What Adyta does

Adyta is a Portuguese cybersecurity company founded in 2015 as a spin-off from the University of Porto, headquartered at UPTEC in Porto. The company operates two interlocking business lines: a secure communications product (AdytaPhone, with AdytaPhone Federation and AdytaPhone Post-Quantum variants) and a professional services portfolio covering security audits, NIS2/DORA/ISO 27001 compliance, vCISO, incident response, continuous cloud security, third-party risk, and cybersecurity training. AdytaPhone is built entirely in Europe on an end-to-end encryption architecture with zero server access to message content, forward secrecy, QR-code connection (no phone number or personal data), self-destructing messages, and secure conversation vaults; an Android and iOS app sits at the consumer entry point while Federation and Post-Quantum variants serve enterprise, government, and defence buyers.

The company's go-to-market is hybrid: direct-to-consumer subscription via Google Play and Apple App Store at €4.17-4.99/month for individual plans, paired with enterprise field sales for business, enterprise, and government/defense tiers requiring custom contracts. Adyta is a GNS Accredited Organisation (OVA) — one of the few private entities in Portugal with this status — and conducts technical audits of Samsung Galaxy devices and Azure, AWS, and GCP cloud platforms for GNS, making it a recurring participant in Portugal's national security certification apparatus. Adyta.Phone Federation is the only Portuguese-origin solution with active GNS certification for handling Classified Information at the National Reserved level.

Adyta participates as a consortium member in several multi-year European defence and quantum communications programmes, including DISCRETION (€6.7M EDIDP budget, QKD/SDN for European Defence), SWAT-SHOAL (€25M European Defence Fund, secure communications for underwater drone swarms), and PTQCI (Portugal's contribution to EuroQCI). The company is privately held, founder-led (CEO Carlos Carvalho), with no disclosed outside funding rounds, headquarters in Porto, and limited geographic footprint beyond Portugal and select European defence projects.

Name

Adyta

Legal name

Adyta, Lda.

Website

https://adyta.pt

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

1–10 employees

Short description

Adyta is a Portuguese cybersecurity company founded in 2015 as a University of Porto spin-off, offering the AdytaPhone encrypted communications platform and professional security services for government, defence, and critical infrastructure clients. It is a GNS-accredited organisation and the only Portuguese-origin solution certified to handle National Reserved classified information.

Ownership category

akta.pro rank

Product category

Secure Communications Software

akta.pro primary industry

Secure/Encrypted Messaging (BPAMACAG)

akta.pro secondary industries

Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)

Keywords

• Secure communications software
• Cybersecurity services
• Quantum key distribution
• Post-quantum encryption
• Compliance assessments

Headquarters

HQ city

Porto

HQ country

Portugal

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B and B2C

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. AdytaPhone Subscriptions: Subscription-based revenue from AdytaPhone secure communication app. Plans range from individual (€4.17-4.99/month) to business, enterprise, and government tiers with custom pricing. Revenue model emphasizes that clients pay for service rather than providing personal/corporate data.
2. Cybersecurity Services: Professional services revenue from security audits, compliance assessments (NIS2, DORA, ISO 27001), managed security services, certification support, and incident response. Includes vCISO services and cybersecurity training.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels7 records

Core offering

Adyta develops and sells AdytaPhone, an end-to-end encrypted mobile communication platform for voice, text, and secure file sharing, certified by Portugal's National Security Office (GNS) for handling Classified Information at the National Reserved level. The company also delivers a portfolio of professional cybersecurity services including security audits, NIS2/DORA/ISO 27001 compliance assessments, vCISO, incident response, vulnerability management, cloud security monitoring, cryptographic assessment, third-party risk management, and cybersecurity training for government, defense, critical infrastructure, and enterprise clients.

Product overview

Adyta is a Portuguese cybersecurity company founded in 2015 as a University of Porto spin-off, offering a portfolio of secure communications products and professional security services. The core product is AdytaPhone (including AdytaPhone Federation and AdytaPhone Post-Quantum variants), an encrypted communication platform available for Android and iOS. Professional services include security audits, regulatory compliance assessments (NIS2, DORA, ISO 27001), managed security operations, vCISO services, incident response, and cybersecurity training. The company also conducts R&D through projects like DISCRETION (quantum communications) and City Catalyst (smart cities). All offerings emphasize security by design with certifications from Portugal's National Security Office (GNS).

