Developer docs
API playgroundTry for free, no card

Search company profiles

Secura

Full company profile

uuid0006m95

Namestring
Secura
Legal namestring
Secura
Websiteurl
secura.com
Company typeenum
Private
Founded yearint
2000
Descriptiontext

Secura, operating as Bureau Veritas Cybersecurity since its acquisition by Bureau Veritas Group, is a Netherlands-headquartered cybersecurity services firm founded in 2000 that delivers consulting, testing, and certification across IT, Operational Technology (OT), and IoT environments. Its core offerings include penetration testing, vulnerability assessments, red teaming, compliance audits (NIS2, DORA, IEC 62443, NERC CIP), OT/ICS security services (site assessment, threat modeling, industrial VAPT, OT Cyber FAT/SAT, OT tabletop crisis management), and the MDSCert certification program for IoT devices and platforms. The firm also delivers a "people" layer through the SAFE Program for Cyber Secure Behavior, phishing and social engineering simulations, and e-learning, addressing the full people-processes-technology triad.

The business is run as an enterprise-focused, quote-based professional services model with multi-year contracts and no publicly disclosed pricing. Secura sells primarily through direct enterprise engagement ("Talk to an Expert") and field sales targeting industrial organizations, financial institutions, public organizations, product manufacturers, and defense and safety organizations. Customer logos span Philips, NS Dutch Railways, ING, Hitachi, Rijks Water Staat, Amazon, Meta, Abbott, and SUANFRARMA across at least seven industries. The firm leverages the global distribution of Bureau Veritas Group, operating from the Netherlands with regional delivery in the USA and India. Its research credentials are evidenced by the 2020 discovery of the Zerologon vulnerability (CVE-2020-1472, CVSS 10.0) by researcher Tom Tervoort. Revenue, funding, and detailed ownership figures are not publicly disclosed.

Short descriptiontext

Secura, operating as Bureau Veritas Cybersecurity, provides penetration testing, compliance advisory, and certification across IT, OT, and IoT environments for enterprise, industrial, financial, and government clients in Europe, the US, and India.

Operating statusenum
Operating
Ownership categoryenum
Headcount rangeband
101–250
akta.pro rankint
HeadquartersAmsterdam, Netherlands
HQ citystring
Amsterdam
HQ countrystring
Netherlands
HQ regionstring
Europe
Markets served

Serves global market

Offices3 records

Each record includes

City, Country, Type, Description, Source

Keyword5 values
cybersecurity services, penetration testing, OT security, IoT certification, compliance assessments
Industry2 codes
1Vulnerability Management & Penetration Testing Services
CodeBPAEADADPrimaryYes
2Application Security & Secure Software (DevSecOps)
CodeEDAOAIAKPrimaryNo
NAICS code2 codes
  • Other Computer Related Services541519
  • Computer Systems Design and Related Services54151
Product category
Cybersecurity Services
GTM motion2 records

Each record includes

Type, Description, Source

Revenue model3 records
1Cybersecurity Consulting and Advisory Services
TypeProfessional Services
Description

Professional services including security advice, compliance assessments, audits, and security management across IT, OT, and IoT environments. Revenue generated through project-based engagements and retainer arrangements.

cybersecurity.bureauveritas.com
2Security Testing Services
TypeProfessional Services
Description

Penetration testing, vulnerability assessments, red teaming, and security certification services for technology products and systems

cybersecurity.bureauveritas.com
3Training and Education
TypeProfessional Services
Description

Cybersecurity awareness training, phishing training, social engineering services, and e-learning programs delivered to organizations and their employees

cybersecurity.bureauveritas.com
Marketing channels7 records

Each record includes

Title, Type, Stage, Description, Source

Distribution channels2 records

Each record includes

Title, Type, Scope, Target buyer, Description, Source

Cost components5 values
Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Pricing details1 tier
1Custom enterprise engagement
ModelOtherBilling cadenceMulti-year contract
Notes

Quote-based pricing. No standard pricing tiers publicly disclosed. Services are tailored to specific organizational requirements.

cybersecurity.bureauveritas.com
GTM typeB2B
B2B
Offering typeServices
Services
Core offering1 text field

Secura, operating as Bureau Veritas Cybersecurity, delivers professional cybersecurity services across IT, OT (Operational Technology), and IoT environments. The company provides penetration testing, vulnerability assessments, security audits, regulatory compliance support (NIS2, DORA, IEC 62443, NERC CIP), OT/ICS security testing, and IoT device certification through its MDSCert program, alongside security awareness training and social engineering defense services for enterprise and government clients.

