Lywand Software

What Lywand Software does

Lywand Software GmbH is an Austrian SaaS company, founded in 2021 and headquartered in St. Pölten, that provides an automated security audit platform for Managed Security Service Providers, Managed Service Providers, and IT service companies serving small and medium-sized enterprise customers across the DACH region. The platform is delivered as cloud-hosted software, originally on AWS and now operated on European infrastructure provider next layer for data sovereignty and GDPR compliance, and combines three proprietary scan modalities: an External Check for domains, IPs, and email exposure, an Agent Check for Windows endpoints, and a gateway-based Network Check that also performs Asset Discovery for non-Windows and unmanaged devices. The core differentiator is Auto Healing, which automatically remediates up to 80% of detected vulnerabilities without manual intervention, supported by a Renovation Plan (prioritized, step-by-step action recommendations), a Security Cockpit (cross-customer prioritization view for MSSPs), and Management Reports with a House Analogy visualization designed to translate technical findings for non-technical SME stakeholders.

Lywand operates exclusively through an indirect channel model, with no direct end-customer sales. Its product is sold via authorized MSP-focused value-added distributors in the DACH region and beyond — including Fokus MSP, Infinigate, Synaxon, Elovade, Nestec, and Red Eagle — with onboarding structured as demo, trial, distributor accreditation, and account activation. Pricing is consumption-based (billed monthly through the distributor based on targets scanned and internal vs. external scan scope), with three partner tiers offering improving economics at higher volume; there are no minimum quantities, no long-term contract terms, and a 60-day free trial for IT service providers. Integration depth is a deliberate go-to-market lever: native connections to Autotask PSA, TANSS (via woasi), NinjaOne, c-entron, plus Microsoft 365, Microsoft Secure Score, and CIS Benchmarks, with an open API for additional process integration and whitelabeling for partner-branded deployment. Marketing is concentrated in the MSP community via content (news/case studies), webinars, MSP-focused trade shows, YouTube demos, and a quarterly newsletter sent through Brevo.

The company is founder-led by CEO Thomas Haak and CTO Bernhard Schildendorfer, with a team of approximately 15 named members covering engineering, sales, marketing, business development, business operations, and UX, and is bootstrapped apart from a €5,000 SMARTUP scholarship received in February 2021. As of the data snapshot, Lywand reports a partner network of roughly 1,200 MSPs and IT service providers, has conducted approximately 149,500 security audits, and has surfaced approximately 57.5 million vulnerabilities on the platform.

Name

Lywand Software

Legal name

Lywand Software GmbH

Website

https://lywand.com

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

11–50 employees

Short description

Lywand Software is an Austrian SaaS company providing an automated, consumption-based security audit platform for MSSPs and IT service providers serving SME customers in the DACH region. Distribution is exclusively indirect via MSP-focused value-added distributors, with native integrations into Autotask PSA, NinjaOne, TANSS, and Microsoft 365.

Ownership category

akta.pro rank

Product category

Cybersecurity Vulnerability Management Software

NAICS

Security Systems Services (56162), Other Computer Related Services (541519), Computer Systems Design and Related Services (5415)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371), Services-Prepackaged Software (7372)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

akta.pro secondary industries

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Helpdesk & End-User Support Services (BPAEABAB)

Keywords

• Vulnerability management software
• Automated security audits
• Managed security services
• Cybersecurity for SMEs
• Compliance management platform

Headquarters

HQ city

Pölten

HQ country

Austria

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Consumption-based SaaS License: Monthly consumption-based billing based on the number of security audit targets checked and scan scope (internal/external). Partner tier discounts apply based on monthly volume. No customer-specific licenses - checks are aggregated across all customers and billed as consumption.
2. License Period Subscriptions: Time-based license periods with included support and updates. Partners receive online access to the Lywand portal during the license period.
3. Support Services: Email and telephone support during business hours included within license period. Updates and support are free during the selected license period after activation.

Pricing tiers

Go-to-market motion3 records

Distribution channels7 records

Marketing channels10 records

Core offering

Lywand Software operates an automated, SaaS-based Security Audit Platform sold exclusively through channel partners to MSSPs, MSPs, IT service providers and system houses serving SME customers. The platform runs three check types — External Check (domains/IPs/email), Agent Check (Windows endpoints), and Network Check (internal devices incl. Macs, Linux, printers, mobile) — and adds Auto Healing for automated remediation, a cross-customer Security Cockpit, prioritized Renovation Plans, A–F security ratings, a House Analogy report, and an M365 Security Integration. Customers consume the platform via a multi-tenant portal with usage-based monthly billing.

