What Kudelski Security does

Kudelski Security is a Switzerland-headquartered cybersecurity services provider and the cybersecurity division of the publicly listed Kudelski Group (SIX:KUD.S), founded in 2012. The company delivers managed detection and response (MDR), threat exposure management (CTEM, RBVM, offensive security), incident response and digital forensics, advisory services (strategy, risk, compliance, Zero Trust), and emerging technology security practices (AI, OT/CPS, blockchain, quantum, product security). It serves enterprise customers globally, with named clients including Pernod Ricard, and operates a horizontal segmentation approach spanning multiple verticals and use cases.

The technical foundation centers on MDR ONE Resolute, an XDR-based managed detection and response platform supported by four Cyber Fusion Centers in Switzerland, Spain, and the United States that deliver 24/7 monitoring, proactive threat hunting, and incident response across more than one million managed assets. The platform integrates with leading security ecosystems including CrowdStrike, Microsoft, Google SecOps, Splunk, Claroty, and Qualys, enabling customers to leverage existing tooling while outsourcing detection, investigation, and response. Active research output (KS Research blog, Threat Alert Center) and CVE disclosures indicate an in-house threat intelligence function that complements the delivery model. Delivery is supported by 400+ dedicated cybersecurity consultants, engineers, and specialists, plus R&D centers in Switzerland and India, with offices across Europe, North America, and Asia-Pacific (Switzerland, US, UK, France, Germany, Spain, Singapore, Taiwan, India).

Kudelski Security's business model is service-led. Recurring revenue is generated through multi-year managed services contracts (MDR, 24/7 IR retainers, continuous credential leak monitoring) while project-based professional services revenue comes from advisory, CTEM, penetration testing, red/purple team, and AI/emerging tech assessments. Pricing is consultative and quote-based, consistent with enterprise cybersecurity engagements; no public pricing tiers are disclosed. Go-to-market combines direct enterprise field sales with technology partner channels (CrowdStrike, Microsoft, Google, Claroty, Qualys, Splunk) and a public-sector channel via the Texas DIR program. The company is privately held as a division and does not publicly disclose standalone financials.

Name

Kudelski Security

Legal name

Kudelski Security (Cybersecurity Division of Kudelski Group)

Website

https://kudelskisecurity.com

Company type

Private

Founded year

2012

Operating status

Operating

Headcount range

5,001–10,000 employees

Short description

Kudelski Security is the cybersecurity division of Switzerland-listed Kudelski Group (SIX:KUD.S), delivering enterprise managed detection and response, threat exposure management, incident response, and advisory services across Europe, North America, and Asia-Pacific via four Cyber Fusion Centers managing over one million assets.

Ownership category

akta.pro rank

Product category

Managed Security Services

NAICS

Security Systems Services (except Locksmiths) (561621), Security Systems Services (56162), Computer Systems Design and Related Services (5415)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Security Management Platforms Integration (PSIM/SOC, Command & Control) (BPAKAGAH)

akta.pro secondary industries

Security Systems Monitoring & Dispatch (SOC/Remote Guarding) (IMAIAEAF), Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD)

Keywords

• Managed detection response
• Incident response services
• Threat exposure management
• Cybersecurity advisory services
• OT CPS security

Headquarters

HQ city

Cheseaux

HQ country

Switzerland

HQ region

Europe

Offices12 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed Detection and Response (MDR) Services: Core recurring managed security services delivered via Cyber Fusion Centers, providing 24/7 threat detection, investigation, and response. Includes MDR ONE Resolute (XDR-based), MDR for OT, MDR for Microsoft, MDR for CrowdStrike, MDR for Claroty, MDR for Google SecOps, proactive threat hunting, 24/7 IR retainers, and continuous credential leak monitoring. Revenue is recurring/subscription in nature, aligned with multi-year enterprise contracts.
2. Threat Exposure Management (TEM) / CTEM Services: Includes CTEM strategy and operations, continuous asset and threat visibility, external attack surface management (EASM), risk-based vulnerability management (RBVM), penetration testing, red team, purple team, and breach attack simulation services.
3. Incident Response & Digital Forensics: Cyber readiness and preparedness, tabletop exercises, cyber emergency response team, and 24/7 incident response retainer services. These are retainer-based and on-demand professional services.
4. Advisory Services: Strategy, risk and compliance services including maturity assessment, cyber risk quantification, compliance as a service, zero trust assessment, third-party risk management, local regulations assessment, cloud security posture assessment, and virtual CISO offerings.
5. AI & Emerging Technology Security Services: AI strategy and security assessments, blockchain security assessments, quantum computing security services, and OT/CPS security assessments, and product security services — launched as a dedicated portfolio in October 2024.

