ProSec

What ProSec does

ProSec GmbH is a German IT security services firm founded in 2016 and headquartered in Koblenz, with regional offices in Berlin and Munich. The company delivers offensive security services led by a team of 30+ certified ethical hackers, structured around three pillars: penetration testing (covering web applications, mobile applications, cloud infrastructure, networks, and Red Teaming/APT simulation), IT security consulting (with ISO 27001 and BSI Grundschutz certification support, plus incident response), and professional training for security practitioners. It also operates dedicated compliance lines for German and EU regulatory frameworks including DORA, NIS 2, TIBER EU/DE, BaFin, and BfArM, targeting KRITIS operators, financial institutions, and manufacturing firms.

The company's underlying technology stack combines proprietary frameworks with industry-standard offensive security tools. The notable proprietary asset is the Pentest Box, a remote testing infrastructure that enables global IT security assessments while supporting on-site physical security testing within Germany for production facilities and office complexes. ProSec is ISO/IEC 27001:2022 and ISO 9001:2015 certified (issued by DICIS in 2025), and its consulting team holds recognized offensive security credentials including OSCP, OSEP, OSWE, OSWA, and CRTO. The company cites 900+ completed assessments and a 100% system takeover rate in conducted engagements as evidence of technical depth.

ProSec operates a sales-led, direct enterprise GTM with no channel partners or resellers. Revenue is generated entirely through professional services engagements, with custom quotations based on scope and complexity, multi-year contracts, and a recently introduced recurring Pentest-as-a-Service offering. The customer base is verticalized, with published reference customers spanning retail (Sternauto, 1,600+ employees), business services (Vario, 90+ employees), and manufacturing (Weig, 1,800+ employees). The company is privately held, founder-owned, and bootstrapped, with no disclosed external funding or institutional investors.

Name

ProSec

Legal name

ProSec GmbH

Website

https://prosec-networks.com

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

11–50 employees

Short description

ProSec GmbH is a German cybersecurity services firm founded in 2016 that delivers penetration testing, Red Teaming, security consulting, and ethical hacker training to KRITIS operators, financial institutions, and manufacturing enterprises across Germany.

Ownership category

akta.pro rank

Product category

Penetration Testing & Cybersecurity Services

SIC

Services-Testing Laboratories (8734)

akta.pro primary industry

Digital Forensics & Evidence Collection (Endpoint, Mobile, Cloud) (BPAKAHAC)

Keywords

• Penetration testing services
• IT security consulting
• Ethical hacker training
• Red team assessments
• Vulnerability analysis

Headquarters

HQ city

Polch

HQ country

Germany

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Penetration Testing Services: Professional penetration testing services including technical, physical, and social engineering assessments. Services include pentesting of web applications, mobile applications, cloud infrastructure, and network environments. Delivered by certified ethical hackers.
2. IT Security Consulting: Security consulting services including ISO 27001 certification support, BSI Grundschutz compliance, and regulatory compliance consulting for DORA, NIS 2, BaFin, and BfArM requirements.
3. Ethical Hacker Training: Professional training programs including Junior Penetration Tester, Professional Penetration Tester, Certified Network Defender, and Linux Security courses. Also includes Security Awareness Campaigns for organizational training.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels3 records

Core offering

ProSec is a German cybersecurity firm delivering professional penetration testing services across technical, physical, and social engineering vectors, alongside IT security consulting for ISO 27001 and BSI Grundschutz certification, Digital Forensic Incident Response, and certified ethical hacker training programs. The company also provides specialized compliance testing for DORA, NIS 2, TIBER EU/DE, BaFin, and BfArM frameworks, delivered by 30+ in-house certified ethical hackers using a proprietary Pentest Box remote testing infrastructure.

Product overview

ProSec offers a unified portfolio of cybersecurity services comprising three core pillars: penetration testing (covering web applications, mobile apps, cloud infrastructure, and red teaming operations), IT security consulting (including ISO 27001 and BSI Grundschutz certifications), and professional ethical hacker training courses. The company also provides specialized compliance services for regulatory frameworks including DORA, NIS 2, TIBER EU/DE, BaFin, and BfArM. Services are delivered through a combination of on-site and remote testing capabilities via their Pentest Box platform, enabling global coverage while maintaining German-based physical security assessments.

