What Secwatch does

SECWATCH B.V. is a Dutch boutique cybersecurity firm founded in 2005 and headquartered in Almere, Netherlands, specializing in manual penetration testing, continuous vulnerability management, and incident response. Its core service is the proprietary "Pietje Precies" pentest methodology — a manual, investigative, business-context-specific approach delivered by certified ethical hackers (CEH plus ECSA/LPT, OSCP, GWAPT, GXPN, GAWN, OSWE) that contrasts with automated scanner-based offerings. The technology stack combines in-house IP (Exposure Control platform with EVM and DAST scanning, the Begrip-garantie comprehension guarantee, Cyber Threat Hunting service) with integrated third-party platforms from Rapid7 (InsightVM, InsightIDR), ESET (Enterprise Inspector, Elite Targeted Attack Protection), WatchGuard (Firebox, AuthPoint, EPDR, ThreatSync), and DTEX Systems.

The firm's revenue model blends project-based professional services (pentesting, threat hunting, forensic investigations) with subscription/managed services (Continu Scan & Response, SuperSOC 24/7 monitoring, Vulnerability Management subscriptions). Pricing is fixed-fee per engagement with no hidden costs, capacity is deliberately capped at 10 pentests per month, and the firm has delivered over 1,500 pentests since inception at a current run-rate of 100+ per year. SECWATCH serves mid-market to enterprise organizations across the Netherlands and Belgium, with documented customers in SaaS, government services (including DigiD-authenticated platforms), healthcare, insurance, and distribution. The company operates as a subsidiary of Indicium Concepts (Holding), holds a Dutch private investigation bureau license (POB 1546), and counts the Dutch government among its highest-level clients.

Name

Secwatch

Legal name

SECWATCH B.V.

Website

https://secwatch.nl

Company type

Private

Founded year

2005

Operating status

Operating

Headcount range

11–50 employees

Short description

SECWATCH is a Dutch boutique cybersecurity firm specializing in manual penetration testing and continuous vulnerability management for mid-market and enterprise organizations in the Benelux region, delivered by certified ethical hackers using proprietary methodologies and integrated Rapid7, ESET, and WatchGuard platforms.

Ownership category

akta.pro rank

Product category

Penetration Testing and Cybersecurity Services

NAICS

Investigation, Guard, and Armored Car Services (56161), Security Systems Services (56162)

SIC

Services-Detective, Guard & Armored Car Services (7381), Services-Testing Laboratories (8734)

akta.pro primary industry

Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG)

akta.pro secondary industry

Vulnerability Management & Penetration Testing Services (BPAEADAD)

Keywords

• Penetration testing services
• Cybersecurity consulting
• Vulnerability management
• Managed security monitoring
• Cyber threat hunting

Headquarters

HQ city

Almere

HQ country

Netherlands

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Pentesting Services: One-time and recurring penetration testing services for web applications, network infrastructure, and user behavior. Core service since 2005, with over 1,500 pentests delivered.
2. Continu Scan & Response: 24/7 managed security monitoring service providing real-time vulnerability insight and incident response. Includes setup, dashboards, monthly reporting, proactive notifications, on-site onboarding, and guaranteed response within defined SLAs.
3. Cyber Threat Hunting: Incident response and forensic investigation service for organizations suspecting compromise. Includes OSINT, system scanning, memory analysis, and detailed reporting for both IT and management.
4. Vulnerability Management: Periodic vulnerability scanning and assessment services using Rapid7 and Qualys platforms, integrated with manual expert review and reporting.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels5 records

Core offering

SECWATCH is a specialist penetration testing bureau that performs manual, business-specific ethical hacking on web applications, network infrastructure, and user behavior, supplemented by continuous vulnerability monitoring through its proprietary Exposure Control platform (EVM and DAST). It also delivers cyber threat hunting, 24/7 managed security monitoring (Continu Scan & Response / SuperSOC), and vulnerability management services primarily to mid-market and enterprise organizations in the Netherlands and Belgium.

Product overview

SECWATCH is a Dutch penetration testing and cybersecurity services company that operates as a unified platform with multiple integrated service modules. The core offering is specialized penetration testing (pentesting), which is complemented by three key add-on modules: Exposure Control (continuous vulnerability management including EVM and DAST), Cyber Threat Hunting (active malware and threat detection), and SOC services (24/7 monitoring). Additional services include Vulnerability Management and the Continuity Scan & Response managed service. SECWATCH also maintains a cybersecurity knowledge platform through its articles/blog section and offers an internship program. The company operates as a layered solution provider, combining its own testing services with technology integrations from partners including Rapid7, ESET, and WatchGuard.

