Diverto

What Diverto does

Diverto is a Zagreb-based cybersecurity firm founded in 2007, now operating as the core of Marlink's dedicated cybersecurity division. Following Marlink's January 2026 acquisition of Dutch maritime cybersecurity provider Port-IT, Diverto's operations were combined with Port-IT to form a unit of 130+ certified cybersecurity professionals across four global Security Operations Centers (Uruguay, Palma, Zagreb, Rotterdam, and Bangkok), with 150+ dedicated cybersecurity experts providing 24/7 coverage. The combined entity inherited a customer base of 7,000 vessels and a market-leader designation in maritime cybersecurity from Valour Consultancy.

The platform delivers a unified cybersecurity stack spanning both IT and OT environments, anchored by a managed Security Operations Centre (SOC) that runs on next-generation SIEM, XDR, SOAR, and machine learning technologies. Surrounding capabilities include Cyber Threat Intelligence (fed by 600+ trusted sources and integrated with global CERTs), Network Detection & Response using AI/ML behavioural analysis, IT/OT network segmentation, OT-aware endpoint security, EU-hosted External Attack Surface Management, a deception/honeypot system, Unified Threat Management with SD-WAN, Privilege Remote Access, plus professional services for vulnerability assessment, penetration testing, digital forensics, GAP assessment, and risk management. Compliance expertise spans IACS UR E26, NIS2, DORA, ISO 27001, and IEC 62443.

Revenue is generated through subscription-based managed security services (SOC monitoring, tiered EDR in Entry/Standard/Elite), complemented by project-based professional services and consulting. Go-to-market is enterprise field sales targeting five verticals — shipping (primary), energy, cruise, government & defence, and enterprise & telco — supplemented by an eight-vendor technology partnership ecosystem (Qualys, Trellix, ESET, Fortinet, Nozomi Networks, TXOne Networks, BeyondTrust, Stellar). Pricing is quote-based with no published tiers, and engagement is initiated via "Request a Quote" and "Talk to our cyber security experts" CTAs, consistent with bespoke enterprise MSSP contracts.

Name

Diverto

Website

https://diverto.hr

Company type

Private

Founded year

2007

Operating status

Operating

Headcount range

11–50 employees

Short description

Diverto is a Zagreb-based cybersecurity firm providing managed IT/OT security across maritime, energy, cruise, government, and enterprise verticals. Operating inside Marlink after the 2026 Port-IT combination, it runs five global SOCs with 150+ experts serving 7,000 vessels.

Ownership category

akta.pro rank

Product category

Managed Cybersecurity Services

NAICS

Security Systems Services (56162), Computer Systems Design and Related Services (54151), Other Computer Related Services (541519)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Communications Services, Nec (4899)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

akta.pro secondary industries

Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG), Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG)

Keywords

• Managed security services
• IT OT cybersecurity
• Maritime cyber security
• Security operations centre
• Cyber threat intelligence

Headquarters

HQ city

Zagreb

HQ country

Croatia

HQ region

Europe

Offices6 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales

Revenue model

1. Managed Security Services: Recurring managed security services including 24/7 SOC monitoring, threat detection, incident response, and compliance management. Delivered as subscription-based contracts with flexible managed, hybrid and Open SOC options.
2. Professional Services: Consulting and implementation services including GAP Assessment, Risk Management & Assessment, Penetration testing, Digital Forensics, and Compliance support.
3. Endpoint Security Subscriptions: Endpoint Security (EDR) available in three tailored levels - Entry, Standard, and Elite - with varying degrees of managed detection and response capabilities.

Go-to-market motion2 records

Distribution channels1 record

Marketing channels4 records

Core offering

Diverto provides managed cybersecurity services and network security consulting covering both IT and OT environments for maritime, energy, cruise, government and defence, and enterprise customers. Core delivery is a 24/7 global Security Operations Centre (SOC) supported by Cyber Threat Intelligence, Endpoint Security, Network Detection & Response, Penetration Testing, Digital Forensics, GAP Assessment, and Risk Management services. Sales are quote-based with tailored solutions delivered through dedicated cybersecurity experts.

Product overview

Marlink Cyber Security, which incorporates Diverto operations following the acquisition of Port-IT, offers a unified cybersecurity platform providing solutions for IT and OT (operational technology) environments across maritime, energy, and enterprise sectors. The portfolio comprises a managed Security Operations Centre (SOC) as the core service, supplemented by specialized capabilities including Cyber Threat Intelligence, Network Detection & Response (NDR), IT/OT Network Segmentation, Endpoint Security (both for OT and standard EDR), Deception System, External Attack Surface Management (EASM), Unified Threat Management (UTM), Privilege Remote Access (PRA), Vulnerability Assessment, Penetration Testing, Digital Forensics, GAP Assessment, and Risk Management services. The combined entity operates across four global SOCs in Uruguay, Palma, Zagreb, Rotterdam, and Bangkok, with over 150 cybersecurity experts providing 24/7 protection.

