ONEKEY
ONEKEY is a Düsseldorf-based product cybersecurity and compliance platform that automates binary firmware analysis, SBOM generation, vulnerability detection, and EU Cyber Resilience Act compliance for manufacturers of connected IoT/OT devices across automotive, medical, industrial, telecom, and consumer-electronics verticals.
- Company typePrivate
- Founded2020
- HeadquartersDüsseldorf, Germany
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What ONEKEY does
ONEKEY GmbH is a Düsseldorf-based product cybersecurity and compliance company founded in 2020 that builds an automated platform for manufacturers and operators of connected IoT/OT devices. Its core technology performs binary firmware analysis without requiring source code or network access, automatically generating Software Bill of Materials (SBOM), identifying known and unknown vulnerabilities (including zero-days), and producing impact assessments covering certificates, attack vectors, exploitability, and dependencies. The platform's patent-pending ONEKEY Compliance Wizard integrates vulnerability detection with regulatory navigation for the EU Cyber Resilience Act, IEC 62443, and ETSI 303 645, and a digital-twin-based continuous monitoring module cross-references device components against global vulnerability databases for real-time alerting. The product is complemented by expert consulting services including penetration testing, CRA Readiness Assessment, and RED Readiness Assessment. ONEKEY monetizes through quote-based annual SaaS subscriptions plus professional services, sold via an enterprise field sales motion that leverages a "Book a Demo" funnel. Its customer base spans automotive (ETAS), medical technology (Richard Wolf, Wiedemann), industrial automation (Kistler, MURR, r.stahl), telecom (Swisscom), IT services (ATOS, Kudelski IoT), and consumer electronics (Snap One, Trimble). The company is privately held, ISO/IEC 27001:2022 certified, and counts PwC Germany as a minority investor since December 2023.
ONEKEY firmographics
Firmographics- Name
- ONEKEY
- Legal name
- ONEKEY GmbH
- Website
- https://onekey.com
- Company type
- Private
- Founded year
- 2020
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- ONEKEY is a Düsseldorf-based product cybersecurity and compliance platform that automates binary firmware analysis, SBOM generation, vulnerability detection, and EU Cyber Resilience Act compliance for manufacturers of connected IoT/OT devices across automotive, medical, industrial, telecom, and consumer-electronics verticals.
- Ownership category
- akta.pro rank
ONEKEY industry classification
Industry- Product category
- IoT Product Cybersecurity Software
- NAICS
- Other Computer Related Services (541519), Computer Systems Design and Related Services (54151), Computer Systems Design Services (541512)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Endpoint Security for End Users (EDR/XDR, Patch/Vuln, Zero Trust Endpoint) (BPAEAIAG)
- akta.pro secondary industry
- App Security, Compliance & Review Automation Platforms (BPAMADAJ)
Keywords
Where ONEKEY is headquartered
LocationHeadquarters
- HQ city
- Düsseldorf
- HQ country
- Germany
- HQ region
- Europe
Offices1 record
Markets served
ONEKEY business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations
Revenue model
- ONEKEY Platform Subscription: SaaS-based platform subscription providing access to automated product cybersecurity and compliance tools including SBOM management, vulnerability detection, and compliance wizard. Pricing is quote-based for enterprise customers.
- Expert Consulting Services: Professional services including penetration testing, CRA Readiness Assessment, and RED Readiness Assessment delivered by cybersecurity and compliance experts.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise platform subscription with quote-based pricing |
Go-to-market motion1 record
Distribution channels3 records
Marketing channels9 records
ONEKEY product offering
Product offeringCore offering
ONEKEY provides an automated product cybersecurity and compliance platform for manufacturers and operators of IoT/OT connected devices. The platform performs binary firmware analysis without requiring source code or network access, generating Software Bills of Materials (SBOM), detecting known and zero-day vulnerabilities, and providing a patent-pending Compliance Wizard that maps findings to regulations such as the EU Cyber Resilience Act, IEC 62443, and ETSI 303 645. ONEKEY complements the platform with expert consulting services including penetration testing, CRA Readiness Assessment, and RED Readiness Assessment.
Product overview
ONEKEY offers a unified platform architecture centered on the ONEKEY Platform, an all-in-one product cybersecurity and compliance solution. The platform integrates multiple functional modules including SBOM Management, Vulnerability Management, ONEKEY Compliance Wizard (patent-pending), Automated Impact Assessment, Zero-Day Detection, Monitoring, License Detection, and Custom Analysis Profiles. These modules work together to provide end-to-end coverage from firmware analysis through compliance documentation. The company also offers consulting services including Penetration Testing, CRA Readiness Assessment, and RED Readiness Assessment to complement the automated platform capabilities. The CRA Fast Start program provides a structured entry point for manufacturers preparing for EU Cyber Resilience Act compliance. The ONEKEY Research Lab supports the platform through continuous security research and vulnerability pattern discovery.
Differentiator
Problem solved
Functional benefit
Products and services
- ONEKEY Platform All-in-one SaaS platform that automates product cybersecurity and compliance for manufacturers of connected IoT/OT devices, including SBOM generation, vulnerability management, compliance guidance, and continuous firmware monitoring.
- CRA Fast Start Structured program helping manufacturers prepare for EU Cyber Resilience Act compliance through three pillars: CRA Readiness Assessment, systematic vulnerability management, and continuous monitoring.
