What achelos does

achelos GmbH is a Paderborn-based, privately held cybersecurity consultancy and systems house founded in May 2008. The company operates two business units — Cybersecurity & Digital Identities, serving healthcare (gematik/Telematics Infrastructure), industrial automation (IEC 62443, IEEE 802.1AR), banking & insurance (DORA, QSCD), public sector/government (BSI, VS-NfD, EUDI Wallet), defence, and cybersecurity verticals — and Connect, which delivers self-hosted GSMA-compliant eSIM management software (SGP.22 / SGP.32 / SGP.02) to mobile network operators and IoT service providers globally. Its portfolio spans the full security lifecycle — consulting, Security-by-Design software development, certification support (Common Criteria, C5, gematik), system integration, and managed services — built on a dense technology partner network that includes Keyfactor (EJBCA/SignServer), Utimaco (Platinum partner for HSMs), Thales, Securosys, Sectigo, NoSpamProxy, and Nexus.

The proprietary technology stack includes in-house developed test suites (CardLink Inspector, TI Simulator, Virtual Card Kit, TLS Test Tool / AutoSCA, TLS Checklist Portal) and the achelos eSIM product family (DP+, eIM, OTA, M2M) running on a cloud-native, containerized Kubernetes/PostgreSQL microservices architecture. achelos is BSI Common Criteria site-certified with accredited in-house CC evaluators, ISO 9001 and ISO 27001 certified, and holds TeleTrusT ITSMIG and ITSMIE trust marks, positioning it as a manufacturer-independent partner for compliance-heavy enterprise and government buyers. Named customer outcomes include DocMorris becoming the first gematik-approved eHealth-CardLink manufacturer (April 2024), a company-wide PKI deployment for Phoenix Contact, and an AS4 protocol migration for Stadtwerke Detmold's electricity market communication.

Revenue mechanics are dominated by professional services (consulting, engineering, integration, certification support) on bespoke multi-year contracts, supplemented by software licensing and support for the eSIM platform, sales of test-tool licenses, and recurring PKI managed services. Distribution is direct enterprise sales in Germany plus channel partner co-delivery in DACH, with international eSIM expansion targeting global MNOs. The company has 11–50 employees, three Managing Directors (Carola Schwarzenberg, Thomas Freitag, Felix Wolf), no disclosed external investors, and sustained kununu Top Company recognition (2023–2026).

Name

achelos

Legal name

achelos GmbH

Website

https://achelos.de

Company type

Private

Founded year

2008

Operating status

Operating

Headcount range

11–50 employees

Short description

achelos GmbH is a Paderborn-based cybersecurity consultancy and systems house providing consulting, certification support, proprietary test tools, and self-hosted eSIM management software to enterprise and government clients in healthcare, industry, banking, public sector, defence, and mobile communications across DACH and internationally.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting Services

NAICS

Computer Systems Design and Related Services (54151), Computer Systems Design Services (541512), Custom Computer Programming Services (541511), Other Computer Related Services (541519)

SIC

Services-Computer Programming Services (7371), Services-Computer Integrated Systems Design (7373), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

IT Operations, Event & Incident Management (NOC/SOC-to-ITSM) (BPAEAJAH)

akta.pro secondary industry

Service Assurance & SLA/QoS Management (HDAFAMAL)

Keywords

• Cybersecurity consulting
• Digital identity services
• Public key infrastructure
• ESIM management software
• Hardware security modules