Differentiator

Problem solved

Functional benefit

Products and services

• Security Operations Centre (SOC) for IT/OT Managed 24/7 defense hub providing real-time monitoring, detection, and incident response across IT and OT environments, powered by next-generation SIEM, XDR, SOAR, and machine learning technologies for maritime, energy, and enterprise customers.
• Cyber Threat Intelligence (CTI) Real-time, industry-specific intelligence service for IT and OT environments delivering actionable insights into evolving threats, vulnerabilities, and attacker behaviour, powered by more than 600 trusted sources and integrated with global CERTs such as Norma, M-CERT, and MTS-ISAC.
• Network Detection & Response (NDR) Continuous monitoring of IT and OT networks using AI, machine learning, and behavioural analysis to identify anomalies in real time, fully integrated with XDR, SIEM, SOAR, and UTM platforms.
• IT/OT Network Segmentation First line of defense that isolates critical systems by creating secure zones, applying advanced firewalls, and using micro-segmentation to block lateral threats for connected industrial and maritime operations.
• Endpoint Security for OT Unified protection for industrial and operational environments including vessels, offshore platforms, and manufacturing sites, safeguarding workstations, HMIs, PLCs, SCADAs, and field equipment.
• Endpoint Security (EDR) Advanced multi-layered endpoint protection available in Entry, Standard, and Elite tiers, providing malware blocking, ransomware remediation, unauthorized access prevention, real-time detection, and automated response.
• Marlink Deception System (Honeypot) Stealth defense layer that lures attackers into controlled traps by imitating high-value systems, detecting intrusions early, and capturing attacker behaviour for IT and OT networks.
• External Attack Surface Management (EASM) Continuous discovery, analysis, and monitoring of all internet-facing assets, hosted entirely within the EU, revealing vulnerabilities and misconfigurations before attackers can exploit them, with no installation required.
• Marlink Unified Threat Management (UTM) All-in-one cybersecurity solution combining next-generation firewalling, intrusion prevention, antivirus, malware blocking, and SD-WAN capabilities for both IT and OT networks.
• Marlink Privilege Remote Access (PRA) Secure remote connection protection with advanced authentication, least-privilege enforcement, secure credential injection, and live session monitoring for IT and OT environments.
• Vulnerability Assessment Proactive identification and analysis of security weaknesses across IT and OT environments using automated scanning with expert validation, covering networks, systems, and industrial control environments.
• Penetration Testing Real-world cyberattack simulation service following PTES standard, with black and grey box testing conducted by certified ethical hackers to uncover configuration errors, zero-day vulnerabilities, and logical weaknesses across IT and OT environments.
• Digital Forensics Advanced investigation and incident response capabilities for IT and OT environments, including attack vector identification, data recovery, digital evidence integrity, and expert testimony support.
• GAP Assessment Evaluation and strengthening of cybersecurity and compliance posture by comparing existing systems, policies, and controls against leading standards and regulations including IACS UR E26, IEC 62443, NIST CSF 800-82, NIS2, and ISO27001.
• Risk Management & Assessment Structured approach to identifying, evaluating, and controlling cybersecurity risks across IT and OT environments, including customized risk frameworks, registers, and methodologies.

Quantifiable outcome

• Global average cost of a data breach was USD 4.44 million in 2025 (IBM Cost of a Data Breach Report)

Named customers1 record

Segments5 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration9 records

Feature10 records

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Port-IT: Direct maritime cybersecurity peer and now integrated into Diverto via Marlink; both operated SOCs and vessel-focused cyber services for shipping, making them the closest comparable in product, customer base, and delivery model.
• CyberOwl: Maritime-focused OT cybersecurity provider offering vessel cyber monitoring and analytics; competes head-to-head with Diverto in shipping and offshore IT/OT security services.
• Naval Dome: Pioneer in maritime OT cyber defense, providing endpoint, network, and gateway security for vessels; directly comparable to Diverto's Endpoint Security for OT and IT/OT Segmentation offerings.
• Cydome: Maritime and offshore cybersecurity specialist offering fleet cyber risk assessment, managed services, and EDR; overlaps with Diverto's managed SOC, vulnerability assessment, and EDR products.

Emerging players

• Dragos: Industrial/OT cybersecurity specialist with growing maritime presence; comparable on OT detection, incident response, and asset discovery, but broader across critical infrastructure verticals.
• Claroty: OT security platform providing network segmentation, vulnerability management, and threat detection — directly relevant to Diverto's IT/OT segmentation and NDR products in maritime and energy.
• Wärtsilä (Cyber & Digital Services): Maritime systems integrator with digital and cybersecurity services for vessels and offshore; comparable on OT cyber, fleet management, and integrated vessel digital services for shipping customers.

Broad incumbents

• CrowdStrike: Global endpoint and MSSP leader whose Falcon platform increasingly targets OT and maritime buyers; competes on EDR, MDR, and threat intelligence breadth at much larger scale.
• ABS Group: Maritime classification society subsidiary providing cyber safety services, GAP assessments, and certification support; competes in maritime compliance and risk advisory adjacent to Diverto's offerings.
• Lloyd's Register: Maritime classification society offering cyber security certification and advisory for shipowners and offshore operators; competes for compliance and risk assessment engagements with Diverto.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat7 records

Key risks1 record

Key highlights6 records

Customer concentration

• Xx.com/Divertosecurity
• Facebookfacebook.com/DivertoInfoSec
• LinkedInlinkedin.com/company/diverto-llc

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Diverto