Differentiator

Problem solved

Functional benefit

Brands

• Exposure Control: A platform for continuous vulnerability management including EVM (Exposure Validation Management) and DAST (Dynamic Application Security Testing) to proactively identify and prioritize new vulnerabilities.
• SuperSOC
• Continu Scan & Response
• Cyber Threat Hunting
• Pietje Precies-Pentest

Products and services

• Pentesten (Penetration Testing) Specialized penetration testing services in which SECWATCH's certified ethical hackers test organizations' systems, applications, and infrastructure from an attacker's perspective, using the manual, investigative Pietje Precies methodology tailored to the customer's business and branch.
• Exposure Control Proprietary continuous vulnerability management platform including EVM (Exposure Validation Management) and DAST (Dynamic Application Security Testing) capabilities for continuously monitoring and prioritizing new vulnerabilities beyond point-in-time pentests.
• Cyber Threat Hunting Active threat hunting service that searches for malware, backdoors, and hackers in client networks using forensic investigation methods, behavioral analysis, OSINT, and specialized tooling, delivered by Certified Threat Intelligence Analysts and Medior Security Consultants with Senior Security Manager oversight.
• Continu Scan & Response 24/7 managed security monitoring service providing real-time vulnerability insight and incident response, including setup, dashboards, monthly reporting, proactive notifications, on-site onboarding, and guaranteed response within defined SLAs.
• SOC (Security Operations Center / SuperSOC) 24/7 security monitoring service enabling organizations to detect threats in real time and take immediate action, branded as SuperSOC.
• Vulnerability Management Systematic identification and mitigation of security vulnerabilities in networks, websites, webshops, and web portals, using Rapid7 and Qualys platforms integrated with manual expert review, threat intelligence, and maturity-level assessment reporting.

Quantifiable outcome

• 250+ companies helped remove security blind spots
• +3 more outcomes

Named customers6 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration10 records

Feature4 records

Partnerships

Three partnerships are on record, tiered core.

• Rapid7coreTechnology or IntegrationSECWATCH partners with Rapid7, a cybersecurity and research organization known for Metasploit exploit framework. Rapid7 provides scalable platforms for multiple security solutions including InsightVM and InsightIDR, which SECWATCH uses for vulnerability management and SIEM/UBI solutions. SECWATCH and Rapid7 introduced a unique cybersecurity offering combining continuous scanning with expert analysis.
• ESETcoreTechnology or IntegrationSECWATCH and ESET offer a unique combination of enterprise services and solutions. ESET provides endpoint security (Enterprise Inspector, Elite Targeted Attack Protection), machine learning-based detection, and comprehensive security solutions. The partnership delivers cybersecurity from A to Z: prevention, control, defense, and continuous monitoring. ESET is the leading European information security player known for minimal system load and unparalleled speed.
• Dutch GovernmentcoreStrategic or Co-development PartnerSECWATCH works at the highest level with the Dutch government and cybersecurity specialists, providing first-hand use cases, knowledge, and test results. This collaboration ensures SECWATCH maintains cutting-edge threat intelligence and contributes to national cybersecurity efforts.

Scale indicators5 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Computest (part of Northwave): Computest is a Dutch cybersecurity firm specialized in penetration testing, red teaming, and application security, directly comparable to SECWATCH's boutique pen testing and vulnerability management model in the same Benelux market.
• Secura: Secura is a Dutch cybersecurity services company offering penetration testing, security assessments, and compliance services, comparable to SECWATCH in size, offerings, and primary market focus.
• Pen Test Partners: Pen Test Partners is a UK-based specialist penetration testing boutique with a CREST-accredited, multi-discipline testing practice, highly comparable to SECWATCH's specialist-only positioning and methodology-led approach.
• Bishop Fox: Bishop Fox is a US-based boutique offensive security firm specializing in penetration testing, red teaming, and adversary emulation, comparable to SECWATCH as a specialist, methodology-driven boutique in the pen testing category.
• NetSPI: NetSPI is a US-based penetration testing and vulnerability management specialist firm combining platform-based continuous testing with expert-driven engagements, directly comparable to SECWATCH's Exposure Control + pentest hybrid model.
• Coalfire: Coalfire is a US cybersecurity advisory and testing firm with deep penetration testing, red team, and vulnerability management practices, comparable to SECWATCH's enterprise-facing pen testing and threat hunting services.
• Praetorian: Praetorian is a US security consultancy specializing in penetration testing, attack surface management, and threat hunting, comparable to SECWATCH as a boutique offensive security firm targeting enterprise and regulated customers.

Broad incumbents

• NCC Group: NCC Group is a UK-based global cybersecurity firm offering penetration testing as part of a broader assurance, consulting, and managed services portfolio, overlapping with SECWATCH on security testing but operating at much larger scale across many geographies.
• Orange Cyberdefense: Orange Cyberdefense is the European cybersecurity services arm of Orange, providing managed security, threat intelligence, and security testing across Europe, broadly overlapping with SECWATCH's SOC, threat hunting, and pentest offerings at significantly larger scale.
• Trustwave: Trustwave is a global cybersecurity services firm offering penetration testing, managed detection and response, and database security, comparable to SECWATCH's blended pen testing and SOC/monitoring offerings but as part of a much wider portfolio.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/secwatched
• Facebookfacebook.com/secwatch

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Secwatch