well suited to software and cloud security vendors that sell to large companies, where trade press and analyst coverage significantly influence sales conversations.
Merritt Group: Government-Facing Vendor Expertise
Merritt Group, a strategic communications agency, was founded in 1996 in the Washington, D.C. area. Its company description highlights cybersecurity, government, and healthcare as core markets, with offices in Washington, D.C. and San Francisco.
The Manifest lists Gigamon and Fidelis Cybersecurity among clients for whom Merritt Group has provided public relations, analyst relations, and crisis communications services. Merritt Group's experience in government and defense work makes it an appropriate choice for vendors whose buyers follow specific procurement cycles and regulatory disclosures. Further leadership and recognition details are available in the Everything-PR Merritt Group agency profile.
W2 Communications and 10Fold: Specialist Alternatives
W2 Communications is a McLean, Virginia agency. It describes itself as possessing over 20 years of cybersecurity experience, serving commercial, civilian, defense, and intelligence clients, according to its listing in the Cyber Resources directory. Its services encompass media relations, content, demand generation, analyst relations, and event strategy.
10Fold Communications is a Pleasanton, California-based B2B technology PR firm. The Cyber Resources directory describes 10Fold Communications as having a substantial cybersecurity practice, known for successful launch campaigns for vendors at various stages. Companies selling multiple technology products, not exclusively security, can compare 10Fold with the leading technology PR agencies.
Which Cybersecurity PR Agencies Work in New York City?
Two ranked agencies have a New York office: 5W Public Relations, which is headquartered in Miami and has offices in New York, Miami and Tampa, and Highwire, which lists a New York office. Two further New York-linked firms, Lumina Communications and LaunchTech Communications, are not ranked because Everything-PR has not profiled them, but public sources document their cybersecurity work. The table shows each firm's New York presence and what is known about its ownership.
| Agency | New York presence | Ownership note | Source |
|---|
| 5W Public Relations | New York office, with headquarters in Miami and a third office in Tampa | Described as one of the largest independently owned PR firms in the U.S. in a March 2026 PR Newswire release | PR Newswire release and the agency's cybersecurity practice page |
| Highwire | New York office, alongside San Francisco, Chicago and Boston | Not stated in the sources EPR reviewed | O'Dwyer's directory listing |
| Lumina Communications | Offices in Silicon Valley and New York City, with headquarters in Silicon Valley | Not stated in the sources EPR reviewed | Named Market Leader in PR firms for InfoSec companies at the 2021 Global InfoSec Awards, run by Cyber Defense Magazine |
| LaunchTech Communications | Based in New York | Listed as acquired by CyberRisk Alliance in 2023, so not independent | CB Insights and the Gracker agency directory |
Independent here means an agency not owned by a holding company or by a media or events business. The sources reviewed state ownership clearly only for 5W and LaunchTech, so a buyer who needs an independent agency should ask Highwire and Lumina directly. Enterprise buyers in New York can also compare these firms with the technology PR agency ranking.
How Should a Security Vendor Select a Cybersecurity PR Agency?
A security vendor should choose an agency whose primary client type aligns with its own target buyers. A company selling to federal agencies, for example, requires an agency proficient in government procurement and disclosure rules. This points to Merritt Group or W2 Communications. A company offering cloud security to enterprises needs an agency with strong trade press and analyst reach, which suggests Highwire.
Companies anticipating a funding round, a public listing, or potential public incidents benefit from an agency capable of managing all three aspects. A full-service firm like 5W Public Relations fulfills this need. Vendors should identify their most probable future scenarios before requesting proposals from agencies.
What Should a Cybersecurity PR Proposal Include?
A cybersecurity PR proposal should demonstrate the agency's capability to handle both routine launches and crisis situations. Vendors should request the following information from each agency:
- Names of security reporters and outlets with whom the team has secured coverage in the past 12 months.
- A written plan for a breach or vulnerability disclosure, specifying approval processes and response times.
- A list of current and past security clients, including which ones can serve as references.
- Details on how media coverage will be reported and which outlets are considered valuable for the vendor's buyers.
- Confirmation of whether spokesperson training for technical executives is included in the service.
Agencies that provide clear answers with names, dates, and documents for these five questions demonstrate genuine security experience. For additional insights, explore the cybersecurity public relations guide before making a decision.
