Developer docs
API playgroundTry for free, no card

Search company profiles

Lazarus

Full company profile

uuid000ocqv

Namestring
Lazarus
Legal namestring
LAZARUS TECHNOLOGY, S.L.
Websiteurl
lazarus.es
Company typeenum
Private
Founded yearint
2004
Descriptiontext

Lazarus Technology S.L. is a Spain-headquartered cybersecurity and digital forensics firm founded in 2004 that provides integrated services spanning preventive cybersecurity, 24/7 SOC monitoring, digital surveillance (web/deep/dark), incident response, computer forensics under judicial standards, and ransomware data recovery. The company operates a unified platform built around proprietary technology including Track Alert® (cyber threat intelligence scoring), Deep Infusion® (deep/dark web digital identity surveillance), a specialized data recovery laboratory, and a SOC with SIEM integration and L1/L2/L3 analyst tiers. It is ISO 27001 and ISO 9001 certified and GDPR-compliant, and holds the Lazarus Recovery Laboratory for RAID, SSD, and encrypted-system recovery.

The company monetizes through a mix of multi-year enterprise contracts, professional services engagements (forensics, incident response, data recovery), and subscription-based cyber policy services distributed through insurance and legal channel partners. Its go-to-market is sales-led and channel-driven, with services delivered through regional offices in Spain, Portugal, Brazil, and Colombia. Lazarus pioneered the cyber insurance policy service category for SMEs in 2013 and has led the development of cyber insurance standards for SMEs and individuals since 2020, positioning itself as the structural technology partner for the Iberian and broader European/LATAM insurance cyber market.

Customer concentration is highest in the insurance vertical, with named relationships spanning global reinsurers (Munich RE, Gen Re), primary carriers (Mapfre, Zurich, Generali, Beazley, QBE, HDI, Fidelidade, Telefónica Seguros), tier-1 law firms (Hogan Lovells, Clyde & Co, DAC Beachcroft, Lener), consulting (Deloitte), large corporates (Amazon, Bankinter, El Corte Inglés, Media Markt, Alcampo), and government (Policía Nacional). Lazarus claims 3 million+ clients worldwide and 13 million+ people protected across Europe, with 700+ cyberattacks and 100K+ cyber tickets managed annually, supported by 100+ employees across four countries. The company is privately held and bootstrapped, with no disclosed institutional funding rounds.

Short descriptiontext

Lazarus Technology is a Spain-based cybersecurity and digital forensics firm founded in 2004, delivering SOC monitoring, incident response, forensic investigation, and proprietary cyber threat intelligence (Track Alert®, Deep Infusion®) to insurers, law firms, corporates, and government across Europe and Latin America.

Operating statusenum
Operating
Ownership categoryenum
Headcount rangeband
11–50
akta.pro rankint
HeadquartersMadrid, Spain
HQ citystring
Madrid
HQ countrystring
Spain
HQ regionstring
Europe
Markets served

Serves global market

Offices4 records

Each record includes

City, Country, Type, Description, Source

Keyword5 values
cybersecurity services, digital forensics, incident response, data recovery, cyber insurance
Industry4 codes
1Security Incident Response (IR) & Digital Forensics Services
CodeBPAEADAIPrimaryYes
2Digital Forensics & Evidence Collection (Endpoint, Mobile, Cloud)
CodeBPAKAHACPrimaryNo
3eDiscovery, Litigation Support & Expert Witness Services
CodeBPAKAHADPrimaryNo
4Fraud, Cybercrime Investigations & Brand/Dark Web Monitoring
CodeBPAKAHAOPrimaryNo
NAICS code2 codes
  • Investigation and Security Services5616
  • Security Systems Services56162
SIC code1 code
  • Services-Computer Programming, Data Processing, Etc.7370
Product category
Cybersecurity Services
Social media profiles2 records
GTM motion2 records

Each record includes

Type, Description, Source

Revenue model4 records
1Cybersecurity Services
TypeSubscription Recurring
Description