Differentiator

Problem solved

Functional benefit

Products and services

• AdytaPhone Secure mobile communication platform for voice and text with end-to-end encryption, built entirely in Europe. Features include no phone number requirement, QR code-based connection, conversation vaults for secure file storage, temporary self-destructing messages, and forward secrecy. Available for Android and iOS with individual, business, enterprise, and government/defense pricing tiers.
• AdytaPhone Federation Enterprise version of AdytaPhone enabling secure encrypted communication channels between different organizations with clear security boundaries and trusted inter-organizational collaboration. Certified by the National Security Office (GNS) at the National Reserved level for handling classified information.
• AdytaPhone Post-Quantum Post-quantum encrypted voice communication service for defense and critical information sharing, powered by post-quantum technology designed to resist quantum computing threats. Total project cost €1,261,497.79 with €933,060.01 EU funding.
• Security Audits Technical security audit services including penetration testing, vulnerability assessment, and compliance testing. The team has audited Azure, Google Cloud, and AWS environments at global scale.
• DORA Assessment Digital Operational Resilience Act compliance assessment service. Delivers full assessment, identifies critical gaps, and defines a path to compliance with technical depth beyond simple checklists.
• NIS2/RJC Assessment Network and Information Security Directive 2 compliance assessment. Determines whether an organization falls under NIS2 requirements, delivers an action plan, and provides ongoing support through to full compliance.
• ISO 27001 Implementation & Certification Information security management system implementation service with certification support. Implements compliance framework with technical rigor.
• vCISO (Virtual Chief Information Security Officer) Virtual CISO service providing executive-level accountability for cybersecurity as required by NIS2. Brings deep technical expertise and institutional credibility.
• Incident Response Emergency security incident response service with speed, technical depth, and full awareness of legal obligations. Includes IR-as-a-Service retainer option.
• Vulnerability Management (VMaaS) Continuous vulnerability monitoring, prioritization, and remediation tracking service. Ensures security posture does not depend on annual penetration testing alone.
• Continuous Cloud Security Ongoing cloud environment monitoring service leveraging expertise from auditing Azure, Google Cloud, and AWS at global scale.
• Whistleblowing Channel Secure and confidential reporting channel designed for compliance, transparency, and accountability within organizations.
• Cryptographic and Functional Assessment Security evaluation of cryptographic systems with technical rigor applied in assessments for the GNS. Addresses poorly implemented cryptography risks.
• Third-Party Risk Assessment (TPRM) Supplier risk assessment, classification, and continuous monitoring service. Mandatory under NIS2 and DORA for understanding true third-party exposure.
• Cybersecurity Training Practical, contextual, and measurable security awareness training for personnel, addressing the primary attack vector of human error.

Quantifiable outcome

• Over 40 projects delivered across military, public, and private institutions
• +3 more outcomes

Named customers5 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability3 records

Feature7 records

Partnerships

Ten partnerships are on record, tiered core and minor.

