Secura
Secura, operating as Bureau Veritas Cybersecurity, provides penetration testing, compliance advisory, and certification across IT, OT, and IoT environments for enterprise, industrial, financial, and government clients in Europe, the US, and India.
- Company typePrivate
- Founded2000
- HeadquartersAmsterdam, Netherlands
- Headcount101–250
- GTM typeB2B
- OfferingServices
What Secura does
Secura, operating as Bureau Veritas Cybersecurity since its acquisition by Bureau Veritas Group, is a Netherlands-headquartered cybersecurity services firm founded in 2000 that delivers consulting, testing, and certification across IT, Operational Technology (OT), and IoT environments. Its core offerings include penetration testing, vulnerability assessments, red teaming, compliance audits (NIS2, DORA, IEC 62443, NERC CIP), OT/ICS security services (site assessment, threat modeling, industrial VAPT, OT Cyber FAT/SAT, OT tabletop crisis management), and the MDSCert certification program for IoT devices and platforms. The firm also delivers a "people" layer through the SAFE Program for Cyber Secure Behavior, phishing and social engineering simulations, and e-learning, addressing the full people-processes-technology triad.
The business is run as an enterprise-focused, quote-based professional services model with multi-year contracts and no publicly disclosed pricing. Secura sells primarily through direct enterprise engagement ("Talk to an Expert") and field sales targeting industrial organizations, financial institutions, public organizations, product manufacturers, and defense and safety organizations. Customer logos span Philips, NS Dutch Railways, ING, Hitachi, Rijks Water Staat, Amazon, Meta, Abbott, and SUANFRARMA across at least seven industries. The firm leverages the global distribution of Bureau Veritas Group, operating from the Netherlands with regional delivery in the USA and India. Its research credentials are evidenced by the 2020 discovery of the Zerologon vulnerability (CVE-2020-1472, CVSS 10.0) by researcher Tom Tervoort. Revenue, funding, and detailed ownership figures are not publicly disclosed.
Secura firmographics
Firmographics- Name
- Secura
- Legal name
- Secura
- Website
- https://secura.com
- Company type
- Private
- Founded year
- 2000
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- Secura, operating as Bureau Veritas Cybersecurity, provides penetration testing, compliance advisory, and certification across IT, OT, and IoT environments for enterprise, industrial, financial, and government clients in Europe, the US, and India.
- Ownership category
- akta.pro rank
Secura industry classification
Industry- Product category
- Cybersecurity Services
- NAICS
- Other Computer Related Services (541519), Computer Systems Design and Related Services (54151)
- akta.pro primary industry
- Vulnerability Management & Penetration Testing Services (BPAEADAD)
- akta.pro secondary industry
- Application Security & Secure Software (DevSecOps) (EDAOAIAK)
Keywords
Where Secura is headquartered
LocationHeadquarters
- HQ city
- Amsterdam
- HQ country
- Netherlands
- HQ region
- Europe
Offices3 records
Markets served
Secura business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Cybersecurity Consulting and Advisory Services: Professional services including security advice, compliance assessments, audits, and security management across IT, OT, and IoT environments. Revenue generated through project-based engagements and retainer arrangements.
- Security Testing Services: Penetration testing, vulnerability assessments, red teaming, and security certification services for technology products and systems
- Training and Education: Cybersecurity awareness training, phishing training, social engineering services, and e-learning programs delivered to organizations and their employees
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Custom enterprise engagement |
Go-to-market motion2 records
Distribution channels2 records
Marketing channels7 records
Secura product offering
Product offeringCore offering
Secura, operating as Bureau Veritas Cybersecurity, delivers professional cybersecurity services across IT, OT (Operational Technology), and IoT environments. The company provides penetration testing, vulnerability assessments, security audits, regulatory compliance support (NIS2, DORA, IEC 62443, NERC CIP), OT/ICS security testing, and IoT device certification through its MDSCert program, alongside security awareness training and social engineering defense services for enterprise and government clients.
Product overview
Secura appears to be a cybersecurity research and services company. Based on available sources, Secura offers cybersecurity training courses. No comprehensive product portfolio details were available in the provided source data.
Differentiator
Problem solved
Functional benefit
Products and services
- SAFE Program for Cyber Secure Behavior Security awareness and behavior training program for organizations, focused on phishing awareness and social engineering defense to build cyber resilience through people.
- Social Engineering Services Social engineering testing services that simulate phishing and other human-targeted attacks to assess an organization's susceptibility to human-factor security risks.
- Phishing Services Phishing simulation, testing, and defense services designed to train employees and assess organizational resilience against phishing attacks.
- Cybersecurity Awareness E-Learning Online cybersecurity awareness e-learning program delivered to organizations and their employees to build baseline cybersecurity knowledge.
- Training Courses Structured cybersecurity training courses for professionals and organizations covering a range of cybersecurity topics.
- OT Site Assessment On-site assessment of operational technology (OT) environments for industrial organizations to evaluate security posture of physical sites and industrial control systems.
- Threat Modeling for Industrial Control Systems Threat modeling service for industrial control systems to identify, prioritize, and address cyber threats specific to OT/ICS environments.
- Industrial VAPT Vulnerability assessment and penetration testing service tailored for industrial and OT environments, identifying exploitable weaknesses in industrial control systems.
