What Allgeier CyRis does

Allgeier CyRis GmbH is a Bremen-based Managed Security Service Provider (MSSP) and cybersecurity consultancy focused exclusively on the DACH region (Germany, Austria, Switzerland). Founded in 2004 and operating as a subsidiary of Frankfurt-listed Allgeier SE, the company combines regulatory consulting, managed security services, and proprietary software products to serve enterprise and mid-market organizations in regulated sectors — notably critical infrastructure operators (energy, water, transport), healthcare, automotive, public administration, and renewable energy. Target use cases span 24/7 managed detection and response, incident response, penetration testing, vulnerability management, security awareness training, email encryption, and ISMS/GRC support under frameworks including NIS-2, KRITIS/B3SG, BSI IT-Grundschutz, ISO 27001, TISAX, DORA, and DSGVO.

The company's offering is organized around a platform-plus-modules architecture. Active Cyber Defense (ACD) is the core managed service, packaged into three tiers — ACD Base (entry-level with 24/7 attacker early detection, Pentesting-as-a-Service, or JULIA mailoffice SaaS), ACD Specialized (for KRITIS/ISMS regulated requirements with IR+NAC/MVSP or ISB plus emergency exercise), and ACD Scale (a 1–3 year maturity roadmap combining 24/7 MDR and Pentesting-as-a-Service). Supporting proprietary products include Layer8 (security awareness training with phishing simulations and an Outlook reporting add-in), JULIA mailoffice (modular S/MIME email encryption integrated with D-Trust and SwissSign), NAC Pure (network access control), allCYRIS Schwachstellenscan (managed vulnerability scanning), and DocSetMinder ONE (GRC/ISB management). Advisory services cover ISMS, BCM, NIS-2, KRITIS, GAP analysis, audits, external ISB/ISO-as-a-Service, and data protection.

Revenue is generated primarily through subscription-based recurring managed service contracts billed annually or multi-year, supplemented by professional services engagements for penetration testing (EUR 4,000–30,000+ per engagement, with certified day rates of EUR 1,200–2,000) and consulting. The go-to-market is sales-led direct engagement with no reseller or distribution network, supported by content marketing, webinars, whitepapers, a product finder wizard, and LinkedIn presence. Pricing is quote-based for MSSP packages and per-employee for Layer8 with volume discounts. In 2026 the company merged with peer Secion under the Allgeier CyRis brand, broadening its DACH customer base beyond the historically stated 500+ completed projects.

Name

Allgeier CyRis

Legal name

Allgeier CyRis GmbH

Website

https://allgeier-cyris.de

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

51–100 employees

Short description

Allgeier CyRis is a Bremen-based MSSP and cybersecurity consultancy serving DACH enterprise and mid-market customers in regulated sectors (KRITIS, energy, healthcare, automotive, public sector) with managed detection and response, security awareness, email encryption, and NIS-2/KRITIS compliance services. It operates as a subsidiary of Allgeier SE.

Ownership category

akta.pro rank

Product category

Managed Cybersecurity Services

NAICS

Computer Facilities Management Services (541513)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)

akta.pro secondary industries

Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)

Keywords

• Managed security services
• Managed detection response
• Penetration testing
• Security awareness training
• Email encryption

Headquarters

HQ city

Bremen

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed Security Services (MSSP): Recurring managed security services including 24/7 MDR, threat hunting, incident response, vulnerability scanning, NAC, and pentesting. Revenue is generated through subscription-based managed service contracts (ACD Base/Specialized/Scale tiers), billed annually or multi-year.
2. Security Awareness Training (Layer8): Security awareness training platform and managed service. Offered as annual per-employee licenses with tiered pricing, staffelrabatte (volume discounts), and optional managed service add-on.
3. JULIA mailoffice (SaaS): Modular email encryption SaaS product. Delivered as subscription-based SaaS, with modular pricing based on feature selection.
4. Penetration Testing & Red Teaming: Project-based or PTaaS (Pentesting as a Service) with annual quota arrangements. Pricing ranges from EUR 4,000-8,000 for web application tests (3-5 days) to EUR 10,000-25,000 for extended infrastructure tests (1-2 weeks), and exceeds EUR 30,000 for comprehensive Red Teaming scenarios. Day rates of certified experts in DACH range from EUR 1,200-2,000.
5. Cyber Security Consulting: Advisory services covering NIS-2, ISMS, KRITIS, BCM, GAP analysis, data protection, certifications/audits, and external ISB (ISB/ISO as a Service). Billed as consulting engagements.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels8 records

Core offering

Allgeier CyRis is a Managed Security Service Provider (MSSP) delivering 24/7 managed detection and response, penetration testing, vulnerability scanning, network access control, security awareness training, and email encryption, alongside cybersecurity consulting and compliance advisory (NIS-2, KRITIS, ISMS) for organizations in the DACH region.

Product overview

Allgeier CyRis operates as a Managed Security Service Provider (MSSP) offering an integrated cybersecurity portfolio combining consulting, managed services, and proprietary products. The offering is structured as a platform-plus-modules architecture with Active Cyber Defense (ACD) as the core managed detection and response service, supplemented by specialized products including Layer8 (security awareness training), JULIA mailoffice (email security), NAC Pure (network access control), allCYRIS Schwachstellenscan (vulnerability scanning), and DocSetMinder ONE (GRC management). Professional services include penetration testing, incident response, live-hacking demonstrations, and security audits. Advisory services cover ISMS implementation, BCM, NIS-2 compliance, KRITIS requirements, and data protection. The company targets organizations in the DACH region with focus on critical infrastructure, healthcare, automotive, public sector, and renewable energy industries.

