Silverskin

What Silverskin does

Silverskin Information Security Oy is a Finnish offensive cybersecurity company founded in 2009 and headquartered in Helsinki. The firm specializes in penetration testing and continuous security testing, employing approximately 30 people and serving more than 400 organizations across diverse industries including telecommunications (DNA), payments (Paytrail), healthcare (Mehiläinen, Terveystalo), energy and smart grid (Virta, Aidon), gaming and lottery (Veikkaus), and software development (Sievo, Quanscient, BeeHealthy). The company self-describes as the Finnish market leader in continuous security testing.

The company's core portfolio comprises project-based penetration testing for web applications, mobile applications, external/internal networks, and IoT and embedded systems, combined with a differentiated continuous penetration testing service (PTaaS) delivered in regular monthly or quarterly cycles. The methodology combines commercial automated scanning tools (Nessus, Nexpose, Acunetix) with manual expert-driven testing using Metasploit, Burp Suite, OWASP ZAP, and Nmap. Adjacent offerings include phishing simulation, secure development training, code and architecture review, and threat modelling workshops. The team holds CREST, GIAC, OffSec, ISACA, and (ISC)2 certifications and supports clients in meeting ISO 27001 and SOC2 compliance.

Silverskin generates revenue through professional services engagements priced at €10,000–€50,000 per project and recurring PTaaS subscriptions billed by cycle. The company operates a sales-led enterprise go-to-market motion with named sales and account management professionals engaging clients through direct outreach, website quote requests, and LinkedIn. With annual revenue of €2.7 million, 100+ clients served annually, and 300+ assignments delivered, Silverskin is partially owned by Patria Group, a Finnish defense and technology strategic investor, while operating independently.

Name

Silverskin

Legal name

Silverskin Information Security Oy

Website

https://silverskin.com

Company type

Private

Founded year

2009

Operating status

Operating

Headcount range

11–50 employees

Short description

Silverskin is a Finnish offensive cybersecurity firm offering penetration testing, continuous PTaaS, phishing simulation, and security training to over 400 organizations across telecom, healthcare, energy, and software industries. The 30-person Helsinki company, founded in 2009, is partially owned by Patria Group.

Ownership category

akta.pro rank

Product category

Cybersecurity Services / Penetration Testing

NAICS

Testing Laboratories and Services (54138), Educational Support Services (61171)

SIC

Services-Testing Laboratories (8734)

akta.pro primary industry

Penetration Testing & Red Teaming (BPAKADAE)

akta.pro secondary industries

Penetration Testing Platforms (PTaaS) (HDADAHAG), Application Security Testing (SAST/DAST/IAST/SCA) (HDADACAC), Vulnerability Management & Penetration Testing Services (BPAEADAD)

Keywords

• Penetration testing services
• Continuous security testing
• Offensive security testing
• Phishing simulation
• Secure application training

Headquarters

HQ city

Helsinki

HQ country

Finland

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Marketing or Sales, Operations, Technology or R&D, Infrastructure

Revenue model

1. Professional Security Testing Services: Project-based penetration testing for web applications, mobile applications, external/internal networks, and IoT/embedded systems. Delivered as discrete engagements with agreed scope, fixed pricing, and formal final reports documenting findings, impact, and remediation recommendations. Initial comprehensive test followed by regular test cycles for continuous service model.
2. Continuous Testing Service (PTaaS): Ongoing security testing subscription delivered in regular cycles (monthly or quarterly). Cost based on agreed number of testing cycles with no hidden charges. Service begins with comprehensive initial test similar to project delivery, then moves to regular test cycles for continuous security assurance.
3. Security Training Services: Instructor-led training programs including Basics of Secure Application Development (full day), Advanced Secure Application Development (6 hours), Threat Modelling Workshops, and Security Awareness Training. Delivered to development teams, testers, and organizational staff.
4. Phishing Simulation Services: Phishing exercises to assess personnel cybersecurity awareness, including mass phishing campaigns, targeted phishing with advanced base stories, reporting with recommendations, and awareness training based on campaign results.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels7 records

Core offering

Silverskin provides offensive security testing services for organizations developing or operating digital systems. Core deliverables include project-based and continuous (PTaaS) penetration testing of web and mobile applications, corporate networks, and IoT/embedded devices, paired with phishing simulations, secure application development training, threat modelling workshops, and code/architecture reviews. Services are CREST-certified, delivered by a Helsinki-based team of approximately 30 specialists, and monetized as fixed-price projects, recurring testing cycles, and custom-quote training engagements.

