DEFENDERBOX
DEFENDERBOX, operated by Germany's SMB Cybersecurity GmbH, delivers a plug-and-play hardware appliance that runs automated penetration testing for German small and medium-sized businesses, integrating NodeZero® from Horizon3.ai to provide continuous, enterprise-grade attack-path validation at SMB price points via subscription and MSP reseller channels.
- Company typePrivate
- Founded2024
- HeadquartersKreuztal, Germany
- Headcount1–10
- GTM typeB2B
- OfferingServices
What DEFENDERBOX does
DEFENDERBOX, operated by SMB Cybersecurity GmbH and headquartered in Kreuztal, Germany, delivers a plug-and-play cybersecurity and automated penetration testing solution targeted at the German Mittelstand (small and medium-sized businesses). The company addresses the gap between affordable, infrequent security tooling and expensive annual pentests by packaging continuous attack-path validation into a managed service aimed at organizations that lack the budget, time, or in-house expertise to run traditional enterprise security assessments. Named customers span SMB end markets including procurement (AMS GmbH), technology services (nexti GmbH), logistics (Orbit Logistics Europe), consulting (Bevermann Consulting), and healthcare/NGO (DRK Ortsverein Ahaus), with an additional chamber-of-commerce distribution agreement via IHK-Siegen.
The core product is a physical hardware appliance (DEFENDERBOX) that connects to a customer's power and network and performs automated external and internal security scans without requiring agent installation on servers. The proprietary engine running on the appliance is NodeZero® from Horizon3.ai, which provides attack-path simulation, exploitability-based vulnerability prioritization, and continuous (weekly or monthly) security checks rather than point-in-time annual audits. A companion DEFENDERBOX OT module extends scanning into operational technology environments, and industry-specific variants have been launched for Healthcare, Public Sector, and NGOs. Disclosed performance claims include a 72% reduction in attack surface after six months, 56% fewer critical vulnerabilities, and 85% fewer misconfigurations.
DEFENDERBOX monetizes primarily through a recurring SaaS-style subscription billed monthly, quarterly, or annually, with the hardware provided at the customer site for the subscription term; an auto-renewing 3-month default term is in the standard terms. Secondary revenue streams include day-rate consulting (capped at 8 hours per consulting day) and managed-services revenue routed through MSP/reseller partners. Distribution is split between a product-led growth motion (free test installation, Calendly-booked demos) and a channel partner motion built around German MSPs and IT service providers including Dr. Netik & Partner, FESCON, Intension, IITR Datenschutz, INSENTIS, MAX IT, UNILAB, and BITSIC. All customer data is processed in Germany with no data storage.
DEFENDERBOX firmographics
Firmographics- Name
- DEFENDERBOX
- Legal name
- SMB Cybersecurity GmbH
- Website
- https://defenderbox.de
- Company type
- Private
- Founded year
- 2024
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- DEFENDERBOX, operated by Germany's SMB Cybersecurity GmbH, delivers a plug-and-play hardware appliance that runs automated penetration testing for German small and medium-sized businesses, integrating NodeZero® from Horizon3.ai to provide continuous, enterprise-grade attack-path validation at SMB price points via subscription and MSP reseller channels.
- Ownership category
- akta.pro rank
DEFENDERBOX industry classification
Industry- Product category
- Automated Penetration Testing Services
- NAICS
- Computer Systems Design and Related Services (54151)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Vulnerability Management & Penetration Testing Services (BPAEADAD)
- akta.pro secondary industry
- Threat Intelligence, Hunting & Adversary Emulation (BPAKAHAE)
Keywords
Where DEFENDERBOX is headquartered
LocationHeadquarters
- HQ city
- Kreuztal
- HQ country
- Germany
- HQ region
- Europe
Offices1 record
Markets served
DEFENDERBOX business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations, Supply Chain
Revenue model
- SaaS Subscription (DEFENDERBOX): Monthly, quarterly, or annual subscription-based managed security service. Physical DEFENDERBOX hardware is provided at client location for the duration of the subscription. Initial term auto-renews for 3 months unless 60 days written notice is given.
- Consulting Services: Day-rate consulting and coaching services for custom security assessments and support. A consulting day has a maximum of 8 hours.
- Partner/Reseller Revenue: Revenue generated through MSP partner model where partners resell DEFENDERBOX services to end customers. MSPs pay for instances deployed for end customers.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | DEFENDERBOX subscription for automated security testing |
| Freemium | Pay-as-you-go | Free test installation |
| Other | Pay-as-you-go | Enterprise/custom engagements |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels6 records
DEFENDERBOX product offering
Product offeringCore offering
DEFENDERBOX is a plug-and-play cybersecurity hardware device that performs automated penetration testing of IT infrastructure for small and medium-sized businesses (Mittelstand). It integrates Horizon3.ai's NodeZero® enterprise-grade pentesting engine to scan networks, identify exploitable vulnerabilities, simulate attack paths, and prioritize risks without requiring agent installation or on-site security expertise. The solution is delivered as a managed security subscription service with continuous weekly/monthly scans and results delivered within 48 hours.
