Genua

What Genua does

genua GmbH is a German IT security company founded in 1992 and headquartered in Kirchheim bei München, operating as a wholly-owned subsidiary of the state-owned Bundesdruckerei-Gruppe. The company develops and manufactures a portfolio of BSI-certified firewalls, VPN gateways, data diodes, secure remote-maintenance systems, and mobile-working solutions entirely in Germany, with products approved for classified use up to VS-NfD, NATO RESTRICTED, EU RESTRICTED, and (for the vs-diode) GEHEIM/NATO SECRET. Its technical differentiation centers on quantum-resistant cryptography (developed over 15+ years with BSI approvals for quantum-resistant software updates since 2017 and key exchange since 2024), FPGA-accelerated 100 Gbit/s VPN, and on-premise AI-assisted email security.

The company serves primarily German federal and state government agencies, the Bundeswehr and other defense organizations, KRITIS (critical infrastructure) operators in energy, manufacturing, healthcare, and transportation, and selected enterprises in classified-industry projects. Named customers include the Bundeswehr (deployment of up to 250,000 genuconnect VPN client endpoints), THW, BMW, Würth, Bayer, Hitachi Energy, Deutsche Rentenversicherung, and KASTO. Go-to-market combines a direct enterprise sales team with a tiered partner program (Partner, Silver, Gold, Expert), distribution via Bechtle as Expert Partner, listing in the Kaufhaus des Bundes federal procurement portal, and an IONOS cloud channel for virtualized products.

Revenue is generated through hardware appliance sales, software licenses and subscriptions (including virtualized versions), and IT security services (24/7 support, training, consulting). Pricing is not publicly disclosed and is quote-based. genua employs approximately 500 staff across five German locations (Kirchheim, Berlin, Leipzig, Köln, Stuttgart) and has received multiple certifications including Common Criteria EAL 4+, AVA_VAN.5, IEC 62443-4-1, ISO 27001, and BSI Qualified Manufacturer status, alongside five consecutive years of kununu Top Company employer awards.

Name

Genua

Legal name

genua GmbH

Website

https://genua.de

Company type

Private

Founded year

1992

Operating status

Operating

Headcount range

251–500 employees

Short description

genua GmbH is a German IT security company, founded in 1992 and owned by the state-owned Bundesdruckerei-Gruppe, that develops and manufactures BSI-certified firewalls, VPNs, data diodes, and secure remote-maintenance solutions for German government agencies, defense (including the Bundeswehr), KRITIS operators, and classified-industry enterprises.

Ownership category

akta.pro rank

Product category

Network Security

NAICS

Security Systems Services (except Locksmiths) (561621)

SIC

Computer Communications Equipment (3576)

akta.pro primary industry

Secure Access Service Edge (SASE) & SSE (HDADABAB)

akta.pro secondary industries

Secure Communications, Cryptography & Key Management Systems (IMABAOAK), Network Security Services (Firewall/VPN/ZTNA/SASE Integration) (BPAEAEAG)

Keywords

• Network security appliances
• Firewall solutions
• VPN gateways
• Data diodes
• Secure remote maintenance

Headquarters

HQ city

Kirchheim

HQ country

Germany

HQ region

Europe

Offices5 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Others

Revenue model

1. Hardware Appliance Sales: Sale of physical security appliances including firewalls, VPN gateways, data diodes, and remote maintenance hardware. Products include both standardized and customized hardware variants.
2. Software Licenses and Subscriptions: Software licenses for VPN clients, firewall software, email security gateways, and management stations. Includes virtualized software versions for cloud and on-premises deployment.
3. IT Security Services: Comprehensive service offerings including 24/7 hotline, on-site support, regular update services, product and solution training, and IT security consulting.
4. Support and Maintenance: Support services including SLA-based maintenance, software updates, and technical assistance. Contract-based recurring revenue stream.