Differentiator

Problem solved

Functional benefit

Brands

• Active Cyber Defense (ACD): Managed Detection & Response service providing 24/7 monitoring and threat response capabilities.
• Layer8
• JULIA mailoffice
• DocSetMinder ONE
• NAC Pure
• allCYRIS Schwachstellenscan

Products and services

• Active Cyber Defense (ACD) Managed Detection & Response (MDR) service providing 24/7 monitoring, threat detection, threat hunting, and incident response. Offered in three tiers: ACD Base (entry-level with attacker early detection, pentesting-as-a-service, or JULIA mailoffice SaaS), ACD Specialized (for KRITIS/ISMS requirements), and ACD Scale (1-3 year maturity roadmap with flexible MDR 24/7 and Pentesting-aaS).
• Layer8 Security Awareness Security awareness training platform providing interactive e-learning modules, phishing simulations, an Outlook phishing reporting add-in, and KPI reporting. Available as self-service or managed service with compliance documentation for ISO 27001/NIS-2/IT-Grundschutz and German server hosting.
• JULIA mailoffice Modular email security solution providing encryption, signature verification, and secure file exchange. Supports S/MIME certificates, compatible with D-Trust and SwissSign trust centers, available as local installation or SaaS, includes an Outlook add-in, and meets GDPR requirements.
• NAC Pure Managed Network Access Control solution providing controlled and secured device access management for enterprise network environments.
• allCYRIS Schwachstellenscan Managed vulnerability scanning service for continuous identification and assessment of security weaknesses in IT infrastructure.
• DocSetMinder ONE GRC (Governance, Risk & Compliance) and ISB (Information Security Officer) management tool for centralized control of ISMS, BCM, and compliance requirements.
• Pentesting Managed penetration testing service identifying vulnerabilities before attackers exploit them, combining manual analysis with automated scanning. Available project-based or as Pentesting-as-a-Service with annual quota arrangements.
• Incident Response Managed emergency reaction service providing rapid response and containment during security incidents with clear emergency plans and predefined communication protocols.
• Live-Hacking Live hacking demonstrations showing real-time attack scenarios to build security awareness and demonstrate vulnerability exploitation to employees and management.
• Cyber Security Audit Security auditing service for assessing current security posture and compliance with regulatory requirements.
• ISB/ISO as a Service External Information Security Officer service providing certified ISMS expertise, risk analysis, audit support, and compliance monitoring without requiring internal staffing.
• Cyber Security Consulting & Compliance Advisory Advisory services covering NIS-2 implementation, ISMS (ISO 27001), BCM, KRITIS, GAP analysis, data protection (DSGVO), emergency management, and certifications/audits for organizations meeting regulatory requirements.

Quantifiable outcome

• >500 completed customer projects
• +1 more outcomes

Named customers12 records

Segments6 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

AI capability5 records

Feature6 records

Partnerships

One partnership is on record.

• SecionminorStrategic or Co-development PartnerSecion and Allgeier CyRis have merged their forces, combining their respective cybersecurity expertise. Customers of both companies continue to be served through the Allgeier CyRis website and contact channels. The merger strengthens the combined company's position in the DACH cybersecurity market.

Scale indicators3 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Secunet Security Networks AG: Germany-based, publicly listed cybersecurity specialist with deep SINA/public-sector and KRITIS relationships. Closest DACH comparable to Allgeier CyRis on regulated-buyer focus, MDR/managed services, and compliance consulting, though operating at materially larger scale.
• SoSafe GmbH: Cologne-based security awareness and human risk platform competing head-to-head with Allgeier CyRis's Layer8 product in DACH mid-market. Comparable go-to-market (sales-led, subscription per-seat) and overlapping buyer profile across DACH enterprises.
• Hornetsecurity GmbH: German-headquartered cloud security and compliance provider (email security, backup, awareness) with strong DACH MSP/channel model. Overlaps with Allgeier CyRis on managed email security (JULIA mailoffice) and managed security services for mid-market.
• SySS GmbH: Tübingen-based penetration testing and red-team specialist serving DACH enterprise and public-sector clients. Direct peer on the pentesting/red-teaming service line that Allgeier CyRis monetises at EUR 4,000–>EUR 30,000 per engagement.
• Link11 GmbH: German cybersecurity vendor focused on DDoS mitigation, web/application protection, and managed security services. Competes for the same DACH mid-market and enterprise buyers, particularly in infrastructure-heavy segments adjacent to KRITIS.
• KnowBe4: Global security awareness and simulated phishing platform and the de facto category leader. Direct functional competitor to Layer8, frequently displacing regional DACH awareness vendors in enterprise deals due to content library and benchmarking data advantages.
• NVISO SA: European cybersecurity consultancy with strong SOC/MDR and CREST-accredited penetration testing practice across DACH and Benelux. Closest international peer on the combined consulting + managed services + pentesting model.

Broad incumbents

• Deutsche Telekom Security / T-Systems: Germany's largest telecom-incumbent cybersecurity arm offering managed SOC, MDR, and consulting at national scale. Competes with Allgeier CyRis for mid-market and enterprise KRITIS/public-sector contracts but as part of a broader ICT portfolio rather than a specialist MSSP.
• Orange Cyberdefense: European MSSP arm of Orange operating 24/7 SOCs across multiple countries. Comparable managed detection/response and consulting services; representative of the cross-border incumbents CyRis would face if it ever attempted to expand outside DACH.
• CrowdStrike Holdings: Global endpoint detection/response and MDR leader whose Falcon platform competes with Allgeier CyRis's ACD MDR offering. Represents the platform-consolidation risk where buyers adopt CrowdStrike instead of regional MSSP-managed EDR.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/allgeiercyris

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Allgeier CyRis