Badrap

What Badrap does

Badrap Oy is a Finnish micro-enterprise cybersecurity company headquartered in Oulu that operates badrap.io, a hosted SaaS platform aggregating threat intelligence from multiple upstream security-research organizations, including The Shadowserver Foundation, Fitsec, Telia Darknet, the Deutsche Telekom Honeypot Project, Have I Been Pwned and Remod, into a single subscription service. Users register assets (IP addresses, email addresses, domains) and receive 24/7 monitoring, breach alerts and step-by-step interactive playbooks covering cyber-hygiene training, supply-chain risk assessment, NIS2 compliance and general security automation. The platform is hosted on Google Cloud SQL (with SSAE 16, ISO 27001, PCI DSS v3.0 and HIPAA-aligned infrastructure) and offers integration apps for AWS, Google Cloud Platform, Microsoft Azure, Microsoft Office 365, Google Workspace, Traficom (NCSC-FI) and SensorFu Beacon, allowing automated asset synchronization at scale. The company operates a security-researcher community (badrap.io/researchers) and is GDPR-compliant with a board-approved ESG policy.

The business model is a freemium-to-paid tiered SaaS: a free Personal tier (EUR 0/mo) for individuals with basic playbooks and standard alerts, and three paid business tiers (Self-service, Full service, Full service plus) requiring commercial engagement via [email protected] for any organization with more than 5 employees. Paid tiers add full playbook access, automation, kickoff and monthly customer-success meetings, expert-assisted playbook execution and bundled professional services. Pricing is quote-based and annual for business tiers. Go-to-market combines product-led growth for individuals with high-touch direct sales for organizations, supported by a security-researcher community, content marketing on Medium (@badrapio) and an extensive docs site (docs.badrap.io). The named customer base comprises more than 50 Finnish organizations spanning energy (Fingrid, Caruna, Lahti Energia, EPV and others), healthcare (HUS), retail (Kesko, HalpaHalli), transport (HSL, Port of Helsinki, Kaukokiito), finance and insurance (Keva, Enfuce, Veriff, eMabler), public sector (Traficom, Kalajoki, HSY, Business Finland) and academia (Universities of Oulu and Jyväskylä, Åbo Akademi). The company is founder-led with four co-founders (Heikki Kortti, CEO; Jani Kenttälä, Product & Customer Success; Joachim Viide, Software Developer; Hillar Aarelaid, Speaks for the Researchers), approximately 10 total team members and an advisor, Merike Kaeo. Funding has come from founders, ScanABC (Ääkköset Oy), Gorilla Capital, Business Finland (formerly TEKES) and an EU Regional Development Fund grant of EUR 193,585 (April 2025 to April 2026) for the 'Playbooks for Cyber Security - Self-Service Enablement' project managed by the ELY Centre for North Ostrobothnia.

Name

Badrap

Legal name

Badrap Oy

Website

https://badrap.io

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

1–10 employees

Short description

Badrap Oy is a Finnish micro-enterprise operating badrap.io, a SaaS platform that aggregates threat intelligence from multiple upstream security-research providers and delivers it as 24/7 asset monitoring, breach alerts and step-by-step playbooks to Finnish individuals, enterprises and public-sector organizations.

Ownership category

akta.pro rank

Product category

Cybersecurity SaaS

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518), Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Prepackaged Software (7372)

akta.pro primary industry

Threat Intelligence Services (BPAEADAC)

akta.pro secondary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

Keywords

• Threat intelligence aggregation
• Cybersecurity playbooks
• Security monitoring SaaS
• Asset vulnerability alerts
• NIS2 compliance automation