Comprehensive cybersecurity services including preventive services, incident response, digital surveillance, forensics, and SOC monitoring provided to insurance companies, law firms, and enterprise clients

lazarus.es
2Forensic Services
TypeProfessional Services
Description

Computer forensic investigation services with legal weight, including analysis of physical, virtual and cloud devices, preservation and digital chain of custody, and expert reports for court

lazarus.es
3Data Recovery Services
TypeProfessional Services
Description

Data recovery from systems affected by ransomware, logical corruption or sabotage, including reverse engineering on malware

lazarus.es
4Cyber Policy Services
TypeSubscription Recurring
Description

Services for cyber insurance policies for SMEs and individuals, developed as standards for the insurance sector

lazarus.es
Marketing channels4 records

Each record includes

Title, Type, Stage, Description, Source

Distribution channels3 records

Each record includes

Title, Type, Scope, Target buyer, Description, Source

Cost components5 values
Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Pricing details2 tiers
1Enterprise cybersecurity services
ModelOtherBilling cadenceMulti-year contract
Notes

Custom pricing based on organizational needs and scope of services

lazarus.es
2Insurance sector services
ModelSubscriptionBilling cadenceAnnual
Notes

Subscription-based services for cyber insurance policy holders

lazarus.es
GTM typeB2B
B2B
Offering typeServices
Services
Core offering1 text field

Lazarus delivers two integrated service lines: Forensic services (computer forensics under judicial standards for criminal, labor, commercial, and insurance processes, including chain-of-custody preservation and expert reports with court ratification) and Cyber services (preventive cybersecurity, digital surveillance across web/deep/dark, mass cyber scoring, incident response, data recovery/reversing, reputational control, and 24/7 SOC monitoring). These services are wrapped around the Track Alert® and Deep Infusion® proprietary platforms and are sold primarily to insurance carriers, law firms, and large enterprises, with related cyber insurance policy services for SMEs and individuals distributed through insurance partners.

Differentiator
Functional benefit
Problem solved
Quantifiable outcome1 of 4 values shown
  • 700+ cyberattacks managed per year
+3 more records
Product overview1 text field

Lazarus offers a unified cybersecurity platform combining forensic and cyber services. The core offerings include Forensic services (computer forensics under judicial standards) and Cyber services (industrialized cybersecurity). Supporting these are service modules including Preventive Cybersecurity Services, Digital Surveillance (WEB/DEEP/DARK), Mass Cyber Scoring, Incident Response, Data Recovery/Reversing, Reputational Control, and 24/7 SOC Security Monitoring. Proprietary products Track Alert® (CTI scoring alerts) and Deep Infusion® (digital identity protection) extend the platform capabilities.

Product and service5 records
1Forensic Services
CategoryDigital Forensics
Description

Computer forensic services under judicial standards, including analysis of physical, virtual and cloud devices, preservation of digital chain of custody, and issuance of expert reports with court ratification. Used by law firms, insurance companies, and government/law enforcement for criminal, labor, commercial and insurance processes.

2Cyber Services
CategoryCybersecurity Services
Description

Industrialized cybersecurity services making complex technological services accessible, delivered through proprietary development and a technology laboratory. Covers preventive cybersecurity, digital surveillance, mass cyber scoring, incident response, reputational control, data recovery/reversing, and 24/7 SOC monitoring for insurance carriers, law firms, and large enterprises.

3Track Alert®
CategoryThreat Intelligence and Digital Surveillance
Description

Proprietary alert system and external scoring system (CTI) for digital surveillance, monitoring and notifying about digital risk patterns and threat exposure across organizations.

4Deep Infusion®
CategoryDigital Identity Protection
Description

Protected and monitored digital identity service integrated with legal and HR processes for comprehensive digital surveillance across the deep web and dark web.

5Cyber Policy Services
CategoryCyber Insurance Services
Description

Subscription-based cyber insurance policy services distributed through insurance carriers, developed as standards for the insurance sector to provide coverage and risk assessment for SMEs and individuals.