Product overview
DEFENDERBOX offers a unified plug-and-play cybersecurity platform centered on automated penetration testing for small and medium-sized businesses. The core DEFENDERBOX product is a hardware-based solution that performs continuous security scans, complemented by specialized OT (Operational Technology) security modules. The platform integrates NodeZero® from Horizon3.ai for automated pentesting and provides industry-specific solutions for Healthcare, Public Sector, NGOs, as well as vertical markets including Industry, IT, Car Dealerships, and Metal sectors. All offerings share the same underlying automated scanning technology with different configurations for each use case.
Differentiator
Problem solved
Functional benefit
Products and services
- DEFENDERBOX
Quantifiable outcome
- 72% reduction in attack surface after 6 months of DEFENDERBOX use
- +6 more outcomes
Companies that use DEFENDERBOX
Customer profileNamed customers6 records
Segments6 records
Ideal customer profiles3 records
DEFENDERBOX technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability4 records
Feature5 records
DEFENDERBOX partnerships and signals
Strategic signalPartnerships
Eleven partnerships are on record, tiered core and minor.
- IHK-SiegencorePartnership with Chamber of Commerce to offer DEFENDERBOX to IHK-Siegen member companies. First pentest test sponsored free of charge for members. IHK-Siegen promotes cybersecurity awareness among regional businesses through this offering.
- Horizon3.aicoreStrategic technology partnership integrating NodeZero® automated pentesting technology from Horizon3.ai as the core engine of DEFENDERBOX. Horizon3.ai brings validated security testing experience from 100,000+ server checks and ~2 million telecommunications customer vulnerability assessments. DEFENDERBOX white-labels this enterprise technology for the SMB market.
- unilabminorunilab partners with DEFENDERBOX for joint events including 'Security Breakfast' to promote cybersecurity solutions to German businesses.
- Dr. Netik & Partner GmbHminorIT consulting firm that resells/deploys DEFENDERBOX to end customers as part of its managed security service offerings.
- FESCONminorIT service provider partner reselling DEFENDERBOX to end customers.
- IntensionminorIT services partner deploying DEFENDERBOX solutions to end customers.
- IITR DatenschutzminorData protection and IT consulting firm partner offering DEFENDERBOX.
- INSENTISminorIT services partner reselling DEFENDERBOX solutions.
- MAX ITminorIT solutions partner deploying DEFENDERBOX to end customers.
- UNILABminorIT services and consulting partner offering DEFENDERBOX alongside unilab's cybersecurity services.
- BITSICminorIT security partner reselling DEFENDERBOX to customers.
Scale indicators7 records
Recent moves6 records
Expansion highlights6 records
DEFENDERBOX competitors and assessment
Company assessmentMarket position
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
DEFENDERBOX social profiles
Digital presenceDEFENDERBOX financial estimates
Financial estimateRevenue estimate
Valuation estimate
DEFENDERBOX leadership team
Management profileNumber of profiles
Profiles12 records
DEFENDERBOX funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
DEFENDERBOX M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about DEFENDERBOX
What does DEFENDERBOX do?
DEFENDERBOX is a plug-and-play cybersecurity hardware device that performs automated penetration testing of IT infrastructure for small and medium-sized businesses (Mittelstand). It integrates Horizon3.ai's NodeZero® enterprise-grade pentesting engine to scan networks, identify exploitable vulnerabilities, simulate attack paths, and prioritize risks without requiring agent installation or on-site security expertise. The solution is delivered as a managed security subscription service with continuous weekly/monthly scans and results delivered within 48 hours.
Is DEFENDERBOX a public or private company?
DEFENDERBOX is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was DEFENDERBOX founded?
DEFENDERBOX was founded in 2024. It employs 1 to 10 people.
Where is DEFENDERBOX based?
DEFENDERBOX is headquartered in Kreuztal, Germany, in the Europe region.
How does DEFENDERBOX make money?
Three revenue lines are on record. SaaS Subscription (DEFENDERBOX) is the primary driver. The others are consulting Services and partner/Reseller Revenue.
Does DEFENDERBOX have an API?
No public API is recorded for DEFENDERBOX.
What industry is DEFENDERBOX in?
DEFENDERBOX's product category is Automated Penetration Testing Services. Its primary akta.pro industry code is BPAEADAD, Vulnerability Management & Penetration Testing Services, with a secondary code of BPAKAHAE, Threat Intelligence, Hunting & Adversary Emulation. Its NAICS code is 54151 and its SIC code is 7370.