Name

IstroSec

Legal name

IstroSec s.r.o.

Website

https://istrosec.com

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

11–50 employees

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Other Computer Related Services (541519), Computer Systems Design and Related Services (54151), Computer Facilities Management Services (541513)

SIC

Services-Engineering, Accounting, Research, Management (8700), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Security Incident Response (IR) & Digital Forensics Services (BPAEADAI)

akta.pro secondary industries

Cybersecurity & Identity Consulting (BPAHAEAG), Security Operations (SOC), Incident Response & Threat Hunting (EDAOAIAI)

Keywords

• Incident response services
• Penetration testing services
• Digital forensics services
• Managed defense SOC
• Threat hunting services

Headquarters

HQ city

Bratislava

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Others

Revenue model

1. Professional Cybersecurity Services: IstroSec generates revenue through professional cybersecurity services including incident response, penetration testing, digital forensics, managed defense, threat hunting, training, and advisory services. These are typically project-based or retainer engagements for enterprise and government clients.

Go-to-market motion1 record

Distribution channels2 records

Marketing channels3 records

Core offering

IstroSec provides professional cybersecurity services spanning research and development, proactive security, and reactive security. Its core deliverables include 24/7 incident response, penetration testing and red/purple team engagements, threat hunting, digital forensics and court expert work, malware analysis and vaccine development, managed defense (SOC Level 3+) covering EDR, SIEM and SOAR platforms, attack simulations, audit and vCISO advisory, cybersecurity training and tabletop exercises, and IstroCSIRT services for organizations including SMEs, corporations, Fortune 500 firms, and government entities.

Product overview

IstroSec is a European cybersecurity company that offers a portfolio of professional services rather than a unified software product. The service portfolio is organized around three core pillars: Research & Development (generation of knowledge on cybersecurity incidents, vulnerabilities and malware, development of specialized tools), Proactive Security (ethical hacking, cyber intelligence, technical assessments, governance, risk management and compliance, trainings), and Reactive Security (incident response, digital forensics, malware analysis, court expert witness services). The individual services include Incident Response, Offensive Security, Threat Hunting, Defensive Intelligence, Managed Defense (SOC Level 3+), Digital Forensics, Malware Analysis, Attack Simulations, Audit and Advisory Services, Trainings and Exercises, Incident Preparedness, and IstroCSIRT Services. The company also offers e-Learning as a supplementary training module.

Differentiator

Problem solved

Functional benefit

Products and services

• Incident Response Rapid on-site deployment and remote response and mitigation of computer security incidents for organizations facing active cyberattacks.
• Offensive Security Vulnerability assessments, penetration testing, and red team and purple team engagements to identify and validate exploitable weaknesses before adversaries can exploit them.
• Threat Hunting Active hunting for threats in client infrastructure based on adversary tactics, techniques and procedures (TTPs) and searching for indicators of compromise.
• Defensive Intelligence Data leak searches and analysis, with ClearWeb, DeepWeb and DarkWeb monitoring to surface stolen credentials, sensitive data exposure, and emerging external threats.
• Managed Defense Managed SOC at Level 3+, including administration and optimization of EDR, SIEM, SOAR and related cybersecurity technologies for continuous detection and response.
• Digital Forensics Acquisition of digital evidence, investigation and reconstruction of security events and incidents, including processing of court expert testimonies.
• Malware Analysis Analysis of properties, functionality, origin and potential impacts of malicious code, including reverse engineering to support investigations and vaccine development.
• Attack Simulations Phishing, spearphishing and whaling simulations, custom scenarios including custom malware, and simulation of advanced attacks and APT groups to test defenses.
• Audit and Advisory Services Audits and implementation of security frameworks, vCISO services, technical audits, and infrastructure hardening engagements.
• Trainings and Exercises Cybersecurity trainings for personnel, IT professionals and management, plus tabletop exercises and drills to rehearse incident response.
• Incident Preparedness Assessment of the adequacy of processes and technology for swift and effective reaction to cyber incidents, addressing the 'I Want To Be Prepared' audience on the website.
• IstroCSIRT Services Full array of CSIRT services, including 24/7 DFIR and proactive security services delivered as IstroSec's branded CSIRT offering.

Named customers11 records

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Scale indicators6 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Trustwave: Trustwave is a global cybersecurity services firm offering managed detection and response, incident response, penetration testing, and digital forensics. Its MSSP/DFIR hybrid model and government-sector work make it a directly comparable peer for IstroSec's managed defense and IR services.
• Mandiant: Mandiant (now part of Google Cloud) is the global leader in incident response, digital forensics, and threat intelligence. It is the most directly comparable peer, offering the same DFIR retainer and proactive defense services to large enterprises and governments, and is the benchmark against which IstroSec's services portfolio is evaluated.
• NCC Group: NCC Group is a UK-headquartered cybersecurity services firm offering incident response, penetration testing, managed detection, and threat intelligence across Europe. It is a particularly strong peer given its similar European base, public-sector/government client mix, and broad services portfolio that mirrors IstroSec's structure.
• S-RM: S-RM is a boutique cyber and intelligence consultancy specializing in incident response, digital forensics, and cyber advisory for corporates and private clients. Its DFIR-led boutique profile and European/Latin-American footprint make it one of the closest scale-comparable peers to IstroSec.
• CrowdStrike Services: CrowdStrike's Services organization delivers incident response, threat hunting, and managed detection alongside the Falcon platform. It directly overlaps with IstroSec's Managed Defense, Threat Hunting, and IR offerings and competes for the same Fortune 500 and government incident response retainers.
• Unit 42 (Palo Alto Networks): Unit 42 is Palo Alto Networks' threat intelligence and incident response arm, providing IR, digital forensics, threat hunting, and red team services. It is a direct competitor for enterprise DFIR engagements and benefits from tight integration with Cortex XDR.
• WithSecure: WithSecure (formerly F-Secure's corporate business) is a Finnish-European cybersecurity vendor offering managed detection, incident response, and consulting services. It is a relevant European-headquartered peer serving mid-market and enterprise customers with a similar services-plus-product mix.
• Orange Cyberdefense: Orange Cyberdefense is the European cybersecurity arm of Orange, providing managed detection, incident response, threat intelligence, and consulting across 10+ European countries. It is a directly comparable European-headquartered MSSP/DFIR provider competing for the same enterprise and government contracts.

Broad incumbents

• BAE Systems Digital Intelligence: BAE Systems Digital Intelligence is the cyber division of BAE Systems providing large-scale cyber defense, incident response, and intelligence services to governments and critical infrastructure operators. It is a relevant comparator for IstroSec's government-facing CSIRT and critical infrastructure engagements, though it operates at much greater scale.
• KPMG Cyber Security Services: KPMG's Cyber Security practice provides incident response, cyber advisory, penetration testing, and managed security services through a global Big Four consulting footprint. It competes with IstroSec's Audit & Advisory Services and vCISO offerings, particularly for regulated and public-sector clients.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/istrosec
• LinkedInlinkedin.com/company/istrosec

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about IstroSec