- CRA Readiness Assessment Expert consulting engagement providing gap analysis and an actionable roadmap for EU Cyber Resilience Act compliance, including introductory workshop, process review, and documentation assessment.
- RED Readiness Assessment Expert consulting service for assessing manufacturer readiness against Radio Equipment Directive (RED) security requirements.
- Penetration Testing Manual security testing service delivered by ONEKEY's cybersecurity specialists, complementing the automated platform analysis.
Quantifiable outcome
- 40% faster SBOM generation
- +3 more outcomes
Companies that use ONEKEY
Customer profileNamed customers12 records
Segments6 records
Ideal customer profiles1 record
ONEKEY technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability3 records
Feature8 records
ONEKEY partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- EU-funded CRACoWi Project PartnerscoreONEKEY collaborates with 13 European partners on the EU-funded CRACoWi project to develop AI-assisted tools for Cyber Resilience Act compliance. This EU-supported initiative focuses on creating automated tools to help manufacturers meet CRA requirements using AI capabilities.
Scale indicators4 records
Recent moves6 records
Expansion highlights6 records
ONEKEY competitors and assessment
Company assessmentDirect peers
- Nozomi Networks: Nozomi Networks delivers OT and IoT visibility, vulnerability detection, and compliance monitoring for industrial control systems. It competes with OneKEY in securing connected operational devices across manufacturing, energy, and critical infrastructure verticals.
- Sonatype: Sonatype provides software supply chain security, including SBOM management, dependency analysis, and vulnerability intelligence. It is a direct peer to OneKEY's SBOM and software supply chain security modules for connected-device manufacturers.
- Claroty: Claroty provides cybersecurity for operational technology and industrial IoT environments, including asset discovery, vulnerability management, and threat detection. It is directly comparable to OneKEY in targeting OT/connected-device cybersecurity for industrial, healthcare, and critical infrastructure operators.
- Cybellum: Cybellum offers product security and SBOM management for automotive and connected devices, including binary-level analysis and vulnerability management. It is a direct peer in the automotive/industrial product cybersecurity space that ONEKEY addresses.
- Forescout: Forescout offers device visibility and security for IT, IoT, and OT environments, including continuous monitoring and compliance reporting. It overlaps with OneKEY's connected-device monitoring and vulnerability management capabilities.
- Mend (formerly WhiteSource): Mend offers open source security, license compliance, and SBOM management for enterprise software development. It competes with OneKEY on SBOM generation and license detection for manufacturers developing connected products.
- Finite State: Finite State focuses on firmware and embedded device security, including automated binary analysis, SBOM generation, and vulnerability detection for connected products. It is one of the closest direct competitors to OneKEY's binary firmware analysis approach.
Emerging players
- Sternum: Sternum provides runtime security and observability for embedded/IoT devices, complementing build-time analysis. It overlaps with OneKEY on connected-device security but emphasizes runtime protection rather than SBOM/compliance automation.
- RunSafe Security: RunSafe Security focuses on firmware and embedded system protection, including vulnerability mitigation and software supply chain hardening. It is an adjacent peer working on connected-device security for industrial and critical infrastructure customers.
Broad incumbents
- Tenable: Tenable is an established vulnerability management and exposure platform (Nessus, Tenable.io) that has expanded into OT/IoT and SBOM offerings. It represents a broad incumbent alternative to OneKEY for vulnerability and compliance workflows.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
ONEKEY social profiles
Digital presenceONEKEY compliance and trust
Trust signalCompliance1 record
ONEKEY financial estimates
Financial estimateRevenue estimate
Valuation estimate
ONEKEY leadership team
Management profileNumber of profiles
Profiles2 records
ONEKEY funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
ONEKEY M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about ONEKEY
What does ONEKEY do?
ONEKEY provides an automated product cybersecurity and compliance platform for manufacturers and operators of IoT/OT connected devices. The platform performs binary firmware analysis without requiring source code or network access, generating Software Bills of Materials (SBOM), detecting known and zero-day vulnerabilities, and providing a patent-pending Compliance Wizard that maps findings to regulations such as the EU Cyber Resilience Act, IEC 62443, and ETSI 303 645. ONEKEY complements the platform with expert consulting services including penetration testing, CRA Readiness Assessment, and RED Readiness Assessment.
Is ONEKEY a public or private company?
ONEKEY is a private company. It is classified as corporate owned and is currently operating.
When was ONEKEY founded?
ONEKEY was founded in 2020. It employs 11 to 50 people.
Where is ONEKEY based?
ONEKEY is headquartered in Düsseldorf, Germany, in the Europe region.
How does ONEKEY make money?
Two revenue lines are on record. ONEKEY Platform Subscription is the primary driver. The others are expert Consulting Services.
Who are ONEKEY's main competitors?
Direct peers on record are Nozomi Networks, Sonatype, Claroty, Cybellum, Forescout, Mend (formerly WhiteSource) and Finite State. Emerging players are Sternum and RunSafe Security. Tenable is listed as a broad incumbent.
Does ONEKEY have an API?
No public API is recorded for ONEKEY.
What industry is ONEKEY in?
ONEKEY's product category is IoT Product Cybersecurity Software. Its primary akta.pro industry code is BPAEAIAG, Endpoint Security for End Users (EDR/XDR, Patch/Vuln, Zero Trust Endpoint), with a secondary code of BPAMADAJ, App Security, Compliance & Review Automation Platforms. Its NAICS code is 541519 and its SIC code is 7372.