Differentiator
Functional benefit
Problem solved
Quantifiable outcome1 value
  • Customer Satisfaction Rating: 0.8
Product overview1 text field

Secura appears to be a cybersecurity research and services company. Based on available sources, Secura offers cybersecurity training courses. No comprehensive product portfolio details were available in the provided source data.

Product and service15 records
1SAFE Program for Cyber Secure Behavior
CategorySecurity Awareness Training
Description

Security awareness and behavior training program for organizations, focused on phishing awareness and social engineering defense to build cyber resilience through people.

2Social Engineering Services
CategorySecurity Testing
Description

Social engineering testing services that simulate phishing and other human-targeted attacks to assess an organization's susceptibility to human-factor security risks.

3Phishing Services
CategorySecurity Testing
Description

Phishing simulation, testing, and defense services designed to train employees and assess organizational resilience against phishing attacks.

4Cybersecurity Awareness E-Learning
CategorySecurity Awareness Training
Description

Online cybersecurity awareness e-learning program delivered to organizations and their employees to build baseline cybersecurity knowledge.

5Training Courses
CategorySecurity Training
Description

Structured cybersecurity training courses for professionals and organizations covering a range of cybersecurity topics.

6OT Site Assessment
CategoryOT/ICS Security Services
Description

On-site assessment of operational technology (OT) environments for industrial organizations to evaluate security posture of physical sites and industrial control systems.

7Threat Modeling for Industrial Control Systems
CategoryOT/ICS Security Services
Description

Threat modeling service for industrial control systems to identify, prioritize, and address cyber threats specific to OT/ICS environments.

8Industrial VAPT
CategoryOT/ICS Security Services
Description

Vulnerability assessment and penetration testing service tailored for industrial and OT environments, identifying exploitable weaknesses in industrial control systems.

9OT Cyber FAT/SAT
CategoryOT/ICS Security Services
Description

Cyber Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT) for OT systems to verify cybersecurity requirements before and during deployment.

10OT Tabletop Cyber Crisis Management
CategoryOT/ICS Security Services
Description

Tabletop exercise and crisis management service for OT environments, simulating cyber crisis scenarios to test incident response readiness.

11IEC 62443 Compliance Services
CategoryCompliance Services
Description

Compliance service supporting industrial organizations in achieving IEC 62443 compliance for industrial automation and control systems.

12NIS2 Compliance Services
CategoryCompliance Services
Description

Advisory and assessment services to help organizations achieve compliance with the EU NIS2 cybersecurity directive.

13DORA Compliance Services
CategoryCompliance Services
Description

Advisory and assessment services supporting financial institutions in achieving compliance with the EU Digital Operational Resilience Act (DORA).

14Penetration Testing Services
CategorySecurity Testing
Description

Penetration testing services that identify and exploit vulnerabilities in IT systems, products, and infrastructure to assess security posture.

15MDSCert IoT Certification
CategoryIoT Certification
Description

Certification program for IoT devices and platforms that helps manufacturers reuse existing security evaluations, reduce certification costs, and bring secure products to market faster.

Scale indicator3 records

Each record includes

Type, Value, Description, Source

Recent move6 records

Each record includes

Date, Type, Title, Description, Source

Expansion highlight6 records

Each record includes

Type, Description

Peers10 records
TypeDirect peer
Description

Pure-play cybersecurity services firm specializing in OT/ICS, IoT, and embedded device security testing. Closest direct competitor to Secura's industrial VAPT and IoT security assessment offerings.

TypeDirect peer
Description

Global cybersecurity services and managed detection firm offering penetration testing, compliance, and consulting to enterprises. Comparable in scale and service breadth to Secura's portfolio.

TypeBroad incumbent
Description

Swiss TIC giant offering testing, inspection, and certification across industries, with expanding cybersecurity services for industrial and connected-product clients. Same parent-industry peer category as Bureau Veritas.

TypeDirect peer
Description

Swiss-based cybersecurity services division of the Kudelski Group offering consulting, managed security, and offensive testing. Similar European TIC-parent structure and enterprise/government client focus as Secura.

TypeDirect peer
Description

UK-listed cybersecurity services firm offering penetration testing, security consulting, and managed detection across IT and OT. Direct competitor to Secura's core offensive security and advisory business with comparable enterprise/government client base.

TypeBroad incumbent
Description

German TIC conglomerate with cybersecurity services for industrial IoT, automotive, and critical infrastructure. Direct competitor in the certification-plus-cybersecurity-services bundle that Secura offers via MDSCert and OT services.