Differentiator

Problem solved

Functional benefit

Products and services

• Penetration Testing Comprehensive penetration testing service delivered by certified ethical hackers to identify vulnerabilities in web applications, mobile applications, cloud infrastructure, networks, and through physical and social engineering vectors, including advanced Red Teaming with APT-level simulations for organizations across financial, manufacturing, and critical infrastructure sectors.
• Pentest as a Service Managed continuous penetration testing service providing ongoing security assessments and continuous vulnerability monitoring, allowing organizations to maintain a persistent testing posture rather than one-time engagements.
• IT Security Consulting Strategic IT security advisory service applying agile methodology to improve organizational security posture, including support for ISO 27001 certification, BSI Grundschutz compliance, and broader regulatory requirements, with follow-up workshops to maximize results.
• Digital Forensic Incident Response Incident investigation and digital forensics service delivered following security breaches to analyze attack vectors, scope impact, and support organizational remediation.
• Ethical Hacker Training Courses Professional cybersecurity training programs covering Junior Penetration Tester, Professional Penetration Tester, Certified Network Defender, Linux Security & Administration, BloodHound Workshop, and Security Awareness Campaigns for organizations building in-house security capability.
• Pentest Box Proprietary remote testing infrastructure enabling ProSec to conduct IT security assessments globally while also delivering on-site physical security testing in Germany for production facilities and office complexes.
• IT Compliance Testing Services Specialized compliance testing and consulting services covering DORA (Digital Operational Resilience Act) penetration testing and resilience, NIS 2 Directive implementation, TIBER EU/DE threat-led penetration testing for the financial sector, BaFin cybersecurity requirements, and BfArM IT security requirements for medical devices.

Named customers3 records

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Scale indicators4 records

Recent moves5 records

Expansion highlights12 records

Broad incumbents

• Mandiant (Google Cloud): Global incident response and cybersecurity consulting firm with leading red team and threat intelligence practices. Now part of Google Cloud; overlaps with ProSec's advanced testing and digital forensics offerings for enterprise clients.
• Rapid7: Cybersecurity software and services firm offering penetration testing alongside vulnerability management and MDR. Combines productized security tooling with services, competing for the same enterprise buyers with a more platform-centric model.
• NCC Group: Global cybersecurity services firm with a substantial European presence and a dedicated penetration testing practice. Competes for the same enterprise and financial sector clients, with broader portfolio of managed security and software escrow services.
• Trustwave: Global cybersecurity services and MDR provider with established penetration testing and red team capabilities. Competes for enterprise and financial sector clients with broader service portfolio and global delivery footprint.
• Orange Cyberdefense: European cybersecurity services arm of Orange, offering penetration testing, MDR, and threat intelligence. Targets similar enterprise and regulated customers across Europe, with significantly greater scale and bundled offerings.

Direct peers

• SySS GmbH: Germany-based penetration testing firm headquartered in Tübingen with a near-identical service portfolio (pentesting, red teaming, social engineering, security consulting). Direct head-to-head competitor for German enterprise and KRITIS clients.
• Bishop Fox: US-based offensive security firm specializing in penetration testing, red teaming, and attack surface management. Direct comparable in service depth and target customer profile (enterprise and technology firms).
• RedTeam Pentesting GmbH: Aachen-based German penetration testing firm specializing in technical security assessments and red teaming. Closely comparable in customer base (German mid-market and enterprise) and product scope (manual ethical hacking services).

Emerging players

• HackerOne: Bug bounty and pentest-as-a-service platform connecting enterprises with global security researcher talent. Provides an alternative delivery model for offensive security that competes with traditional boutique penetration testing firms.

Regional players

• Compass Security: Swiss-headquartered cybersecurity services firm with strong DACH-region penetration testing and red teaming practices. Comparable in service mix and target customer profile (European regulated enterprises), with regional overlap.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks7 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/channel/UCtz4Vm5zWdrqShl1mB_HdyQ
• Facebookfacebook.com/ProSecOnline
• LinkedInlinkedin.com/company/prosec-networks
• Instagraminstagram.com/prosec.gmbh
• Xx.com/prosecnetworks

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ProSec