Kestra Financial operates a broker-dealer and wealth management platform serving 1,700+ independent financial professionals across the United States, managing $142 billion in assets under advisement and $70 billion in assets under management. Founded in 1997 and headquartered in Austin, Texas, the firm runs multiple regulated entities including Kestra Investment Services (broker-dealer), Kestra Advisory Services (RIA), and subsidiaries handling portfolio management, trust services, and insurance planning.
The threat surface spans proprietary wealth management platform technology, broker-dealer operations infrastructure, and systems handling sensitive client financial data across nationwide operations. The tech stack includes Microsoft Office suite, Outlook, Adobe, and Redtail CRM alongside proprietary platform technology that powers end-to-end advisory solutions. Security responsibilities extend to protecting PII and financial records for thousands of advisors and their clients, maintaining regulatory compliance across SEC and FINRA domains, and securing M&A transaction data through subsidiary Bluespring Wealth Partners.
The operational model combines centralized platform technology with distributed advisor networks, creating authentication, access control, and data segmentation challenges typical of multi-tenant financial services architectures. Kestra Investment Management and Arden Trust add portfolio management and fiduciary service layers requiring additional controls around transaction integrity and client account protection.