Headquarters

HQ city

Oulu

HQ country

Finland

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B and B2C

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

1. Subscription - Tiered SaaS: badrap.io offers a tiered subscription model: Free tier (0 EUR/mo) for individuals with basic playbooks and standard security alerts; Self-service tier for businesses with automation and all playbooks; Full service tier adding expert-assisted playbook execution, monthly customer success meetings, and professional services; Full service plus tier with doubled professional services effort and more frequent customer success meetings. Commercial terms are quote-based for business tiers.
2. Professional Services: Badrap provides expert-assisted services included in Full service and Full service plus tiers, including playbook execution support, customer success meetings, and professional services for cyber security implementation.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels5 records

Core offering

Badrap operates badrap.io, a hosted cybersecurity SaaS platform that aggregates threat intelligence from multiple security research sources and delivers actionable security notifications through interactive playbooks and automation. The platform provides continuous 24/7 asset monitoring (IP addresses and email addresses), data breach monitoring via Have I Been Pwned, and step-by-step security playbooks covering cyber hygiene training, NIS2 compliance, and supply chain risk assessment. It is offered via a free tier for individuals and three paid subscription tiers (Self-service, Full service, Full service plus) for businesses.

Product overview

Badrap offers a cybersecurity subscription platform built around interactive playbooks for automating security tasks. The core offering consists of four service tiers: a free Personal tier for individuals, a Self-service tier for businesses with automation capabilities, and two Full Service tiers offering expert-assisted playbook execution. Key products include Badrap Playbooks (step-by-step security task automation), Badrap Apps (cloud service integrations for asset sync), Data Breach Monitoring (integrated with Have I Been Pwned), and 24/7 Monitoring. The platform relays security researcher warnings about IP addresses and email addresses to help users identify and remediate vulnerabilities.

Differentiator

Problem solved

Functional benefit

Products and services

• Badrap Personal (Free Tier) Free individual subscription providing access to free playbooks, automatic security alerts based on registered assets, and standard security content. Targeted at individual users and families.
• Badrap Self-service (Business Tier) Paid business tier for organizations with more than 5 employees. Includes all free-tier features plus access to all playbooks, task automation with apps (AWS, GCP, Azure, Office 365, Google Workspace), tailored security content, and a kickoff meeting with the Badrap team.
• Badrap Full Service (Business Tier) Premium business subscription tier that adds a playbook-of-the-quarter executed as full service, a 30-minute monthly customer success meeting, and access to professional services on top of the Self-service tier.
• Badrap Full Service Plus (Business Tier) Top-tier business subscription that adds an extra playbook executed as full service, a 60-minute monthly customer success meeting, and doubled professional services effort on top of the Full Service tier.
• Badrap Playbooks Interactive, step-by-step cyber security playbooks with automation, smart recommendations, and reminders. Covers cyber hygiene training, NIS2 compliance, supply chain risk assessment, and general security automation. Personal playbooks are free; full access requires a paid subscription.
• Badrap Apps (Cloud Provider Integrations) Integration apps for AWS, Google Cloud Platform, Microsoft Azure, Microsoft Office 365, Google Workspace, Traficom (NCSC-FI), SensorFu Beacon, and HTTPS-based asset registration. Automate asset synchronization and security monitoring at scale. Part of commercial offering.
• Data Breach Monitoring Monitoring service that searches user email addresses against Troy Hunt's Have I Been Pwned data breach reporting database and notifies users when new breaches containing their data are published. Requires explicit user consent.

Quantifiable outcome

• Playbook execution pace of three months per cyber security playbook (e.g., employee training in first three months, supply chain assessment in next three months)
• +1 more outcomes

Named customers16 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration9 records

Feature7 records

Partnerships

Six partnerships are on record, tiered core.

