MORGENSTERN consecom

What MORGENSTERN consecom does

MORGENSTERN consecom GmbH (operating as MORGENSTERN privacy) is a German business IT consultancy specializing in data protection, IT security, and IT law. Founded in 2013 (legal entity incorporated 2017 in Speyer) by Managing Director Jan Morgenstern, the firm serves German and DACH-region organizations of all sizes, with offices in Speyer, Koblenz, Konstanz, and Hamburg. Service lines include external Data Protection Officer (DPO) provision, DS-GVO and BDSG compliance consulting, ISMS and BSI-Grundschutz implementation, NIS-2 advisory, penetration testing, and incident response, delivered by a team of 11–50 certified professionals (TÜV-certified DPOs, IHK-certified Information Security Officers, and penetration testers).

The company operates two proprietary technology assets. First, the MORGENSTERN Data Protection Management System (DPMS), launched in November 2025, is a compliance management platform providing centralized oversight of obligations under DS-GVO, NIS-2, KI-Verordnung, and related digital regulations. Second, the MORGENSTERN E-Learning Platform (LMS), launched in 2025 with Video-on-Demand added in July 2025, delivers interactive e-learning courses, phishing simulations, microlearning, and role-based learning paths to corporate training buyers, with white-label branding and an integrated reporting dashboard. The firm also publishes the MORGENSTERN Magazin, a podcast, a 42+ post regulatory blog, and a newsletter as part of a content-led demand generation engine.

Revenue is generated through three streams: (1) professional services consulting engagements (DPO outsourcing, security strategy, penetration testing, incident response), (2) subscription/recurring e-learning platform access sold to corporate training buyers, and (3) fee-based online and in-person seminars. Distribution is primarily direct sales by consultants, supplemented by a self-serve LMS trial experience, LinkedIn paid campaigns, and the MORGENSTERN Netzwerk (legal, Academy, Awareness-Kampagnen) which provides cross-referral across privacy, legal, and training. Pricing is not publicly disclosed. The firm is privately held, founder-led, and has not raised institutional capital.

Name

MORGENSTERN consecom

Legal name

MORGENSTERN consecom GmbH

Website

https://morgenstern-privacy.com

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

MORGENSTERN consecom (MORGENSTERN privacy) is a German IT consultancy offering data protection, IT security, and IT law advisory services to businesses across the DACH region, complemented by a proprietary LMS, phishing simulation platform, and the DPMS compliance management system.

Ownership category

akta.pro rank

Product category

IT Security and Data Protection Consulting

NAICS

Management Consulting Services (54161), Management, Scientific, and Technical Consulting Services (5416)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Endpoint Security Managed Services (EDR/XDR) (BPAEADAH)

akta.pro secondary industry

Data Access Governance & Entitlement Management (DSPM / CIEM-for-Data) (HDADAFAG)

Keywords

• Data protection consulting
• IT security advisory
• GDPR compliance services
• Cybersecurity awareness training
• Penetration testing services

Headquarters

HQ city

Speyer

HQ country

Germany

HQ region

Europe

Offices4 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D

Revenue model

1. Consulting Services (Data Protection & IT Security): Individual consulting engagements for data protection (DS-GVO, BDSG), IT security, IT law, and information security. Services include external DPO provision, security strategy development, ISMS implementation, incident response, penetration testing, and digital forensics. Delivered by consultants across Germany with remote options.
2. E-Learning and Training Services: Sale of interactive e-learning courses and phishing simulations via the proprietary LMS platform. Training topics cover AI/KI, Microsoft 365, IT security, data protection, NIS-2, and occupational safety. Delivered as online seminars, on-demand video courses, and in-person/group sessions.
3. Seminars and Events: Online and in-person seminars on data protection, IT security, and regulatory topics. Revenue generated through participant fees for scheduled seminar events and potentially custom corporate training engagements.

Go-to-market motion1 record

Distribution channels4 records

Marketing channels7 records

Core offering

MORGENSTERN consecom GmbH is a German consulting firm delivering individual advisory services in data protection (DS-GVO, BDSG), IT security, and IT law, including external DPO provision, ISMS implementation, penetration testing, and incident response. The firm complements its consulting practice with a proprietary Learning Management System (LMS) and Data Protection Management System (DPMS) platform that powers interactive e-learning, phishing simulations, video-on-demand training, and centralized compliance management for DS-GVO, NIS-2, and KI-Verordnung obligations.

Product overview

MORGENSTERN consecom is a consulting company specializing in data protection, IT law, and IT security. The company offers a portfolio of advisory services including Data Protection Consulting, Information Security Consulting, and Penetration Testing services, complemented by technology products. The core technology product is the MORGENSTERN Data Protection Management System (DPMS) — a compliance management platform that provides centralized oversight of regulatory requirements including DS-GVO, NIS-2, and AI Regulation. Additionally, MORGENSTERN operates the MORGENSTERN Academy and E-Learning platform offering interactive e-learnings, phishing simulations, and video-on-demand training courses through a modern Learning Management System (LMS). Service Packages provide curated combinations of consulting services tailored to client needs.

