Attic Security
Attic Security is a Dutch, founder-owned cybersecurity company providing Microsoft 365 security monitoring, configuration management, and AI-driven managed detection and response (IVON) for European SMBs, MSPs, and semi-government organizations, built on Microsoft Sentinel and Azure with full EU data residency.
- Company typePrivate
- Founded2021
- HeadquartersZevenbergen, Netherlands
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Attic Security does
Attic Security B.V. is a privately held Dutch cybersecurity company, founded in 2021 and headquartered in Zevenbergen, Netherlands, that provides Microsoft 365 security monitoring and management built natively on Microsoft Sentinel and Azure. The platform combines rule-based configuration checks (100+ CIS-benchmark controls across Entra ID, Teams, SharePoint, Exchange, Defender XDR, and Intune), real-time Adversary-in-the-Middle phishing detection with browser-level intervention, and an AI-driven triage agent called IVON that uses Anthropic's Claude via Azure AI Foundry in Sweden Central to propose remediation actions. All data processing occurs within the EEA (Hetzner data centers in Germany and Finland; Azure AI Foundry Sweden Central), positioning the company for GDPR- and NIS2-conscious European buyers.
The company monetizes through a four-tier subscription model: Attic Free (no-cost phishing login protection), Attic Bouncer (from €27/month, identity threat detection and user awareness training), Attic Fixer (from €108/month, continuous configuration management with one-click remediation), and Attic MDR (from €270/month, 24/7 managed detection and response on Sentinel with three-month log retention). A separate Azure Marketplace listing is available at €150/month for hardening and Sentinel monitoring. Extra users beyond plan allowances are billed at €1/user/month, creating a land-and-expand mechanic. Distribution combines a self-serve product-led flow (free trial, app store apps, 5-minute activation) with a sales-led motion and an MSP/CSP Partner Portal for white-label multi-tenant management; direct inside-sales meetings target larger accounts.
Attic's primary customer segments are Dutch and EU SMBs of 10-500 employees that lack dedicated security teams, alongside managed service providers and IT resellers serving those SMBs, and a smaller semi-government/public-sector vertical. The company is founder-owned (Erik Remmelzwaal, Wesley Neelen, Rik van Duijn, Theo Snelleman) with no external funding, operates with 1-10 employees, and reports protecting 100+ organizations. The leadership team's offensive-security pedigree (combined ~90 years of experience, including NATO summit advisory work) and EU-only data residency are the core market-positioning pillars, while ISO/IEC 27001:2023 certification is targeted for Q4 2026 to unlock larger enterprise and public-sector contracts.
Attic Security firmographics
Firmographics- Name
- Attic Security
- Legal name
- Attic Security B.V.
- Website
- https://atticsecurity.com
- Company type
- Private
- Founded year
- 2021
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Attic Security is a Dutch, founder-owned cybersecurity company providing Microsoft 365 security monitoring, configuration management, and AI-driven managed detection and response (IVON) for European SMBs, MSPs, and semi-government organizations, built on Microsoft Sentinel and Azure with full EU data residency.
- Ownership category
- akta.pro rank
Attic Security industry classification
Industry- Product category
- Microsoft 365 Cybersecurity
- NAICS
- Computer Facilities Management Services (541513), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ)
- akta.pro secondary industries
- Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK), Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM), Cloud & SaaS Security Awareness (e.g., M365/Google Workspace) (EDABAGAG)
Keywords
Where Attic Security is headquartered
LocationHeadquarters
- HQ city
- Zevenbergen
- HQ country
- Netherlands
- HQ region
- Europe
Offices1 record
Markets served
Attic Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- Subscription SaaS (Tiered Plans): Four-tier subscription model ranging from free tier to premium MDR. Attic Free provides basic login protection at no cost to acquire users; paid tiers (Bouncer, Fixer, MDR) offer escalating security features with per-user pricing. Monthly or annual billing with 10% annual discount. Upsell motion from free to paid tiers.
- Per-User Licensing: Base plans include user allowances (20 for Bouncer, 50 for Fixer, 100 for MDR) with +€1 per additional user beyond the included amount. Enables land-and-expand revenue growth as customers add users.
