Your
our mission.
IT security from one source
As a specialized IT security consultancy with offices in Germany and Switzerland, our experts already support more than 200 organizations and companies in protecting their digital assets.
Our most popular services
You can find all our services in our service overview.
BSI-certified IT security service provider
We provide our security testing as a BSI-certified IS penetration testing service provider, registration ID BSI-APS-9080.
Technical and regulatory expertise, combined
We combine technical security testing with regulatory expertise into security measures that work in practice. No ivory-tower theory, no technology for its own sake.
Management is hands-on
Whoever advises you in the first call also works on your project. Management estimates the effort itself, because it does the work.
Customers who already trust us
Years of project experience, recognized certifications and an interdisciplinary team of experts form the basis on which we build trust, reduce risk and strengthen digital resilience.
Because security is built on trust.
„The way your new reports link MITRE to the vulnerabilities is seriously impressive … really well done. That is worth its weight in gold for our threat analyses.“
Customer, statutory health insurer
„The pentest surfaced real issues, led to concrete fixes, and gives us a solid baseline to build on.“
Erlang Ecosystem Foundation, on our security audit, public report on hex.pm
Does this sound familiar?
Most of our customers come to us with a specific challenge.
Our industry focus
We work particularly often for organizations in healthcare, for medical device manufacturers, in critical infrastructure and for port operators. There we know the regulation, the systems and the language.
Regulatory requirements
Many enquiries begin with a requirement. Here you'll find the direct entry point to the most common ones.
Where does your organization stand on IT security?
Find out, with the free CyberRisikoCheck per DIN SPEC 27076. Two hours of effort, an evaluated report, no obligation.




