• NavantiacoreStrategic or Co-development Partner · 1 July 2023Spanish naval construction leader and SWAT-SHOAL project coordinator. Recognised Adyta's expertise in cybersecurity and underwater vehicle communications. Adyta is the only Portuguese company in the 20-member consortium.
• SWAT-SHOAL Consortium MemberscoreStrategic or Co-development Partner · 1 July 202320 organisations from 11 countries including Sener, ATLAS ELEKTRONIK, Cafa Tech, Develogic, Fincantieri Nextech, Fraunhofer, GMV Aerospace, Kongsberg Defense, Naval Group, Prisma Electronics, Saab Kockums, Sea Europe, Lukasiewicz Instytut, Saes, Sotiria Tecnologia, WTD71, and Adyta.
• PTQCI Consortium MemberscoreStrategic or Co-development Partner · 1 July 202215 members including GNS, Deimos Engenharia (DME), IP TELECOM, AlticeLabs (ALB), Instituto de Telecomunicações (IT), INESC-ID, Adyta (A), Instituto Superior Técnico (IST), Fundação para a Ciência e Tecnologia (FCT), Warpcom (W), Omnidea (O), Instituto Superior de Engenharia de Lisboa (ISEL), Instituto Português da Qualidade (IPQ), and Instituto Português Quantum (PQI).
• Deimos EngenhariacoreStrategic or Co-development Partner · 1 January 2022DISCRETION project leader. Adyta participates in consortium for European Defence Industrial Development Programme developing quantum communication networks for defense.
• DISCRETION Consortium MemberscoreStrategic or Co-development Partner · 1 January 2022Instituto de Telecomunicações, Instituto Superior Técnico, Altice Labs (Portugal), Telefonica Investigación y Desarrollo S.A.U., Universidad Politécnica de Madrid (Spain), Austrian Institute of Technology GmbH (Austria), and Nextworks (Italy).
• ANJE - Associação Nacional de Jovens EmpresáriosminorGTM or Marketing Partner · 1 October 2021Led mission to GITEX GLOBAL 2021 in Dubai. Adyta participated alongside FutureCompta, MyLads, and Omniflow as part of four Portuguese companies showcasing technology solutions.
• Samsung ElectronicscoreTechnology or Integration · 1 February 2021Fourth consecutive year Adyta conducts cryptographic and functional evaluation tests on Samsung Galaxy devices with Knox platform as part of GNS certification process.
• Microsoft AzurecoreTechnology or Integration · 1 September 2020Adyta participated in technical analysis and audit process for Azure cloud certification by GNS at National Reserved level - the first cloud platform certified in Portugal.
• GNS (Gabinete Nacional de Segurança)coreStrategic or Co-development Partner · 1 January 2015GNS Accredited Organisation (OVA). Adyta is responsible for technical audits of Samsung devices and cloud platforms including Azure, AWS, and GCP. Conducts security evaluations for GNS certification processes.
• INOV (Institute for Systems and Computer Engineering Innovation)coreTechnology or IntegrationConducted independent technical evaluation of Adyta.Phone for GNS certification process, performing intensive tests and verifications according to defined protection profile.

Scale indicators10 records

Recent moves7 records

Expansion highlights7 records

Direct peers

• Silent Circle: Silent Circle provides encrypted voice, video, and messaging for enterprises and government clients, with a strong focus on secure mobile communications. It is a direct competitor to AdytaPhone in the high-security enterprise and government segment.
• Wire: Wire is a Swiss secure-messaging and collaboration platform offering end-to-end encrypted messaging, voice, and video for enterprises and governments. It is the closest direct competitor to AdytaPhone in Europe, addressing the same regulated, sovereignty-conscious customer base.
• Wickr (Amazon): Wickr, now part of AWS, offers end-to-end encrypted messaging for enterprises and government/defence agencies. It is a direct competitor to AdytaPhone Federation in the certified secure-communications-for-government niche.
• Threema: Threema is a Swiss secure-messaging app with end-to-end encryption, used by consumers, enterprises, and public-sector organisations. It competes directly with AdytaPhone on European-developed, privacy-first messaging.
• Signal: Signal is the largest open-source end-to-end-encrypted messaging app, free for consumers worldwide. While free and consumer-led, it is the most relevant direct comparable for AdytaPhone's encrypted-messaging architecture and user expectations.
• S21sec: S21sec is a European cybersecurity services firm focused on managed security, incident response, and compliance, headquartered in Spain. It is a direct peer to Adyta's professional-services business, particularly across Iberian and EU enterprise/government accounts.

Emerging players

• ID Quantique: ID Quantique is a Swiss quantum-safe cryptography and QKD vendor serving governments, financial institutions, and defence customers. It is an emerging peer to Adyta's QKD and post-quantum work inside DISCRETION and PTQCI.
• QuantumCTek: QuantumCTek is a leading Chinese quantum communications company building QKD networks for government and defence customers. It is an emerging peer in quantum-secure communications alongside Adyta's PTQCI/DISCRETION activities.

Broad incumbents

• Thales: Thales is a large European defence and digital-identity group that offers secure communications, encryption, and cybersecurity to governments and defence customers. It is a broad incumbent against which Adyta competes in defence secure-comms and certification-based cybersecurity services.
• Atos (Eviden): Atos, via its Eviden brand, is a major European IT and cybersecurity services provider serving governments, defence, and regulated industries. It overlaps with Adyta's cybersecurity services portfolio (audits, compliance, managed security) across Europe.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/Adyta_Lda
• Facebookpt-br.facebook.com/Adyta.PT
• LinkedInlinkedin.com/company/adyta-lda

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Adyta