DGC

What DGC does

DGC AG (Deutsche Gesellschaft für Cybersicherheit) is a German cybersecurity services provider founded in 2015 and headquartered in Flensburg, with an additional office in Berlin and stated operations in Europe, the United States, and Abu Dhabi. The company sells a bundled cybersecurity stack centered on its proprietary cyberscan.io® automated scanning platform, which monitors IT infrastructure (networks and web applications) in real time for vulnerabilities and darknet data leaks. Adjacent service modules include internal and external penetration testing, a 24/7 Cyber Defence Operation Center (CDOC) for incident response, security awareness training, and — following the May 2025 acquisition of COGITANDA from insolvency — cyber insurance products covering prevention, damage management, and financial indemnification.

DGC generates revenue through a mix of recurring subscriptions (cyberscan.io tiers and CDOC managed monitoring), project-based professional services (pentests, training), and, post-acquisition, insurance premium flow via COGITANDA Dataprotect GmbH and COGITANDA Insurance GmbH. Distribution is direct: enterprise field sales supported by 24/7 emergency hotline consultation, complemented by a product-led free 30-day cyberscan.io trial that lowers SMB acquisition friction. Trade show presence at DKM (finance/insurance), it-sa (IT security), GITEX GLOBAL (Dubai), and CloudFest anchors enterprise pipeline generation. All solutions are developed and hosted exclusively in Germany under ISO 27001 and ISO 9001 certifications, positioning the company for NIS2-driven demand from regulated enterprises and critical infrastructure operators.

The company is structured as an Aktiengesellschaft (AG), remains privately held with no disclosed institutional investors or external funding rounds, and is led by CEO and founder Matthias Nehls alongside Managing Director Dino Huber, CTO Janek Maiwald, CMO Uwe Budowsky, and Supervisory Board Chairman Michael Jepsen. International growth to date has been achieved through partnerships (Cisco, Venom Foundation) and industry association memberships (IT Security Made in Germany, Bitkom) rather than equity capital, with the COGITANDA asset deal representing the company's first material M&A move.

Name

DGC

Legal name

DGC AG

Website

https://dgc.org

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

11–50 employees

Short description

DGC AG is a German cybersecurity services provider selling a bundled stack — cyberscan.io® automated scanning, penetration testing, 24/7 CDOC monitoring, awareness training, and COGITANDA cyber insurance — to enterprises, critical infrastructure operators, and SMBs in Germany, Europe, the US, and Abu Dhabi.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (54151), Computer Facilities Management Services (541513)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Vulnerability Assessment & Scanning (HDADAHAA)

akta.pro secondary industries

Security Systems Monitoring & Dispatch (SOC/Remote Guarding) (IMAIAEAF), Critical Infrastructure Protection Platforms & Security Orchestration (Asset Inventory/CMDB, Policy Enforcement) (EUADANAL), Grid Cyber Risk Management, Governance, Compliance & Audit (NERC CIP/IEC 62443) (EUADANAC)

Keywords

• Managed security services
• Penetration testing
• Vulnerability scanning
• Incident response
• Cyber insurance

Headquarters

HQ city

Schuby

HQ country

Germany

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

1. cyberscan.io® Subscriptions: Annual or multi-year subscription-based access to the cyberscan.io platform for automated vulnerability scanning and monitoring. Tiered by internal/external/web application scanning modules.
2. Penetration Testing Services: One-time or periodic penetration testing engagements (internal and external), sold as project-based professional services.
3. CDOC / Incident Response Monitoring: 24/7 monitoring and incident response services, likely sold as recurring managed services subscriptions to enterprises and critical infrastructure operators.
4. Security Awareness Training: Team training programs delivered by IT security experts, likely sold on a per-session or subscription basis.
5. Cyber Insurance (via COGITANDA): Following the May 2025 acquisition of COGITANDA (cyber insurer from insolvency via asset deal), DGC now integrates cyber insurance — covering prevention, damage management, and tailored insurance protection — into its bundled offering.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels6 records

Core offering

DGC AG provides a 360° cybersecurity portfolio for enterprises, organizations, and critical infrastructure operators. Its core offering is the proprietary cyberscan.io® automated scanning platform for real-time IT infrastructure and web application vulnerability detection, complemented by manual penetration tests, a 24/7 Cyber Defence Operation Center (CDOC) for monitoring and incident response, darknet/credential leak monitoring, employee security awareness training, and bundled cyber insurance delivered through its COGITANDA subsidiaries. All solutions are developed and hosted exclusively in Germany and are ISO 27001 and ISO 9001 certified.

Product overview

DGC AG offers a comprehensive cybersecurity portfolio built around its core platform cyberscan.io®, an automated scanning tool for real-time IT infrastructure monitoring and vulnerability detection. The offering spans six integrated service modules: internal/external penetration testing, a 24/7 Cyber Defence Operation Center (CDOC) for continuous monitoring and incident response, Security Awareness Trainings for employee education, Darknet/Breaches monitoring for credential leak detection, and Cyberversicherung (cyber insurance) acquired through COGITANDA. All solutions are developed and hosted exclusively in Germany, with ISO 27001 and ISO 9001 certification, targeting businesses, organizations, and critical infrastructure operators seeking NIS2 compliance.