TypeBroad incumbent
Description

Global testing, inspection, and certification (TIC) conglomerate with a digital security / cybersecurity services arm. Most analogous incumbent competitor given the Bureau Veritas Group ownership model and overlap in industrial/IoT certification.

TypeDirect peer
Description

US-based offensive security specialist focused on penetration testing, red teaming, and vulnerability research. Comparable high-end offensive security capability and reputation for elite research, like Secura's Zerologon discovery.

TypeDirect peer
Description

Nordic-headquartered cybersecurity firm providing offensive security, managed detection, and consulting services to enterprises. Comparable European-rooted, enterprise-focused cybersecurity services peer.

TypeBroad incumbent
Description

German-headquartered TIC conglomerate that has built out cybersecurity and industrial security testing services. Competes with Bureau Veritas more broadly and with Secura specifically in industrial/automotive cybersecurity certification.

Market position
Strengths4 records

Each record includes

Headline, Details, Source

Weaknesses4 records

Each record includes

Headline, Details, Source

Competitive moat5 records

Each record includes

Type, Details

Key risks4 records

Each record includes

Headline, Details, Source

Key highlights6 records

Each record includes

Headline, Details, Source

Customer concentration

Classification, Details

Named customers12 records

Each record includes

Name, Industry, Type, Use case, Source, UUID

Segment6 records

Each record includes

Title, Type, Primary, Description, Pain point addressed, Use case, Source

Ideal customer profile4 records

Each record includes

Profile, Firmographic size, Sales motion, Sales cycle length, Buying structure, Purchase trigger, Buyer persona, Geography, Industry vertical, Primary use case, Description, Pain points, Evidence proof points, Target buyer

Technology focused
No
API detail
Has APIbool
No

Docs URL, Description

AI capability1 record

Each record includes

Type, Description, Source

AI maturity
App detail

Has app

Feature4 records

Each record includes

Title, Differentiator, Description, Source

Core technology
Revenue estimate
Valuation estimate
Number of profiles
Profiles1 record

Each record includes

Name, Designation, Designation category, Overview, Profile commentary, Source

No data
No data
Funding overview

Funding stage, Last funding date, Total funding USD

Funding rounds

Each record includes

Round, Amount USD, Date, Pre money valuation, Total investors, Investors, News

Investors

Each record includes

Name, Type, Date of entry, Rounds participated, Website

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Each record includes

Name, Acquisition type, Announced date, Completed date, Status, Website, News

Investment

Each record includes

Name, Round, Announced date, Lead investor, Website, News

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Secura

Cybersecurity Servicessecura.com

Secura, operating as Bureau Veritas Cybersecurity, provides penetration testing, compliance advisory, and certification across IT, OT, and IoT environments for enterprise, industrial, financial, and government clients in Europe, the US, and India.

What Secura does

Secura, operating as Bureau Veritas Cybersecurity since its acquisition by Bureau Veritas Group, is a Netherlands-headquartered cybersecurity services firm founded in 2000 that delivers consulting, testing, and certification across IT, Operational Technology (OT), and IoT environments. Its core offerings include penetration testing, vulnerability assessments, red teaming, compliance audits (NIS2, DORA, IEC 62443, NERC CIP), OT/ICS security services (site assessment, threat modeling, industrial VAPT, OT Cyber FAT/SAT, OT tabletop crisis management), and the MDSCert certification program for IoT devices and platforms. The firm also delivers a "people" layer through the SAFE Program for Cyber Secure Behavior, phishing and social engineering simulations, and e-learning, addressing the full people-processes-technology triad.

The business is run as an enterprise-focused, quote-based professional services model with multi-year contracts and no publicly disclosed pricing. Secura sells primarily through direct enterprise engagement ("Talk to an Expert") and field sales targeting industrial organizations, financial institutions, public organizations, product manufacturers, and defense and safety organizations. Customer logos span Philips, NS Dutch Railways, ING, Hitachi, Rijks Water Staat, Amazon, Meta, Abbott, and SUANFRARMA across at least seven industries. The firm leverages the global distribution of Bureau Veritas Group, operating from the Netherlands with regional delivery in the USA and India. Its research credentials are evidenced by the 2020 discovery of the Zerologon vulnerability (CVE-2020-1472, CVSS 10.0) by researcher Tom Tervoort. Revenue, funding, and detailed ownership figures are not publicly disclosed.