• The Shadowserver FoundationcoreTechnology or Integration · 1 January 2004Shadowserver Foundation, established in 2004, is a volunteer security research organization that gathers intelligence on internet threats. Badrap integrates Shadowserver data to alert users about malicious activity in their networks. Shadowserver reports are available in select countries.
• FitseccoreTechnology or IntegrationFitsec provides customized security solutions including penetration testing, hardware-based safety solutions, and threat intelligence feeds. Their feeds are provided free for individual victims via Badrap, while enterprises can subscribe to their feeds for a fee.
• Telia DarknetcoreTechnology or IntegrationTelia Darknet (part of Telia Company) operates a darknet that catches infected computers by recording connection attempts to unused IP addresses. Their work has been referred to by Microsoft as 'Finland's Secret for a Secure Internet'. Telia offers their darknet data to Badrap for distribution to users.
• Deutsche Telekom Honeypot ProjectcoreTechnology or IntegrationDeutsche Telekom operates over 200 honeypots globally as part of their Cyber Early Warning System (Sicherheitstacho). Their honeypot data is shared with Badrap to help identify attack sources and vulnerable systems worldwide.
• Have I Been Pwned (Troy Hunt)coreTechnology or IntegrationHave I Been Pwned is a free data breach search engine operated by Microsoft Regional Director Troy Hunt. Badrap integrates with Have I Been Pwned to allow users to search for information relating to their email addresses among public data breach datasets. Troy Hunt's service does not log or store email addresses when queried.
• RemodcoreTechnology or IntegrationRemod Oy provides data about hackable building automation connected to the Internet as part of a Badrap-sponsored Fidelix-FI notification bounty to help those in danger protect their systems.

Scale indicators4 records

Recent moves5 records

Expansion highlights5 records

Broad incumbents

• WithSecure (formerly F-Secure Business): Finnish-headquartered cybersecurity vendor offering managed detection, endpoint protection, and consulting. Targets the same Finnish enterprise and public-sector buyers as Badrap but with a much broader portfolio, positioning as an incumbent alternative for organisations consolidating security tooling.
• KnowBe4: Global leader in security awareness training and phishing simulation. Competes with Badrap's cyber hygiene training and playbook-enabled employee-security capabilities, particularly for NIS2-driven training mandates.
• Recorded Future (Mastercard): Large-scale threat intelligence platform aggregating dark web, vulnerability, and brand-monitoring data. Competes with Badrap at the threat-intel layer but targets large enterprise/mid-market globally rather than Finnish SMBs directly.

Direct peers

• Arctic Security: Finnish cybersecurity company focused on threat intelligence and supply-chain risk indicators for Nordic enterprises and NCSCs. Directly comparable to Badrap's threat-feed aggregation and asset-monitoring capabilities, serving overlapping customers in energy, finance, and public sector.
• Anomali: Threat intelligence platform that aggregates feeds and delivers alerts to enterprise SOC teams. Comparable product architecture to Badrap's badrap.io but at enterprise scale; useful upper-end benchmark for Badrap's product roadmap.
• ThreatConnect: Threat intelligence and security orchestration platform offering feed aggregation, threat scoring, and playbook-driven response. Conceptually closest to Badrap's playbook-automation and multi-feed approach.
• Hoxhunt: Helsinki-based security awareness and phishing simulation platform that, like Badrap, focuses on making cybersecurity approachable for individuals and employees. Both are Finnish-origin, target Finnish and EU enterprises, and compete for the same NIS2-driven training and behaviour-change budgets.

Emerging players

• Shodan: Internet-wide asset discovery and exposure-monitoring service comparable to Badrap's asset/IP monitoring use case. Competes for the same external attack-surface visibility budget but with a developer/API orientation rather than playbook-led UX.

Regional players

• Visma (Cybersecurity modules): Nordic software conglomerate providing business software and IT/security services to SMBs across Scandinavia. Relevant comparator for how Nordic SMB customers bundle IT/security tooling; an indirect peer via channel and customer overlap.
• Tietoevry Security Services: Nordic-headquartered IT services and security provider with managed security, identity, and compliance offerings across Finland and the Nordics. Competes for the same regulated Finnish enterprise security budgets, especially in healthcare, energy, and public sector where Badrap has traction.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/badrap
• Xx.com/badrapio
• LinkedInlinkedin.com/company/badrap

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles10 records

Funding overview

Funding rounds2 records

Investors2 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Badrap