What Corma does

corma GmbH is a German professional investigation firm founded in 1999 by Jörn Weber, a former Kriminalhauptkommissar (senior criminal investigator) of the NRW police with 20 years of service who had created the first German police website in 1995. The company applies structured criminalistic methodology to corporate-sector problems via Open Source Intelligence (OSINT), delivering five core service lines: Person Intelligence Investigations (verified subject profiling from digital identities, social media, breach data, deep/dark web, and public registries), Corporate Intelligence Investigations (investigative due diligence exposing beneficial ownership, interconnections, and red flags not visible in balance sheets), Thematic Intelligence Investigations (dark web intelligence, domain exposure analysis, brand protection, threat/risk analysis with event-timeline mapping), Digitaler Personenschutz (digital executive protection with 0–100 risk scoring, data deletion, and incident response), and OSINT training programs including a certified Maltego Masterclass. Methodology combines manual analyst work with tools such as Maltego for graph analysis and queries across breach databases spanning 124+ billion records. Court-admissible, GDPR-compliant forensic reporting is delivered via Tresorit end-to-end encrypted portals, with all partner infrastructure ISO 27001 and SOC 2 Type II certified under EU hosting.

Corma's customer base is exclusively B2B — DAX and Fortune 100 corporations, premium automotive manufacturers, international gaming and fashion/sports brands, German and European law enforcement agencies, and law firms — with private individuals explicitly excluded. GTM is direct enterprise sales via confidential consultation, with engagement-based pricing (not publicly disclosed), 5–21 business-day turnarounds on full investigations and 24–48 hour turnarounds on Intelligence Modules. The firm has completed 5,000+ investigations since 1999 and operates from Köln (Robert-Perthel-Str. 4), the headquarters to which it relocated in March 2026 upon integration into the ComSec Unternehmensgruppe, where Jörn Weber additionally leads the new Digital Intelligence Team.

The business is bootstrapped, with no disclosed institutional funding and a core team of 1–10 Corma employees, supplemented by approximately 30 investigators within the broader ComSec group following the 2026 combination. Sub-brands (OSINT-as-a-Service, Digitaler Personenschutz, OSINT Training) and three dedicated microsites (osint-as-a-service.de, digitaler-personenschutz.de, osintprotraining.de) indicate a deliberate productization layer over the legacy custom-engagement model, although revenue mechanics remain project-based professional services rather than subscription or platform SaaS.

Name

Corma

Legal name

corma GmbH

Website

https://corma.de

Company type

Private

Founded year

1999

Operating status

Operating

Headcount range

1–10 employees

Short description

corma GmbH is a German professional investigation firm founded in 1999 that delivers OSINT-based corporate due diligence, person investigations, dark-web intelligence, digital executive protection, and OSINT training to enterprises, law firms, and government agencies.

Ownership category

akta.pro rank

Product category

Corporate Investigation Services

NAICS

Investigation and Personal Background Check Services (561611), Investigation, Guard, and Armored Car Services (56161), Investigation and Security Services (5616)

SIC

Services-Detective, Guard & Armored Car Services (7381)

akta.pro primary industry

Fraud Investigations & Claims Support (Insurance/Financial) (BPAKAEAD)

akta.pro secondary industry

Privacy, Consent & Data Protection Management (BPAEAPAF)

Keywords

• Corporate investigations
• OSINT investigations
• Investigative due diligence
• Digital person protection
• Brand protection services

Headquarters

HQ city

Düsseldorf

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Professional Investigation Services: Project-based professional investigation services including Person Intelligence Investigations (5-10 business days), Corporate Intelligence Investigations (7-14 business days), and Thematic Intelligence Investigations (7-21 business days). All investigations include structured reports and actionable recommendations.
2. Intelligence Modules: Rapid intelligence services (24-48h turnaround) for time-critical single questions. Includes Digital Identifier Checks, Data Breach Intelligence, Corporate Quick Check, Dark Web Intelligence, and Domain Exposure Intelligence. Priced per module.
3. OSINT Training Services: Professional OSINT training programs including OSINT Grundlagen, Advanced OSINT, Maltego Masterclass, and custom in-house trainings (1-5 days). Targets law enforcement, corporate security teams, compliance departments, investigative journalists, and security consultants.
4. Digital Person Protection Services: Digital identity protection services including Digital Footprint Report with personal risk score, optional professional data deletion, continuous monitoring, and incident response.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels6 records

