Alchemy Security

Alchemy Security is a Denver, Colorado-based boutique managed security services provider built around Splunk, offering 24/7 managed detection and response (MDR), Splunk deployment and tuning services, and security assessments including virtual CISO support. Founded in 2007, the company operates as a specialized practice rather than a broad platform vendor, positioning itself as a Splunk reseller, implementation partner, and managed operator for organizations that have already invested in Splunk but lack the in-house staff to run it around the clock.

The company’s main differentiator is Lapis, a proprietary "Security Operating System" that sits on top of a customer’s Splunk environment. Lapis is framed as an integrated risk management layer: it tracks the maturity of security controls over time, maps operational telemetry to business risk, and automates workflows so that raw SIEM data becomes something an executive team can act on rather than a stream of alerts only analysts can parse. The MDR service underneath is described as aligning detections to the MITRE ATT&CK framework.

With roughly 11-50 employees and no publicly disclosed venture funding, Alchemy operates more like an established regional MSSP than a venture-backed platform company. That profile caps how fast it can extend Lapis or compete for the largest enterprise MDR contracts, but it also means the firm is not dependent on growth-at-all-costs economics — a relevant consideration for buyers wary of vendor instability. No independent, third-party validation (such as a named MITRE Engenuity ATT&CK evaluation result) of the MDR program’s detection efficacy appears in public sources; the strength of the offering rests on Splunk specialization and services depth rather than a proven differentiated detection engine.