Differentiator

Problem solved

Functional benefit

Products and services

• MORGENSTERN Data Protection Management System (DPMS) A platform solution providing continuous overview and management of compliance obligations across DS-GVO, NIS-2, KI-Verordnung and other digital regulations, targeting organizations seeking transparency and efficiency in regulatory compliance management.
• MORGENSTERN E-Learning Platform (LMS) A modern Learning Management System providing interactive e-learnings, phishing simulations, microlearning, video-on-demand, expert Q&A sessions, and role-based learning paths for corporate security awareness and compliance training, with a customizable interface and integrated reporting dashboard.
• Video-on-Demand Training Format Interactive video courses with personal expert accompaniment, featuring a curated video library ranging from basics to deep dives, integrated quiz questions, and expert Q&A sessions for corporate learners.
• Data Protection Consulting Individual consulting services covering all aspects of data protection (Datenschutz) for businesses, including DS-GVO, BDSG, external DPO provision, NIS-2 implementation, and tailored solutions for organizations requiring data protection expertise.
• Information Security Consulting Advisory services covering IT Security, Cyber Security and IT-Security, distinguishing between these related but distinct fields and their respective applications, including IT security strategy, ISMS implementation, and incident response.
• Penetration Testing / Ethical Hacker Services Security testing services including penetration testing, vulnerability analysis, and ethical hacking to identify and address security weaknesses in client systems.

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

Feature2 records

Partnerships

Three partnerships are on record, tiered core and minor.

• MORGENSTERN legalcoreStrategic or Co-development PartnerMORGENSTERN legal (morgenstern-legal.com) is part of the MORGENSTERN Netzwerk alongside MORGENSTERN privacy and MORGENSTERN Academy. It provides IT law and legal services complementary to the data protection and IT security consulting offered by MORGENSTERN privacy.
• MORGENSTERN AcademycoreStrategic or Co-development PartnerMORGENSTERN Academy (morgenstern-academy.com) is part of the MORGENSTERN Netzwerk and focuses on professional development and training services. It collaborates with MORGENSTERN privacy on seminar and training delivery, providing a distribution channel for educational content.
• LinkedIn (Microsoft)minorGTM or Marketing PartnerMORGENSTERN uses LinkedIn Campaign Manager for paid advertising and marketing campaigns. The platform enables targeting by audience parameters such as company size and industry to promote content, services, and events to professional audiences.

Scale indicators1 record

Recent moves6 records

Expansion highlights6 records

Direct peers

• Datakontext: German data protection and information security consulting firm offering external DPO, DS-GVO, and IT security advisory; comparable mid-sized boutique peer serving DACH SMEs.
• Datenschutz Experte: German data protection consultancy providing external DPO services and DS-GVO advisory; highly comparable boutique competitor in MORGENSTERN's core data protection consulting lane.
• SoSafe: German security awareness and phishing simulation SaaS vendor; competes with MORGENSTERN's Awareness-Kampagnen and LMS offering in DACH, serving mid-market with subscription-based security training.
• Aware7: Cologne-based cybersecurity awareness training and phishing simulation provider; comparable as a regional niche player offering e-learning/LMS-style awareness services overlapping MORGENSTERN Academy.
• IT-Recht Kanzlei (Pohlmann & Company): German IT law firm specializing in data protection, IT security law, and e-commerce legal services; comparable as a sister-discipline specialist in the MORGENSTERN Netzwerk's adjacent legal lane.

Emerging players

• Hornetsecurity: German-headquartered cloud security and security awareness vendor offering phishing simulation and compliance training as part of a broader security SaaS portfolio; regional competitor in DACH awareness market.
• conplement AG: German IT security consultancy offering managed security, vulnerability management, and IT compliance services; comparable as a mid-sized DACH security services peer.

Broad incumbents

• KPMG Germany (Cyber & Privacy Practice): Big 4 advisory practice offering DS-GVO/NIS-2 consulting, ISO 27001, and managed security services in Germany; broader incumbent serving enterprise clients with overlapping data protection and IT security offerings.
• KnowBe4: Global security awareness training and phishing simulation platform; competes in the awareness training category with broader content library and international scale than MORGENSTERN's LMS.
• TÜV SÜD (Cyber Security Services): TÜV SÜD delivers ISO 27001 audits, penetration testing, and information security certifications; comparable as a broad established German testing and certification services provider.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/morgenstern-consecom-gmbh
• Facebookfacebook.com/100063572571377

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Subsidiaries3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about MORGENSTERN consecom