What secion does

secion, now operating under Allgeier CyRis GmbH within the Allgeier Gruppe, is a DACH-focused Managed Security Services Provider (MSSP) founded in 2004 and headquartered in Hamburg/Bremen. The firm delivers Active Cyber Defense (ACD) managed detection and response across three packaged tiers (Base, Specialized, Scale), together with penetration testing, incident response, cyber security audits, and advisory services covering ISMS, BCM, NIS-2, and KRITIS compliance. Its customer base spans federal authorities, critical infrastructure operators, and mid-market enterprises in energy, government, healthcare, automotive, and renewable energy verticals across the German-speaking market.

Beyond services, the company operates a proprietary technology stack that includes JULIA mailoffice (email security), Layer8 (security awareness training with AI-assisted content), NAC Pure (network access control), allCYRIS Schwachstellenscan (vulnerability scanning), and DocSetMinder ONE (GRC/ISMS management). The combination of operational MDR delivery, compliance consulting, and product licensing positions the firm as a mid-sized integrated cybersecurity house rather than a pure services shop.

The business model blends recurring managed-service fees (ACD subscriptions), project-based consulting (penetration tests, audits, ISMS implementations), and product licensing for the proprietary tooling. Go-to-market is direct to mid-market and public-sector buyers in DACH, leveraging German regulatory specialization as the primary wedge. Following the merger with Allgeier CyRis GmbH in 2026, the company now operates as a wholly-owned subsidiary of Allgeier Gruppe, gaining access to group-level distribution and capital while preserving its specialist brand positioning.

Name

secion

Legal name

Allgeier CyRis GmbH

Website

https://secion.de

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

11–50 employees

Short description

secion (Allgeier CyRis GmbH) is a DACH-based MSSP offering managed detection and response, penetration testing, incident response, and NIS-2/KRITIS compliance consulting to federal authorities and mid-market enterprises in regulated verticals.

Ownership category

akta.pro rank

Product category

Managed Security Services (MSSP)

NAICS

Computer Systems Design and Related Services (5415), Security Systems Services (56162)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)

akta.pro secondary industries

Managed Detection & Response (MDR) & SOC Services (HDADAGAG), Security Operations Center (SOC) as a Service (BPAEADAB)

Keywords

• Managed security services
• Cyber security consulting
• Incident response
• Penetration testing
• Security awareness training

Headquarters

HQ city

Hamburg

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed Security Services: Recurring MSSP contracts providing continuous security monitoring, detection, and response services. Delivered in tiered packages (ACD Base, Specialized, Scale) with flexible duration options from entry-level to multi-year programs.
2. Professional Security Services: One-time and project-based services including penetration testing, incident response, cyber security auditing, and consulting engagements for ISMS, BCM, NIS-2, and KRITIS compliance.
3. Software as a Service (SaaS): Cloud-delivered security products including JULIA mailoffice for email security and DocSetMinder ONE for GRC management, offered on subscription basis.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels6 records

Core offering

Allgeier CyRis (secion) is a Managed Security Services Provider (MSSP) that delivers 24/7 Active Cyber Defense (ACD), a modular Managed Detection & Response (MDR) service available in three tiers (Base, Specialized, Scale). The portfolio bundles consulting (ISMS, BCM, NIS-2, KRITIS), proprietary SaaS products (JULIA mailoffice, Layer8, NAC Pure, allCYRIS Schwachstellenscan, DocSetMinder ONE), and managed services (pentesting, incident response, security awareness) for DACH-region enterprises and public-sector organizations.

Product overview

Allgeier CyRis operates as a Managed Security Services Provider (MSSP) offering a comprehensive cybersecurity portfolio. The core offering is Active Cyber Defense (ACD), a modular MDR (Managed Detection & Response) service available in three tiers: ACD Base (entry-level with 24/7 attacker detection, Pentesting-aaS, or JULIA mailoffice), ACD Specialized (for KRITIS/ISMS regulated environments with IR+NAC/MVSP or ISB+Notfallübung), and ACD Scale (1-3 year maturity roadmap). Supporting modules include JULIA mailoffice (encrypted, GDPR-compliant email), Layer8 (AI-supported security awareness training), NAC Pure (network access control), and allCYRIS Schwachstellenscan (vulnerability scanning). The portfolio is complemented by consulting services (ISMS, BCM, NIS-2, KRITIS, GAP-Analyse), managed services (Pentesting, Incident Response, Live-Hacking), and DocSetMinder ONE (GRC/ISB tool). Services span the DACH region with expertise in regulatory compliance for healthcare, automotive, energy, and public sector industries.

