Northwave Cyber Security
Northwave Cyber Security is a Utrecht-headquartered managed cybersecurity services provider offering 24/7 MDR, CERT incident response, Red/Gold Teaming, and NIS2/DORA compliance services to European mid-market and large enterprises across Benelux, DACH and Nordics.
- Company typePrivate
- Founded2006
- HeadquartersUtrecht, Netherlands
- Headcount251–500
- GTM typeB2B
- OfferingServices
What Northwave Cyber Security does
Northwave Cyber Security is a Netherlands-headquartered managed cybersecurity services provider founded in 2006 in Utrecht and led by CEO Steven Dondorp since 2007. The firm delivers an integrated security operation organised around three pillars — Business (governance, compliance, risk management), Bytes (technical detection, response, and infrastructure security) and Behaviour (human risk management) — packaged as Intelligent Security Operations. The portfolio spans 24/7 Managed Detection & Response, an accredited Computer Emergency Response Team (CERT) for incident response and digital forensics, Red Teaming and Gold Teaming adversary simulations, TIBER-EU framework implementation, vulnerability management, OT security, supply-chain security, ISO 27001 FastTrack, and dedicated compliance services for the EU's NIS2 and DORA regulations. The company also runs CyberHeroes, a gamified human-risk management program co-developed with behavioural-activation partner Hero Center.
Operationally, Northwave runs four regional hubs — Utrecht (Netherlands, headquarters), Leipzig (DACH), Stockholm (Nordics) and Diegem (Belgium) — with a 275+ headcount spanning more than 18 nationalities and functions including ethical hackers, lawyers, cyber analysts, psychologists and programmers. Go-to-market is direct enterprise field sales organised by region (Benelux, DACH, Nordics), supported by thought-leadership whitepapers, a free NIS2 scope assessment tool, and brand marketing including a 2023 Formula 1 sponsorship with Nyck de Vries and Scuderia AlphaTauri.
Revenue is generated through a mix of subscription-style recurring managed services (MDR, Managed Security & Privacy Office, multi-year Cyber Resilience engagements) and project-based professional services (incident response, penetration testing, Red/Gold Teaming, training and assessments). The company is privately held, describes itself as 100% financially autonomous with no external funding, and is co-founder of Cyberveilig Nederland with Dondorp serving as chairman. Named enterprise customers include Port of Rotterdam, Nextpharma, NHG, Serviceplan Group and Lensing Media; the customer base spans ports/logistics, pharmaceuticals, government, housing, media and advertising. In 2026 Northwave transitioned day-to-day leadership to a new executive team (President Petra Oldengarm, COO Kevin Jonkers, CFO Sander Rosendaal) while Dondorp retained the CEO and Chairman role.
Northwave Cyber Security firmographics
Firmographics- Name
- Northwave Cyber Security
- Legal name
- Northwave Group B.V.
- Website
- https://northwave-cybersecurity.com
- Company type
- Private
- Founded year
- 2006
- Operating status
- Operating
- Headcount range
- 251–500 employees
- Short description
- Northwave Cyber Security is a Utrecht-headquartered managed cybersecurity services provider offering 24/7 MDR, CERT incident response, Red/Gold Teaming, and NIS2/DORA compliance services to European mid-market and large enterprises across Benelux, DACH and Nordics.
- Ownership category
- akta.pro rank
Northwave Cyber Security industry classification
Industry- Product category
- Managed Cybersecurity Services
- NAICS
- Computer Systems Design and Related Services (5415), Computer Systems Design Services (541512)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371)
- akta.pro primary industry
- Managed Detection & Response (MDR) & SOC Services (HDADAGAG)
- akta.pro secondary industries
- Governance, Risk & Compliance (GRC) Managed Services (BPAEADAJ), OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN), Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF), Security Awareness, Training & Compliance Attestation (HDADAIAJ), Cybersecurity Architecture & Security Integration (BPAEAAAL)
Keywords
Where Northwave Cyber Security is headquartered
LocationHeadquarters
- HQ city
- Utrecht
- HQ country
- Netherlands
- HQ region
- Europe
Offices4 records
Markets served
Northwave Cyber Security business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Managed Cyber Security Services (Outtasking): Full-service security office outtasking concept combining 24/7 intelligence-driven monitoring, detection and response of all organisational, technical and human aspects into one reliable cyber security operation. Subscription-based recurring revenue model.
