Certezza

What Certezza does

Certezza is an independent Swedish cybersecurity and IT-security consulting firm founded in 1996, headquartered in Stockholm and operating primarily across the Nordic region. The firm provides advisory and implementation services across the full cybersecurity lifecycle, including Identity and Access Management (IAM), Public Key Infrastructure (PKI) and cryptography, security and penetration testing with a dedicated Red Team, Governance/Risk/Compliance (GRC), security protection under Swedish Säkerhetsskyddslagen, secure recruitment (Säker anställning), and legal advisory at the intersection of digitization, data protection, and cybersecurity regulation. A central Cybersäkerhetscenter delivers managed services such as incident response, digital forensics, patch management, and ongoing customer support, backed by a 24/7 incident line by agreement.

The firm's technology stack is anchored on cross-vendor expertise rather than a proprietary product: Certezza works with approximately twenty selected security suppliers (Checkpoint, Fortinet, Clales/Clavister, Thales, Entrust, Nexus, Keyfactor, Fortanix, TrendAI, Synkzone, and others) and supports federation standards including SWAMID, Skolfederation, and Sambi, as well as certificate management via a dedicated certifikat.certezza.net portal. Consultants hold a dense set of advanced credentials (CISSP, CISM, CIPP/E, OSCP, OSWP, GWAPT, CBBH, PMP, and numerous vendor-specific certifications), and the firm maintains ISO 27001 (2019) and ISO 45001 (2021) certifications.

Certezza earns revenue through four streams: time-and-materials professional services, managed services via the Cybersecurity Center, open and customized training programs (priced per participant, e.g., SEK 3,250-16,990 for listed courses), and product resale/integration across its partner network. Go-to-market is enterprise field sales plus thought-leadership event marketing, anchored on the 28-times-annual Säkerhetsdagen (Security Day) conference and a steady cadence of krönikor and the Säkerhetsbrevet newsletter. Customers span Swedish municipalities and regions, government agencies, school districts, and private-sector enterprises in pharmaceutical, manufacturing, construction, and education segments.

Name

Certezza

Legal name

Certezza AB

Website

https://certezza.net

Company type

Private

Founded year

1996

Operating status

Operating

Headcount range

11–50 employees

Short description

Certezza is an independent Swedish cybersecurity and IT-security consulting firm founded in 1996, serving Nordic public-sector and enterprise clients with advisory and implementation services spanning IAM, PKI, GRC, security testing, legal regulatory counsel, and managed incident response via its Cybersäkerhetscenter.

Ownership category

akta.pro rank

Headquarters

HQ city

Stockholm

HQ country

Sweden

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Cybersecurity Consulting Services: Professional consulting services providing advanced services and products within network security and broader cybersecurity domain. Includes strategic advisory, technical implementation, and ongoing advisory engagements with both public and private sector clients.
2. Cybersecurity Center Support: Ongoing support services including incident response team (IRT), digital forensics, patching, and updates for products purchased through Certezza.
3. Training and Education: Educational services covering all aspects of information and cybersecurity. Offers open courses at Certezza's Stockholm office and customized corporate training. Courses include cybersecurity law, cryptography, certificate training, federation training, and various technical courses.
4. Product Sales and Integration: Certezza collaborates with approximately twenty carefully selected suppliers within information and cybersecurity. Product portfolio includes security products with installation and ongoing support for secure implementation and long-term quality maintenance.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels5 records

Core offering

Certezza is an independent cybersecurity consulting firm providing advisory and technical implementation services across the information security domain. Its core offerings include strategic cybersecurity advisory, Identity and Access Management (IAM), PKI/cryptography, Governance Risk and Compliance (GRC), security protection (Säkerhetsskydd), security and penetration testing, legal advisory on cybersecurity law, and a centralized Cybersecurity Center (Cybersäkerhetscenter) for incident response and ongoing support. Services are delivered to both Swedish public sector organizations and private enterprises, complemented by a portfolio of training courses and curated third-party cybersecurity products.

Product overview

Certezza is a cybersecurity company founded in 1996 that offers a comprehensive portfolio of information and cybersecurity services. The company operates as a unified service organization rather than a software product company, providing expert consulting services across multiple specialized areas. The core offering includes a Cybersecurity Center (Cybersäkerhetscenter) providing incident response, digital forensics, patch management, and support. The service portfolio spans Identity Access Management (IAM), PKI/Cryptography, Digital Trust (including electronic signatures), Governance Risk and Compliance (GRC), Legal services, Security Protection (Säkerhetsskydd), Secure Recruitment, Security/Penetration Testing, General Cybersecurity, and Training/Education. The company also offers certificate management services through a dedicated portal. Certezza collaborates with approximately twenty carefully selected technology vendors including Check Point, Clavister, Fortinet, Thales, Nexus, Keyfactor, and others, but these are vendor partnerships rather than integrated product offerings.