Headquarters

HQ city

Paderborn

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Professional Cybersecurity Services: achelos generates revenue primarily through billable professional services engagements covering consulting, security engineering, software development, certification support, and system integration across the full product lifecycle — from design and conception through development, testing, certification, and secure operations. Long-term managed services for PKI operations represent a recurring service revenue stream.
2. eSIM Software Products (Connect Business Unit): Revenue from licensing and deploying the company's own eSIM management software platforms (DP+, eIM, OTA, M2M), enabling MNOs and service providers to self-host GSMA-compliant eSIM services. Software is delivered as a self-hosted solution rather than SaaS, generating one-time licensing and ongoing support/maintenance revenue.
3. Test Tools and Simulation Products: Sale and licensing of automated test suites and simulation tools including CardLink Inspector, TI Simulator, Virtual Card Kit, TLS Test Tool, and TLS Checklist Portal. These tools serve both achelos's own delivery needs and external clients seeking gematik certification and TI conformance testing.
4. PKI Managed Services: Ongoing managed services for PKI operations, where achelos assumes responsibility for the secure operation of customer PKI systems post-deployment, including monitoring, certificate lifecycle management, and support.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels7 records

Core offering

achelos is a manufacturer-independent (herstellerunabhängiges) consultancy and systems house for cybersecurity and digital identities, delivering consulting, security engineering, software development, testing, certification support, and system integration across the full product lifecycle. Beyond services, the company develops proprietary test tools (CardLink Inspector, TI Simulator, Virtual Card Kit, TLS Test Tool / AutoSCA, TLS Checklist Portal) and self-hosted eSIM management platforms (achelos DP+, eIM, OTA, M2M) covering GSMA SGP.22 / SGP.32 / SGP.02, serving healthcare, industry, banking, public sector, defence, and telecommunications customers.

Product overview

achelos is a consultancy and systems provider offering a portfolio of cybersecurity consulting services and software products. The company operates two business units: 'Cybersecurity and digital Identities' and 'Connect' (eSIM Management). The Cybersecurity unit provides services spanning consulting, software development, security engineering, testing, certification support, and system integration. Key software products include test suites (TI Simulator, CardLink Inspector, TLS Test Tool, Virtual Card Kit, TLS Checklist Portal) and managed services (PKI Managed Services). The Connect unit offers eSIM management solutions (achelos DP+, eIM, OTA, M2M) built on a cloud-native, containerized microservices architecture supporting GSMA standards (SGP.22, SGP.32, SGP.02). The company supports customers from consulting through conception, software development, certification, and secure operation.

Differentiator

Problem solved

Functional benefit

Brands

• achelos Connect: eSIM management solutions for MNOs, service providers, and IoT providers enabling them to host and operate their own eSIM services.

