Fraktal

What Fraktal does

Fraktal Oy is a Helsinki-headquartered cybersecurity consulting firm founded in 2019 by Jani Kallio (CEO) and Tuomo Makkonen (CTO), with a secondary entity Fraktal ApS operating from Copenhagen. The firm delivers three core service lines: Purple Teaming (collaborative red/blue team validation of SOC, EDR, MDR, and XDR capabilities delivered in monthly iterations using MITRE ATT&CK mapping); TIBER services (Threat Intelligence-Based Ethical Red Teaming aligned with national Nordic TIBER implementations and DORA requirements for financial institutions in Finland, Denmark, Sweden, and Iceland); and Consulting Services spanning cyber maturity assessments, ISO 27001 internal audits, web/API/cloud security testing, AI threat modeling, DevSecOps integration, security awareness training, crisis management exercises, and CISO-as-a-Service.

Fraktal's underlying technology stack is service-led rather than product-led, leveraging industry-standard frameworks including MITRE ATT&CK, OWASP, the NIST Cybersecurity Framework, C2M2, and the Kybermittari (Cybermeter) maturity measurement tool. Methodology differentiators include continuous iterative purple teaming engagements (rather than annual point-in-time penetration tests), DevSecOps framework integration, and hardware security assessments (reverse engineering of PCBs and MCUs). The firm holds the registered "Cyber Positivity®" trademark and positions itself around a constructive, non-fear-based client engagement model.

The business model is professional services with hybrid revenue mechanics: project-based engagements for assessments, testing, and due diligence, plus recurring or retainer-style contracts for continuous purple teaming and CISO-as-a-Service. Pricing is not publicly disclosed; engagements are quote-based, initiated via direct sales by senior leadership, and scoped per client. Customer segments include Nordic financial institutions, large enterprises across telco, energy, public sector, IoT, and technology verticals, and PE-backed companies requiring M&A cyber due diligence. Notable clients include Elisa (50+ months of continuous purple teaming) and Halon AB / Intera Partners Oy. Distribution is exclusively direct, with no reseller or marketplace channels.

Name

Fraktal

Legal name

Fraktal Oy

Website

https://fraktal.fi

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

11–50 employees

Short description

Fraktal is a Helsinki-based cybersecurity consulting firm founded in 2019 that delivers purple teaming, TIBER-compliant red teaming, and strategic advisory services to Nordic enterprises and financial institutions.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting Services

NAICS

Management, Scientific, and Technical Consulting Services (5416), Management Consulting Services (54161), Other Scientific and Technical Consulting Services (541690)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Penetration Testing & Red Teaming (BPAKADAE)

akta.pro secondary industries

Penetration Testing & Red Teaming (BPAKAHAF), Cybersecurity & Identity Consulting (BPAHAEAG), Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH)

Keywords

• Cybersecurity consulting services
• Purple teaming assessments
• Threat intelligence red teaming
• Penetration testing services
• Security maturity assessments

Headquarters

HQ city

Helsinki

HQ country

Finland

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Cybersecurity Consulting Services: Professional consulting services delivered through advisors covering cyber maturity assessments, risk profiles, gap analysis, cybersecurity roadmaps and strategies, ISO 27001 services, and CISO as a Service offerings. Revenue is generated through project-based engagements and retainer arrangements.
2. Purple Teaming Services: Continuous purple teaming engagements delivered in monthly iterations. Includes scenario planning, attack simulation execution, monthly walkthroughs with blue teams, and dynamic dashboard reporting. Typically structured as ongoing service agreements.
3. Security Testing Services: Technical security testing including web and mobile application security, API security testing, cloud infrastructure reviews, AI threat modeling, and penetration testing. Project-based engagements with specific deliverable timelines.
4. Training and Team Empowerment: Security awareness and phishing training, DevOps security training, security champion services, and AI security training. Offered as classroom training, workshops, and ongoing programs.
5. TIBER Services: Threat Intelligence-Based Ethical Red Teaming services for financial institutions in Nordic countries, aligned with DORA requirements. Structured exercise engagements with preparation, execution, and reporting phases.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

Fraktal delivers cybersecurity consulting services built around three pillars: Purple Teaming (collaborative Red/Blue team attack-defence validation in monthly iterations), TIBER-based threat intelligence ethical red teaming tailored for Nordic financial institutions, and modular Consulting Services covering advisory and planning, security testing and assessments, team empowerment and training, resilience and incident preparedness, and leadership/policy development (including CISO as a Service). Engagements are typically project-based, retainer-based, or ongoing continuous testing arrangements delivered by senior practitioners.

Product overview

Fraktal is a Finnish cybersecurity consulting company that operates as a services-based business rather than a software product company. Its core offering portfolio consists of three main service lines: Purple Teaming (collaborative attack/defense validation), TIBER services (threat intelligence-based ethical red teaming for financial institutions), and Consulting Services (spanning advisory, security testing, training, and policy development). The consulting services are organized into five modules: Advisory and Planning, Security Testing and Assessments, Team Empowerment and Training, Resilience and Incident Preparedness, and Leadership and Policy Development. Together these services help organizations build technology, processes, and culture for optimized cyber capabilities and resilience.