Scale indicator10 records

Each record includes

Type, Value, Description, Source

Partnership13 partners
Strategic tierCoreTypeChannel Partner/ Reseller/ Distributor
Description

Insurance and legal services firm that distributes Lazarus cyber policy services to their clients

Strategic tierCoreTypeChannel Partner/ Reseller/ Distributor
Description

International law firm that partners with Lazarus for forensic investigation services

Strategic tierFlagshipTypeChannel Partner/ Reseller/ Distributor
Description

Global reinsurance leader partnering with Lazarus for cyber risk assessment and policy services

Strategic tierCoreTypeChannel Partner/ Reseller/ Distributor
Description

General reinsurance provider working with Lazarus on cyber insurance solutions

Strategic tierCoreTypeChannel Partner/ Reseller/ Distributor
Description

Law firm providing forensic investigation services through Lazarus partnership

Strategic tierCoreTypeChannel Partner/ Reseller/ Distributor
Description

Global law firm partnering with Lazarus for legal technology and forensic services

Strategic tierCoreTypeChannel Partner/ Reseller/ Distributor
Description

Legal services firm collaborating with Lazarus on forensic investigations

Strategic tierCoreTypeImplementation/ SI/ Consulting Partner
Description

Professional services firm working with Lazarus on cybersecurity consulting engagements

Strategic tierFlagshipTypeStrategic or Co-development Partner
Description

Spanish National Police collaborating with Lazarus on forensic investigations and cybersecurity

Strategic tierCoreTypeChannel Partner/ Reseller/ Distributor
Description

Insurance company distributing Lazarus cyber policy services

Strategic tierFlagshipTypeChannel Partner/ Reseller/ Distributor
Description

Major Spanish insurer providing cyber policies powered by Lazarus services

Strategic tierCoreTypeChannel Partner/ Reseller/ Distributor
Description

Global insurance company partnering for cyber risk solutions

Strategic tierCoreTypeChannel Partner/ Reseller/ Distributor
Description

Telecom company's insurance division distributing Lazarus cyber services

Recent move4 records

Each record includes

Date, Type, Title, Description, Source

Expansion highlight5 records

Each record includes

Type, Description

Peers10 records
TypeDirect peer
Description

S21sec is a Spain- and Portugal-based cybersecurity services firm offering managed detection, incident response, and cyber-intelligence, with comparable size and Iberian market focus to Lazarus. It is the closest direct competitor in geography, service mix, and customer segment (insurance, large enterprise, public sector).

TypeDirect peer
Description

Innotec Security is a Spanish cybersecurity services company providing ethical hacking, managed security, incident response, and digital forensics — directly overlapping with Lazarus's core service portfolio and Spanish enterprise/government customer base.

TypeDirect peer
Description

Grupo SIA is a Spanish IT security and cybersecurity services firm serving large enterprises and public administrations, with a similar focus on managed security and cyber risk services in the Iberian market.

TypeBroad incumbent
Description

Telefónica Tech is the technology and cybersecurity arm of Telefónica, offering SOC, incident response, and managed security services across Iberia and LATAM. As a broad incumbent with telecom-scale distribution, it competes for the same enterprise and public-sector accounts but across a much wider portfolio that includes cloud and connectivity.

TypeRegional player
Description

Prosegur's cybersecurity division provides managed security, SOC, and incident response services with strong presence across Iberia and LATAM. Overlap with Lazarus is significant in managed security services, though Prosegur's heritage as a physical-security group differentiates its go-to-market.

TypeDirect peer
Description

Kudelski Security is a Switzerland-headquartered cybersecurity services firm offering managed detection and response, incident response, and cyber risk advisory — comparable in size, services mix, and European enterprise/government customer profile to Lazarus.

TypeDirect peer
Description

NCC Group is a UK-listed cybersecurity and software resilience firm with strong incident response, digital forensics, and managed detection capabilities serving European enterprise and government clients — comparable service breadth and mid-market European positioning.

TypeBroad incumbent
Description

Mandiant, now part of Google Cloud, is a global leader in incident response, digital forensics, and threat intelligence. While Lazarus operates at a far smaller scale, Mandiant's service catalog and target customers (large enterprises, legal counsel, governments) overlap substantially with Lazarus's forensic and IR offerings.

TypeBroad incumbent
Description

CrowdStrike is a global cybersecurity platform with growing incident response, SOC, and threat intelligence services. As a broad incumbent, it competes with Lazarus's MSSP/IR offerings for enterprise customers and increasingly bundles services that overlap with managed detection and response.

