glueckkanja

What glueckkanja does

glueckkanja is a privately held, Germany-based IT services firm founded in 1990 and headquartered in Offenbach that manages and protects Microsoft ecosystems at scale for enterprise clients. The company's stated focus is on identity, authentication, and authorization security within Microsoft Entra (formerly Azure AD) and adjacent Microsoft cloud platforms, targeting enterprise security teams as its primary customer segment. With a headcount in the 251–500 range, glueckkanja operates as a specialist vendor rather than a broad-line MSSP.

The company's most distinctive technical contribution is the ConsentFix Attack Detection Methodology, a proprietary approach to identifying OAuth-based attacks that exploit Microsoft Entra's authorization code flow. The methodology detects attacks — including those that bypass Conditional Access policies and device compliance requirements — by correlating Azure sign-in logs across two authentication events within the ten-minute window before the authorization code expires. This research, disclosed demonstrates in-house capability to discover novel identity-layer attack vectors that affect organizations with otherwise robust Microsoft security postures.

Pricing and revenue model details are not publicly disclosed. The firm operates as a for-profit private company with no public funding rounds, M&A activity, partnership disclosures, or product launch announcements beyond its security research publications in the available data. Its go-to-market appears to be services-led, with the ConsentFix work positioned as thought-leadership and detection IP rather than a standalone commercial product. Leadership comprises Christian Kanja as Chief Executive Officer and Michael Breither as Chief Operating Officer.

Name

glueckkanja

Website

https://glueckkanja.com

Company type

Private

Founded year

1990

Operating status

Operating

Headcount range

251–500 employees

Short description

glueckkanja is a German IT services firm founded in 1990 that manages and protects Microsoft cloud ecosystems for enterprise security teams, with proprietary research on OAuth-based Microsoft Entra attack vectors.

Ownership category

akta.pro rank

Product category

Managed Microsoft Cloud Security Services

NAICS

Computer Facilities Management Services (541513), Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)

akta.pro secondary industry

Single Sign-On (SSO) & Federation (BPAMAEAF)

Keywords

• Microsoft ecosystem management
• Microsoft cloud security
• Microsoft Entra protection
• Managed Microsoft services
• Enterprise authentication security

Headquarters

HQ city

Offenbach

HQ country

Germany

HQ region

Europe

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations

Core offering

glueckkanja manages and protects Microsoft Ecosystems at scale, delivering security operations and managed services around Microsoft Entra ID and the broader Microsoft cloud platform. The firm combines operational management of Microsoft environments with original security research, including the discovery of novel attack vectors such as the ConsentFix OAuth-based technique that targets Entra's authorization code flow.

Differentiator

Problem solved

Functional benefit

Products and services

• Microsoft Ecosystem Management and Protection

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Recent moves2 records

Expansion highlights2 records

Emerging players

• TrustedSEC: US-focused offensive security consultancy with strong Microsoft/Entra research credentials. Comparable on novel attack research against Microsoft identity stacks, though primarily advisory/research rather than managed services.
• Semperis: Identity-focused cybersecurity vendor specializing in Active Directory and Entra ID attack path management. Adjacent to glueckkanja's Entra authentication focus, but operating as a product company rather than managed services.

Broad incumbents

• NCC Group: UK-listed cybersecurity and software resilience firm with strong identity and cloud security research, comparable to glueckkanja's offensive Microsoft Entra research angle, but with a much broader global security services portfolio.
• msg systems: German-headquartered IT consulting and software firm with significant Microsoft cloud and identity security engagements. Comparable on European enterprise customer profile and Microsoft ecosystem depth, though with broader industry-vertical software offerings.
• Computacenter: Large UK/German-headquartered IT services provider with significant Microsoft enterprise practice including managed security and identity services. Comparable in operating geography and Microsoft focus, but operates at materially larger scale across many vendors.
• Bechtle: Leading German IT systems integrator and managed services provider with deep Microsoft partnerships and a growing cybersecurity portfolio. Overlaps with glueckkanja on German mid-market and enterprise Microsoft deployments.

Direct peers

• Avanade: Joint venture between Accenture and Microsoft focused on Microsoft ecosystem services and security. Closest large-scale peer to glueckkanja's Microsoft-centric managed security and Entra identity work, but with a much broader global delivery footprint.
• Controlware: German managed services and cybersecurity provider with substantial Microsoft cloud and identity practice. Directly comparable on Microsoft ecosystem security delivery and DACH enterprise customer base.
• ORBIT Gesellschaft für Applikations- und Informationssysteme mbH: German IT services firm focused on Microsoft-based enterprise solutions and managed services. Comparable size and customer profile, with overlapping Microsoft identity and security offerings.
• SVA System Vertrieb Alexander: Large German IT service provider specializing in Microsoft and security, with comparable Azure/Entra managed services. Direct mid-market and enterprise peer on Microsoft security and identity in the German-speaking market.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks5 records

Key highlights5 records

Customer concentration

• Xx.com/glueckkanja
• LinkedInlinkedin.com/company/glueckkanja

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about glueckkanja