Differentiator

Problem solved

Functional benefit

Brands

• Active Cyber Defense (ACD): Managed Detection & Response service providing 24/7 attacker early detection
• Layer8
• JULIA mailoffice
• NAC Pure
• DocSetMinder ONE

Products and services

• Active Cyber Defense (ACD) Managed Detection & Response (MDR) service providing 24/7 threat monitoring, attacker early detection, and incident response capabilities for enterprise and KRITIS organizations.
• ACD Base Entry-level ACD package offering 24/7 attacker early detection, Pentesting-as-a-Service, or JULIA mailoffice SaaS as selectable modules.
• ACD Specialized Advanced ACD tier designed for KRITIS and ISMS requirements, offering 24/7 MDR with incident response and network access control or vulnerability management for regulated organizations.
• ACD Scale Maturity program spanning 1-3 years combining 24/7 MDR with Pentesting-as-a-Service, featuring flexible scope expansion for organizations on a structured security development path.
• JULIA mailoffice Email security solution providing encrypted, GDPR-compliant email communication with modular integration options for enterprise environments.
• Layer8 Security Awareness Managed security awareness training program that delivers AI-supported, scalable awareness training to strengthen human firewall against phishing and social engineering.
• NAC Pure Managed Network Access Control solution providing controlled network access management and monitoring for enterprise infrastructure.
• allCYRIS Schwachstellenscan Managed vulnerability scanning service that identifies security weaknesses in systems and applications through continuous vulnerability assessment.
• Pentesting Managed penetration testing service delivering vulnerability identification with actionable recommendations for sustainable security improvement.
• Incident Response Managed emergency reaction service providing rapid incident response capabilities for organizations experiencing security breaches.
• DocSetMinder ONE GRC/ISB (Governance, Risk, and Compliance / Information Security Officer) tool for managing compliance documentation and information security requirements.
• Cyber Security Beratung General cybersecurity consulting services providing practical and targeted strategies for ISMS, BCM, NIS-2 compliance and organizational security.
• Cyber Security Audit Security audit service for evaluating organizational cybersecurity posture and identifying vulnerabilities.
• Notfallmanagement Business continuity and emergency management consulting for organizations requiring robust disaster recovery capabilities.
• Live-Hacking Live demonstration of hacking techniques to educate and raise awareness among employees about real-world cyber threats.

Quantifiable outcome

• 20+ years of operation since 2004 with >500 completed customer projects
• +1 more outcomes

Named customers12 records

Segments6 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Partnerships

One partnership is on record.

• SecionflagshipStrategic or Co-development Partner · 1 January 2026Secion and Allgeier CyRis have bundled their forces in a strategic partnership. This integration combines Secion's cybersecurity capabilities with Allgeier CyRis's MSSP portfolio, creating a stronger market position in the DACH region. The partnership enables broader service offerings and enhanced expertise in cyber security solutions.

Scale indicators5 records

Recent moves5 records

Expansion highlights5 records

Direct peers

• Compass Security: Swiss-based cybersecurity firm delivering penetration testing, incident response, MDR and security awareness; highly comparable specialist DACH peer targeting regulated mid-market and financial/critical infrastructure customers.
• InfoGuard AG: Swiss MSSP providing managed security services, SOC, penetration testing, and cyber consulting across German-speaking markets with strong focus on regulated industries (KRITIS, finance, healthcare).
• Oneconsult AG: Swiss cybersecurity boutique specializing in penetration testing, red teaming, incident response, and managed security; comparable DACH specialist footprint competing for the same regulated mid-market customers.
• Orange Cyberdefense: European-headquartered MSSP offering 24/7 SOC, MDR, vulnerability management and incident response across Germany and the wider region, making it the closest direct competitor to Allgeier CyRis's ACD portfolio in the DACH market.
• WithSecure (F-Secure): European cybersecurity vendor delivering managed detection & response, vulnerability management, and security awareness (similar to Layer8); comparable mid-sized European MSSP/EDR specialist serving mid-market and regulated customers.
• Redguard AG: Swiss/DACH managed security services provider with SOC, incident response, and NIS-2/GDPR compliance offerings; comparable in size, regional specialization, and mid-market/KRITIS positioning.

Broad incumbents

• secunet Security Networks AG: German-listed cybersecurity specialist focused on public sector, KRITIS, and high-assurance IT security; comparable on regulatory depth and DACH public-sector customer base, though larger and more productized.
• CrowdStrike (Falcon Complete MDR): Global XDR/MDR leader offering fully managed 24/7 detection and response; competes head-on with ACD's MDR core and increasingly bundles incident response, threat hunting, and vulnerability management that overlap Allgeier CyRis's portfolio.
• NTT Security (Managed Security Services): Global MSSP with substantial DACH presence delivering 24/7 SOC, MDR, threat intelligence, and consulting; directly comparable service portfolio but at much larger scale and as part of a broad IT services conglomerate.
• T-Systems / Deutsche Telekom Security: Germany's largest incumbent telecom-IT security provider, offering managed SOC, KRITIS compliance, and ISMS services across enterprise and public sector; competes for the same DACH regulated customers as Allgeier CyRis but on a vastly larger scale.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights7 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about secion