Product overview

Lywand Software offers an automated Security Audit Platform (SaaS) designed for Managed Security Service Providers (MSSPs), IT service providers, and system houses to provide continuous security audits for their SME customers. The platform consists of multiple integrated check types: External Check for domains/IPs/email, Agent Check for Windows endpoints, and Network Check for broader internal infrastructure including non-Windows devices. Core features include Auto Healing (automated vulnerability remediation up to 80%), the Renovierungsplan (prioritized action recommendations), Management Reports with House Analogy for non-technical stakeholders, and the Security Cockpit for cross-customer overview. The M365 Security Integration extends platform capabilities to Microsoft 365 environments. The platform operates on a consumption-based billing model with three partner levels, integrates natively with Autotask PSA, TANSS (via woasi), and NinjaOne, and offers an open API for flexible process integration.

Differentiator

Problem solved

Functional benefit

Products and services

• Lywand Security Audit Platform Automated multi-tenant SaaS Security Audit Platform sold exclusively through authorized channel partners (MSSPs, MSPs, IT service providers, system houses) for continuous security audits of SME customers, with A–F security ratings, automated vulnerability checks, prioritized remediation recommendations, and consumption-based billing per target scanned.
• M365 Security Integration Microsoft 365 security integration for the Lywand platform, providing Microsoft Secure Score in the Partner Dashboard, compliance measures at customer level, Risky Users detection with automatic vulnerability creation, mailbox synchronization with Have I Been Pwned checking, and customer summary in the Management Report. Sold to partners as an add-on capability of the Lywand platform.
• Auto Healing Automated vulnerability remediation capability of the Lywand platform that fixes up to 80% of detected internal vulnerabilities without manual intervention, supporting Microsoft Windows Suite, Java, Firefox, and Foxit PDF Reader, configurable by device type and update type. Sold to partners as a Lywand platform capability.
• Security Cockpit Cross-customer security overview module of the Lywand platform for MSSPs that aggregates results from individual customer security checks into a single prioritized view, showing the most urgent security problems, prioritized actions with security impact, and step-by-step action guides for technical staff.
• Network Check and Asset Discovery Internal network infrastructure security check bundled with an asset discovery inventory function that scans devices without agents — Macs, Linux devices, printers, smartphones, iOS and Android devices — via a network gateway, identifying open ports, CVEs, hardening gaps, patch versions, and misconfigurations using MAC-address identification.

Quantifiable outcome

• Up to 80% of vulnerabilities automatically remediated through Auto Healing
• +1 more outcomes

Named customers10 records

Segments4 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration8 records

AI capability4 records

Feature10 records

Partnerships

Eleven partnerships are on record, tiered core and minor.

