aramido
aramido is a privately held, founder-owned IT security consulting firm based in Karlsruhe, Germany, delivering professional services in penetration testing, security consulting, incident response, and developer security training to companies, public agencies, and SaaS operators across the DACH region.
- Company typePrivate
- Founded2015
- HeadquartersKarlsruhe, Germany
- Headcount11–50
- GTM typeB2B
- OfferingServices
What aramido does
aramido GmbH is a privately held, founder-owned IT security consulting firm headquartered in Karlsruhe, Germany, founded in 2015 by Armin Harbrecht and Andreas Sperber. The firm delivers professional services across four core lines: IT security consulting (including IT-Sicherheitskonzept, Security by Design, and implementation support), security testing (vulnerability scanning and manual penetration testing), IT emergency management and incident response, and ongoing vulnerability management. It also runs the aramido Academy, which provides instructor-led training such as the multi-module PHP Security Training program and live hacking demonstrations.
The company's portfolio is built on human-delivered consulting and testing rather than packaged software products; revenue is generated through per-engagement professional-services fees quoted upon request, supported by a free initial consultation funnel. Customer acquisition is sales-led, supplemented by event-driven demand generation (notably the Bunte Nacht der Digitalisierung in Karlsruhe) and a community-led content engine (a blog with 350+ articles and a presence on LinkedIn, Xing, Twitter/X, and Mastodon). The target customer base is horizontal across DACH, encompassing companies, freelancers, government agencies, associations, and SaaS/webshop operators, with growing emphasis on NIS-2 compliance advisory. aramido is bootstrapped, with no disclosed external funding, and is currently scaling its physical footprint with an additional ~450 m² of office space added in 2026.
aramido firmographics
Firmographics- Name
- aramido
- Legal name
- aramido GmbH
- Website
- https://aramido.de
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- aramido is a privately held, founder-owned IT security consulting firm based in Karlsruhe, Germany, delivering professional services in penetration testing, security consulting, incident response, and developer security training to companies, public agencies, and SaaS operators across the DACH region.
- Ownership category
- akta.pro rank
aramido industry classification
Industry- Product category
- IT Security Consulting Services
- NAICS
- Management, Scientific, and Technical Consulting Services (5416), Other Scientific and Technical Consulting Services (54169)
- SIC
- Services-Engineering, Accounting, Research, Management (8700)
- akta.pro primary industry
- Enterprise Security Strategy & Program Advisory (BPAKADAA)
- akta.pro secondary industries
- Security Architecture & Engineering Advisory (Zero Trust, IAM, Network) (BPAKADAF), Enterprise Risk Management (ERM) Advisory (BPAHAFAA)
Keywords
Where aramido is headquartered
LocationHeadquarters
- HQ city
- Karlsruhe
- HQ country
- Germany
- HQ region
- Europe
Offices2 records
Markets served
aramido business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure
Revenue model
- IT Security Consulting: Professional consulting services including IT security concept development, Security by Design, and implementation support for organizations seeking to improve their information security posture.
- Security Testing Services: Fee-for-service security testing including vulnerability scanning and penetration testing, typically billed per engagement or project.
- Security Training & Workshops: The aramido Academy offers training programs including PHP Security Training (a 6+ hour multi-module workshop with certificates) and live hacking demonstrations, sold as instructor-led training engagements.
- IT Emergency Management Services: Incident response and emergency management services for clients experiencing active security incidents, typically engaged on retainer or ad-hoc emergency basis.
Go-to-market motion3 records
Distribution channels3 records
Marketing channels9 records
aramido product offering
Product offeringCore offering
aramido is a Karlsruhe-based IT security consulting firm delivering human-led services: IT security consulting (IT-Sicherheitsberatung, Security by Design, implementation support), security testing (vulnerability scanning and penetration tests), IT emergency management (incident response and IT forensics), and ongoing vulnerability management within an ISMS framework. It also runs the aramido-Akademie, providing instructor-led security training such as the PHP Security Training program and live hacking demonstrations for organizations, development teams, and the public sector.
Product overview
aramido is an IT security consulting firm based in Karlsruhe, Germany, offering a comprehensive portfolio of information security services. The core offering consists of security consulting (Sicherheitsberatung), security testing (Sicherheitsprüfung), emergency management (Notfallmanagement), and vulnerability management services. These are delivered through distinct sub-services including Security by Design, implementation support, vulnerability scanning, penetration testing, and IT incident response. The company also provides specialized training through the aramido-Akademie, featuring PHP Security Training and Live Hacking demonstrations. The portfolio is centered around human-delivered consulting and testing services rather than software products.
Differentiator
Problem solved
Functional benefit
Products and services
- IT-Sicherheitsberatung (Security Consulting)
Companies that use aramido
Customer profileNamed customers1 record
Segments4 records
Ideal customer profiles3 records
aramido technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature5 records
aramido partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered flagship and minor.
- Bunte Nacht der Digitalisierung (karlsruhe.digital)flagshiparamido has been a longstanding partner of the Bunte Nacht der Digitalisierung in Karlsruhe, hosting the event at its offices annually. The partnership involves co-branded event promotion, live hacking demonstrations, CTF competitions, and interactive security stations. This is aramido's flagship public-facing community and marketing event.
