What secuvera GmbH does

secuvera GmbH is a privately held German cybersecurity services firm headquartered in Gäufelden near Stuttgart, founded in 1982 (originally as Tele-Consulting, renamed to secuvera in 2013) and operating with 11–50 employees. The company is BSI-certified across all three of its core business areas — IT security consulting, penetration testing, and product certification testing — and is the longest-established BSI-Prüfstelle (ITSEF) for Common Criteria, NESAS CCS-GI, and BSZ certifications in Germany.

The firm's offering is organized into three service pillars: (1) Sicherheitsberatung covering BSI IT-Grundschutz, ISO 27001, VDA ISA/TISAX, BCM, NIS2, internal audits, and CISO-as-a-Service; (2) Penetrationstest & Red-Teaming including standard pentests, Red Teaming/TLPT, the proprietary WBRT (White Box Red Teaming) methodology, DDoS simulation, cloud security assessments, BAS/Active Directory testing, SAST, and OSINT; and (3) BSI-Prüfstelle product certification across CC, BSZ, NESAS, IEC 62443, BSI-TR 03161 (DiGA), BSI-TR 03174, IT-Sicherheitskennzeichen (IoT), and VS-Daten approvals, plus CRA gap analysis and training. The technology base is human-delivered professional services rather than proprietary software, supported by an internally developed open-source artifact (openucf, a Unified Communications Framework released in 2010) that is not a current commercial product.

secuvera monetizes exclusively through professional services — project- and time-and-materials-based engagements, typically multi-year — with quote-based pricing and a free initial consultation offered through its website. Its go-to-market is sales-led and event-driven, anchored by conference presence at it-sa, Hackerkiste, ICCC, IT-Tage, and the TeleTrusT joint booth, plus a 2025 cooperation partnership with Commerzbank that channels demand from the bank's corporate customers. The customer base spans KRITIS operators, regulated enterprises, product manufacturers seeking certification, SMEs, and financial institutions, with named engagements including FH Aachen, Commerzbank Firmenkunden, DiGA providers, and WEYTEC. The company holds ISO 27001 certification and 2025 Great Place to Work recognition, and is privately held by Managing Directors Tobias Glemser and Reto Lorenz with no disclosed external investment.

Name

secuvera GmbH

Legal name

secuvera GmbH

Website

https://secuvera.de

Company type

Private

Founded year

1982

Operating status

Operating

Headcount range

11–50 employees

Short description

secuvera GmbH is a privately held, BSI-certified German cybersecurity services firm (11–50 staff, Gäufelden/Stuttgart) offering security consulting, penetration testing and Red Teaming, and product certification testing as the oldest BSI-Prüfstelle, serving KRITIS operators, product manufacturers, and regulated enterprises.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting & Testing Services

NAICS

Computer Systems Design and Related Services (5415), Testing Laboratories and Services (54138)

SIC

Services-Business Services, Nec (7389)

akta.pro primary industry

Penetration Testing, Red Team & Ethical Hacking (EDAOAIAH)

akta.pro secondary industries

Security Awareness, Training & Compliance Attestation (HDADAIAJ), Information Technology (IT) & Cybersecurity Certifications (EDAAANAA)

Keywords

• Cybersecurity consulting
• Penetration testing
• Information security certification
• BSI compliance services
• Product security testing

Headquarters

HQ city

Stuttgart

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Security Consulting Services: Advisory services including BSI-Grundschutz-Beratung, ISO-27001-Beratung, VDA ISA/TISAX-Beratung, BCM Beratung, NIS2 Beratung, Cyber-Sicherheits-Check, CISO as a Service, internal audits. Professional services billed typically on project or time-and-materials basis.
2. Penetration Testing & Red Teaming: Technical security testing services including penetration tests, Red Teaming, TLPT, WBRT, Cloud Security Assessment, BAS/AD penetration testing, SAST, OSINT. Project-based professional services.
3. BSI-Prüfstelle Certification Testing: Product certification testing services as BSI-recognized testing facility (ITSEF). Services include Common Criteria evaluation, BSZ certification, NESAS audits, IEC 62443 certification, TR-03161 and TR-03174 certification. Professional services for product manufacturers.
4. Training & Workshops: Cybersecurity training programs including OWASP Top 10 workshops, IEC 62443 for CRA training, joint workshops with iX magazine. Instructor-led training sessions.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels6 records