Secura firmographics

Firmographics
Name
Secura
Legal name
Secura
Website
https://secura.com
Company type
Private
Founded year
2000
Operating status
Operating
Headcount range
101–250 employees
Short description
Secura, operating as Bureau Veritas Cybersecurity, provides penetration testing, compliance advisory, and certification across IT, OT, and IoT environments for enterprise, industrial, financial, and government clients in Europe, the US, and India.
Ownership category
akta.pro rank

Secura industry classification

Industry
Product category
Cybersecurity Services
NAICS
Other Computer Related Services (541519), Computer Systems Design and Related Services (54151)
akta.pro primary industry
Vulnerability Management & Penetration Testing Services (BPAEADAD)
akta.pro secondary industry
Application Security & Secure Software (DevSecOps) (EDAOAIAK)

Keywords

  • Cybersecurity services
  • Penetration testing
  • OT security
  • IoT certification
  • Compliance assessments

Where Secura is headquartered

Location

Headquarters

HQ city
Amsterdam
HQ country
Netherlands
HQ region
Europe

Offices3 records

Markets served

Secura business model

Business model
GTM type
B2B
Offering type
Services
Cost components
Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

  1. Cybersecurity Consulting and Advisory Services: Professional services including security advice, compliance assessments, audits, and security management across IT, OT, and IoT environments. Revenue generated through project-based engagements and retainer arrangements.
  2. Security Testing Services: Penetration testing, vulnerability assessments, red teaming, and security certification services for technology products and systems
  3. Training and Education: Cybersecurity awareness training, phishing training, social engineering services, and e-learning programs delivered to organizations and their employees

Pricing tiers

ModelBillingPrice
OtherMulti-year contractCustom enterprise engagement

Go-to-market motion2 records

Distribution channels2 records

Marketing channels7 records

Secura product offering

Product offering

Core offering

Secura, operating as Bureau Veritas Cybersecurity, delivers professional cybersecurity services across IT, OT (Operational Technology), and IoT environments. The company provides penetration testing, vulnerability assessments, security audits, regulatory compliance support (NIS2, DORA, IEC 62443, NERC CIP), OT/ICS security testing, and IoT device certification through its MDSCert program, alongside security awareness training and social engineering defense services for enterprise and government clients.

Product overview

Secura appears to be a cybersecurity research and services company. Based on available sources, Secura offers cybersecurity training courses. No comprehensive product portfolio details were available in the provided source data.

Differentiator

Problem solved

Functional benefit

Products and services

  • SAFE Program for Cyber Secure Behavior Security awareness and behavior training program for organizations, focused on phishing awareness and social engineering defense to build cyber resilience through people.
  • Social Engineering Services Social engineering testing services that simulate phishing and other human-targeted attacks to assess an organization's susceptibility to human-factor security risks.
  • Phishing Services Phishing simulation, testing, and defense services designed to train employees and assess organizational resilience against phishing attacks.
  • Cybersecurity Awareness E-Learning Online cybersecurity awareness e-learning program delivered to organizations and their employees to build baseline cybersecurity knowledge.
  • Training Courses Structured cybersecurity training courses for professionals and organizations covering a range of cybersecurity topics.
  • OT Site Assessment On-site assessment of operational technology (OT) environments for industrial organizations to evaluate security posture of physical sites and industrial control systems.
  • Threat Modeling for Industrial Control Systems Threat modeling service for industrial control systems to identify, prioritize, and address cyber threats specific to OT/ICS environments.
  • Industrial VAPT Vulnerability assessment and penetration testing service tailored for industrial and OT environments, identifying exploitable weaknesses in industrial control systems.
  • OT Cyber FAT/SAT Cyber Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT) for OT systems to verify cybersecurity requirements before and during deployment.
  • OT Tabletop Cyber Crisis Management Tabletop exercise and crisis management service for OT environments, simulating cyber crisis scenarios to test incident response readiness.
  • IEC 62443 Compliance Services Compliance service supporting industrial organizations in achieving IEC 62443 compliance for industrial automation and control systems.
  • NIS2 Compliance Services Advisory and assessment services to help organizations achieve compliance with the EU NIS2 cybersecurity directive.
  • DORA Compliance Services Advisory and assessment services supporting financial institutions in achieving compliance with the EU Digital Operational Resilience Act (DORA).
  • Penetration Testing Services Penetration testing services that identify and exploit vulnerabilities in IT systems, products, and infrastructure to assess security posture.
  • MDSCert IoT Certification Certification program for IoT devices and platforms that helps manufacturers reuse existing security evaluations, reduce certification costs, and bring secure products to market faster.

