What Sansec does

Sansec BV is a Netherlands-based cybersecurity company founded in 2015 by Willem de Groot and headquartered in Utrecht, focused exclusively on e-commerce fraud prevention. The company builds server-side security tooling — most notably eComscan, a Golang-based scanner that inspects files, databases, processes, and scheduled tasks to surface malware invisible to remote scanners such as PCI Approved Scanning Vendors or Adobe Security Scan. Its proprietary stack includes a 50,000+ malware-signature database updated daily (≈30 signatures added per day), the Early Breach Global Detection Network crawling 400,000+ online stores daily, a Honeypot Network of bait webshops, MageVulnDB (an open-source vulnerability database for Magento extensions), and Sansec Shield, a Magento-specific Web Application Firewall. Sansec's research team analyzes 200–300 e-commerce hacks per week, and the company reports 10,000+ compromised-store investigations since 2015, with 47% of its threat intelligence representing previously undiscovered attack vectors.

The product portfolio is centered on eComscan (freemium scanner with Advanced and Enterprise paid annual subscriptions), Sansec Shield WAF (bundled with paid tiers), Live Attack Map (real-time attack visualization), and Forensic Investigation Services (premium-tier root-cause analysis and cleanup). The go-to-market combines a product-led self-serve motion (free curl-installable scanner), an agency channel of ten named Magento-specialist partners (Sonassi, Snowdog, SwiftOtter, Jetrails, ironPlane, Scandiweb, Space48, Hyvä, integer_net, Valantic) plus a hosting integration with Maxcluster in Germany, and direct enterprise sales for large global brands. Validation includes partnerships with Europol/ENISA (2024), Google VirusTotal (2024), and Adobe; clients include the US Secret Service; and the company claims 12,000+ global brand and agency customers across Magento, Adobe Commerce, Shopware, WooCommerce, and Sylius environments. Sansec is privately held, founder-controlled, bootstrapped (no external funding rounds disclosed), and operates with a 1–10 person team.

Name

Sansec

Legal name

Sansec BV

Website

https://sansec.io

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

1–10 employees

Short description

Sansec is a Netherlands-based cybersecurity company specializing in e-commerce fraud prevention, offering server-side malware scanning (eComscan), a Magento-specific WAF (Sansec Shield), and forensic investigation services to 12,000+ global ecommerce brands, agencies, and platforms.

Ownership category

akta.pro rank

Product category

Ecommerce Security Software

NAICS

Software Publishers (5132), Security Systems Services (56162)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Vulnerability Intelligence & Exploit Prediction (HDADAHAI)

akta.pro secondary industry

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)

Keywords

• Ecommerce security
• Malware detection
• Vulnerability scanning
• Web application firewall
• Digital skimming protection

Headquarters

HQ city

Utrecht

HQ country

Netherlands

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

1. eComscan Subscription (Paid Plans): Free tier provides basic scanning; paid plans (Advanced and Enterprise) include detailed reporting, troubleshooting guides, forensic investigation, and Sansec Shield WAF protection on annual subscriptions.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels7 records

Core offering

Sansec develops and sells ecommerce security software for merchants running Magento, Adobe Commerce, Shopware, WooCommerce, Sylius, and other platforms. The core product, eComscan, performs deep server-side scanning for malware and vulnerabilities using a Golang-based agent, drawing on a 50,000+ signature database and intelligence from the Early Breach Global Detection Network that crawls 400,000+ stores daily. Complementary offerings include the Sansec Shield WAF, MageVulnDB (open-source extension vulnerability database), Live Attack Map, and premium forensic investigation and cleanup services.

Product overview

Sansec offers a unified ecommerce security platform centered on two main products: eComscan, a specialized malware and vulnerability scanner for ecommerce platforms (Magento, Adobe Commerce, Shopware, WooCommerce, Sylius, and others), and Sansec Shield, a Magento-specific Web Application Firewall. The platform is augmented by a Live Attack Map for real-time attack visualization and MageVulnDB, an open-source database of vulnerable Magento extensions. Forensic investigation services are available as part of premium plans. The system leverages over 50,000 malware signatures and monitors over 400,000 online stores daily through the Early Breach Global Detection Network.