Core offering

secuvera GmbH is a BSI-certified German cybersecurity consultancy delivering three core service lines: (1) Sicherheitsberatung covering BSI IT-Grundschutz, ISO 27001, TISAX/VDA ISA, NIS2, BCM, and CISO-as-a-Service; (2) Penetrationstest & Red-Teaming including pentests, TLPT, WBRT, cloud security assessment, BAS, SAST, and OSINT; and (3) BSI-Prüfstelle providing Common Criteria, BSZ, NESAS/5G, IEC 62443, and BSI-TR 03161/03174 product certifications, complemented by OWASP and IEC 62443 training workshops.

Product overview

secuvera GmbH is a BSI-certified IT security service provider offering three core service areas: (1) Sicherheitsberatung for comprehensive security consulting including BSI IT-Grundschutz, ISO 27001, TISAX, NIS2, BCM, and CISO-as-a-Service; (2) Penetrationstest & Red-Teaming covering penetration testing, red teaming, TLPT, WBRT, cloud security, BAS, SAST, and OSINT; and (3) BSI-Prüfstelle as the oldest BSI testing facility for Common Criteria, BSZ, NESAS, IEC 62443, and CRA certifications. Additionally, secuvera developed openucf, an open-source unified communications framework. The company operates from Gäufelden/Stuttgart with project experience dating back to 2000.

Differentiator

Problem solved

Functional benefit

Products and services

• Sicherheitsberatung (Security Consulting) Comprehensive BSI-certified security consulting for regulated organizations, covering BSI IT-Grundschutz, ISO 27001, VDA ISA/TISAX, Business Continuity Management, NIS2 advisory and evidence audits for KRITIS, internal audits, ISMS implementation, information security concepts for defense/classified data processing, Cyber-Sicherheits-Check, CISO-as-a-Service / external IT Security Officer, and BSI-Grundschutz for VISA services.
• Penetrationstest & Red-Teaming BSI-certified offensive-security services including standard penetration tests, DDoS/sizing/stress simulation, Red Teaming and Threat-Led Penetration Testing (TLPT), the proprietary WBRT (White Box Red Teaming) methodology, Cloud Security Assessment (CSA), Breach and Attack Simulation (BAS) and Active Directory penetration testing, Static Application Security Testing (SAST), and Open Source Intelligence (OSINT). Delivered by BSI-certified penetration testers.
• BSI-Prüfstelle (BSI Testing Facility / ITSEF) BSI-recognized product certification testing for product manufacturers, including consulting for product manufacturers, Common Criteria (CC) consulting and certification, Beschleunigte Sicherheitszertifizierung (BSZ), NESAS and 5G campus-network audits, Cyber Resilience Act (CRA) consulting and gap analysis, BSI-TR 03161 certification of digital health applications, BSI-TR 03174 certification of financial applications, the BSI IT-Security Label for IoT devices, product approval for classified data (VS-Daten), PTB security assessments for gaming machines, and IEC 62443 industrial automation security certification.
• Schulungen und Workshops (Training) Instructor-led cybersecurity training programs including Web Application Security / OWASP Top 10 workshops and IEC 62443 training for the Cyber Resilience Act in practice. Delivered jointly with iX magazine for select workshops.
• openucf (Open Unified Communications Framework) Open-source unified communications framework developed by secuvera providing presence integration and UC functionality, released as a free software project.

Quantifiable outcome

• 25 years of experience with thousands of project days and over 50 internal onboarding programs for pentesters
• +1 more outcomes

Named customers4 records

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

Ten partnerships are on record, tiered minor and core.