- Azure Marketplace (Sentinel): Microsoft Sentinel monitoring available via Azure Marketplace at approximately €150/month for hardening, creating an additional procurement channel for enterprise customers.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Free login protection against phishing attacks |
| Subscription | Annual | Identity Threat Detection & Response with monitoring and training |
| Subscription | Annual | Cloud Security Configuration Management with continuous checks |
| Subscription | Annual | Full Managed Detection & Response with 24/7 monitoring |
| Subscription | Monthly | Azure Marketplace Sentinel monitoring |
Go-to-market motion4 records
Distribution channels5 records
Marketing channels6 records
Attic Security product offering
Product offeringCore offering
Attic Security sells a Microsoft 365 cybersecurity SaaS platform delivered as four tiered subscriptions: Attic Free (free phishing/AiTM login protection), Attic Bouncer (identity threat detection with user awareness training), Attic Fixer (CIS-benchmark cloud configuration management with 1-click fixes), and Attic MDR (24/7 managed detection and response on Microsoft Sentinel). The portfolio also includes IVON, an AI-driven Agentic MDR powered by Claude on Azure AI Foundry that triages incidents and proposes remediations, plus an Azure Marketplace offering for Sentinel-based hardening and monitoring.
Product overview
Attic Security offers a modular Microsoft 365 cybersecurity platform with four tiered subscription products: Attic Free (free) provides phishing login protection with AitM intervention; Attic Bouncer (from €27/month) adds identity threat detection and user awareness training; Attic Fixer (from €108/month) introduces cloud security configuration management with 100+ automated CIS-benchmark checks and 1-click fixes; and Attic MDR (from €270/month) delivers full 24/7 managed detection and response powered by Microsoft Sentinel. IVON, the AI-driven Agentic MDR component, automatically triages incidents and proposes remediations using Claude. The portfolio scales from free protection to enterprise-grade MDR with full NIS2 compliance support, targeting SMBs of 10-500 employees and MSPs.
Differentiator
Problem solved
Functional benefit
Brands
- Attic Free: Free login protection against phishing attacks on Microsoft 365
- Attic Bouncer
- Attic Fixer
- Attic MDR
- IVON
Products and services
- Attic Free Free Microsoft 365 login protection service that detects and blocks phishing pages (including Adversary-in-the-Middle attacks) by intervening with red warning screens before users enter credentials. Active within 5 minutes, unlimited users, no cost.
- Attic Bouncer Identity Threat Detection & Response platform that monitors all sign-in activity across the Microsoft 365 tenant, alerts on suspicious logins, and adds user awareness training and the AitM browser plugin. Priced from €27/month (annual) or €30/month (monthly), includes 20 users with +€1 per additional user.
- Attic Fixer Cloud Security Configuration Management service that continuously monitors Microsoft 365 settings against CIS benchmarks and Attic Lab research, running over 100 automated security checks with 1-click fixes via the Attic app. Priced from €108/month (annual) or €120/month (monthly), includes 50 users with +€1 per additional user.
- Attic MDR Full Managed Detection & Response service powered by Microsoft Sentinel that provides 24/7 monitoring, automated incident response, 3-month log retention, and forensics capabilities, with NIS2 compliance support. Priced from €270/month (annual) or €300/month (monthly), includes 100 users with +€1 per additional user.
- IVON (Agentic MDR) Agentic MDR AI product that automatically triages Microsoft 365 security incidents using the Claude language model on Azure AI Foundry (Sweden Central), producing verdicts (true positive, false positive, benign, inconclusive) and remediation proposals; runtime-only inference with no data retention, EU-only processing. Included as part of the Attic MDR tier.
- Attic for Microsoft 365 on Azure Marketplace Microsoft 365 hardening and Sentinel monitoring offering available via Azure Marketplace as a managed application from approximately €150 per month, enabling direct procurement within Azure environments for enterprise and channel customers.
Quantifiable outcome
- Activates in 5 minutes
- +2 more outcomes
Companies that use Attic Security
Customer profileNamed customers13 records
Segments3 records
Ideal customer profiles3 records
Attic Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration11 records
AI capability6 records
Feature6 records
Attic Security partnerships and signals
Strategic signalPartnerships
Two partnerships are on record, tiered core.
- MicrosoftcoreCore technology partnership with Microsoft for cloud infrastructure and AI capabilities. Attic is built on Microsoft Azure, Microsoft Sentinel SIEM, and Microsoft 365. AI inference powered by Claude via Azure AI Foundry (Sweden Central). Microsoft contractually guarantees no AI model training on customer data.
- Hetzner Online GmbHcoreBackend infrastructure provider for Attic services. Attic backend and storage runs on Hetzner data centers in Germany (primary) and Finland (secondary). All data processing remains within EU.
Scale indicators4 records
Recent moves7 records
Expansion highlights6 records
Attic Security competitors and assessment
Company assessmentBroad incumbents
- Microsoft Defender for Business: Microsoft's own SMB security bundle integrated with Microsoft 365. As the underlying platform Attic secures, Defender for Business is the primary substitute and incumbent in the SMB Microsoft 365 security category.