- Professional Services: Incident response, security assessments, penetration testing, red teaming, training, and consulting services. One-time and project-based engagements.
- Managed Detection & Response: Continuous monitoring and response services provided as subscription, offering tiered service levels for different client requirements.
- Cyber Resilience Service: Multi-year structured resilience programs (3-year engagement) including assessments, planning, training and exercises, billed as long-term service contracts.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Monthly | Security Officer (medior/senior) |
| Other | Monthly | Front Office Support |
| Other | Monthly | SOC Analyst |
| Other | Monthly | Business Security Consultant |
| Other | Monthly | Presales Consultant |
| Other | Monthly | New Business Manager |
| Other | Monthly | Principal Red Team Engineer |
| Other | Monthly | Senior Stack Engineer |
| Other | Monthly | Security Automation Engineer |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels5 records
Northwave Cyber Security product offering
Product offeringCore offering
Northwave Cyber Security provides managed and professional cybersecurity services through a 360° model that integrates the organisational (Business), technical (Bytes), and human (Behaviour) dimensions of security into a single Intelligent Security Operations delivery. Offerings span 24/7 Managed Detection & Response, Incident Response/CERT, vulnerability management, OT security, supply chain security, Red/Gold Teaming adversary simulations, EU regulatory compliance (NIS2, DORA, TIBER-EU), and the CyberHeroes gamified awareness program. Services are sold on multi-year managed service subscriptions and project-based engagements to mid-market and large European enterprises.
Product overview
Northwave Cyber Security is a cybersecurity services provider offering an integrated portfolio of services organized around three pillars: Business (governance, compliance, risk management), Bytes (technical security operations, detection, response), and Behaviour (human risk management). Core offerings include 24/7 Managed Detection & Response (MDR), Incident Response CERT services, Red Teaming/Adversary Simulation, and Gold Teaming crisis simulations. These are complemented by specialized compliance services for NIS2 and DORA, vulnerability management, OT security, and the CyberHeroes gamification-based awareness program. The company operates an intelligent security operations model combining organizational, technical, and human dimensions into a unified approach.
Differentiator
Problem solved
Functional benefit
Brands
- CyberHeroes: A gamified cybersecurity awareness and behaviour change program developed in partnership with Hero Center, focusing on changing employee behaviour through psychology, storytelling, and gamification.
Products and services
- Managed Detection & Response (MDR) 24/7 SOC-based monitoring, detection and response service that reduces time to detect and respond to potential threats in client environments, delivered as a tiered subscription.
- Incident Response / CERT 24/7 Computer Emergency Response Team providing immediate assistance during cyber incidents, including digital forensic investigation, available via international hotline 00800 1744 0000.
- Managed Security & Privacy Office Holistic managed service that integrates organisational, technical and human security management into a single outsourced security and privacy office, mitigating cyber risks and ensuring continuity.
- Gold Teaming Most extensive cyber crisis simulation combining technical findings of Red Teaming with a Cyber Crisis Exercise, including semi-live simulations with fake ransomware scenarios.
- Red Teaming / Adversary Simulation TTP-based adversary simulation that mimics the biggest threats and attack patterns to validate and improve the security posture and cyber resilience of client organisations.
- Pentesting & Vulnerability Assessments Penetration testing and vulnerability assessment services to identify security weaknesses in client systems.
- Vulnerability Management Continuous process of identifying, classifying, prioritising and managing vulnerabilities in client environments.