Quantifiable outcome

  • Customer Satisfaction Rating: 0.8

Companies that use Secura

Customer profile

Named customers12 records

Segments6 records

Ideal customer profiles4 records

Secura technology and API

Technology

Technology focussed No

API detail

Has API
No
API docs
API detail

Core technology

AI maturity

App detail

AI capability1 record

Feature4 records

Secura partnerships and signals

Strategic signal

Scale indicators3 records

Recent moves6 records

Expansion highlights6 records

Secura competitors and assessment

Company assessment

Direct peers

  • IOActive: Pure-play cybersecurity services firm specializing in OT/ICS, IoT, and embedded device security testing. Closest direct competitor to Secura's industrial VAPT and IoT security assessment offerings.
  • Trustwave: Global cybersecurity services and managed detection firm offering penetration testing, compliance, and consulting to enterprises. Comparable in scale and service breadth to Secura's portfolio.
  • Kudelski Security: Swiss-based cybersecurity services division of the Kudelski Group offering consulting, managed security, and offensive testing. Similar European TIC-parent structure and enterprise/government client focus as Secura.
  • NCC Group: UK-listed cybersecurity services firm offering penetration testing, security consulting, and managed detection across IT and OT. Direct competitor to Secura's core offensive security and advisory business with comparable enterprise/government client base.
  • Bishop Fox: US-based offensive security specialist focused on penetration testing, red teaming, and vulnerability research. Comparable high-end offensive security capability and reputation for elite research, like Secura's Zerologon discovery.
  • F-Secure (WithSecure): Nordic-headquartered cybersecurity firm providing offensive security, managed detection, and consulting services to enterprises. Comparable European-rooted, enterprise-focused cybersecurity services peer.

Broad incumbents

  • SGS: Swiss TIC giant offering testing, inspection, and certification across industries, with expanding cybersecurity services for industrial and connected-product clients. Same parent-industry peer category as Bureau Veritas.
  • TÜV Rheinland: German TIC conglomerate with cybersecurity services for industrial IoT, automotive, and critical infrastructure. Direct competitor in the certification-plus-cybersecurity-services bundle that Secura offers via MDSCert and OT services.
  • TÜV SÜD: Global testing, inspection, and certification (TIC) conglomerate with a digital security / cybersecurity services arm. Most analogous incumbent competitor given the Bureau Veritas Group ownership model and overlap in industrial/IoT certification.
  • DEKRA: German-headquartered TIC conglomerate that has built out cybersecurity and industrial security testing services. Competes with Bureau Veritas more broadly and with Secura specifically in industrial/automotive cybersecurity certification.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks4 records

Key highlights6 records

Customer concentration

Secura social profiles

Digital presence

Secura financial estimates

Financial estimate

Revenue estimate

Valuation estimate

Secura leadership team

Management profile

Number of profiles

Profiles1 record

Secura funding detail

Funding detail

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

Secura M&A and investment

M&A and investment

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Secura

What does Secura do?

Secura, operating as Bureau Veritas Cybersecurity, delivers professional cybersecurity services across IT, OT (Operational Technology), and IoT environments. The company provides penetration testing, vulnerability assessments, security audits, regulatory compliance support (NIS2, DORA, IEC 62443, NERC CIP), OT/ICS security testing, and IoT device certification through its MDSCert program, alongside security awareness training and social engineering defense services for enterprise and government clients.

Is Secura a public or private company?

Secura is a private company. It is classified as corporate owned and is currently operating.

When was Secura founded?

Secura was founded in 2000. It employs 101 to 250 people.

Where is Secura based?

Secura is headquartered in Amsterdam, Netherlands, in the Europe region.

How does Secura make money?

Three revenue lines are on record. Cybersecurity Consulting and Advisory Services are the primary driver. The others are security Testing Services and training and Education.

Who are Secura's main competitors?

Direct peers on record are IOActive, Trustwave, Kudelski Security, NCC Group, Bishop Fox and F-Secure (WithSecure). Broad incumbents are SGS, TÜV Rheinland, TÜV SÜD and DEKRA.

Does Secura have an API?

No public API is recorded for Secura.

What industry is Secura in?

Secura's product category is Cybersecurity Services. Its primary akta.pro industry code is BPAEADAD, Vulnerability Management & Penetration Testing Services, with a secondary code of EDAOAIAK, Application Security & Secure Software (DevSecOps). Its NAICS code is 541519.

Unlock the full company data

50 free credits on sign-up, no credit card required.

Contact sales
Live signals