Differentiator

Problem solved

Functional benefit

Products and services

• Cybersecurity Strategic Advisory and Consulting Strategic cybersecurity advisory and consulting services delivered by senior experts to public and private sector clients, covering cybersecurity strategy, architecture, and complex implementation projects.
• Identity and Access Management (IAM) Services End-to-end IAM services including authentication, multi-factor authentication, federation, directory services, single sign-on (Kerberos, SAML, OAuth 2.0, OpenID Connect), and access control implementation for organizations.
• PKI and Cryptography Services Design, implementation, and operation of PKI solutions including digital certificates, electronic signatures, Hardware Security Modules (HSM), Key Management Systems, and certificate lifecycle management across major PKI platforms.
• GRC (Governance, Risk, and Compliance) Services Governance, risk, and compliance services including security policy development, security assessments, audits, incident management, continuity planning, and compliance support for GDPR and ISO 27001.
• Cybersecurity Legal Advisory (Juridik) Legal advisory services at the intersection of digitization, technology, and law covering AI governance, GDPR/data protection, cybersecurity law (NIS2), security protection law, contracts, policy work, and regulatory compliance.
• Security Protection Services (Säkerhetsskydd) Security protection services under Swedish security protection law including security protection analyses, suitability assessments, security planning, procurement support, security agreements, personnel security screening, and FDI assessments.
• Security and Penetration Testing Services Offensive security testing including Active Directory analysis, application testing, cloud testing, mobile forensics, penetration testing, Red Team testing, vulnerability scanning, and security audits.
• Cybersäkerhetscenter (Cybersecurity Center) Centralized cybersecurity support platform providing incident response, digital forensics, patching, updates, and ongoing protection, staffed by dedicated personnel handling technical and organizational challenges.
• Secure Recruitment Services (Säker anställning)

Named customers6 records

Segments4 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature8 records

Partnerships

One partnership is on record.

• SynkzonecoreTechnology or Integration · 18 June 2026New partnership announced June 2026 for safer information management with fewer dependencies. Synkzone provides solutions for storing sensitive information with strong encryption, secure file sharing with external authenticated recipients, and access control with high traceability. Helps strengthen security and regulatory compliance while reducing dependencies on external actors.

Scale indicators5 records

Recent moves7 records

Expansion highlights5 records

Direct peers

• Truesec: Swedish-founded cybersecurity firm offering incident response, managed detection, and advisory services to Nordic enterprises and public sector — closely comparable to Certezza's offensive testing, IRT, and GRC practices.
• Nixu (Accenture Security): Finnish-origin cybersecurity consultancy providing GRC, IAM, and security testing across the Nordics; similar services portfolio and target customer segments (enterprises and public sector) as Certezza.
• Sentor: Swedish managed security and consulting firm specializing in penetration testing, SOC, and compliance — competes directly with Certezza's red team, Cybersäkerhetscenter, and GRC offerings.
• Knowit AB (Cybersecurity): Nordic IT and cybersecurity consultancy offering strategy, IAM, and security testing across Sweden, Finland, and Norway; comparable in customer base and service mix, with broader geographic reach.
• WithSecure (formerly F-Secure): Finnish cybersecurity vendor and consultancy providing managed detection, incident response, and risk advisory to Nordic enterprises; comparable in cyber consulting and managed services, with stronger product footprint.
• Advenica: Swedish cybersecurity company focused on high-assurance network security and secure communication for government/defence clients — overlaps with Certezza's säkerhetsskydd and regulated-sector focus.
• Combitech: Swedish technical consultancy (independent within the Saab group) providing cybersecurity, safety, and digital trust services to defence and public-sector clients — comparable to Certezza in regulated market focus.

Broad incumbents

• Orange Cyberdefense (Sweden): European MSSP and cybersecurity consultancy (formerly SecureLink/Avectris) with a Nordic presence; broader portfolio and scale than Certezza but overlapping on managed security, GRC, and testing.
• PwC Sweden (Risk & Cybersecurity): Big-4 advisory practice covering cyber risk, GRC, ISO 27001, and NIS2 readiness for Swedish enterprises and public sector; competes for the same compliance-driven mandates as Certezza but as part of a broader portfolio.
• Deloitte Nordic (Cyber & Strategic Risk): Global Big-4 firm with Nordic cybersecurity and GRC practices serving regulated industries; competes for enterprise-level compliance and risk engagements that overlap with Certezza's offering.

Market position

Strengths5 records

Weaknesses4 records

Competitive moat5 records

Key highlights7 records

Customer concentration

• Xx.com/certezzaab
• Facebookfacebook.com/certezzaab
• LinkedInlinkedin.com/company/certezza-ab

Compliance32 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles13 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Certezza