Differentiator

Problem solved

Functional benefit

Products and services

• Purple Teaming Collaborative security testing and validation service where attacking experts (Red team) work in close cooperation with client IT and security teams (Blue team) to test and verify visibility and response of security operations. Delivered in monthly iterations with scenario planning, execution, walkthroughs, and reporting through dynamic dashboards, mapped against MITRE ATT&CK.
• TIBER (Threat Intelligence-Based Ethical Red Teaming) Specialized threat intelligence-based ethical red teaming service for financial institutions in Finland, Denmark, Sweden, and Iceland. Provides structured adversary simulation aligned with the European Central Bank TIBER framework and national TIBER guidelines, supporting DORA compliance readiness through preparation, execution and reporting phases.
• Advisory and Planning Strategic cyber security planning service covering cyber maturity assessments, risk profiles, gap analyses, security roadmaps and strategies, and ISO 27001 services for ISMS development and internal audits. Targeted at C-suite and boards needing governance, risk and compliance guidance.
• Security Testing and Assessments Technical security testing service covering web and mobile application security, API security testing, cloud infrastructure reviews (Azure, AWS), AI threat modeling, penetration testing, OSINT analysis, and hardware security assessments including PCB and MCU reverse engineering.
• Team Empowerment and Training Security awareness and phishing training, DevOps/DevSecOps security training, threat modeling integration, security champion services, AI security training, and SonarQube static code analysis classroom training and pipeline integration. Delivered as workshops, classroom training, and ongoing programs.
• Resilience and Incident Preparedness Cyber resilience development and crisis management exercises including realistic C-level simulations and process walk-throughs for testing team response capabilities, delivered across organisations of varying scale.
• Leadership and Policy Development CISO as a Service offering providing strategic leadership and operational guidance, plus policy and process development services for practical security policies and procedures within client organisations.

Quantifiable outcome

• 550+ projects delivered across continents since 2019
• +3 more outcomes

Named customers12 records

Segments4 records

Ideal customer profiles5 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature7 records

Partnerships

One partnership is on record.

• Intera Partners OymajorOthersLong-term client relationship where Fraktal provides cyber security consulting services. Intera is a private equity firm whose portfolio companies utilize Fraktal's services for cyber due diligence and ongoing security assessments.

Scale indicators5 records

Recent moves5 records

Expansion highlights5 records

Broad incumbents

• Mandiant (Google Cloud): Global incident response, threat intelligence, and cyber advisory firm (now part of Google Cloud) with deep offensive security and red team capabilities. Overlaps with Fraktal's purple teaming and adversary simulation offerings but serves a much broader, global customer base.
• Trustwave: Global cybersecurity firm offering managed security services, consulting, penetration testing, and GRC advisory. Comparable in breadth of advisory-plus-testing services to enterprise clients, though distributed across far larger customer base and geographies.
• NCC Group: Global cybersecurity consulting and assurance firm with extensive offensive security, TIBER-style red teaming, and GRC advisory practices. Overlaps with Fraktal across enterprise security testing and advisory, but operates at significantly larger scale and broader geographic footprint.

Direct peers

• Secarma: UK-based cybersecurity consultancy offering penetration testing, red teaming, and managed security services. Comparable in services-led model focused on offensive security and consulting for enterprise and financial services clients.
• Nixu (DNV Cyber): Finnish-origin cybersecurity consulting firm (now part of DNV) specializing in advisory, GRC, and technical security services across the Nordics. Comparable in service mix (advisory plus security testing), enterprise focus, and Nordic market orientation.
• Bishop Fox: US-based offensive security consulting firm specializing in penetration testing, red teaming, and attack surface management. Comparable in technical depth on offensive security services and continuous testing offerings to enterprise security teams.
• Sentor: Swedish offensive security consultancy focused on penetration testing, red teaming, and managed security testing for Nordic enterprises. Direct competitor in TIBER-style red teaming engagements and pentest delivery in the Nordics.
• WithSecure: Helsinki-headquartered cybersecurity firm offering consulting, managed detection, and offensive security services to Nordic enterprises. Closest direct comparable given shared Finnish base, similar enterprise buyer profile, and overlapping service portfolio spanning advisory and technical security testing.

Emerging players

• SureCloud: UK-based cybersecurity services and GRC platform provider offering penetration testing, red teaming, and compliance advisory. Comparable in the offensive security testing and advisory mix for enterprise clients, though with a stronger product component.

Others

• KPMG Cyber Security Services: Big 4 advisory practice with dedicated Nordic cyber teams covering TIBER, DORA readiness, offensive security testing, and GRC consulting. Adjacent competitor for the same Nordic enterprise and financial institution buyers, though delivered as part of broader assurance and consulting mandates.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/fraktalcyber
• LinkedInlinkedin.com/company/fraktal-ltd

Revenue estimate

Valuation estimate

Number of profiles

Profiles15 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Fraktal