Go-to-market motion3 records

Distribution channels6 records

Marketing channels10 records

Core offering

Genua develops and manufactures BSI-certified IT security solutions made in Germany, including high-resistance firewalls, firewall/VPN appliances, high-speed VPN gateways, data diodes, secure remote maintenance systems, and AI-based email security gateways. Products are available as hardware appliances and virtualized/cloud-native variants for government agencies, defense organizations, critical infrastructure operators (KRITIS), and industrial enterprises requiring classified-grade communications up to VS-NfD, NATO RESTRICTED, EU RESTRICTED, and NATO SECRET clearance levels.

Product overview

genua offers a comprehensive, modular portfolio of IT security solutions developed and manufactured in Germany, centered on firewalls, VPNs, remote maintenance, and mobile working products. The core platform includes genugate (a highly resistant two-stage stateful packet filter and Application Level Gateway firewall, also available as genugate Virtual) and genuscreen (a firewall and VPN gateway appliance with quantum-resistant key exchange). The VPN family spans genuline (100 Gbit/s FPGA-accelerated hardware VPN gateway), genuconnect/genuconnect Enterprise (VPN software clients), and genutrust (certificate management). Mobile working is addressed by genusecure Suite (VS-NfD-compliant bundle combining VPN client, disk encryption, and smart card middleware) and genusphere (Zero Trust Application Access). Remote maintenance is handled by genubox (available in L, S, Si, XSo, XS, XSi hardware variants plus virtualized version) and genuview (access/storage management). Data diodes include vs-diode (for GEHEIM/SECRET/NATO SECRET networks) and cyber-diode for IT/OT protection. Internal network security is served by cognitix Threat Defender (IDS/IPS), and centralized management by genucenter/genucenter Virtual. The portfolio also includes genumail (AI-powered Secure E-Mail Gateway with phishing intent analysis) and genuwall (industrial firewall for NIS-2 compliance). All products are BSI-approved and many carry Common Criteria certifications, serving government agencies, classified-industry organizations, and KRITIS operators.

Differentiator

Problem solved

Functional benefit

Brands

• genugate: High Resistance Firewall – two-stage high-security firewall with Application Level Gateway and packet filter.
• genuscreen
• genuwall
• genumail
• genuline
• genubox
• genuconnect
• genusecure Suite
• genusphere
• genuview
• genutrust
• genucrypt
• cyber-diode
• vs-diode
• cognitix Threat Defender
• genucenter