Differentiator

Problem solved

Functional benefit

Brands

• eComscan: A specialized security scanner for eCommerce platforms that detects malware, vulnerabilities, and unauthorized accounts.
• Sansec Shield
• Sansec Early Breach Global Detection Network

Products and services

• eComscan A specialized security scanner for ecommerce platforms (Magento, Adobe Commerce, Shopware, WooCommerce, Sylius and others) that performs deep server-side scanning of files, databases, processes, and scheduled tasks. Includes 50,000+ malware signatures updated daily and is fed 24/7 with threat intelligence from Sansec's research team. The free tier provides basic scanning; paid Advanced and Enterprise plans add detailed reporting, troubleshooting guides, forensic investigation, Sansec Shield WAF, and dedicated support.
• Sansec Shield A smart Magento-specific Web Application Firewall that blocks all known attacks and zero-day exploits in real time. Included with Advanced and Enterprise annual plans and compatible with Magento 2 and Adobe Commerce. Provides origin-bound protection against ecommerce-specific attack vectors.
• Live Attack Map A real-time visualization tool that displays active attacks being blocked by Sansec Shield, showing attack patterns and the status of protected stores across Sansec's monitored ecommerce footprint.
• MageVulnDB An open-source authoritative database of third-party vulnerabilities in Magento extensions, maintained by developers and merchants globally. Used to check whether Magento/Adobe Commerce extensions are safe to deploy.
• Forensic Investigation Services Gold standard ecommerce forensics including root cause analysis and malware cleanup, included with Advanced or Enterprise annual subscriptions. Covers deep examination of code base, database records, embedded assets, system processes, scheduled tasks, and threat intelligence to identify breach entry points and eliminate persistence mechanisms.

Quantifiable outcome

• Saves technical teams 8 to 20 hours during incident response stage of a hack
• +2 more outcomes

Named customers11 records

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability2 records

Feature8 records

Partnerships

Four partnerships are on record, tiered flagship, core and minor.

• Google / VirusTotalflagshipTechnology or Integration · 8 March 2024Google, via its subsidiary VirusTotal, selected Sansec as an approved security vendor. Sansec contributes its specialized intel on ecommerce security threats to the VirusTotal platform, and Google/VirusTotal displays Sansec's detection capabilities. Data exchange agreement established between the two companies.
• Europol / European Union Agency for Cybersecurity (ENISA)flagshipStrategic or Co-development Partner · 9 January 2024Europol, ENISA, and law enforcement authorities from 17 countries joined forces with Sansec as private sector partner to counteract online skimming. Sansec was invited to speak at Europol's Training Course on Payment Card Fraud Forensic Investigation and contributes to coordinated law enforcement action against ecommerce fraud.
• MaxclustercoreStrategic or Co-development Partner · 20 February 2020Sansec partnered with German ecommerce hosting provider Maxcluster to integrate Sansec's eComscan technology into Maxcluster's ShopSecurity product. The partnership makes maxcluster the most secure ecommerce hosting platform in Germany, offering 500+ customers free integrated security monitoring based on Sansec's threat intelligence.
• AdobeminorStrategic or Co-development PartnerSansec partners with Adobe on security matters. Sansec has been invited to Europol training alongside Adobe recognition, and Sansec's research is frequently cited in Adobe security bulletins and patches.

Scale indicators8 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• Cloudflare: Global CDN and security provider with a WAF, bot management, and DDoS protection widely used by ecommerce merchants. Comparable as a competing WAF and edge security layer, though Sansec differentiates through server-side ecommerce forensics depth.
• Akamai: Enterprise web security and WAF vendor with App & API Protector and bot management serving large ecommerce brands. Comparable to Sansec Shield at the enterprise WAF layer, with much broader portfolio scale.
• Imperva: Web application and API protection vendor offering WAF, bot management, and DDoS protection for ecommerce and enterprise customers. Comparable to Sansec in WAF-led ecommerce security positioning at enterprise tier.

Direct peers

• Sucuri: Website security platform offering remote malware scanning, WAF, and incident response for CMS and ecommerce sites. Most directly comparable to Sansec in product scope (malware scan + WAF + cleanup) and customer base (small and mid-market ecommerce merchants), though less specialized on server-side ecommerce forensics.
• Astra Security: All-in-one website security suite combining malware scanning, WAF, and vulnerability testing for ecommerce and CMS platforms. Comparable in target customer (small-mid ecommerce merchants) and freemium-plus-paid SaaS model.
• SiteLock: Website security and malware scanning service widely adopted by SMB ecommerce merchants and hosting providers. Comparable to Sansec on the malware scan + WAF bundle and channel-led distribution through hosting partners.
• Reblaze: Cloud WAF, bot mitigation, and DDoS protection with ecommerce-specific behavioral analysis. Comparable to Sansec Shield in WAF function and ecommerce customer focus, with broader bot/Abuse specialization.
• Patchman: PHP-based CMS and ecommerce security provider offering virtual patching and malware detection for platforms including Magento. Directly comparable to Sansec on the PHP/ecommerce platform focus and hosting-channel distribution model.
• Wordfence: WordPress security plugin and service providing malware scanning, WAF, and threat intelligence to a large merchant base. Comparable to Sansec on plugin-based deployment and ecommerce-focused threat intelligence, though focused on WordPress/WooCommerce rather than Magento.

Emerging players

• MalCare: WordPress malware scanner and security service with one-click cleanup and a cloud-based scanner. Comparable to Sansec on the deep malware scan + cleanup offering and PLG self-serve motion for SMB merchants.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/sansecio
• LinkedInlinkedin.com/company/sansec

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Sansec