TypeEmerging player
Description

Coalition is a cyber insurance and proactive security services provider combining cyber underwriting with embedded security monitoring and incident response — closely paralleling Lazarus's insurance-anchored cyber services model, though currently US/UK-focused rather than Iberian.

Market position
Strengths5 records

Each record includes

Headline, Details, Source

Weaknesses5 records

Each record includes

Headline, Details, Source

Competitive moat6 records

Each record includes

Type, Details

Key risks6 records

Each record includes

Headline, Details, Source

Key highlights7 records

Each record includes

Headline, Details, Source

Customer concentration

Classification, Details

Named customers22 records

Each record includes

Name, Industry, Type, Use case, Source, UUID

Segment5 records

Each record includes

Title, Type, Primary, Description, Pain point addressed, Use case, Source

Ideal customer profile4 records

Each record includes

Profile, Firmographic size, Sales motion, Sales cycle length, Buying structure, Purchase trigger, Buyer persona, Geography, Industry vertical, Primary use case, Description, Pain points, Evidence proof points, Target buyer

Technology focused
Yes
API detail
Has APIbool
No

Docs URL, Description

AI maturity
App detail

Has app

Feature4 records

Each record includes

Title, Differentiator, Description, Source

Core technology
Revenue estimate
Valuation estimate
Number of profiles
No data
Compliance3 records

Each record includes

Name, Class, Description

Funding overview

Funding stage, Last funding date, Total funding USD

Funding rounds

Each record includes

Round, Amount USD, Date, Pre money valuation, Total investors, Investors, News

Investors

Each record includes

Name, Type, Date of entry, Rounds participated, Website

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Each record includes

Name, Acquisition type, Announced date, Completed date, Status, Website, News

Investment

Each record includes

Name, Round, Announced date, Lead investor, Website, News

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Lazarus

Cybersecurity Serviceslazarus.es

Lazarus Technology is a Spain-based cybersecurity and digital forensics firm founded in 2004, delivering SOC monitoring, incident response, forensic investigation, and proprietary cyber threat intelligence (Track Alert®, Deep Infusion®) to insurers, law firms, corporates, and government across Europe and Latin America.

What Lazarus does

Lazarus Technology S.L. is a Spain-headquartered cybersecurity and digital forensics firm founded in 2004 that provides integrated services spanning preventive cybersecurity, 24/7 SOC monitoring, digital surveillance (web/deep/dark), incident response, computer forensics under judicial standards, and ransomware data recovery. The company operates a unified platform built around proprietary technology including Track Alert® (cyber threat intelligence scoring), Deep Infusion® (deep/dark web digital identity surveillance), a specialized data recovery laboratory, and a SOC with SIEM integration and L1/L2/L3 analyst tiers. It is ISO 27001 and ISO 9001 certified and GDPR-compliant, and holds the Lazarus Recovery Laboratory for RAID, SSD, and encrypted-system recovery.

The company monetizes through a mix of multi-year enterprise contracts, professional services engagements (forensics, incident response, data recovery), and subscription-based cyber policy services distributed through insurance and legal channel partners. Its go-to-market is sales-led and channel-driven, with services delivered through regional offices in Spain, Portugal, Brazil, and Colombia. Lazarus pioneered the cyber insurance policy service category for SMEs in 2013 and has led the development of cyber insurance standards for SMEs and individuals since 2020, positioning itself as the structural technology partner for the Iberian and broader European/LATAM insurance cyber market.

Customer concentration is highest in the insurance vertical, with named relationships spanning global reinsurers (Munich RE, Gen Re), primary carriers (Mapfre, Zurich, Generali, Beazley, QBE, HDI, Fidelidade, Telefónica Seguros), tier-1 law firms (Hogan Lovells, Clyde & Co, DAC Beachcroft, Lener), consulting (Deloitte), large corporates (Amazon, Bankinter, El Corte Inglés, Media Markt, Alcampo), and government (Policía Nacional). Lazarus claims 3 million+ clients worldwide and 13 million+ people protected across Europe, with 700+ cyberattacks and 100K+ cyber tickets managed annually, supported by 100+ employees across four countries. The company is privately held and bootstrapped, with no disclosed institutional funding rounds.