Products and services

• genugate Two-stage highly resistant stateful packet filtering and Application Level Gateway firewall with integrated Web Application Firewall. BSI-certified as 'highly resistant' and approved for VS-NfD, NATO RESTRICTED, and EU RESTRICTED. Includes quantum-resistant update mechanism. Targeted at government agencies, defense, and critical infrastructure operators.
• genugate Virtual Virtualized application-level gateway variant of genugate, optimized for operation in virtualized and cloud environments. First virtualized firewall with BSI certification for Common Criteria EAL 4+ and AVA_VAN.5, and the only virtualized firewall with VS-NfD approval.
• genuscreen Highly scalable, backdoor-free firewall and VPN gateway appliance that creates strongly encrypted Virtual Private Networks for VS-NfD-compliant data communication over public networks. Features quantum-resistant key exchange for IPsec/IKEv2, GEO-IP filtering, and BSI approval for VS-NfD, NATO RESTRICTED, and EU RESTRICTED.
• genuscreen Virtual Virtualized combination of stateful packet filter firewall (Layer 3) and VPN gateway for on-premises and cloud environments, with configurable GEO-IP filtering. First virtualized Firewall & VPN-Gateway solution with full BSI approval for VS-NfD, NATO RESTRICTED, and EU RESTRICTED/RESTREINT EU.
• genuwall Industrial firewall designed to protect connected machines and systems in manufacturing and process industries, supporting secure network segmentation and compliance with NIS-2 requirements.
• genumail Secure E-Mail Gateway that analyzes incoming e-mails using advanced mechanisms to detect anomalies, suspicious sender addresses, links, and attachments. Version 1.1 adds AI-based phishing detection with intent analysis running entirely on-premise. Complies with BSI-TR-03108 and BSI-TR-03182.
• genuline BSI-approved high-performance VPN gateway hardware appliance (1U rackmount) with FPGA-based hardware acceleration delivering up to 100 Gbit/s throughput. Supports quantum-resistant key exchange for IPsec/IKEv2 with approval for VS-NfD, NATO RESTRICTED, and EU RESTRICTED. Handles up to 2,048 bidirectional connections for data center interconnect and high-security site coupling.
• genuconnect VPN software client enabling VS-NfD-compliant data communication over untrusted networks. Uses BSI-compliant crypto algorithms and IPsec technology combined with smartcard protection, with full transparent integration into Microsoft Windows 10 and 11. Approved for VS-NfD, NATO RESTRICTED, and EU RESTRICTED. Currently deployed for up to 250,000 endpoints for the German Bundeswehr.
• genuconnect Enterprise Enterprise-grade variant of the genuconnect VPN software client with extended management and scalability features for large organization deployments.
• genutrust High-security certificate solution for managing digital certificates within VPN and encryption infrastructures, part of the VPN portfolio.
• genusecure Suite High-security, VS-NfD-compliant mobile working solution bundle combining the genuconnect VPN client with full-disk encryption and smart card middleware, fully integrated into Microsoft Windows and meeting all BSI requirements for secure remote work.
• genusphere Cloud-native Zero Trust Application Access (ZTAA) solution providing secure, browser-based access to internal applications without full VPN tunneling, replacing traditional VPN access for authorized users.
• genubox Secure remote maintenance solution that establishes encrypted connections for data transfer and restricts external access via firewall functionality to the serviced system only. Supports Zero Trust concepts, Privileged Access Management, and meets all BSI recommendations and NAMUR requirements for secure remote access in industrial environments. Available in multiple hardware variants (genubox L, S, Si, XSo, XS, XSi) and as a virtualized version.
• genuview Access and storage management solution that provides comprehensive monitoring and transparent documentation of all remote maintenance activities. Part of the remote maintenance portfolio.
• vs-diode Data diode for high-performance unidirectional data transfer into SECRET-classified networks from non-classified or lower-classified networks. Applications include e-mail system connections, database mirroring, video and radar data streaming, and software update transfers. Approved for GEHEIM, SECRET UE/EU SECRET, and NATO SECRET.
• cyber-diode Data diode providing unidirectional data communication to protect networked control systems through one-way data transfer, contributing to comprehensive protection of IT/OT environments.
• cognitix Threat Defender IDS and IPS solution enabling IT security decision-makers to establish a solid foundation for future-proof Zero Trust Networking, providing internal network security monitoring and anomaly detection.
• genucenter Central management station through which customers can configure, monitor, and administer their genua security solutions across the portfolio.
• genucenter Virtual Virtualized variant of genucenter for managing genua security appliances in virtualized and cloud environments.
• IT Security Services Comprehensive service offerings including 24/7 hotline, on-site support, regular update services, product and solution training, and IT security consulting for genua security solutions.
• genubox Si New hardware variant of the genubox secure remote maintenance solution featuring four network interfaces, Wi-Fi 6E, and integrated 4G module. Supports DIN rail and wall mounting for use in control cabinets without physical network connection.

Quantifiable outcome

• Secure remote access for up to 250,000 Bundeswehr endpoints
• +3 more outcomes

Named customers12 records

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability3 records

Feature8 records

Partnerships

Seven partnerships are on record, tiered core and minor.