Differentiator

Problem solved

Functional benefit

Brands

• cyberscan.io: Automated cybersecurity portal for scanning IT infrastructure, identifying vulnerabilities, and detecting data leaks in the darknet.
• CDOC
• COGITANDA

Products and services

• cyberscan.io® Automated cybersecurity scanning platform that monitors IT infrastructure in real time, scans networks and web applications, identifies vulnerabilities, attack potentials, and helps prevent cyberattacks. Offered as internal, external, and web application scanning modules with an annual subscription model.
• Penetration Testing (Pentests) Manual security testing service that simulates real-world cyberattacks to identify vulnerabilities in IT systems, uncover potential attack vectors, and optimize security processes. Offered as internal and external penetration tests on a project basis.
• CDOC (Cyber Defence Operation Center) 24/7 attack monitoring and incident response service providing continuous surveillance of customer systems, rapid incident response, and an emergency hotline. Secures sensitive data and ensures a future-ready security posture, sold as a recurring managed service.
• Breaches (Darknet Monitoring) Service that detects data leaks on the darknet, identifies compromised credentials, and enables early response measures before damage occurs for enterprises and organizations.
• Security Awareness Trainings Team and leadership training programs covering current attack techniques, delivered by IT security experts with practical exercises to build cybersecurity awareness across the organization.
• Cyberversicherung (Cyber Insurance via COGITANDA) Cyber insurance product covering prevention, damage management, forensic assistance, and tailored insurance protection. Delivered through DGC's wholly-owned subsidiaries COGITANDA Dataprotect GmbH and COGITANDA Insurance GmbH, acquired in May 2025.

Quantifiable outcome

• 6,927,416 domains and subdomains scanned in Germany with cyberscan.io, discovering 23,395 affected domains and 41,252 subdomains with open .git directories
• +2 more outcomes

Named customers1 record

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Partnerships

Six partnerships are on record, tiered core and minor.

• COGITANDAcoreStrategic or Co-development Partner · 12 May 2025DGC AG acquired COGITANDA (cyber insurance provider) via an asset deal through its subsidiaries COGITANDA Dataprotect GmbH and COGITANDA Insurance GmbH from insolvency. The acquisition created a unique integrated offering of prevention, monitoring, insurance, and crisis management — a first in the German market. COGITANDA provides the insurance arm while DGC provides the technical cybersecurity services.
• CiscocoreTechnology or Integration · 7 September 2022DGC and Cisco formed a strategic partnership to provide a turnkey cybersecurity solution, combining DGC's expertise in cybersecurity and data protection with Cisco's technology portfolio. The partnership aimed to offer comprehensive protection of IT infrastructure and software systems for enterprise customers.
• IT Security Made in GermanyminorOthersDGC is a member of the IT Security Made in Germany initiative, representing commitment to domestic development and hosting standards.
• BitkomminorOthersDGC is a member of Bitkom, Germany's digital association, participating in expert exchanges on cybersecurity and data protection.
• Venom Foundation (ADGM)minorStrategic or Co-development PartnerDGC signed a cybersecurity cooperation agreement with the Venom Foundation (based at ADGM in Abu Dhabi) focused on providing operational support to the newly established foundation. This partnership supports DGC's international presence in the Middle East.
• ACS Partnership / Schleswig-Holstein Partner / RIPE NCC / CSRDminorOthersDGC holds memberships in various regional and international industry bodies including ACS Partnership, Schleswig-Holstein Partner, RIPE NCC, and CSRD, facilitating expert exchange and collaboration in cybersecurity and data protection.

Scale indicators4 records

Recent moves8 records

Expansion highlights6 records

Direct peers

• Rapid7: US-listed cybersecurity firm offering the InsightVM vulnerability management platform alongside MDR/SOC services (InsightConnect). Directly comparable to DGC's cyberscan.io vulnerability scanning and CDOC managed monitoring combination.
• Tenable: Pure-play vulnerability management specialist (Nessus, Tenable.io, Tenable One) serving enterprise and critical infrastructure customers. Closely mirrors DGC's cyberscan.io platform and its focus on identifying attack potentials and exposure.
• Qualys: Cloud-native vulnerability management and security scanning platform with broad enterprise adoption. Directly comparable to DGC's automated, real-time cyberscan.io IT infrastructure and web application scanning.
• Arctic Wolf: US-based cybersecurity vendor specialising in SOC-as-a-service and managed detection & response, comparable to DGC's CDOC 24/7 attack monitoring and incident response offerings.
• Secureworks: MSSP offering managed security services, threat detection, and incident response to enterprises globally. Directly comparable to DGC's CDOC managed security and integrated incident response capabilities.
• Hornetsecurity: German-headquartered European cybersecurity provider offering cloud security, backup, compliance, and security awareness services. Comparable to DGC's 'Made in Germany' positioning and security awareness training portfolio.
• NCC Group: UK-based cybersecurity consulting firm providing penetration testing, managed security services, and incident response. Directly comparable to DGC's manual pentest engagements and SOC-style monitoring offerings.
• KnowBe4: Security awareness and simulated phishing platform, the global leader in its category. Comparable to DGC's Security Awareness Training product for teams and leadership on current attack techniques.

Regional players

• T-Systems: Deutsche Telekom's enterprise IT arm offering managed security services and cybersecurity consulting across the German and European market. Comparable to DGC as a domestic German incumbent in the same enterprise security services space.

Broad incumbents

• CrowdStrike: Global cybersecurity leader combining endpoint, cloud, identity protection, and Falcon Complete MDR/SOC services across enterprise customers. Broad incumbent offering overlapping with DGC's vulnerability management and CDOC — but at vastly greater scale.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Facebookfacebook.com/DGCFlensburg
• LinkedInlinkedin.com/company/cyber-sicherheit
• Xx.com/DGC_fl

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Subsidiaries2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about DGC