Go-to-market motion2 records

Distribution channels3 records

Marketing channels8 records

Core offering

Kudelski Security is a global cybersecurity services provider delivering managed detection and response (MDR) via its MDR ONE Resolute XDR-based platform and four Cyber Fusion Centers. Its portfolio spans threat exposure management, incident response and digital forensics, advisory services, AI and emerging technology security, OT/CPS security, and product security — sold to enterprise organizations and operated 24/7 by 400+ specialists managing over 1 million assets.

Product overview

Kudelski Security offers a comprehensive cybersecurity services portfolio centered around its MDR ONE Resolute platform—a next-generation managed detection and response solution built on XDR technology. The company provides an integrated suite of services organized across seven practice areas: Detection & Response (including MDR for OT, threat hunting, and credential leak monitoring), Threat Exposure Management (encompassing CTEM, vulnerability management, and offensive security services like penetration testing and red team operations), IR & Digital Forensics, Advisory Services, AI & Emerging Technology Security, OT & CPS Security, and Product Security. The platform supports integrations with leading security ecosystems including CrowdStrike, Microsoft, Google SecOps, Splunk, Claroty, and Qualys, enabling customers to leverage existing investments while benefiting from Kudelski's 24/7 Cyber Fusion Centers staffed with 400+ security professionals managing over 1 million assets globally.

Differentiator

Problem solved

Functional benefit

Brands

• ModernCISO: A thought leadership platform and blog providing cybersecurity insights for security leaders
• MDR ONE Resolute
• Cyber Fusion Center (CFC)