- Cyber Resilience Service 3-year structured program combining incident and crisis preparation consulting with technical know-how, including maturity scans, workshops, training and exercises to bring organisations to a desired cyber resilience maturity level.
- CyberHeroes Gamification-based human risk management and cyber security awareness program that uses storytelling and interactive scenarios to change employee behaviour.
- Human Risk Management Behavioural change program addressing human-related cyber risks to make employees active participants in security, delivered through workshops, assessments and the CyberHeroes platform.
- State of Security Assessment Comprehensive assessment of an organisation's current security posture to identify gaps and improvement areas.
- Security Roadmap Risk-based actionable plan to improve IT security maturity level with clear steps and priorities.
- Data Protection Impact Assessment Assessment service to evaluate the privacy and data protection implications of processing activities.
- Audit & Control Security auditing service to test and verify implementation of security measures against frameworks.
- ISO 27001 FastTrack Accelerated path to ISO 27001 certification for organisations.
- Supply Chain Security Service providing complete insight into the supplier landscape and risk factors for supply chain security.
- OT Security Operational Technology security services for industrial control systems and critical infrastructure.
- DORA Compliance Services Digital Operational Resilience Act (DORA) compliance assessment and implementation support for EU financial sector entities.
- NIS2 Compliance Services Network and Information Security Directive (NIS2) gap assessment and compliance support for EU organisations.
- Cyber Crisis Readiness Workshops, assessments and exercises to prepare organisations for cyber crisis situations, including crisis communications simulations.
Quantifiable outcome
- Hundreds of incidents handled annually across Europe
- +3 more outcomes
Companies that use Northwave Cyber Security
Customer profileNamed customers5 records
Segments3 records
Ideal customer profiles3 records
Northwave Cyber Security technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability6 records
Feature6 records
Northwave Cyber Security partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered minor and core.
- Nyck de Vries / Scuderia AlphaTauriminorFormula 1 sponsorship partnership for 2023 season. Northwave brand prominent on driver's racing helmet and cap. Nyck de Vries is Dutch F1 driver for Scuderia AlphaTauri. Partnership ended when de Vries left F1 after mid-2023 season.
- Cyberveilig NederlandcoreCo-founder of Dutch cyber security industry association focused on public-private cooperation to strengthen Dutch society's cyber resilience. CEO Steven Dondorp serves as chairman.
- Hero CentercoreCo-development partnership for CyberHeroes gamified cyber security awareness program. Hero Center provides behavioural activation expertise; Northwave provides cyber security content and expertise. Jointly developed CyberHeroes platform.
- HackShieldminorProud partner of HackShield - online game helping next generation build cyber resilience. Through CyberHeroes, children can become Junior Cyber Agent via HackShield platform.
- Cybersecurity Tech AccordminorSignatory of the Cybersecurity Tech Accord - global commitment by hundreds of organizations to improve cybersecurity and protect against cyber attacks.
Scale indicators7 records
Recent moves9 records
Expansion highlights6 records
Northwave Cyber Security competitors and assessment
Company assessmentEmerging players
- S-RM: UK-based cyber consultancy and incident response firm with growing European presence. Comparable in advisory-led cybersecurity and incident response, with overlapping enterprise and financial-sector client focus.
Direct peers
- Orange Cyberdefense: European MSSP and cybersecurity services arm of Orange, offering 24/7 SOC/MDR, incident response, consulting, and threat intelligence across Europe. Closest direct comparable in scale, geographic breadth, and managed services portfolio to Northwave.
- Wortell: Dutch Microsoft-focused cybersecurity and modern workplace provider, a Microsoft Intelligent Security Association peer. Comparable as a Dutch cybersecurity services firm serving enterprise and regulated industries with managed and advisory offerings.
- WithSecure (formerly F-Secure): Nordic-headquartered cybersecurity firm offering managed detection, incident response, and consulting across Europe. Direct comparable given regional Nordic presence, enterprise focus, and overlapping services with Northwave's Nordics expansion.