• Microsoft 365coreTechnology or Integration · 27 May 2025M365 Security integration providing Microsoft Secure Score in Partner Dashboard, compliance measures, Risky User detection, mailbox synchronization, and enhanced Management Reports. Read permissions required for Microsoft 365 tenant access.
• TANSS (via woasi)coreTechnology or Integration · 7 March 2025Integration via woasi platform connecting lywand with TANSS ticketing system. Security findings and measures automatically recorded as tickets in TANSS. woasi developed the interface specifically for this integration.
• ElovadecoreChannel Partner/ Reseller/ Distributor · 11 February 2025Distribution partnership adding lywand to Elovade's IT security portfolio. Leading software distributor in Europe founded 1995 in Wetzlar with over 200 employees. Distribution covers Germany, Austria, Switzerland with other countries to follow.
• SYNAXON AGcoreChannel Partner/ Reseller/ Distributor · 20 June 2024SYNAXON expanding managed services portfolio with lywand cyber security platform. Europe's largest IT network group with over 3,200 partners and 1 billion euros purchasing volume. Available via SYNAXON marketplace.
• NesteccoreChannel Partner/ Reseller/ Distributor · 8 January 2024Distribution partnership for Austria, South Tyrol, and Eastern European region. Nestec focuses on security and messaging with value-added services including support, training, and sales consulting.
• Autotask PSA (Datto)coreTechnology or Integration · 4 September 2023Integration with Datto's Autotask PSA ticketing system. Security measures from lywand's Renovation Plan automatically create tickets in Autotask. Replaces lywand's native Renovation Plan for Autotask users.
• InfinigatecoreChannel Partner/ Reseller/ Distributor · 24 April 2023Sales partnership for DACH region with leading European value-added distributor for IT security, cloud, and MSP. Infinigate Group focuses on distribution of IT security solutions for protection and defense of IT infrastructure and cloud.
• Fokus MSPcoreChannel Partner/ Reseller/ Distributor · 20 July 2022Distribution partnership with MSP-specialized distributor. Founded 2021, based in Celle, Germany. Provides MSP marketplace for easy procurement and partner support for MSPs and IT businesses transforming into MSPs.
• Nuvias GroupminorChannel Partner/ Reseller/ Distributor · 10 June 2021Sales partnership with true value-add distributor as cornerstone for large-scale distribution. Note: Nuvias may no longer be active partner as current distributor list does not include them.
• Red Eagle IT DistributionminorChannel Partner/ Reseller/ DistributorDistribution partnership for Germany. Red Eagle specializes in network components and OEM transceivers with broader IT hardware and software portfolio from well-known manufacturers.
• next layercoreTechnology or IntegrationEuropean infrastructure provider hosting lywand platform. Lywand moved infrastructure from AWS to next layer for digital sovereignty, strengthened data protection, transparency, and control over sensitive data within Europe.

Scale indicators4 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• Liongard: Liongard provides automated configuration assessment and security posture management for MSPs to continuously audit customer Microsoft 365 and infrastructure environments. It overlaps directly with Lywand's M365 Security Integration and continuous security audit value proposition for MSPs.
• ThreatLocker: ThreatLocker is an MSP-first endpoint security platform focused on application allowlisting and ringfencing. It addresses adjacent security use cases delivered through the same MSP channel as Lywand and competes for the same security-stack budget at SMB-focused MSPs.
• Huntress: Huntress is a managed cybersecurity platform for MSPs and SMBs covering endpoint detection, identity threat analysis, and security awareness. It competes for the same MSP budget on continuous security services, although it leans more toward detection/response than vulnerability auditing.
• ConnectSecure: ConnectSecure is a channel-only vulnerability and compliance management platform built specifically for MSPs serving SMBs. It is the closest one-to-one competitor to Lywand, sharing the same end-to-MSP delivery model, automated scanning, and consumption-style billing.
• Defensx (CyberFox): Defensx and Cyberfox offer MSP-focused endpoint security and browser security products sold through the same managed services channel. They compete for the same MSP vendor stack real estate that Lywand targets with its security audit platform.

Broad incumbents

• Tenable Nessus / Tenable.sc: Tenable is a global leader in vulnerability management and cyber exposure. Its Nessus scanner and Tenable.sc platform cover external, agent-based, and network-based vulnerability assessments that directly overlap with Lywand's three check types.
• Microsoft Defender for Endpoint / Secure Score: Microsoft's bundled Defender for Endpoint and Microsoft Secure Score provide built-in vulnerability and M365 security posture assessment that overlaps with Lywand's scanning and M365 Security modules, especially for MSPs and customers already consuming Microsoft 365 licensing.
• Rapid7 InsightVM: Rapid7 InsightVM is an enterprise vulnerability risk management solution offering agent-based and network-based assessment. Comparable technical scope to Lywand, but oriented to enterprise security teams rather than to the MSP-to-SME channel.
• Qualys VMDR: Qualys VMDR is a leading enterprise vulnerability management, detection and response platform. While much larger and enterprise-focused, it serves the same underlying vulnerability-scanning and compliance-benchmarking use cases and is often a competitive alternative considered by MSPs serving mid-market customers.

Emerging players

• Syxsense (Syxsense Secure): Syxsense combines vulnerability scanning and automated patch management into a single endpoint security suite. Its auto-remediation capability mirrors Lywand's Auto Healing positioning, and its MSP edition targets the same channel, making it a credible emerging alternative.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/lywandsoftware
• YouTubeyoutube.com/channel/UCp7xF3kLQe3Uo3nB1h1mT9g
• Facebookfacebook.com/lywandsoftware
• LinkedInlinkedin.com/company/lywand-software-gmbh

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Lywand Software