Products and services

• MDR ONE Resolute Next-generation managed detection and response service built on a proprietary XDR platform, providing flexible and scalable risk-based threat detection and response across any customer environment 24/7 from Kudelski Security's Cyber Fusion Centers.
• Managed Detection and Response (MDR) Leading proactive defense and effective threat detection with 24/7 coverage across customer environments, delivered from Kudelski Security's Cyber Fusion Centers.
• MDR for OT Managed detection and response services specifically designed for Operational Technology and Cyber-Physical Systems, protecting critical infrastructure and industrial environments (integrated with Claroty).
• Proactive Threat Hunting Proactive threat hunting service that stays ahead of cyber adversaries by actively searching for threats that may evade automated detection systems.
• 24/7 Incident Response Retainer Retained incident response support available 24/7 to stop breaches before they spiral, providing immediate access to security experts when needed.
• Continuous Credential Leak Monitoring Discovers leaked logins and helps prevent costly breaches by continuously monitoring for credential exposure across the dark web and other sources.
• MDR for CrowdStrike Multi-signal MDR detection, investigation and response service specifically designed for the CrowdStrike ecosystem; recognized with the CrowdStrike European MSSP of the Year award in June 2024.
• MXDR for Microsoft Multi-signal MDR (MXDR) coverage for the Microsoft ecosystem, strengthening resilience with proactive cyber defense using Microsoft security tools.
• MDR for Google SecOps Integration with Google Security Operations delivering high-speed investigations, elastic scalability, and intelligence-driven response without vendor lock-in.
• MDR for Claroty Managed detection and response services for OT and CPS environments leveraging Claroty's industrial control system visibility platform.
• MDR for Splunk Multi-signal MDR detection, investigation and response for the Splunk ecosystem, enabling organizations to leverage their existing Splunk SIEM investments.
• CTEM Strategy and Operations Cyber Threat Exposure Management (CTEM) strategy and operations service that helps organizations proactively reduce cyber risk at scale.
• Continuous Asset and Threat Visibility Identifies and reduces enterprise exposure at scale through continuous monitoring of assets and the threat landscape.
• External Attack Surface Management Discovers unknown assets and eliminates external vulnerabilities by continuously monitoring the organization's external attack surface.
• Risk-Based Vulnerability Management Discovers, prioritizes, and remediates the threats that matter most based on business risk context (integrates with Qualys).
• Penetration Testing Expert-led manual penetration testing services that identify what automated tools miss, simulating real-world attack scenarios.
• Red Team Adversary simulation service that simulates stealthy threat actors to identify gaps and test detection capabilities of security teams.
• Purple Team Aligns offense and defense teams to improve detection and response capabilities through collaborative security exercises.
• Breach and Attack Simulation Continuously validates cyber defenses by simulating real attack scenarios against the organization's security posture.
• Cyber Readiness and Preparedness Prepares organizations for cyber attacks before threats strike, including developing response plans and procedures.
• Tabletop Exercises Facilitated exercises that test cyber readiness by walking through hypothetical attack scenarios with organizational stakeholders.
• Cyber Emergency Response Team Fast-responding emergency incident response team that helps organizations recover from security incidents.
• Maturity Assessment Advisory service that helps organizations understand their current cybersecurity readiness maturity level.
• Cyber Risk Quantification Quantifies cyber risk in business terms, enabling organizations to make informed decisions about security investments.
• Compliance as a Service Streamlines compliance processes while strengthening overall cybersecurity posture across multiple regulatory frameworks.
• Zero Trust Assessment Identifies gaps in zero trust implementations, aligns teams, and accelerates zero trust architecture adoption.
• Third-Party Risk Management Reduces third-party risk and strengthens cyber resilience by assessing and managing vendor security risks.
• Local Regulations Assessment Ensures compliance across every jurisdiction by assessing readiness for local and regional cybersecurity regulations.
• Cloud Security Posture Assessment Strengthens cloud security posture by assessing configurations, access controls, and security settings across cloud environments.
• Virtual CISO On-demand cybersecurity leadership expertise providing organizations with experienced CISO guidance without full-time hiring.
• AI Strategy and Security Service that turns AI threats into manageable risk, helping organizations securely deploy and manage AI applications through strategic development, compliance, threat assessment, and security testing.
• Blockchain Security Assessment Makes blockchain implementations secure, compliant, and enterprise-ready through comprehensive security evaluation.
• Quantum Computing Security Protects organizational data from quantum threats by assessing and preparing quantum-safe security measures.
• OT Security Assessment Identifies gaps, mitigates risks, and drives operational technology security maturity for industrial control environments.
• CPS Security Assessment Minimizes risk in Cyber-Physical Systems environments through comprehensive security evaluation.
• Product Security Future-proofs products against cyber threats throughout the product development lifecycle for connected products and IoT devices.
• AI Security Service Portfolio Comprehensive AI security service portfolio launched in October 2024 that helps businesses address security and regulatory challenges associated with AI, including strategic development, compliance, threat assessment, and security testing services for AI applications. Leverages over five years of AI security expertise.

Quantifiable outcome

• Reduction in time to detect, investigate & respond: <0 months breakeven point for outsourcing MDR to Kudelski Security (Forrester TEI study, 3-year period)
• +1 more outcomes

Named customers1 record

Segments3 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration6 records

AI capability2 records

Feature4 records

Partnerships

Eight partnerships are on record, tiered core and minor.