Core offering

corma GmbH provides professional OSINT-based economic investigations and digital person protection for businesses and government agencies. Services include person-of-interest investigations, corporate due diligence uncovering hidden ownership and beneficial owners, thematic intelligence (Dark Web, Domain Exposure, Brand Protection, Threat & Risk Analysis), digital executive protection with risk scoring, and OSINT training programs — all delivered with forensic documentation, GDPR-compliant methodology, and court-admissible structured reports delivered via end-to-end encrypted channels.

Product overview

Corma is a professional corporate investigation and OSINT services firm, not a single software product. It operates as a unified service offering organized into five investigation products: Person Intelligence Investigations (targeted person profiling), Corporate Intelligence Investigations (company due diligence), Thematic Intelligence Investigations (topic-specific OSINT including dark web, domain exposure, brand protection), Digitaler Personenschutz (digital executive protection), and OSINT Training & Schulungen (professional training). All services are delivered by expert investigators using structured OSINT methodology and forensic documentation. Intelligence Modules provide rapid 24–48 hour deliverables within the broader investigation offerings. Corma also maintains a branded sub-service portal, OSINT-as-a-Service (osint-as-a-service.de), through which its investigation products are marketed alongside their methodology details and pricing.

Differentiator

Problem solved

Functional benefit

Brands

• OSINT-as-a-Service: On-demand intelligence services for persons, companies, and topics researched by OSINT experts.
• Digitaler Personenschutz
• OSINT Training

Products and services

• Person Intelligence Investigations Comprehensive person-of-interest investigations delivering verified profiles of target individuals through OSINT analysis of digital identities, social media activities, data breaches, deep/dark web, and public registries, with forensic documentation and court-admissible, GDPR-compliant reporting. Includes quick-turnaround Intelligence Modules (24-48 hours) such as Digital Identifier Checks and Data Breach Intelligence, plus full investigations with forensic documentation (5-10 business days).
• Corporate Intelligence Investigations Investigative due diligence uncovering hidden ownership structures, beneficial owners, interconnections, and risks not visible in balance sheets through systematic OSINT analysis. Offers Corporate Quick Check via Intelligence Module (24-48 hours, 550+ million companies worldwide) and full Corporate Intelligence Investigation with ownership identification, relationship mapping, and open source research (7-14 business days).
• Thematic Intelligence Investigations Specialized OSINT investigations for complex thematic matters including Dark Web Intelligence (Tor/I2P, Telegram, marketplaces), Domain Exposure Intelligence (enterprise-wide breach analysis), Brand Protection and product piracy investigations, and Threat & Risk Analysis with event-timeline mapping. Offers targeted Intelligence Modules (24-48 hours) and full investigations (7-21 business days depending on scope).
• Digitaler Personenschutz (Digital Person Protection) Digital identity protection service for exposed individuals (business leaders, politicians, public figures, high-net-worth individuals) accessed through their employers, security teams, or family offices. Analyzes the subject's digital footprint using the same methods as professional attackers. Deliverables include a personal risk score (0-100), critical findings with screenshots and URLs, prioritized recommendations, and optional professional data deletion, continuous monitoring, and incident response.
• OSINT Training & Schulungen Professional OSINT training courses covering OSINT Fundamentals (secure research environments, professional search strategies), Advanced OSINT (systematic investigations, leak databases, dark web intelligence), Maltego Masterclass (graph intelligence and workflow automation), and customized in-house training (1-5 days). Targets law enforcement (police, customs, prosecutors), corporate security teams, compliance departments, investigative journalists, and security consultants.

Quantifiable outcome

• 5,000+ successfully completed investigations since 1999
• +5 more outcomes

Named customers9 records

Segments7 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

Feature8 records

Partnerships

Six partnerships are on record, tiered flagship/core, core and minor.

