SOTERYAN

What SOTERYAN does

Soteryan BV is a Dutch private cybersecurity company founded in January 2015 and headquartered in Amsterdam, operating as a provider of breach intelligence and fraud management services to Fortune 500 enterprises, EU governments, and financial institutions. The company sells two flagship platforms: BreachShield, a real-time breach intelligence platform that captures stolen credentials, payment data, and infrastructure indicators at the moment of theft before dark-market exposure; and FraudShield, an ML-driven fraud management platform for banks combining behavioral biometrics, device fingerprinting, and graph-based investigations across web and mobile channels. Sub-products DNSShield (DNS-level blocking) and Fraud SDK (embeddable mobile protection for iOS/Android banking apps) extend the core platforms. The technology stack combines a proprietary sensor network with OSINT feeds (HaveIBeenPwned, CISA KEV, abuse.ch) feeding an ML-driven graph database, with a stated 1-hour SLA for critical IOC delivery into client anti-fraud, SIEM, and firewall stacks.

Soteryan tracks 2.5B+ compromised credentials and 70+ APT groups and malware families, and the team's credentials include DEF CON CTF wins plus CISSP, OSCP, GCIH, GCFE, GPEN, and other enterprise security certifications. The company generates revenue through five streams: BreachShield and FraudShield SaaS subscriptions, managed security services (CISO-as-a-Service, SOC operations), professional services (penetration testing, incident response, digital forensics, malware analysis), and Fraud SDK licensing. Distribution is exclusively direct enterprise sales via a five-step engagement model (Assess, Architect, Deploy, Detect, Respond) executed through five regional offices in Amsterdam (HQ), Dover Delaware (R&D), Madrid, Tashkent, and Asunción. Pricing is quote-based and not publicly disclosed.

Name

SOTERYAN

Legal name

Soteryan BV

Website

https://soteryan.com

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

1–10 employees

Short description

Soteryan BV is a Dutch private cybersecurity firm founded in 2015 that provides breach intelligence (BreachShield) and fraud management (FraudShield) platforms to Fortune 500 enterprises, governments, and financial institutions across five global offices.

Ownership category

akta.pro rank

Headquarters

HQ city

Amsterdam

HQ country

Netherlands

HQ region

Europe

Offices5 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. BreachShield Platform Subscription: SaaS platform subscription for breach intelligence with tiered access to compromised credentials database, IOC library, API integrations, and real-time alerting. Revenue is recurring with annual or multi-year contract terms.
2. FraudShield Platform Subscription: SaaS platform subscription for fraud management targeting banks and financial institutions. Includes live risk scoring, investigations, behavioral biometrics, and centralized analytics dashboard.
3. Managed Security Services: Ongoing managed services including CISO-as-a-Service, SOC operations, and breach intelligence monitoring. Delivered as subscription or retainer arrangements.
4. Professional Services: Consultancy and advisory services including security architecture, risk & compliance, penetration testing, rapid threat assessment, incident response, digital forensics, and malware analysis.
5. Fraud SDK Licensing: SDK licensing for embedding fraud protection into mobile banking applications. Sold as part of FraudShield platform engagement or standalone.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

SOTERYAN provides real-time breach intelligence and fraud management platforms to Fortune 500 enterprises, governments, and financial institutions. Its BreachShield platform captures stolen credentials, payment data, and infrastructure indicators at the moment of theft before they reach dark markets, while the FraudShield platform delivers Aegis-grade fraud protection for banks combining behavioral biometrics, device fingerprinting, and ML-driven cross-channel fraud detection. Supporting sub-products include DNSShield (DNS-layer threat blocking) and a Fraud SDK for embedding mobile fraud protection into iOS/Android banking apps.

Product overview

Soteryan offers two cybersecurity platforms — BreachShield (breach intelligence) and FraudShield (fraud management) — that work together to close the loop between breach intelligence and real-time fraud prevention. BreachShield captures stolen credentials and payment data at the moment of theft before dark-market exposure, with a sub-product DNSShield adding DNS-level threat protection. FraudShield provides Aegis-grade fraud protection for financial institutions with a complementary sub-product, the Fraud SDK, which embeds fraud protection directly into iOS and Android banking apps.

Differentiator

Problem solved

Functional benefit

Brands

• BreachShield: Breach intelligence platform that captures stolen credentials, payment data, and infrastructure indicators in real time — before they surface on dark markets.
• FraudShield
• DNSShield
• Fraud SDK

Products and services

• BreachShield

Quantifiable outcome

• 10x earlier breach detection — data captured at moment of theft, well before dark-market exposure or OSINT
• +3 more outcomes

Named customers3 records

Segments7 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

AI capability5 records

Feature6 records

Scale indicators9 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• CrowdStrike: Endpoint and Falcon intelligence suite for enterprise security. Overlaps BreachShield on adversary intelligence and FraudShield on fraud-related signals, though CrowdStrike serves a much broader portfolio.
• Darktrace: AI-driven cybersecurity for enterprise networks and email. Overlaps FraudShield's ML-driven anomaly detection, though Darktrace is a broad incumbent rather than a fraud/intelligence specialist.

Direct peers

• SpyCloud: Compromised-credentials and identity-exposure intelligence used by fraud and security teams. Directly comparable to BreachShield's 2.5B-credential monitoring and credential-rotation use cases.
• Recorded Future: Threat-intelligence platform providing real-time breach, dark-web, and adversary data to enterprise security teams. Closely comparable to BreachShield on breach-data aggregation, IOC distribution, and enterprise threat-intel subscriptions.
• BioCatch: Behavioral-biometrics fraud-prevention vendor serving global banks and fintechs. Comparable to Fraud SDK's mobile behavioral-biometrics and FraudShield's session-level risk scoring capabilities.
• Flashpoint: Threat intelligence and breach-data provider for enterprise and government security teams. Directly comparable to BreachShield on compromised-credentials intelligence and IOC delivery to fraud and SIEM stacks.
• ThreatConnect: Threat-intelligence platform combining IOC library, automation, and SIEM integrations. Comparable to BreachShield's IOC library, graph database, and 1-hour IOC delivery into security stacks.
• Kroll Cyber Risk: Incident response, digital forensics, and managed cyber-risk services for enterprises. Comparable to Soteryan's professional services, SOC, and incident-response offerings alongside its platforms.
• Kaspersky Fraud Prevention: Mobile and online fraud-prevention platform with behavioral biometrics, device fingerprinting, and risk scoring for banks — directly comparable to FraudShield's behavioral biometrics and cross-channel detection.

Others

• Have I Been Pwned: OSINT breach-data aggregator explicitly cited by Soteryan as an upstream data source. Adjacent ecosystem participant rather than a competitor — but its public breach catalogue sets the floor for what Soteryan's proprietary sensors must outperform.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/soteryan1

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about SOTERYAN