• CrowdStrikecoreTechnology or IntegrationKudelski Security offers MDR services integrated with the CrowdStrike Falcon platform, providing multi-signal detection, investigation, and response for the CrowdStrike ecosystem. The partnership was recognized with Kudelski Security being named CrowdStrike European MSSP of the Year in June 2024.
• MicrosoftcoreTechnology or IntegrationKudelski Security provides MXDR (Managed Extended Detection and Response) services for the Microsoft ecosystem, integrating with Microsoft security tools to deliver proactive cyber defense with multi-signal coverage.
• Google (Google SecOps)coreTechnology or IntegrationKudelski Security integrates with Google SecOps to deliver high-speed investigations, elastic scalability, and intelligence-driven response, without vendor lock-in.
• ClarotycoreTechnology or IntegrationKudelski Security offers MDR for OT using Claroty's industrial security platform, protecting operational technology and cyber-physical systems in manufacturing and critical infrastructure environments.
• QualyscoreTechnology or IntegrationKudelski Security integrates Qualys vulnerability management capabilities into its threat exposure management and vulnerability management services.
• SplunkcoreTechnology or IntegrationKudelski Security offers MDR services integrated with Splunk's security information and event management (SIEM) platform, supporting multi-signal detection and response.
• Texas Department of Information Resources (DIR)minorChannel Partner/ Reseller/ DistributorKudelski Security has a partnership with the Texas DIR, providing cybersecurity services to Texas public-sector organizations through the DIR contracted vendor program.
• NAGRA (Kudelski Group)coreStrategic or Co-development PartnerKudelski Security is the cybersecurity division of the Kudelski Group (SIX:KUD.S), leveraging the group's broader technology portfolio including NAGRA for content protection and IoT security solutions. The group was established in 1951 with over 1900 employees globally.

Scale indicators7 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Arctic Wolf: Pure-play MDR provider delivering 24/7 monitoring, managed risk, and managed security awareness across SMB and mid-market. Direct head-to-head competitor with Kudelski Security in the MDR market, with similar vendor-agnostic positioning across endpoint, network, and cloud signals.
• eSentire: Pure-play MDR services provider specializing in 24/7 threat detection, investigation, and response for mid-market and enterprise. Competes directly with Kudelski Security's MDR ONE Resolute and IR retainer offerings across comparable customer segments.
• ReliaQuest: Enterprise-focused MDR provider built on its GreyMatter platform, delivering multi-vendor XDR-style detection and response. Closely comparable to Kudelski Security's MDR ONE Resolute given shared emphasis on platform-agnostic signal ingestion and enterprise customers.
• Secureworks: Global MDR and IR services provider spun out from Dell. Competes with Kudelski Security across managed detection and response, incident response retainers, and TAEGAN adversary simulation — both firms are repeatedly named in the same Gartner and Forrester MDR evaluations.
• Sophos (Sophos MDR): Cybersecurity vendor (owned by Thoma Bravo) offering its own Sophos MDR service alongside endpoint and network products. Comparable to Kudelski Security as a managed security services provider, though Sophos is more product-led while Kudelski is services-led.

Regional players

• NCC Group: UK-headquartered cybersecurity services firm with comparable MDR, incident response, and advisory practices, primarily serving European enterprises. Geographic and portfolio overlap with Kudelski Security's European Cyber Fusion Centers and advisory offerings.
• WithSecure (formerly F-Secure): European-headquartered cybersecurity vendor offering managed detection and response, incident response, and advisory. Overlaps with Kudelski Security's European enterprise MDR and IR retainer practices, though WithSecure is more product-rooted.

Broad incumbents

• Optiv: Large US-based security solutions integrator and MSSP offering managed security, advisory, and integration services. Competes with Kudelski Security's advisory and threat exposure management practices for enterprise CISO budgets, though Optiv is broader and US-centric.
• IBM Security Services (MDR): Global incumbent offering managed detection and response, IR, and advisory as part of a broad security portfolio. Comparable to Kudelski Security on enterprise MDR and consulting, but competes from a hyperscaler-adjacent platform and deeper bench.

Emerging players

• CrowdStrike (Falcon Complete MDR): Endpoint and XDR vendor with its own native MDR offering (Falcon Complete). Although a Core technology partner for Kudelski Security's 'MDR for CrowdStrike' service, it is also a direct competitor as CrowdStrike expands native managed services to enterprises.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• Xx.com/kudelskisec
• LinkedInlinkedin.com/company/kudelski-security

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Kudelski Security