Toreon
Toreon is a Belgian cybersecurity consulting firm of 50+ senior experts serving enterprises and Flemish SMBs across the EU. It delivers business-driven security strategy, GRC, cloud security, OT security, threat modeling, and AI penetration testing services.
- Company typePrivate
- Founded2014
- HeadquartersAntwerpen, Belgium
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Toreon does
Toreon is a Belgian cybersecurity consulting firm headquartered in Antwerp (with a secondary office in Ottignies-Louvain-la-Neuve), founded in 2014 and operating with a team of 50–60 senior security consultants. The firm delivers business-driven cybersecurity services spanning organizational resilience (Security Strategy & GRC, Virtual CISO, Cloud Security for Microsoft 365/Azure, Security Architecture, OT Security, Ethical Hacking, Incident Response) and product security (Secure Development/SSDLC coaching using OWASP SAMM, Threat Modeling, AI Penetration Testing, CRA Compliance). Toreon's consultants co-created the OWASP SAMM framework and contribute to the Belgian CyberFundamentals (CYFUN) framework, lending the firm authority across EU regulatory regimes including NIS2, CRA, DORA, GDPR, ISO 27001, and ISO/SAE 21434. It holds dual ISO 27001:2017 and ISO 9001:2015 certifications and is a VLAIO-recognized cybersecurity service provider for five consecutive years.
The firm operates two distinct go-to-market motions. Enterprise clients — including Atlas Copco, Crelan, ENTSO-E, Fluvius, Lynxcare, Materialise, Niko Group, Province of Antwerp, and UHasselt — are engaged via direct, senior-consultant-led sales across financial services, healthcare, medical technology, automotive, public sector, software builders, HR services, and OT/utilities. Flemish SMBs are reached through VLAIO-subsidized cybersecurity improvement trajectories (START at €5,950, MEDIUM at €14,275, PLUS at €19,950 post-subsidy) and KMO-Portefeuille subsidized advisory, serving approximately 100 clients with 90+ VLAIO trajectories completed. The firm also delivers AI/cyber training through its sister company Data Protection Institute (DPI).
Revenue is generated through project-based professional services, packaged consulting engagements, and training programs. Notable proprietary assets include the Toreon Security Office Portal (a CISO compliance dashboard with Conditional Access Simulator) and extended threat-modeling frameworks for AI/LLM systems. The firm is privately held and bootstrapped — founded by CEO Alex Driesen, Co-Founder/CFO Bernhard Dobbels, Co-Founder/Director Public Sector & Defense Wouter Avondstondt, and Head of Operations Jasper Hooft — with no disclosed external funding, M&A activity, or institutional investor involvement.
Toreon firmographics
Firmographics- Name
- Toreon
- Legal name
- Toreon BV
- Website
- https://toreon.com
- Company type
- Private
- Founded year
- 2014
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Toreon is a Belgian cybersecurity consulting firm of 50+ senior experts serving enterprises and Flemish SMBs across the EU. It delivers business-driven security strategy, GRC, cloud security, OT security, threat modeling, and AI penetration testing services.
- Ownership category
- akta.pro rank
Toreon industry classification
Industry- Product category
- Cybersecurity Consulting
- NAICS
- Computer Systems Design and Related Services (54151)
- akta.pro primary industry
- Application Security & DevSecOps Services (BPAKAHAJ)
Keywords
Where Toreon is headquartered
LocationHeadquarters
- HQ city
- Antwerpen
- HQ country
- Belgium
- HQ region
- Europe
Offices2 records
Markets served
Toreon business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Cybersecurity Consulting Services: Toreon generates revenue through professional services engagements spanning strategic security consulting (Virtual CISO, GRC, security strategy), technical security delivery (ethical hacking/pentesting, cloud security, OT security, security architecture), and product security services (threat modeling, secure development/SSDLC coaching, AI penetration testing, CRA compliance). Engagements are structured as project-based consulting engagements with senior consultants, priced based on scope, duration, and consultant seniority. The company also offers packaged security solutions that can be tailored to client needs, providing repeatable high-quality services without ongoing time-and-means support.
- VLAIO Subsidized Cybersecurity Trajectories: Toreon offers three VLAIO-approved cybersecurity improvement packages (START, MEDIUM, PLUS) for Flemish SMBs, with 50% government subsidy. Revenue is realized through these structured program fees, which include assessment, roadmap development, and implementation credits. The company also serves as a KMO-Portefeuille registered service provider for training, analysis, and advice, enabling SMB clients to access additional Flemish government subsidies.
- Training and Education: Through sister company Data Protection Institute (DPI), Toreon generates revenue from cybersecurity training programs including CISO certification tracks (M1-M6 modules), threat modeling training, and AI Whiteboard Hacking training. Training is delivered in-person and generates revenue per participant/course enrollment.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | START - Security Discovery for first-timers |
| Other | Multi-year contract | MEDIUM - Complete package for growing companies |
| Other | Multi-year contract | PLUS - For companies with strict security requirements |
| Other | Multi-year contract | Expansion Package 1: Product Security - Secure SDLC Coaching |
| Other | Multi-year contract | Expansion Package 2: Extra Implementation Days |
| Other | Annual | KMO-Portefeuille subsidies for training and advisory |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels8 records
Toreon product offering
Product offeringCore offering
Toreon is a Belgian cybersecurity consulting firm delivering senior-consultant-led services across organizational resilience and product security. Offerings span Security Strategy & GRC, Virtual CISO, Cloud Security (Microsoft 365/Azure), OT Security, Security Architecture, Ethical Hacking, Threat Modeling, Secure Development (SSDLC coaching on OWASP SAMM), AI Penetration Testing, and CRA Compliance, supplemented by training programs delivered through sister company Data Protection Institute (DPI).