Lazarus firmographics

Firmographics
Name
Lazarus
Legal name
LAZARUS TECHNOLOGY, S.L.
Website
https://lazarus.es
Company type
Private
Founded year
2004
Operating status
Operating
Headcount range
11–50 employees
Short description
Lazarus Technology is a Spain-based cybersecurity and digital forensics firm founded in 2004, delivering SOC monitoring, incident response, forensic investigation, and proprietary cyber threat intelligence (Track Alert®, Deep Infusion®) to insurers, law firms, corporates, and government across Europe and Latin America.
Ownership category
akta.pro rank

Lazarus industry classification

Industry
Product category
Cybersecurity Services
NAICS
Investigation and Security Services (5616), Security Systems Services (56162)
SIC
Services-Computer Programming, Data Processing, Etc. (7370)
akta.pro primary industry
Security Incident Response (IR) & Digital Forensics Services (BPAEADAI)
akta.pro secondary industries
Digital Forensics & Evidence Collection (Endpoint, Mobile, Cloud) (BPAKAHAC), eDiscovery, Litigation Support & Expert Witness Services (BPAKAHAD), Fraud, Cybercrime Investigations & Brand/Dark Web Monitoring (BPAKAHAO)

Keywords

  • Cybersecurity services
  • Digital forensics
  • Incident response
  • Data recovery
  • Cyber insurance

Where Lazarus is headquartered

Location

Headquarters

HQ city
Madrid
HQ country
Spain
HQ region
Europe

Offices4 records

Markets served

Lazarus business model

Business model
GTM type
B2B
Offering type
Services
Cost components
Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

  1. Cybersecurity Services: Comprehensive cybersecurity services including preventive services, incident response, digital surveillance, forensics, and SOC monitoring provided to insurance companies, law firms, and enterprise clients
  2. Forensic Services: Computer forensic investigation services with legal weight, including analysis of physical, virtual and cloud devices, preservation and digital chain of custody, and expert reports for court
  3. Data Recovery Services: Data recovery from systems affected by ransomware, logical corruption or sabotage, including reverse engineering on malware
  4. Cyber Policy Services: Services for cyber insurance policies for SMEs and individuals, developed as standards for the insurance sector

Pricing tiers

ModelBillingPrice
OtherMulti-year contractEnterprise cybersecurity services
SubscriptionAnnualInsurance sector services

Go-to-market motion2 records

Distribution channels3 records

Marketing channels4 records

Lazarus product offering

Product offering

Core offering

Lazarus delivers two integrated service lines: Forensic services (computer forensics under judicial standards for criminal, labor, commercial, and insurance processes, including chain-of-custody preservation and expert reports with court ratification) and Cyber services (preventive cybersecurity, digital surveillance across web/deep/dark, mass cyber scoring, incident response, data recovery/reversing, reputational control, and 24/7 SOC monitoring). These services are wrapped around the Track Alert® and Deep Infusion® proprietary platforms and are sold primarily to insurance carriers, law firms, and large enterprises, with related cyber insurance policy services for SMEs and individuals distributed through insurance partners.

Product overview

Lazarus offers a unified cybersecurity platform combining forensic and cyber services. The core offerings include Forensic services (computer forensics under judicial standards) and Cyber services (industrialized cybersecurity). Supporting these are service modules including Preventive Cybersecurity Services, Digital Surveillance (WEB/DEEP/DARK), Mass Cyber Scoring, Incident Response, Data Recovery/Reversing, Reputational Control, and 24/7 SOC Security Monitoring. Proprietary products Track Alert® (CTI scoring alerts) and Deep Infusion® (digital identity protection) extend the platform capabilities.