• ComSec Unternehmensgruppeflagship/coreStrategic or Co-development Partner · 1 March 2026Since March 2026, Corma GmbH is officially part of the ComSec Unternehmensgruppe. The partnership expands Corma's service spectrum to include physical investigations, in-house IT forensics, and legal accompaniment. Jörn Weber remains Managing Director of Corma GmbH and additionally leads the new Digital Intelligence Team within ComSec. Corma brand remains unchanged with same quality, processes, and personal service. New headquarters at Robert-Perthel-Str. 4, 50739 Köln.
• TresoritcoreTechnology or IntegrationEnd-to-end encrypted cloud storage platform used for secure report delivery to clients. Reports are delivered through Tresorit encrypted portal ensuring confidentiality of investigation results.
• interev GmbHminorImplementation/ SI/ Consulting PartnerExternal data protection officer provider. Herr Jürgen Recha serves as Data Protection Officer, reachable at c/o interev GmbH, Robert-Koch-Straße 55, 30853 Langenhagen.
• MaltegocoreTechnology or IntegrationGraph intelligence platform partnership. Jörn Weber is a certified Maltego Trainer and Maltego Evidence Trainer (formerly Social Network Harvester). Maltego Masterclass offered as part of OSINT training programs.
• Local Investigators NetworkminorChannel Partner/ Reseller/ DistributorInternational network of local investigators deployed for on-site research in cross-border cases. Used in conjunction with OSINT analysis for comprehensive international investigations.
• HDI-Gerling Firmen und Privat Versicherung AGminorOthersProfessional liability insurance provider (Berufshaftpflichtversicherung) for Corma GmbH. Coverage scope is worldwide.

Scale indicators8 records

Recent moves7 records

Expansion highlights5 records

Broad incumbents

• Kroll: Kroll is a global risk advisory firm with a substantial investigations practice covering due diligence, fraud, and cyber intelligence — competing with Corma for DAX/Fortune 100 mandates while operating a much broader portfolio that dilutes specialization.
• Control Risks: Control Risks is a global specialist risk consultancy delivering corporate investigations, integrity due diligence, and protective services to multinationals — directly comparable to Corma's enterprise investigations offering but with significantly larger international footprint.
• Pinkerton: Pinkerton is a long-established corporate investigations and protective services firm with global reach — comparable to Corma's combined ComSec-Group footprint, though oriented more toward physical security and corporate investigations.
• FTI Consulting (Investigations segment): FTI Consulting's Forensic & Litigation Consulting segment includes a major global investigations practice handling due diligence, fraud, and asset tracing — a broader incumbent competing for the same DAX/international enterprise investigations work Corma targets.

Direct peers

• S-RM: S-RM is a global corporate intelligence and cyber advisory firm providing OSINT-led due diligence, investigations, and digital risk services — a direct peer to Corma in methodology, customer base (corporates and law firms), and project-based delivery.
• Nisos: Nisos is an OSINT-focused managed intelligence firm serving enterprises with person-of-interest investigations, due diligence, and threat intelligence — closely aligned to Corma's Person/Corporate Intelligence offerings with comparable court-admissible reporting standards.

Emerging players

• Bellingcat: Bellingcat is an internationally recognized open-source investigations collective pioneering OSINT methodology — an emerging player whose public investigative work defines the OSINT category in which Corma operates, and whose training arm competes loosely with Corma's OSINT training offering.
• OSINT Industries: OSINT Industries provides an OSINT-as-a-Service platform for person lookups, social media, and breach data — an emerging tooling-led peer that competes at the lower-complexity end of Corma's Person Intelligence Investigations market.

Regional players

• Berlin Risk: Berlin Risk is a German corporate security and investigations consultancy serving DAX clients with risk advisory and investigative services — a regional peer competing with Corma in the German enterprise investigations market.

Others

• RANE Network: RANE is a professional network and intelligence provider for corporate security, compliance, and risk professionals — thematically adjacent to Corma's enterprise investigations and digital person protection practice, with overlap in enterprise buyer personas.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Facebookfacebook.com/corma.agency
• LinkedInlinkedin.com/company/corma-gmbh

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Corma