- SensioLabsminoraramido co-presented a live hacking demonstration of a Symfony application at SensioLabs in Cologne in December 2016, as part of the Symfony UserGroup Köln meetup. The event promoted aramido's PHP Security Training and SensioLabs' developer community.
- Pädagogische Hochschule KarlsruheminorThe KryptoBox, an educational cryptography tool developed by the Pädagogische Hochschule Karlsruhe for school students (grades 1–10), is featured at aramido's events to provide accessible, gamified cryptography education to event attendees.
- ARFMANN RechtsanwälteminorAt the Bunte Nacht der Digitalisierung 2019, attorney Nico Arfmann (Managing Director of ARFMANN Rechtsanwälte, Karlsruhe) served as a guest speaker on data privacy law aspects of data breaches, complementing aramido's technical presentations.
- Beraternetz Karlsruheminoraramido is a member of the Beraternetz Karlsruhe, a consulting network in the Karlsruhe region, providing access to referral leads and collaborative consulting opportunities.
Scale indicators2 records
Recent moves6 records
Expansion highlights6 records
aramido competitors and assessment
Company assessmentDirect peers
- Secorvo Security Consulting: Karlsruhe-based security consulting firm offering IT security consulting, pentesting, and training. Direct geographic and service-line overlap with aramido, both being independent DACH boutiques headquartered in the same city.
- SySS GmbH: German penetration testing specialist based in Tübingen, focused on security testing for enterprises and public institutions. Closely comparable to aramido's pentest and security testing practice in DACH mid-market.
- Hackmanit GmbH: Bochum-based boutique specializing in web application and cryptography security testing. Directly comparable to aramido's web application security testing and PHP/OWASP training focus.
- usd AG: Frankfurt-based independent security consulting firm offering pentesting, ISMS, and security audits. Comparable DACH boutique competitor with overlapping consulting and assessment services.
- ERNW Research GmbH: Heidelberg-headquartered security consultancy providing penetration testing, incident response, and security assessments. Direct peer in DACH boutique cybersecurity services.
- RedTeam Pentesting GmbH: Aachen-based boutique specializing in adversarial security assessments and pentests. Direct peer in the German pentesting segment, comparable in scale and service-line focus to aramido.
Regional players
- Oneconsult AG: Swiss-rooted penetration testing and incident response firm serving the DACH region. Comparable service portfolio with primary footprint in Switzerland, partly overlapping aramido's German customer base.
Broad incumbents
- SEC Consult Group: Austrian-rooted, larger DACH cybersecurity consultancy offering pentesting, incident response, and managed security services. Overlaps aramido's portfolio but at significantly broader scale and geographic reach.
- TÜV Informationstechnik (TÜVIT): TÜV NORD GROUP subsidiary providing security testing, audits, and consulting. Broader incumbent in German cybersecurity services with accreditation-led procurement advantages over boutiques like aramido.
- SVA System Vertrieb Alexander GmbH: German IT system integrator with a security consulting and testing practice. Adjacent competitor serving mid-market DACH enterprise customers with overlapping security assessment services.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat3 records
Key risks6 records
Key highlights6 records
Customer concentration
aramido social profiles
Digital presencearamido financial estimates
Financial estimateRevenue estimate
Valuation estimate
aramido leadership team
Management profileNumber of profiles
Profiles2 records
aramido funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
aramido M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about aramido
What does aramido do?
aramido is a Karlsruhe-based IT security consulting firm delivering human-led services: IT security consulting (IT-Sicherheitsberatung, Security by Design, implementation support), security testing (vulnerability scanning and penetration tests), IT emergency management (incident response and IT forensics), and ongoing vulnerability management within an ISMS framework. It also runs the aramido-Akademie, providing instructor-led security training such as the PHP Security Training program and live hacking demonstrations for organizations, development teams, and the public sector.
Is aramido a public or private company?
aramido is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was aramido founded?
aramido was founded in 2015. It employs 11 to 50 people.
Where is aramido based?
aramido is headquartered in Karlsruhe, Germany, in the Europe region.
How does aramido make money?
Four revenue lines are on record. IT Security Consulting is the primary driver. The others are security Testing Services, security Training & Workshops and IT Emergency Management Services.
Who are aramido's main competitors?
Direct peers on record are Secorvo Security Consulting, SySS GmbH, Hackmanit GmbH, usd AG, ERNW Research GmbH and RedTeam Pentesting GmbH. Oneconsult AG is listed as a regional player. Broad incumbents are SEC Consult Group, TÜV Informationstechnik (TÜVIT) and SVA System Vertrieb Alexander GmbH.
Does aramido have an API?
No public API is recorded for aramido.
What industry is aramido in?
aramido's product category is IT Security Consulting Services. Its primary akta.pro industry code is BPAKADAA, Enterprise Security Strategy & Program Advisory, with a secondary code of BPAKADAF, Security Architecture & Engineering Advisory (Zero Trust, IAM, Network). Its NAICS code is 5416 and its SIC code is 8700.