Products and services

• achelos DP+ (Remote eSIM Provisioning, SM-DP+/SM-DS) Self-hosted eSIM provisioning platform enabling MNOs and service providers to operate their own GSMA SGP.22-compliant SM-DP+ and SM-DS for Consumer and IoT eSIM profiles, with full data and key sovereignty and no SaaS dependency.
• achelos eIM (IoT eSIM Management) Comprehensive orchestration of IoT device eSIM profile states for millions of devices using SGP.32-compliant ES10b server functionality, enabling remote provisioning and full profile lifecycle management at scale.
• achelos OTA (Over-the-Air Profile Content Management) Targeted updates to eSIM profiles without re-provisioning, ideal for APN, roaming, and policy changes across large IoT device fleets.
• achelos M2M (eSIM M2M Management) Long-term stable and auditable SGP.02-compliant platform for M2M remote provisioning on long-life industrial and automotive devices.
• CardLink Inspector Test suite that verifies eHealth-CardLink implementations against gematik specifications, verifying all requirements mandated by gematik for the approval process and supporting successful approval.
• TI Simulator Own simulation environment providing fast and comfortable access to the German Telematics Infrastructure (TI), enabling development and testing without live TI connectivity.
• Virtual Card Kit Smart card simulation for development and test environments, simulating electronic health cards and healthcare professional IDs based on SmartCard specifications, and capable of generating error conditions such as invalid or expired status.
• TLS Test Tool (AutoSCA) Automated test tool for TLS security protocol testing, released as AutoSCA for automated vulnerability analysis of cryptographic protocols and implementations, originally developed under the AutoSCA funded project.
• TLS Checklist Portal Free self-service security check of websites against BSI (Bundesamt für Sicherheit in der Informationstechnik) TLS requirements, accessible without charge via the web portal.
• PKI Managed Services Ongoing managed services for the secure operation of customer PKI systems covering setup, migration, and operation of public key infrastructure with full cost control, including monitoring, certificate lifecycle management, and support.
• PKI System Consulting Consulting services for digital identities and intelligent networks, covering PKI architecture, implementation, and optimisation for enterprise and industrial environments.
• IAM Consulting Comprehensive identity and access management consulting covering identity governance, authentication, and access control for organisations needing strong digital identity assurance.
• HSM Consulting Manufacturer-independent consulting for the selection, integration, and configuration of Hardware Security Modules (HSMs) from partners such as Utimaco, Securosys, and Thales.
• Cybersecurity Systems Consulting Customised consulting, solutions, and services for resilient and future-proof IT security infrastructure, including IT security consulting by experienced security experts.
• Cyber Resilience Act (CRA) Services Support for compliance with the EU Cyber Resilience Act, embedding cybersecurity from the start of product development for manufacturers and providers of products with digital elements.
• Industrial Security Engineering Security engineering for industrial control systems and Industry 4.0 applications, integrating cybersecurity into product development and supporting IEC 62443 compliance.
• Automotive Security Engineering Security engineering for automotive systems, including UNECE 155/156 compliance, V2X communication security, and ADAS cybersecurity integration.
• TI 2.0 Toolkit for Primary Systems Modular toolkit enabling healthcare software vendors to securely connect primary systems (PVS, KIS, WWS) to the German Telematics Infrastructure 2.0 and meet gematik requirements.
• Common Criteria (CC) Certification Services Successful certification according to Common Criteria delivered by achelos's BSI site certification and in-house accredited CC evaluators, covering preparation through evaluation.
• C5-Testat Services for Cloud Providers Tailored IT services for BSI Cloud Computing Compliance Criteria Catalogue (C5) attestation, supporting cloud providers from preparation through audit.
• ISMS im Krankenhaus Information Security Management System setup for hospitals according to B3S, providing security, structure, and compliance using proven methods.
• Security-by-Design Software Development Custom development of security-critical software applications following the Security-by-Design principle, including certifiable software and embedded security.
• TLS Services (BSI TaSK framework) Support and extension services around the TLS framework TaSK of the BSI (Federal Office for Information Security).

Quantifiable outcome

• DocMorris became the first manufacturer ever to receive gematik approval for the eHealth-CardLink feature, achieving certification in approximately two months (project start February 2024, approval April 2024).
• +2 more outcomes

Named customers5 records

Segments6 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Feature10 records

Partnerships

25 partnerships are on record, tiered core, standard and minor.