• Elbit Systems DeutschlandcoreStrategic or Co-development Partner · 6 May 2026Strategic cooperation for developing quantum-secure radio systems for multi-domain military operations. Joint development of robust, interference-resistant radios with hardware-accelerated quantum-resistant encryption for NATO/EU military and security forces.
• CucuyominorStrategic or Co-development Partner · 6 May 2026Partnership for laser communication solutions with German startup Cucuyo, part of broader electronic warfare and drone defense solutions presentation at AFCEA.
• HIMA GroupcoreStrategic or Co-development PartnerStrategic partnership in Automation Security. HIMA uses genubox technology for their Remote+ 24/7 remote assistance service, providing secure remote maintenance for industrial safety systems using rendezvous-based access control.
• IONOScoreTechnology or IntegrationPartnership to deliver virtualized IT security products through IONOS Cloud. genua supplies high-security, virtualized network security products for customers operating in IONOS Cloud environment.
• BechtlecoreChannel Partner/ Reseller/ DistributorBechtle AG, Germany's largest IT system house, elevated to Expert Partner status in 2025. Eight-year partnership focusing on Public Sector and industrial customers with shared commitment to digital sovereignty.
• Bundesdruckerei-GruppecoreOthersgenua is a wholly-owned subsidiary of Bundesdruckerei-Gruppe, Germany's state-owned security printing and IT security group. Parent company provides institutional backing and strategic direction.
• Xecuro GmbHminorStrategic or Co-development PartnerJoint venture within Bundesdruckerei-Gruppe. Arnold Krille (genua) and Dr. Alexander Koenen (Xecuro) presented on Software Defined Defence security at AFCEA 2025.

Scale indicators10 records

Recent moves7 records

Expansion highlights6 records

Broad incumbents

• Cisco: Global networking and security incumbent; competes with genua in enterprise VPN (AnyConnect/Secure Client), firewall (Firepower), and integrated network-security architectures for large enterprises and public sector.
• Fortinet: Global leader in network security appliances (FortiGate) and SASE; increasingly pursues government certifications in Europe and competes with genua's firewall, VPN, and OT security portfolio.
• Sophos: Global network and endpoint security vendor with significant European enterprise presence; competes with genua in mid-market firewall and XDR categories where genua's genuwall and genuscreen overlap with Sophos XG/XGS.
• Check Point Software Technologies: Established firewall and network security vendor with deep presence in European government and enterprise; Quantum Security Gateways overlap with genugate and genuscreen in certified deployment scenarios.
• Palo Alto Networks: Global cybersecurity platform with Prisma SASE, NGFW, and Cortex XDR/XSIAM — competes with genua across firewall, ZTAA (Prisma Access vs. genusphere), and increasingly in regulated European public-sector deals.

Regional players

• Stormshield: France-based European firewall/UTM vendor with ANSSI certifications and a comparable focus on sovereign, high-assurance network security for government and defense — a strong regional peer that mirrors genua's positioning outside the DACH market.

Direct peers

• Utimaco: German provider of hardware security modules (HSMs) and key management — a technology partner of genua but also a competitor in adjacent cryptography and secure communications layers for regulated markets.
• Rohde & Schwarz Cybersecurity: German vendor of high-assurance network encryption, firewalls, and session border controllers for government and defense customers; competes head-to-head with genua in BSI-cleared VPN and gateway categories.
• Secunet Security Networks: Germany-based IT security provider specializing in high-assurance solutions for public sector, defense, and KRITIS operators, with BSI-approved products and SINA cryptography platform — the closest direct comparable to genua in customer base, certification depth, and product mix.

Others

• ADVA Network Security: German vendor of high-speed encrypted optical networking — a technology partner of genua (Adva FSP 150-XG118Pro integrated into genua's VPN portfolio) and an adjacent comparable in BSI-cleared high-bandwidth secure transport.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/genuanews
• YouTubeyoutube.com/channel/UCjG4R5Z2qR8vBvN3hH3v8_w
• LinkedInlinkedin.com/company/genua-mbh

Compliance12 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Genua