BPN Group

What BPN Group does

BPN Group is a privately held Austrian cybersecurity firm founded in 2006 and headquartered in St. Stefan im Lavanttal, operating under the legal entity BP Networks GmbH. It delivers managed cybersecurity services — primarily a 24/7 managed Security Operations Center (SOC) — to enterprise and mid-market customers in regulated industries (financial services, insurance, healthcare, energy, government, manufacturing, transport) across the DACH region and, more recently, the United Arab Emirates. The platform combines an AI-driven SIEM (Security Information and Event Management) with SOAR (Security Orchestration, Automation and Response) workflows, MITRE ATT&CK-aligned behavioral analytics, deception technology, and 300+ integrations, all delivered via a SOC in the heart of Europe with EU data residency.

The product portfolio is anchored by BPN Managed SOC (offered in Basic, Advanced, and Enterprise tiers) and expanded with adjacent managed modules: BPN Managed VAS (continuous vulnerability assessment with proprietary 1–1000 risk scoring), BPN Managed CloudSec (agentless multi-cloud security across AWS, Azure, GCP, Kubernetes), BPN Managed AppSec (DAST, 95+ attack types, CI/CD integration), and BPN Managed Attack Surface Reduction. Professional services include Penetration Testing / Red Team, Threat-Led Penetration Testing under NIS2/DORA, Incident Response, Awareness Training, and NIS2/DORA compliance advisory. The firm operates multiple subsidiaries (BPN Group GmbH, BPN Intelligence GmbH, BPN Smart Energy GmbH in Austria and BPN CyberSecurity L.L.C. in Dubai) and is led by founder/CEO Patrick Bardel.

BPN generates revenue primarily through subscription-based managed services (SOC, VAS, CloudSec, AppSec, Attack Surface Reduction) complemented by professional services engagements. Pricing is quote-based, all-inclusive, and structured around unlimited log sources, sensors, honeypots, and workflows with no volume caps. The go-to-market is sales-led enterprise (free expert call → tailored POC deployed in days → live within 30 days) supported by a partner/reseller program for MSPs and integrators. The firm holds ISO/IEC 27001:2022 certification issued by TÜV Rheinland.

Name

BPN Group

Legal name

BP Networks GmbH

Website

https://bpn-group.com

Company type

Private

Founded year

2006

Operating status

Operating

Headcount range

11–50 employees

Short description

BPN Group is a privately held Austrian cybersecurity firm that delivers a managed 24/7 Security Operations Center (SOC) — combining AI-driven SIEM, SOAR automation, vulnerability assessment, and Red Team-derived threat hunting — to enterprise customers in regulated industries across the DACH region and the UAE.

Ownership category

akta.pro rank

Product category

Managed Cybersecurity Services

NAICS

Security Systems Services (56162), Management, Scientific, and Technical Consulting Services (5416)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

akta.pro secondary industry

Cybersecurity Support Operations (SOC Triage, Incident Intake) (BPAAACAF)

Keywords

• Managed security services
• Vulnerability assessment
• Penetration testing
• Incident response
• Regulatory compliance

Headquarters

HQ city

Sankt Stefan

HQ country

Austria

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed SOC Services: Fully managed 24/7 Security Operations Center delivered as a subscription service. Includes unlimited log ingestion, sensors, honeypots, workflows, 300+ integrations, AI-driven SIEM, SOAR automation, and dedicated analyst teams. Three tiers: Basic, Advanced, Enterprise.
2. Managed Vulnerability Assessment Services (VAS): Continuous vulnerability assessment across network, cloud, and applications. Delivered as a subscription with unlimited scans, 1-1000 risk scoring, compliance reporting, and expert remediation guidance. Covers IT/OT, multi-cloud, and web applications.
3. Managed Application Security (AppSec): Continuous web application and API security testing. Includes dynamic application security testing (DAST), 95+ attack types, unlimited checks, CI/CD integration, and human-led manual assessments.
4. Managed CloudSec: Cloud security posture management for multi-cloud environments (AWS, Azure, GCP, Kubernetes). Agentless scanning, automated remediation workflows, and real-time risk detection.
5. Managed Attack Surface Reduction: Full attack surface visibility and reduction service unifying internal and external risk insights. Correlates asset inventory and identities, detects shadow IT, identifies attack paths, and drives automated remediation across cloud-native and hybrid environments.
6. Penetration Testing & Red Team: Ethical hacking, penetration testing, Threat-Led Penetration Testing (TLPT) in line with NIS2 and DORA, and full Red Team engagements. Application security services including web app pentesting, API security assessments, secure code reviews, CI/CD supply chain reviews, and adversary-style application testing.
7. Incident Response: Expert-led incident response for active security incidents, digital forensics, and DFIR. Rapid threat detection, containment, crisis communication, and regulatory reporting.
8. Awareness Training: Employee cybersecurity awareness training, workshops, and phishing simulations. Addresses NIS2 and DORA compliance training requirements.
9. NIS2/DORA Compliance Services: Compliance advisory and implementation for NIS2 and DORA regulations. Includes gap analysis, risk assessments, security policy implementation, and regulatory reporting. Uses ISO/IEC 27001 as the baseline framework.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels8 records

Core offering

BPN Group provides managed cybersecurity services centered on a 24/7 Security Operations Center (SOC) that combines AI-driven SIEM, SOAR automation, and dedicated analyst teams. Offerings span vulnerability assessment, attack surface reduction, application security, cloud security, penetration testing, incident response, and regulatory compliance services for NIS2 and DORA. Services are delivered primarily to enterprises in regulated industries across the DACH region and the UAE.