• KeyfactorcoreTechnology or IntegrationKeyfactor (formerly PrimeKey, acquired EJBCA) is a strategic technology partner for PKI solutions. achelos serves as a certified Keyfactor partner, delivering EJBCA Appliance and SignServer Appliance implementations. Joint customer engagements include Phoenix Contact (company-wide PKI) and OMICRON (PKI migration).
• UtimacocoreTechnology or IntegrationUtimaco is a leading provider of Hardware Security Modules (HSMs). achelos is a Platinum partner of Utimaco, integrating Utimaco HSMs in customer PKI deployments including the Stadtwerke Detmold AS4 project. Utimaco HSMs generate cryptographic keys and perform encryption operations for secure market communication.
• ThalesstandardTechnology or IntegrationThales provides products for protection and licensing in cloud environments, complementing achelos's cybersecurity portfolio with hardware security and encryption solutions.
• SecurosysstandardTechnology or IntegrationSecurosys specializes in the protection of global assets, identities, and communications through HSM and key management solutions, integrated into achelos's PKI and cybersecurity delivery.
• SectigostandardTechnology or IntegrationSectigo provides seamless certificate management solutions. achelos integrates Sectigo's certificate lifecycle management capabilities into customer cybersecurity architectures.
• NoSpamProxy (Net at Work)coreTechnology or IntegrationNoSpamProxy (from Net at Work GmbH) provides AS4 Gateway solutions for market communication in the energy sector. achelos implements NoSpamProxy AS4 Gateway for energy utilities (Stadtwerke Detmold), integrating it with HSM and Smart Metering PKI for BSI-compliant encrypted market communication.
• VeridiumstandardTechnology or IntegrationVeridium provides identity-centric security solutions without compromise, complementing achelos's IAM and digital identity offerings with advanced authentication capabilities.
• VersasecstandardTechnology or IntegrationVersasec provides enterprise credential management solutions supporting smart cards, USB tokens, virtual smart cards, Windows Hello for Business (WHfB) with PIV/PKI, FIDO2, and RFID. achelos integrates Versasec credential management into comprehensive PKI and IAM deployments.
• Nexus (IN Groupe)standardTechnology or IntegrationNexus (part of IN Groupe) provides secure identity solutions for a connected world. achelos partners with Nexus to deliver digital identity solutions spanning government, enterprise, and IoT domains.
• Windhoff GroupminorImplementation/ SI/ Consulting PartnerWindhoff Group provides data & analytics, software development, and project realization services, acting as a systems integrator and implementation partner for achelos in selected engagements.
• DARZ (Darmstädter Rechenzentrum)standardTechnology or IntegrationDARZ operates as a secure IT infrastructure provider (managed PKI services) in Germany, with achelos providing technology consulting and integration services for joint customers requiring hosted PKI infrastructure.
• MTG (M遁Technologie GmbH)standardTechnology or IntegrationMTG is a German specialist for encryption technologies 'Made in Germany', providing hardware and software solutions that achelos integrates into its PKI and cybersecurity offerings.
• TeleTrusT (Bundesverband IT-Sicherheit e.V.)coreStrategic or Co-development PartnerTeleTrusT is a leading German IT security association. achelos is a member and participates in the TeleTrusT community stand at it-sa. TeleTrusT awards achelos the 'IT Security Made in Germany' and 'IT Security Made in EU' trust marks. The association provides a platform for industry collaboration and standards development.
• GSMAcoreStrategic or Co-development PartnerGlobal mobile industry association defining eSIM standards (SGP.22, SGP.32, SGP.02). achelos develops GSMA-compliant eSIM management software (DP+, eIM, OTA, M2M) and participates in GSMA working groups. The partnership ensures technical alignment with global eSIM specifications.
• Allianz für Cybersicherheit (ACS)standardStrategic or Co-development PartnerGerman Cybersecurity Alliance (supported by BSI) bringing together industry, government, and research to strengthen cybersecurity in Germany. achelos participates as a member, contributing expertise and accessing collaborative threat intelligence and best practices.
• Bitkom e.V.standardStrategic or Co-development PartnerGermany's digital association representing over 2,000 companies from the digital industry. achelos is a member, engaging in policy advocacy, standards development, and industry collaboration.
• bvitg (Bundesverband Gesundheits-IT)coreStrategic or Co-development PartnerGerman Federal Association of Health IT. achelos is a member, engaging in the digital health ecosystem and contributing to the development of IT standards and certification processes for the German healthcare sector.
• CAST e.V. (Competence Center for Applied Security Technology)minorStrategic or Co-development PartnerGerman research and industry forum for applied security technology. achelos participates in CAST forums, contributing to knowledge exchange and collaborative R&D in cybersecurity.
• Embedded4You e.V.minorStrategic or Co-development PartnerAssociation of embedded systems companies. achelos participates in Embedded4You, contributing expertise in embedded security for connected devices and automotive/industrial applications.
• it's OWL (Intelligente Technische Systeme OstWestfalenLippe)minorStrategic or Co-development PartnerRegional technology cluster for intelligent technical systems in Ostwestfalen-Lippe, Germany. achelos participates in this innovation network focused on Industry 4.0 and embedded systems, contributing cybersecurity expertise to collaborative R&D projects.
• SICP (Software Innovation Campus Paderborn)standardStrategic or Co-development PartnerRegional innovation campus at the University of Paderborn focused on software innovation. achelos collaborates with SICP on research projects and talent development, including the annual mathematics master's thesis award sponsorship.
• Campus SchwarzwaldcoreStrategic or Co-development PartnerInnovation campus in the Black Forest focused on digital transformation and Industry 4.0. achelos co-hosts the 'PKI in der Automatisierungstechnik' workshop (July 2026) with Campus Schwarzwald and Keyfactor, funded by the BMFTR Trustpoint project. The partnership advances industrial PKI and automation technology standards.
• EUCC ISACminorStrategic or Co-development PartnerEuropean Cybersecurity Certification — Information Sharing and Analysis Centre. achelos participates in EUCC ISAC, contributing to and benefiting from cross-border cybersecurity threat intelligence and certification alignment within the EU.
• Wirtschaftsrat der CDU e.V.minorStrategic or Co-development PartnerGerman economic policy association affiliated with the CDU. achelos is a member, engaging in policy dialogue on digital transformation, IT security regulation, and economic policy.
• Net at Work GmbHcoreImplementation/ SI/ Consulting PartnerNet at Work GmbH is the provider of the NoSpamProxy AS4 Gateway used in the Stadtwerke Detmold market communication project. achelos collaborates with Net at Work as the system integrator for PKI and HSM components, while Net at Work provides the AS4 messaging gateway — a well-established partnership from previous joint projects.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• T-Systems International GmbH: Deutsche Telekom's enterprise IT services arm providing cybersecurity, managed services, and systems integration to German government, automotive, and healthcare clients — a much larger broad-spectrum competitor to achelos's regulated-industry services.
• Atos (Eviden): Large European IT services and cybersecurity provider with deep German public-sector and healthcare engagements — competes broadly across achelos's verticals via its Eviden cybersecurity division, often at larger deal sizes.
• Thales (Digital Identity & Security): Global identity, payment, and eSIM vendor (formerly Gemalto, Thales DIS) competing broadly across achelos's verticals — banking PKI, government ID, MNOs, and defence — at a much larger scale than achelos.
• msg systems AG: German independent software and consulting group focused on banking, insurance, healthcare, and public sector — directly overlapping with achelos's DORA, gematik, and secure-software mandates but at significantly greater scale.