Differentiator

Problem solved

Functional benefit

Products and services

  • Forensic Services Computer forensic services under judicial standards, including analysis of physical, virtual and cloud devices, preservation of digital chain of custody, and issuance of expert reports with court ratification. Used by law firms, insurance companies, and government/law enforcement for criminal, labor, commercial and insurance processes.
  • Cyber Services Industrialized cybersecurity services making complex technological services accessible, delivered through proprietary development and a technology laboratory. Covers preventive cybersecurity, digital surveillance, mass cyber scoring, incident response, reputational control, data recovery/reversing, and 24/7 SOC monitoring for insurance carriers, law firms, and large enterprises.
  • Track Alert® Proprietary alert system and external scoring system (CTI) for digital surveillance, monitoring and notifying about digital risk patterns and threat exposure across organizations.
  • Deep Infusion® Protected and monitored digital identity service integrated with legal and HR processes for comprehensive digital surveillance across the deep web and dark web.
  • Cyber Policy Services Subscription-based cyber insurance policy services distributed through insurance carriers, developed as standards for the insurance sector to provide coverage and risk assessment for SMEs and individuals.

Quantifiable outcome

  • 700+ cyberattacks managed per year
  • +3 more outcomes

Companies that use Lazarus

Customer profile

Named customers22 records

Segments5 records

Ideal customer profiles4 records

Lazarus technology and API

Technology

Technology focussed Yes

API detail

Has API
No
API docs
API detail

Core technology

AI maturity

App detail

Feature4 records

Lazarus partnerships and signals

Strategic signal

Partnerships

13 partnerships are on record, tiered core and flagship.

  • Ceca Magán AbogadoscoreChannel Partner/ Reseller/ DistributorInsurance and legal services firm that distributes Lazarus cyber policy services to their clients
  • DAC BeachcroftcoreChannel Partner/ Reseller/ DistributorInternational law firm that partners with Lazarus for forensic investigation services
  • Munich REflagshipChannel Partner/ Reseller/ DistributorGlobal reinsurance leader partnering with Lazarus for cyber risk assessment and policy services
  • Gen RecoreChannel Partner/ Reseller/ DistributorGeneral reinsurance provider working with Lazarus on cyber insurance solutions
  • Clyde & CocoreChannel Partner/ Reseller/ DistributorLaw firm providing forensic investigation services through Lazarus partnership
  • Hogan LovellscoreChannel Partner/ Reseller/ DistributorGlobal law firm partnering with Lazarus for legal technology and forensic services
  • LenercoreChannel Partner/ Reseller/ DistributorLegal services firm collaborating with Lazarus on forensic investigations
  • DeloittecoreImplementation/ SI/ Consulting PartnerProfessional services firm working with Lazarus on cybersecurity consulting engagements
  • Policía NacionalflagshipStrategic or Co-development PartnerSpanish National Police collaborating with Lazarus on forensic investigations and cybersecurity
  • GeneralicoreChannel Partner/ Reseller/ DistributorInsurance company distributing Lazarus cyber policy services
  • MapfreflagshipChannel Partner/ Reseller/ DistributorMajor Spanish insurer providing cyber policies powered by Lazarus services
  • ZurichcoreChannel Partner/ Reseller/ DistributorGlobal insurance company partnering for cyber risk solutions
  • Telefónica SeguroscoreChannel Partner/ Reseller/ DistributorTelecom company's insurance division distributing Lazarus cyber services

Scale indicators10 records

Recent moves4 records

Expansion highlights5 records

Lazarus competitors and assessment

Company assessment

Direct peers

  • S21sec: S21sec is a Spain- and Portugal-based cybersecurity services firm offering managed detection, incident response, and cyber-intelligence, with comparable size and Iberian market focus to Lazarus. It is the closest direct competitor in geography, service mix, and customer segment (insurance, large enterprise, public sector).
  • Innotec Security: Innotec Security is a Spanish cybersecurity services company providing ethical hacking, managed security, incident response, and digital forensics — directly overlapping with Lazarus's core service portfolio and Spanish enterprise/government customer base.
  • Grupo SIA: Grupo SIA is a Spanish IT security and cybersecurity services firm serving large enterprises and public administrations, with a similar focus on managed security and cyber risk services in the Iberian market.
  • Kudelski Security: Kudelski Security is a Switzerland-headquartered cybersecurity services firm offering managed detection and response, incident response, and cyber risk advisory — comparable in size, services mix, and European enterprise/government customer profile to Lazarus.
  • NCC Group: NCC Group is a UK-listed cybersecurity and software resilience firm with strong incident response, digital forensics, and managed detection capabilities serving European enterprise and government clients — comparable service breadth and mid-market European positioning.