- ESET: ESET is a long-established endpoint and SMB security vendor with broad European presence (and is itself a named Attic customer). It competes at the perimeter against Attic's Microsoft 365-focused stack but offers a much wider portfolio beyond identity and cloud configuration.
- Acronis: Acronis delivers backup, disaster recovery, and cybersecurity for SMBs and MSPs, including Microsoft 365 protection. Its MSP channel breadth and SMB focus overlap with Attic's MSP motion and Microsoft 365 security positioning.
- Sophos: Sophos sells a broad SMB-and-mid-market security portfolio including endpoint, email, and managed detection services. It overlaps with Attic's SMB MDR and cloud security configuration focus but offers a much wider product set across non-Microsoft stacks.
Direct peers
- Guardz: Guardz is a unified cybersecurity platform purpose-built for SMBs and MSPs, combining identity, email, endpoint, and cloud app protection. Its horizontal SMB platform model and MSP go-to-market overlap directly with Attic's Free/Bouncer/Fixer/MDR portfolio.
- Huntress: Huntress delivers managed detection and response and security awareness training primarily through MSPs to SMB customers. The buyer persona, channel-led GTM, and SMB-first MDR positioning closely mirror Attic's approach.
- Coro: Coro offers an all-in-one, modular cybersecurity platform priced for SMBs (10–500 employees). Its tiered, SMB-optimized pricing and broad coverage of email, endpoint, and cloud threats makes it a close functional analogue to Attic's Microsoft 365 stack.
- Blackpoint Cyber: Blackpoint Cyber is an MSP-first cybersecurity vendor delivering MDR and managed security services to SMBs through partner channel. Its MSP-only GTM and SMB/M365 focus make it a close channel competitor to Attic's MSP offering.
Emerging players
- Arctic Wolf: Arctic Wolf provides managed detection and response and security operations across multiple environments, including Microsoft 365. It overlaps with Attic MDR, but targets a slightly larger mid-market buyer and is not M365-native or SMB-exclusive.
- KnowBe4: KnowBe4 is the leading security awareness and phishing simulation platform for SMBs. Attic Bouncer already bundles user awareness training, placing Attic in partial overlap with KnowBe4's core use case while Attic bundles it into a wider platform.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
Attic Security social profiles
Digital presenceAttic Security compliance and trust
Trust signalCompliance3 records
Attic Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Attic Security leadership team
Management profileNumber of profiles
Profiles4 records
Attic Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Attic Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Attic Security
What does Attic Security do?
Attic Security sells a Microsoft 365 cybersecurity SaaS platform delivered as four tiered subscriptions: Attic Free (free phishing/AiTM login protection), Attic Bouncer (identity threat detection with user awareness training), Attic Fixer (CIS-benchmark cloud configuration management with 1-click fixes), and Attic MDR (24/7 managed detection and response on Microsoft Sentinel). The portfolio also includes IVON, an AI-driven Agentic MDR powered by Claude on Azure AI Foundry that triages incidents and proposes remediations, plus an Azure Marketplace offering for Sentinel-based hardening and monitoring.
Is Attic Security a public or private company?
Attic Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Attic Security founded?
Attic Security was founded in 2021. It employs 1 to 10 people.
Where is Attic Security based?
Attic Security is headquartered in Zevenbergen, Netherlands, in the Europe region.
How does Attic Security make money?
Three revenue lines are on record. Subscription SaaS (Tiered Plans) is the primary driver. The others are per-User Licensing and azure Marketplace (Sentinel).
Who are Attic Security's main competitors?
Broad incumbents on record are Microsoft Defender for Business, ESET, Acronis and Sophos. Direct peers are Guardz, Huntress, Coro and Blackpoint Cyber. Emerging players are Arctic Wolf and KnowBe4.
Does Attic Security have an API?
Yes. API access is available for partners. Partners can programmatically manage customers, subscriptions, and access client Sentinel instances through the Attic API. The API supports partner operations including onboarding customers, managing incidents, and accessing security data.
What industry is Attic Security in?
Attic Security's product category is Microsoft 365 Cybersecurity. Its primary akta.pro industry code is HDADAGAJ, Attack Detection & Response for Cloud/SaaS (SOC for Cloud), with a secondary code of HDABAHAK, Data Security & Privacy for Cloud (DLP, DSPM, Tokenization). Its NAICS code is 541513 and its SIC code is 7372.