Cybersecurity companies in Germany
43 companies in the directory are based in Germany. 37 are vendors and 6 are service firms. Of these, 13 belong to another company or an investor.
The list runs largest first. We rank by revenue from annual reports where a listed company files one, then by staff numbers. Companies with no revenue or staff figure come last.
43 companies, largest first
| Company | Category | Size | Ownership |
|---|---|---|---|
TÜV SÜD German testing and certification group whose security services include penetration tests, ISO/SAE 21434 certification and UN R155 audits. | Automotive cybersecurity | 26,529 staff | Private |
TÜV Rheinland Inspection firm that audits carmakers' security management for R155 type approval and certifies suppliers to ISO/SAE 21434. | Automotive cybersecurity | 22,093 staff | Private |
TÜV NORD German inspection group assessing vehicles and makers against UN R155, R156, ISO/SAE 21434 and ISO 24089. | Automotive cybersecurity | 11,658 staff | Private |
Vector Informatik Vector Informatik provides software, hardware and services for building, testing and operating software-defined systems. | Automotive cybersecurity | 2,440 staff | Private |
G Data CyberDefense G DATA CyberDefense AG is a German cybersecurity company based in Bochum. | EDR and XDR | 500 staff | Private |
HiSolutions Berlin-headquartered German cybersecurity consultancy with 30+ years of BSI IT-Grundschutz experience. Trusted by federal agencies, DAX corporations, and critical infrastructure operators. | Security consulting and vCISO | 201-500 staff | Private |
usd AG Frankfurt-based European payment security specialist holding the full set of PCI credentials (QSA, PFI, ASV, P2PE). Manual-first penetration testing for fintechs, acquirers, and regulated enterprises. | Penetration testing | 201-500 staff | Private |
Argos Security GmbH Argos Security GmbH is a German cyber defence provider with an AI-supported centre in Munich. | Managed security services | 100 staff | Owned by Sophora Unternehmerkapital |
C Cure53 Berlin-based web, browser, and cryptography auditors founded by Dr. Mario Heiderich, trusted by ExpressVPN, NordVPN, 1Password, and Bitwarden. | Penetration testing | 11-50 staff | Private |
Article 14 Ready Article 14 Ready provides a browser-based working packet for manufacturers that fall under the EU Cyber Resilience Act. | GRC and compliance automation | Private | |
asvin Software and services for cyber risk analysis, secure software updates and UNECE R155 and R156 compliance. | Automotive cybersecurity | Private | |
Auxilium Cyber Security Ettlingen consultancy pentesting vehicles, ADAS, gateways, infotainment and on-board chargers, plus R155 CSMS consulting. | Automotive cybersecurity | Private | |
cycura GmbH cycura provides Microsoft tenant security consulting and managed security services for businesses. | Managed security services | Private | |
DEKRA DEKRA is a global provider of testing, inspection and certification services. | Compliance audits (SOC 2, ISO 27001) | Private | |
dissecto Makes automated ECU and vehicle security test tools and hardware, and carries out automotive penetration testing. | Automotive cybersecurity | Owned by dSPACE | |
Emproof Bochum software firm hardening embedded and ECU firmware binaries against reverse engineering and exploitation, with ASIL-D certification. | IoT, embedded and product security | Private | |
ETAS Bosch subsidiary selling ESCRYPT HSM firmware, intrusion detection, risk analysis tools and a managed vehicle SOC. | Automotive cybersecurity | Owned by Robert Bosch | |
FEV Engineering services group whose FEV.io arm runs TARA, ISO 21434 work, secure lab testing and vehicle pentests. | Automotive cybersecurity | Private | |
Fuzzware Fuzzes compiled ECU and embedded firmware in emulation, finding memory bugs without needing the physical hardware. | IoT, embedded and product security | Private | |
genua GmbH genua GmbH is a German IT security company that protects critical and highly sensitive digital infrastructures. | Firewalls | Owned by Bundesdruckerei | |
Greenbone Greenbone provides vulnerability management software that scans IT systems for security weaknesses. | Vulnerability management | Private | |
GuardingPearSoftware GuardingPearSoftware creates security and anti-cheat tools for Unity game developers. | Encryption and key management | Private | |
Hornetsecurity Ltd. Hornetsecurity provides Microsoft 365 security, backup, and compliance services for managed service providers. | Email security | Part of Proofpoint | |
IGEL IGEL provides a secure endpoint operating system for cloud workspaces and virtual desktop environments. | OT and ICS security | Owned by TA Associates | |
LegacyMind GmbH LegacyMind GmbH provides a firmware security platform that analyses firmware at the binary level. | Software supply chain and SBOM | Private | |
Link11 Link11 provides DDoS protection and web application security services for companies. | DDoS protection | Private | |
mainsec UG (haftungsbeschränkt) mainsec UG (haftungsbeschränkt) is an IT security consultancy based in Würzburg with a second location in the Sauerland. | Security consulting and vCISO | Private | |
pi3g German Cyber Resilience Act compliance and embedded security specialist. 16+ years in IoT and embedded Linux, delivering CRA readiness, compliance engineering, and legal certification for products with digital elements. | IoT, embedded and product security | Private | |
Schwarz Digits Schwarz Digits is the IT and digital division of Schwarz Group. | Managed security services | Owned by Schwarz Group | |
SoSafe SoSafe provides security awareness training and human risk management to help organisations reduce cyber threats. | Security awareness and human risk | Private | |
SRC Security Research & Consulting German security lab in Bonn, recognised by the PCI SSC for PTS device evaluation, plus German payment terminal schemes. | Penetration testing | Owned by Bank-Verlag, DG Nexolution, Deutscher Sparkassen Verlag and VÖB-ZVD | |
SYSGO PikeOS hypervisor maker offering a secure vehicle gateway platform with firewall and IDS, plus a host-based IDS. | IoT, embedded and product security | Part of Thales Cyber Solutions | |
Tenzir Tenzir provides an agentic telemetry pipeline for data-driven cyber defenders. | Security data pipelines | Private | |
Tuta Tuta provides encrypted email, calendar and contacts services with a focus on privacy. | Email security | Private | |
XM Cyber XM Cyber provides a platform for continuous exposure management across hybrid environments. | Attack surface management | Owned by Schwarz Group | |
Code Intelligence Automated fuzz testing for C and C++ code, with an AUTOSAR simulator and support for ISO/SAE 21434 testing. | Application security testing | Private | |
E Elektrobit German automotive software maker offering embedded security software, network intrusion detection and cybersecurity maintenance for vehicles. | Automotive cybersecurity | Owned by AUMOVIO | |
itemis Tool for building and updating threat analyses and risk assessments to ISO/SAE 21434, IEC 62443 and the CRA. | Automotive cybersecurity | Private | |
Maltego Maltego provides a platform for open source intelligence and cyber investigations. | OSINT tools | Owned by Charlesbank Capital Partners | |
ONEKEY ONEKEY provides a platform for product cybersecurity and compliance, automating SBOM analysis, vulnerability detection, and regulatory compliance. | Software supply chain and SBOM | Private | |
P Primary Target Browser-based tool that automates threat analysis and risk assessment, mainly for vehicle makers and their suppliers. | Automotive cybersecurity | Private | |
SAP Customer identity and access management for B2C and B2B, with passwordless login, consent management and customer profiles, alongside SAP's enterprise business software. | Customer identity | Private | |
Utimaco Utimaco provides hardware security modules, encryption, and key management for data protection and critical infrastructure. | Encryption and key management | Owned by SGT Capital |