- Fox-IT (NCC Group): Dutch-origin cybersecurity firm now part of NCC Group, offering managed security services, threat intelligence, and incident response. Direct peer given shared Dutch heritage, CERT capabilities, and overlap with Northwave's enterprise/government client base in the Netherlands.
- Tesorion: Netherlands-based MSSP providing MDR, SOC, and incident response services with strong focus on mid-market and enterprise Dutch clients. Closely comparable in services, geography, and target customer segment.
Broad incumbents
- T-Systems (Deutsche Telekom): Enterprise ICT and security arm of Deutsche Telekom with significant DACH SOC and managed security operations. Comparable in DACH-region enterprise/government security services, but operates within a much broader portfolio.
- Deloitte Cyber Risk Services: Global consulting leader offering cyber strategy, GRC, managed detection, and incident response. Overlaps with Northwave's enterprise advisory and NIS2/DORA compliance practice.
- ReliaQuest: US-headquartered MDR provider expanding in EMEA. Comparable in 24/7 managed detection and response and enterprise SOC outsourcing, though primarily technology-platform-led rather than advisory-led.
- KPMG Cyber Security Services: Big-Four advisory arm delivering cyber strategy, GRC, compliance (NIS2/DORA), and incident response. Comparable where Northwave competes in advisory/compliance work for large enterprises, though broader in scope.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Northwave Cyber Security social profiles
Digital presenceNorthwave Cyber Security compliance and trust
Trust signalCompliance3 records
Northwave Cyber Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Northwave Cyber Security leadership team
Management profileNumber of profiles
Profiles14 records
Northwave Cyber Security subsidiaries and ownership
Company hierarchySubsidiaries5 records
Northwave Cyber Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Northwave Cyber Security M&A and investment
M&A and investmentM&A
Investments1 record
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Northwave Cyber Security
What does Northwave Cyber Security do?
Northwave Cyber Security provides managed and professional cybersecurity services through a 360° model that integrates the organisational (Business), technical (Bytes), and human (Behaviour) dimensions of security into a single Intelligent Security Operations delivery. Offerings span 24/7 Managed Detection & Response, Incident Response/CERT, vulnerability management, OT security, supply chain security, Red/Gold Teaming adversary simulations, EU regulatory compliance (NIS2, DORA, TIBER-EU), and the CyberHeroes gamified awareness program. Services are sold on multi-year managed service subscriptions and project-based engagements to mid-market and large European enterprises.
Is Northwave Cyber Security a public or private company?
Northwave Cyber Security is a private company. It is classified as management employee owned and is currently operating.
When was Northwave Cyber Security founded?
Northwave Cyber Security was founded in 2006. It employs 251 to 500 people.
Where is Northwave Cyber Security based?
Northwave Cyber Security is headquartered in Utrecht, Netherlands, in the Europe region.
How does Northwave Cyber Security make money?
Four revenue lines are on record. Managed Cyber Security Services (Outtasking) is the primary driver. The others are professional Services, managed Detection & Response and cyber Resilience Service.
Who are Northwave Cyber Security's main competitors?
S-RM is listed as an emerging player. Direct peers are Orange Cyberdefense, Wortell, WithSecure (formerly F-Secure), Fox-IT (NCC Group) and Tesorion. Broad incumbents are T-Systems (Deutsche Telekom), Deloitte Cyber Risk Services, ReliaQuest and KPMG Cyber Security Services.
Does Northwave Cyber Security have an API?
No public API is recorded for Northwave Cyber Security.
What industry is Northwave Cyber Security in?
Northwave Cyber Security's product category is Managed Cybersecurity Services. Its primary akta.pro industry code is HDADAGAG, Managed Detection & Response (MDR) & SOC Services, with a secondary code of BPAEADAJ, Governance, Risk & Compliance (GRC) Managed Services. Its NAICS code is 5415 and its SIC code is 7370.