Broad incumbents

  • Telefónica Tech: Telefónica Tech is the technology and cybersecurity arm of Telefónica, offering SOC, incident response, and managed security services across Iberia and LATAM. As a broad incumbent with telecom-scale distribution, it competes for the same enterprise and public-sector accounts but across a much wider portfolio that includes cloud and connectivity.
  • Mandiant (Google Cloud): Mandiant, now part of Google Cloud, is a global leader in incident response, digital forensics, and threat intelligence. While Lazarus operates at a far smaller scale, Mandiant's service catalog and target customers (large enterprises, legal counsel, governments) overlap substantially with Lazarus's forensic and IR offerings.
  • CrowdStrike: CrowdStrike is a global cybersecurity platform with growing incident response, SOC, and threat intelligence services. As a broad incumbent, it competes with Lazarus's MSSP/IR offerings for enterprise customers and increasingly bundles services that overlap with managed detection and response.

Regional players

  • Prosegur Ciberseguridad: Prosegur's cybersecurity division provides managed security, SOC, and incident response services with strong presence across Iberia and LATAM. Overlap with Lazarus is significant in managed security services, though Prosegur's heritage as a physical-security group differentiates its go-to-market.

Emerging players

  • Coalition: Coalition is a cyber insurance and proactive security services provider combining cyber underwriting with embedded security monitoring and incident response — closely paralleling Lazarus's insurance-anchored cyber services model, though currently US/UK-focused rather than Iberian.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

Lazarus social profiles

Digital presence

Lazarus compliance and trust

Trust signal

Compliance3 records

Lazarus financial estimates

Financial estimate

Revenue estimate

Valuation estimate

Lazarus leadership team

Management profile

Number of profiles

Lazarus funding detail

Funding detail

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

Lazarus M&A and investment

M&A and investment

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Lazarus

What does Lazarus do?

Lazarus delivers two integrated service lines: Forensic services (computer forensics under judicial standards for criminal, labor, commercial, and insurance processes, including chain-of-custody preservation and expert reports with court ratification) and Cyber services (preventive cybersecurity, digital surveillance across web/deep/dark, mass cyber scoring, incident response, data recovery/reversing, reputational control, and 24/7 SOC monitoring). These services are wrapped around the Track Alert® and Deep Infusion® proprietary platforms and are sold primarily to insurance carriers, law firms, and large enterprises, with related cyber insurance policy services for SMEs and individuals distributed through insurance partners.

Is Lazarus a public or private company?

Lazarus is a private company. It is classified as founder individual operated bootstrapped and is currently operating.

When was Lazarus founded?

Lazarus was founded in 2004. It employs 11 to 50 people.

Where is Lazarus based?

Lazarus is headquartered in Madrid, Spain, in the Europe region.

How does Lazarus make money?

Four revenue lines are on record. Cybersecurity Services are the primary driver. The others are forensic Services, data Recovery Services and cyber Policy Services.

Who are Lazarus's main competitors?

Direct peers on record are S21sec, Innotec Security, Grupo SIA, Kudelski Security and NCC Group. Broad incumbents are Telefónica Tech, Mandiant (Google Cloud) and CrowdStrike. Prosegur Ciberseguridad is listed as a regional player. Coalition is listed as an emerging player.

Does Lazarus have an API?

No public API is recorded for Lazarus.

What industry is Lazarus in?

Lazarus's product category is Cybersecurity Services. Its primary akta.pro industry code is BPAEADAI, Security Incident Response (IR) & Digital Forensics Services, with a secondary code of BPAKAHAC, Digital Forensics & Evidence Collection (Endpoint, Mobile, Cloud). Its NAICS code is 5616 and its SIC code is 7370.

Unlock the full company data

50 free credits on sign-up, no credit card required.