Others

• Utimaco: Aachen-based HSM vendor and achelos's Platinum strategic partner — provides the hardware anchor for achelos's PKI deployments while also offering its own professional services, making Utimaco both an ecosystem ally and an adjacent competitor for integration work.

Direct peers

• Bundesdruckerei GmbH: German federal identity provider offering eIDAS, EUDI Wallet, and government-credential solutions — a comparable for achelos's public-sector and digital identity consulting engagements, and a frequent co-development partner in the German identity ecosystem.
• IDEMIA: Global leader in digital identity and eSIM (SM-DP+) for MNOs/MVNO/IoT, also serving government ID and financial services — a direct competitor to achelos Connect's eSIM portfolio and adjacent to its identity/credential work.
• Giesecke+Devrient (G+D): Munich-based security technology group operating in eSIM management, government ID, payment, and connectivity — directly comparable to achelos Connect's eSIM platform line and achelos's digital identity / public-sector engagements.
• Secunet Security Networks AG: German cybersecurity specialist listed on the SDAX, serving the same public sector, defence, healthcare, and KRITIS clients with security infrastructure, eHealth/TI, and BSI-class solutions — a direct comparable for achelos's regulated German cybersecurity consulting practice.
• Cryptomathic A/S: Mid-sized European specialist in applied cryptography, PKI, e-signature, and key management consulting — operates the same niche of high-assurance crypto/PKI professional services as achelos for banks, governments, and device makers.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks7 records

Key highlights7 records

Customer concentration

• Xx.com/achelos_IoT
• YouTubeyoutube.com/channel/UCK1g0YpxJexVGYvUtr2IHUg
• LinkedInlinkedin.com/company/achelos-gmbh

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles10 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about achelos