Cybersecurity consulting firms in Germany
14 of the 171 cybersecurity consulting firms we list are based in Germany. 3 are owned by another company and 11 are private. The oldest, TÜV NORD, was founded in 1869. Of the 6 companies here with staff numbers, the largest is TÜV Rheinland (22,093 staff).
Companies focused on security consulting and vCISO in Germany
2 companies| Company | Based in | Founded | Size | Ownership |
|---|---|---|---|---|
 HiSolutions Berlin-headquartered German cybersecurity consultancy with 30+ years of BSI IT-Grundschutz experience. Trusted by federal agencies, DAX corporations, and critical infrastructure operators. | Berlin, Germany | 1992 | 201-500 staff | Private |
 mainsec UG (haftungsbeschränkt) mainsec UG (haftungsbeschränkt) is an IT security consultancy based in Würzburg with a second location in the Sauerland. | Rimpar, Germany | 2025 | Private |
Also active in security consulting and vCISO
12 companies| Company | Based in | Founded | Size | Ownership |
|---|---|---|---|---|
 TÜV Rheinland Inspection firm that audits carmakers' security management for R155 type approval and certifies suppliers to ISO/SAE 21434. | Cologne, Germany | 1872 | 22,093 staff | Private |
 TÜV NORD German inspection group assessing vehicles and makers against UN R155, R156, ISO/SAE 21434 and ISO 24089. | Hannover, Germany | 1869 | 11,658 staff | Private |
 Vector Informatik Vector Informatik provides software, hardware and services for building, testing and operating software-defined systems. | Stuttgart, Germany | 1988 | 2,440 staff | Private |
 usd AG Frankfurt-based European payment security specialist holding the full set of PCI credentials (QSA, PFI, ASV, P2PE). Manual-first penetration testing for fintechs, acquirers, and regulated enterprises. | Frankfurt, Germany | 2002 | 201-500 staff | Private |
C Cure53 Berlin-based web, browser, and cryptography auditors founded by Dr. Mario Heiderich, trusted by ExpressVPN, NordVPN, 1Password, and Bitwarden. | Berlin, Germany | 2013 | 11-50 staff | Private |
 cycura GmbH cycura provides Microsoft tenant security consulting and managed security services for businesses. | Einbeck, Germany | Private | ||
 DEKRA DEKRA is a global provider of testing, inspection and certification services. | Stuttgart, Germany | 1925 | Private | |
 dissecto Makes automated ECU and vehicle security test tools and hardware, and carries out automotive penetration testing. | Regensburg, Germany | 2022 | Owned by dSPACE | |
 ETAS Bosch subsidiary selling ESCRYPT HSM firmware, intrusion detection, risk analysis tools and a managed vehicle SOC. | Stuttgart, Germany | 1994 | Owned by Robert Bosch | |
 FEV Engineering services group whose FEV.io arm runs TARA, ISO 21434 work, secure lab testing and vehicle pentests. | Aachen, Germany | 1978 | Private | |
 pi3g German Cyber Resilience Act compliance and embedded security specialist. 16+ years in IoT and embedded Linux, delivering CRA readiness, compliance engineering, and legal certification for products with digital elements. | Leipzig, Germany | 2012 | Private | |
 SRC Security Research & Consulting German security lab in Bonn, recognised by the PCI SSC for PTS device evaluation, plus German payment terminal schemes. | Bonn, Germany | 2000 | Owned by Bank-Verlag, DG Nexolution, Deutscher Sparkassen Verlag and VÖB-ZVD |