- OT Cyber FAT/SAT Cyber Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT) for OT systems to verify cybersecurity requirements before and during deployment.
- OT Tabletop Cyber Crisis Management Tabletop exercise and crisis management service for OT environments, simulating cyber crisis scenarios to test incident response readiness.
- IEC 62443 Compliance Services Compliance service supporting industrial organizations in achieving IEC 62443 compliance for industrial automation and control systems.
- NIS2 Compliance Services Advisory and assessment services to help organizations achieve compliance with the EU NIS2 cybersecurity directive.
- DORA Compliance Services Advisory and assessment services supporting financial institutions in achieving compliance with the EU Digital Operational Resilience Act (DORA).
- Penetration Testing Services Penetration testing services that identify and exploit vulnerabilities in IT systems, products, and infrastructure to assess security posture.
- MDSCert IoT Certification Certification program for IoT devices and platforms that helps manufacturers reuse existing security evaluations, reduce certification costs, and bring secure products to market faster.
Quantifiable outcome
- Customer Satisfaction Rating: 0.8
Companies that use Secura
Customer profileNamed customers12 records
Segments6 records
Ideal customer profiles4 records
Secura technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability1 record
Feature4 records
Secura partnerships and signals
Strategic signalScale indicators3 records
Recent moves6 records
Expansion highlights6 records
Secura competitors and assessment
Company assessmentDirect peers
- IOActive: Pure-play cybersecurity services firm specializing in OT/ICS, IoT, and embedded device security testing. Closest direct competitor to Secura's industrial VAPT and IoT security assessment offerings.
- Trustwave: Global cybersecurity services and managed detection firm offering penetration testing, compliance, and consulting to enterprises. Comparable in scale and service breadth to Secura's portfolio.
- Kudelski Security: Swiss-based cybersecurity services division of the Kudelski Group offering consulting, managed security, and offensive testing. Similar European TIC-parent structure and enterprise/government client focus as Secura.
- NCC Group: UK-listed cybersecurity services firm offering penetration testing, security consulting, and managed detection across IT and OT. Direct competitor to Secura's core offensive security and advisory business with comparable enterprise/government client base.
- Bishop Fox: US-based offensive security specialist focused on penetration testing, red teaming, and vulnerability research. Comparable high-end offensive security capability and reputation for elite research, like Secura's Zerologon discovery.
- F-Secure (WithSecure): Nordic-headquartered cybersecurity firm providing offensive security, managed detection, and consulting services to enterprises. Comparable European-rooted, enterprise-focused cybersecurity services peer.
Broad incumbents
- SGS: Swiss TIC giant offering testing, inspection, and certification across industries, with expanding cybersecurity services for industrial and connected-product clients. Same parent-industry peer category as Bureau Veritas.
- TÜV Rheinland: German TIC conglomerate with cybersecurity services for industrial IoT, automotive, and critical infrastructure. Direct competitor in the certification-plus-cybersecurity-services bundle that Secura offers via MDSCert and OT services.
- TÜV SÜD: Global testing, inspection, and certification (TIC) conglomerate with a digital security / cybersecurity services arm. Most analogous incumbent competitor given the Bureau Veritas Group ownership model and overlap in industrial/IoT certification.
- DEKRA: German-headquartered TIC conglomerate that has built out cybersecurity and industrial security testing services. Competes with Bureau Veritas more broadly and with Secura specifically in industrial/automotive cybersecurity certification.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks4 records
Key highlights6 records
Customer concentration
Secura social profiles
Digital presenceSecura financial estimates
Financial estimateRevenue estimate
Valuation estimate
Secura leadership team
Management profileNumber of profiles
Profiles1 record
Secura funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Secura M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Secura
What does Secura do?
Secura, operating as Bureau Veritas Cybersecurity, delivers professional cybersecurity services across IT, OT (Operational Technology), and IoT environments. The company provides penetration testing, vulnerability assessments, security audits, regulatory compliance support (NIS2, DORA, IEC 62443, NERC CIP), OT/ICS security testing, and IoT device certification through its MDSCert program, alongside security awareness training and social engineering defense services for enterprise and government clients.
Is Secura a public or private company?
Secura is a private company. It is classified as corporate owned and is currently operating.
When was Secura founded?
Secura was founded in 2000. It employs 101 to 250 people.
Where is Secura based?
Secura is headquartered in Amsterdam, Netherlands, in the Europe region.
How does Secura make money?
Three revenue lines are on record. Cybersecurity Consulting and Advisory Services are the primary driver. The others are security Testing Services and training and Education.
Who are Secura's main competitors?
Direct peers on record are IOActive, Trustwave, Kudelski Security, NCC Group, Bishop Fox and F-Secure (WithSecure). Broad incumbents are SGS, TÜV Rheinland, TÜV SÜD and DEKRA.
Does Secura have an API?
No public API is recorded for Secura.
What industry is Secura in?
Secura's product category is Cybersecurity Services. Its primary akta.pro industry code is BPAEADAD, Vulnerability Management & Penetration Testing Services, with a secondary code of EDAOAIAK, Application Security & Secure Software (DevSecOps). Its NAICS code is 541519.