Product overview

Silverskin is a Finnish offensive security company offering penetration testing and security assessment services. The core portfolio consists of penetration testing (application, network, and device), continuous penetration testing (PTaaS), phishing simulation, security training, code/architecture reviews, and threat modelling workshops. Services are delivered as project-based engagements or ongoing continuous testing contracts. The company specializes in helping organizations embed security into their design, development, and decision-making processes through expert-driven testing and training programs.

Differentiator

Problem solved

Functional benefit

Products and services

• Penetration Testing (Penetraatiotestaus) Simulated cyberattacks against applications, networks, and devices to identify exploitable vulnerabilities, assess business impact, and deliver remediation recommendations. Pricing per project ranges from €10,000 to €50,000 depending on target type.
• Continuous Penetration Testing / PTaaS (Jatkuva tietoturvatestaus) Ongoing security testing delivered in recurring cycles (monthly or quarterly) that keeps coverage current as systems evolve, verifies previous fixes, and tests long-untested areas; priced based on number of agreed cycles.
• Phishing Simulation (Tietojenkalastelu) Custom phishing exercises including mass campaigns and targeted spear-phishing scenarios to assess employee cybersecurity awareness, with reports, recommendations, and follow-up awareness training.
• Security Training (Tietoturvakoulutus) Instructor-led security awareness and secure application development training delivered to development teams, testers, and organizational staff across multiple course formats.
• Code and Architecture Review (Koodi ja arkkitehtuuri) Security assessment of source code and system architecture to identify design flaws and implementation weaknesses before deployment.
• Threat Modelling (Uhkamallinnus) Workshop-based threat identification service that helps organizations classify assets, evaluate attacker value, and identify likely and severe threats that require security controls.
• Advanced Secure Application Development Training Deep-dive web application security training covering advanced attack scenarios, defense strategies, exploit anatomy, and secure development practices; 6-hour duration, capacity 15–20 persons, for developers and testers.
• Basics of Secure Application Development Training Full-day foundational course introducing cyber-attacker methodologies, security flaw categories, fuzzing, common vulnerabilities, and developer resources; targeted at developers and testers.

Quantifiable outcome

• NPS 91 in 2023 reflecting high client satisfaction
• +3 more outcomes

Named customers20 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Scale indicators8 records

Expansion highlights5 records

Direct peers

• WithSecure: Finnish-headquartered cybersecurity firm (formerly the corporate/security business of F-Secure) offering managed security, consulting, and offensive testing services to enterprises in the Nordics and globally. Direct competitor in the same Finnish/Nordic market for penetration testing and security advisory services.
• Nixu (DNV Cyber): Finnish cybersecurity services firm (now part of DNV) specializing in penetration testing, security consulting, and managed security for Nordic enterprises. Closest direct Finnish peer with overlapping offensive-security services and enterprise client base.
• NCC Group: UK-listed global specialist in cybersecurity services including extensive application, network, and IoT penetration testing. Direct peer as a pure-play offensive-security services firm with comparable methodology and enterprise customer profile.
• Bishop Fox: US-based offensive-security firm focused exclusively on penetration testing, red teaming, and security assessments for Fortune 500 enterprises. Direct peer in attacker-perspective security services with comparable productized testing methodology.

Broad incumbents

• Trustwave: Global cybersecurity services provider and MDR/MSSP with a substantial penetration testing and security consulting practice. Broader incumbent offering overlapping testing services as part of a wider managed security portfolio.
• Orange Cyberdefense: European-headquartered MSSP and cybersecurity services division of Orange, offering penetration testing, threat intelligence, and managed security across multiple geographies. Broader incumbent competing for the same European enterprise testing budgets.

Emerging players

• Pentera: Automated security validation platform that emulates attacker techniques to continuously test enterprise security posture. Emerging player competing in the PTaaS/continuous testing space where Silverskin also operates.
• Cobalt: PTaaS platform that connects enterprises to a global network of vetted penetration testers for on-demand, continuous security testing. Direct emerging competitor in the PTaaS service model Silverskin has built around its in-house team.
• HackerOne: Platform combining crowdsourced penetration testing and bug bounty programs with continuous security testing services. Emerging player expanding the PTaaS/continuous security testing category that Silverskin leads in Finland.

Others

• KPMG Finland (Cyber Security services): Big Four advisory practice in Finland providing cybersecurity consulting, penetration testing, and compliance services to enterprise clients. Adjacent competitor frequently bidding for the same regulated-industry pentesting and ISO 27001/SOC2 work in the Finnish market.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles7 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Silverskin