Product overview

BPN Group offers a unified cybersecurity platform centered on its managed Security Operations Center (SOC), supplemented by specialized vulnerability assessment, attack surface management, and application security services. The core BPN Managed SOC delivers 24/7 threat detection through AI-driven SIEM and orchestrated SOAR capabilities across three service tiers (Basic, Advanced, Enterprise). Supporting services include BPN Managed VAS for continuous vulnerability assessment, BPN Managed Attack Surface Reduction for proactive exposure management, BPN Managed CloudSec for multi-cloud security, and BPN Managed AppSec for web application protection. Compliance services address NIS2/DORA requirements, while awareness training and incident response provide operational support. The BPN Alert App enables mobile-based crisis communication and alerting.

Differentiator

Problem solved

Functional benefit

Products and services

• BPN Managed SOC A fully managed 24/7 Security Operations Center providing continuous threat detection, automated response, and unlimited visibility through AI-driven SIEM, orchestrated SOAR workflows, and dedicated analyst teams. Delivered across three tiers (Basic, Advanced, Enterprise) with unlimited log ingestion, sensors, honeypots, workflows, and 300+ integrations.
• BPN Managed VAS Continuous vulnerability assessment across network, cloud, and applications with risk-based prioritization using a 1-1000 scale based on real-world exploitation data. Includes expert-led remediation guidance, 513 CIS and 549 STIG compliance checks, 1M+ vulnerability checks, dynamic application security testing (DAST), and attack path analysis.
• BPN Managed Attack Surface Reduction Full attack surface visibility and reduction service unifying internal and external risk insights. Correlates asset inventory and identities, detects shadow IT, identifies attack paths, and drives automated remediation across cloud-native and hybrid environments.
• BPN Managed CloudSec Real-time cloud security monitoring with agentless vulnerability management across AWS, Azure, GCP, and Kubernetes environments. Includes 175+ pre-built security checks, automated remediation workflows, and context-driven risk prioritization with risks acted upon in under 60 seconds.
• BPN Managed AppSec Comprehensive web application and API security testing covering 95+ attack types with dynamic application security testing (DAST), unlimited checks, CI/CD integration, and human-led manual assessments beyond automated scanners.
• NIS2/DORA Compliance Regulatory compliance advisory and implementation services for NIS2 and DORA directives, including gap analysis, risk assessments, security policy implementation, and regulatory reporting. Uses ISO/IEC 27001 as the baseline framework.
• Awareness Training Employee cybersecurity awareness training, workshops, and phishing simulations addressing NIS2 and DORA compliance training requirements.
• Incident Response Expert-led incident handling with rapid threat detection, containment, and recovery support. Includes digital forensics and DFIR, crisis communication, and regulatory reporting.
• Penetration Testing Offensive security assessments including ethical hacking, targeted penetration tests, full Red Team engagements, and Threat-Led Penetration Testing (TLPT) aligned with NIS2 and DORA requirements.
• Application Security Testing Human-led manual application security testing covering web applications, APIs, secure code reviews, and CI/CD pipeline supply chain security assessments.
• BPN Alert App Mobile alerting and crisis communication application used by BPN customers for location-based alerting, Bluetooth/NFC beacon support, and lone worker protection. Powered by F24 AG.

Quantifiable outcome

• SOC and VAS services live within 30 days — guaranteed onboarding
• +6 more outcomes

Named customers17 records

Segments6 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability3 records

Feature7 records

Partnerships

Five partnerships are on record, tiered core.

• TÜV RheinlandcoreStrategic or Co-development PartnerTÜV Rheinland certifies BP Networks GmbH's Information Security Management System (ISMS) according to ISO/IEC 27001:2022 (ID 9000041317). This certification provides independent external validation that BPN's information protection processes align with internationally recognized standards, enhancing trust with enterprise and regulated customers.
• CloudflarecoreTechnology or IntegrationCloudflare provides content delivery network (CDN) and cybersecurity services including DDoS protection, TLS encryption, and web application firewall (WAF) for bpn-group.com. Also provides geographic routing for regional visitors (e.g., GCC visitors directed to UAE-specific landing page). Cloudflare also provides Cloudflare Web Analytics as an alternative to Google Analytics.
• Pipedrive OÜcoreTechnology or IntegrationPipedrive CRM manages customer relationships, processes contact form submissions, and operates the website chatbot (LeadBooster). Data processed includes name, email, phone, company, message content, and chat transcripts. DPA in place per Art. 28 GDPR.
• Microsoft Ireland Operations LimitedcoreTechnology or IntegrationMicrosoft 365 / Exchange Online handles email communication for sales inquiries and customer support. Inquiry notifications from Pipedrive are forwarded to BPN's sales mailbox and processed within Microsoft 365. DPA in place.
• F24 AGcoreTechnology or IntegrationF24 AG provides the BPN Alert App — a mobile alerting and crisis communication application used by BPN customers. F24 acts as data processor per Art. 28 GDPR. Processes device info, approximate location, Bluetooth/NFC identifiers, and gyroscope data for alerting and lone worker protection.

Scale indicators16 records

Recent moves6 records

Expansion highlights6 records

Market position

Weaknesses4 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/bpn-group-gmbh
• Xx.com/BPN_Group
• Facebookfacebook.com/bpn.at

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Subsidiaries4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about BPN Group