Product overview
Toreon is a business-driven cybersecurity consulting firm offering nine core service categories delivered by 50+ senior consultants from Antwerp. The portfolio spans strategic services (Security Strategy & GRC, Virtual CISO), technical implementation (Cloud Security, Security Architecture, OT Security, Ethical Hacking), and specialized offerings (Threat Modeling, AI Penetration Testing, Secure Development). Core services are complemented by training programs (AI Whiteboard Hacking Training, Threat Modeling Training) and service-specific modules (CRA Compliance, SSDLC Coaching). The company also operates an internal Toreon Security Office Portal dashboard for CISO clients. Services are delivered through packaged solutions that can be tailored to client needs, with VLAIO-subsidized improvement trajectories for Flemish SMEs.
Differentiator
Problem solved
Functional benefit
Products and services
- Security Strategy & GRC
Quantifiable outcome
- Catching a security flaw at design time costs roughly 100x less than fixing the same flaw in production (IBM System Sciences Institute)
- +2 more outcomes
Companies that use Toreon
Customer profileNamed customers15 records
Segments9 records
Ideal customer profiles5 records
Toreon technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration2 records
AI capability6 records
Feature4 records
Toreon partnerships and signals
Strategic signalPartnerships
Four partnerships are on record, tiered core and minor.
- NFIRcoreNFIR is a specialized incident response and forensics provider in the Netherlands. Toreon has partnered with NFIR to provide cross-border incident response support. When Toreon faces heavy loads in Belgium, NFIR supports the team, and vice versa, ensuring that client organizations are secured as quickly as possible. This partnership enables Toreon to guarantee rapid response times across borders.
- VLAIO (Vlaams Agentschap voor Innovatie & Ondernemen)coreVLAIO is the Flemish government agency for innovation and entrepreneurship. Toreon has been selected as one of the few cybersecurity partners within the prestigious VLAIO subsidy program, enabling the company to deliver subsidized cybersecurity improvement programs to Flemish SMBs with up to 50% government funding. Toreon is recognized as a VLAIO partner for the 5th consecutive year.
- Data Protection Institute (DPI)coreData Protection Institute (DPI) is Toreon's sister company specializing in providing training for security and privacy professionals and fostering a community equipped to meet the challenges of today's digital landscape. DPI trained over half of the DPOs in Belgium and is widely recognized for its practical CISO training. Toreon consultants contribute to DPI training programs including threat modeling and AI security training.
- CRACY (EU-funded initiative)minorCRACY is an EU-funded initiative under the Digital Europe Programme designed to help SMEs navigate the complexities of the Cyber Resilience Act through practical tools, guidance, and automation. Toreon is a partner of CRACY, contributing to European efforts to help SMEs prepare for CRA compliance and ensuring Toreon's clients benefit from the most up-to-date CRA insights and best practices.
Scale indicators6 records
Recent moves7 records
Expansion highlights6 records
Toreon competitors and assessment
Company assessmentMarket position
Competitive moat5 records
Customer concentration
Toreon social profiles
Digital presenceToreon compliance and trust
Trust signalCompliance2 records
Toreon financial estimates
Financial estimateRevenue estimate
Valuation estimate
Toreon leadership team
Management profileNumber of profiles
Profiles5 records
Toreon subsidiaries and ownership
Company hierarchySubsidiaries1 record
Toreon funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Toreon M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Toreon
What does Toreon do?
Toreon is a Belgian cybersecurity consulting firm delivering senior-consultant-led services across organizational resilience and product security. Offerings span Security Strategy & GRC, Virtual CISO, Cloud Security (Microsoft 365/Azure), OT Security, Security Architecture, Ethical Hacking, Threat Modeling, Secure Development (SSDLC coaching on OWASP SAMM), AI Penetration Testing, and CRA Compliance, supplemented by training programs delivered through sister company Data Protection Institute (DPI).
Is Toreon a public or private company?
Toreon is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Toreon founded?
Toreon was founded in 2014. It employs 11 to 50 people.
Where is Toreon based?
Toreon is headquartered in Antwerpen, Belgium, in the Europe region.
How does Toreon make money?
Three revenue lines are on record. Cybersecurity Consulting Services are the primary driver. The others are VLAIO Subsidized Cybersecurity Trajectories and training and Education.
Does Toreon have an API?
No public API is recorded for Toreon.
What industry is Toreon in?
Toreon's product category is Cybersecurity Consulting. Its primary akta.pro industry code is BPAKAHAJ, Application Security & DevSecOps Services. Its NAICS code is 54151.