Contact sales
Live signals
Cyber PressHackers Weaponize Job Offers With Zero-Day Exploit to Gain Silent System AccessLazarus group's Operation Dream Job now exploits a zero-day flaw in Microsoft's AFD.sys driver to gain kernel access, targeting defense firms in Europe and India. The campaign uses fake job offers and a new FudModule variant, with victims in France, Germany, Brazil, and India.CheckpointWhen a Job Offer Becomes a Zero-Day AttackCheck Point Research identified a new wave of the 'Operation Dream Job' cyber campaign affiliated with the DPRK-linked Lazarus group, which targets defense and aerospace organizations in Europe and India using spear-phishing job offers. The attackers exploit zero-day vulnerabilities in Microsoft's AFD.sys driver and Roundcube webmail servers to deploy kernel-mode rootkits and custom backdoors like 'Troy'. Following responsible disclosure by Check Point, Microsoft released patches for the exploited vulnerabilities during its August Patch Tuesday updates.CrowdFund InsiderDeFi Hacks Continue to Highlight Weaknesses in Crypto Ecosystem Security : AnalysisMetaMask's ecosystem security report documented over $570 million in losses across three major DeFi hacks in a single month. The largest breach hit KelpDAO on April 18 with approximately $290 million stolen, believed linked to North Korea's Lazarus Group, though $71 million was partially recovered through asset freezes coordinated by Arbitrum's Security Council and law enforcement. Additional threats included a malicious Axios library update targeting developers and emerging concerns about AI models discovering zero-day vulnerabilities, underscoring an accelerating arms race between security defenders and increasingly sophisticated attackers.KoreatimesN. Korea shoots back at hacking allegationsNorth Korea on Sunday dismissed international hacking allegations through its state-run Korean Central News Agency, accusing the United States of spreading false information and building a politically motivated narrative about a DPRK cyber threat. The foreign ministry spokesperson called it unreasonable for the U.S. to claim victimhood while conducting indiscriminate cyber attacks on other countries. The Lazarus hacking group, which has been repeatedly accused of launching cyberattacks, was most recently linked to an attack on the decentralized finance platform KelpDAO last month.01net.comUn virus nord-coréen se cache dans la colonne vertébrale des cryptosResearchers from Ransom-ISAC, working with MalwareBytes and Crystal Intelligence, have discovered a new malware called Omnistealer embedded within public blockchain transactions on networks including TRON, Aptos, and Binance Smart Chain, deployed by the North Korean Lazarus hacking group. The malware exploits blockchain's immutability to create an indestructible command-and-control infrastructure that cannot be dismantled by authorities, as attempting to delete data would require controlling over 50% of the network's computing power. Omnistealer targets over 60 crypto wallets, password managers, browsers, and cloud storage accounts, with investigations revealing that more than 300,000 credentials have potentially been compromised through fake developer job offers on LinkedIn and Upwork that lead to malicious GitHub repositories.The Hacker NewsLazarus Campaign Plants Malicious Packages in npm and PyPI EcosystemsCybersecurity researchers identified a coordinated campaign by the North Korea-linked Lazarus Group to distribute malicious packages in npm and PyPI ecosystems through fake recruitment offers. The attack, active since May 2025, uses social engineering to trick developers into installing malware that deploys remote access trojans for data theft and financial gain. This follows similar sophisticated supply chain attacks involving other malicious npm packages like 'duer-js' designed to steal credentials and extort cryptocurrency payments.SecurityNorth Korean Lazarus Group Now Working With Medusa RansomwareNorth Korean state-backed Lazarus Group, specifically the Stonefly sub-group, is now deploying Medusa ransomware in extortion attacks against the U.S. healthcare sector, with evidence uncovered by Symantec and Carbon Black Threat Hunter Team showing attacks on multiple healthcare and non-profit organizations in the U.S. since November 2025. The average ransom demand during this period was $260,000, with over 366 total attacks claimed by Medusa affiliates. The group, linked to North Korea's Reconnaissance General Bureau, appears to be using ransomware proceeds to fund espionage activities against defense, technology, and government sectors in the U.S., Taiwan, and South Korea.GlobeNewswireNorth Korean Lazarus group targets the drone sector in Europe, likely for espionage, ESET Research discoversESET researchers observed Lazarus targeting three European defense firms, including UAV developers, using ScoringMathTea RAT. The attacks likely aim to steal proprietary information and manufacturing know-how, possibly for North Korea's drone program. The group's predictable modus operandi may aid detection.