• WEYTECminorStrategic or Co-development Partner · 1 January 2025secuvera conducted the Common Criteria evaluation (EAL2) for WEYTEC distribution PLATFORM WDP MX as the BSI-recognized ITSEF testing facility. Product received CC certification based on secuvera's evaluation.
• CommerzbankcoreChannel Partner/ Reseller/ DistributorCooperation partner in Commerzbank's cross-industry cooperation offering for corporate customers. secuvera provides cybersecurity services (security consulting, penetration testing, certification services) to Commerzbank's firmenkunden. The partnership provides access to Commerzbank's large corporate customer base.
• TeleTrusT (Bundesverband IT-Sicherheit e.V.)coreGTM or Marketing Partnersecuvera is a member of TeleTrusT and participated at it-sa 2025 at the TeleTrusT joint booth (Gemeinschaftsstand). Active in association activities including being the main author of TeleTrusT testing schema. Promotes IT Security Made in Germany initiative.
• OWASP German ChapterminorGTM or Marketing Partnersecuvera is a corporate member of OWASP (Open Web Application Security Project) and CEO Tobias Glemser serves as OWASP German Chapter Lead. Supports the cybersecurity community through OWASP activities.
• BitkomminorGTM or Marketing Partnersecuvera is a member of Bitkom, Germany's digital association.
• Allianz für Cyber-SicherheitminorGTM or Marketing Partnersecuvera is a partner in the Allianz für Cyber-Sicherheit (Alliance for Cyber Security), a BSI initiative.
• DIN (Deutsches Institut für Normung)minorOtherssecuvera is a member of DIN, the German Institute for Standardization.
• DHBW (Duale Hochschule Baden-Württemberg)minorOtherssecuvera is a provider of dual study programs (Anbieter dualer Studien) for DHBW Stuttgart, campus Horb. Offers dual study positions in Computer Science (Informatik).
• IT-Region StuttgartminorOtherssecuvera is part of the IT-Region Stuttgart, a regional IT industry association.
• Great Place to WorkminorOthersGreat Place to Work certification body. secuvera received workplace certification demonstrating employee satisfaction and workplace culture.

Scale indicators3 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• SEC Consult Group: European cybersecurity consultancy with German presence (Vienna HQ, German offices) offering penetration testing, red teaming, and security advisory. Comparable on service portfolio and target market, but larger scale.
• atsec information security: Common Criteria and FIPS evaluation laboratory with German operations. Directly comparable on BSI-ITSEF-equivalent product certification services.
• SySS GmbH: German penetration testing specialist headquartered in Tübingen. Closely comparable to secuvera on pentest/red-teaming services and German mid-market / enterprise target customers.
• RedTeam Pentesting GmbH: Boutique German offensive-security consultancy. Comparable on penetration testing and red-teaming service offerings and German enterprise customer base.
• Cure53: Berlin-based cybersecurity consultancy focused on web application penetration testing and security research. Comparable on pentesting services and DACH / international product-vendor clients.
• Brightsight (now TrustCB): European Common Criteria evaluation lab with operations in the Netherlands and Germany. Comparable on CC / product certification testing services for IT and industrial products.

Broad incumbents

• Bureau Veritas: Global testing, inspection, and certification group with cybersecurity service lines. Comparable as a broad incumbent offering IEC 62443 and CRA-related conformity assessment.
• TÜV SÜD: Large German TIC incumbent operating accredited product cybersecurity testing labs (IEC 62443, Common Criteria). Comparable on product certification testing but as part of a much broader portfolio.
• NCC Group: Global cybersecurity consultancy with strong Common Criteria evaluation practice (NCC Group Security Services) and large pentesting/red-teaming bench. Comparable on services, broader geography.
• TÜV Rheinland: Global TIC incumbent with cybersecurity and IEC 62443 / Common Criteria testing capabilities. Comparable on regulated product certification testing as a portfolio offering.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/secuvera-gmbh
• Xx.com/secuveragmbh
• Facebookfacebook.com/secuveragmbh

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about secuvera GmbH