splone

What splone does

splone is a Berlin-based IT security research team and consultancy founded in 2015 as a spin-off from a research group at Freie Universität Berlin. The company delivers offensive security services — penetration testing, red team assessments, security audits, and customized consulting — with a stated specialization in connected technologies covering web applications, IoT/embedded systems, and SCADA/ICS industrial control systems. Methodology is a phased audit approach (preparation, reconnaissance, analysis, reporting) culminating in prioritized vulnerability findings and mitigation recommendations, complemented by a Security Awareness Training add-on addressing phishing and social-engineering risk. There is no unified software platform or modular product architecture; the offering is delivered as professional consulting engagements.

Revenue is generated through engagement-based professional services billed under quote-based, multi-year contracts to enterprise and government clients across the DACH region. The go-to-market is sales-led: contact originates through the company website (with options for Red Team Test, Pentest, or other inquiries) and is augmented by distribution through the Assecor Group, of which splone has been a subsidiary since September 2022. Reference logos span multiple industries (WSE, SWE, SWS, Rhebo, Lutra, Carfax, U4I, Prosoz), and public-administration engagements are evidenced by press coverage of ransomware attacks on a Kreisverwaltung. The company maintains research partnerships with Freie Universität Berlin, the profund transfer program, and SCADACS, and is led by Managing Director Sascha Zinke.

Name

splone

Legal name

splone UG (haftungsbeschränkt)

Website

https://splone.com

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

1–10 employees

Short description

splone is a Berlin-based IT security consultancy offering penetration testing, red team assessments, security audits, and customized consulting, with specialized expertise in web applications, IoT, and SCADA/ICS systems. Founded in 2015 from Freie Universität Berlin and acquired by the Assecor Group in 2022.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting Services

NAICS

Management, Scientific, and Technical Consulting Services (5416)

SIC

Services-Detective, Guard & Armored Car Services (7381)

akta.pro primary industry

Security Governance, Risk & Compliance (GRC) Advisory (BPAKADAG)

Keywords

• Penetration testing services
• Red team assessments
• Offensive security consulting
• Industrial control security
• IT security audits

Headquarters

HQ city

Berlin

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Others

Revenue model

1. Security Consulting Services: Revenue generated from red team assessments, penetration tests, security audits, and customized consulting engagements. These are professional services billed per engagement.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels4 records

Core offering

splone is a Berlin-based IT security research team and consultancy delivering offensive security services. Its core offerings are Red Team Assessments, Penetration Tests, Security Audits and customized cybersecurity consulting, with a specialization in connected technologies including Web applications, IoT/embedded systems and industrial control systems (ICS/SCADA). Services are delivered as professional consulting engagements, complemented by security awareness training programs for end-user organizations.

Product overview

splone is a Berlin-based IT security consultancy offering offensive security services. The company provides penetration testing, red team assessments, security audits, and customized consulting as its core service portfolio. These services are complemented by security awareness training. The company focuses on connected technologies including Web applications, IoT systems, and SCADA/industrial control systems. There is no unified software platform or modular product architecture — services are delivered as professional consulting engagements.

Differentiator

Problem solved

Functional benefit

Products and services

• Penetration Testing Security testing service that identifies vulnerabilities in implementations, configurations and designs across APIs, web applications, enterprise networks, embedded systems (IoT) and industrial control systems (ICS/SCADA). Delivered as a professional consulting engagement for enterprise and public-sector organizations.
• Red Team Assessments Offensive security assessments that simulate real-world adversaries to evaluate an organization's security posture, including social engineering elements and full attack-path mapping. Provided to enterprise and government clients seeking to validate defenses against criminal and state-driven attackers.
• Security Audits Comprehensive security reviews and assessments of IT infrastructure, applications and organizational security measures. Follows a phased methodology covering preparation, information gathering/reconnaissance, analysis and reporting, with vulnerability prioritization and mitigation recommendations.
• Customized Consulting Tailored cybersecurity advisory services including organizational security process development, threat assessment and defense strategy formulation. Engagements are scoped individually to client needs.
• Security Awareness Training Training programs that teach employees to recognize phishing attacks and social engineering, including demonstration of concrete attack scenarios and incident response procedures.

Quantifiable outcome

• Identification of vulnerabilities including implementation bugs, misconfigurations, design flaws, and company-wide threats
• +1 more outcomes

Named customers2 records

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Two partnerships are on record, tiered core and minor.

• AssecorcoreStrategic or Co-development Partner · 1 September 2022Assecor is a German IT consultancy and software development company. splone has partnered with Assecor since its founding, and in September 2022 became part of the Assecor family. The partnership combines IT consultancy, software development, and security services. Assecor's key services comprise IT consultancy and software development, which come hand in hand with security.
• Freie Universität BerlinminorStrategic or Co-development PartnerAcademic partnership and research collaboration. splone originated from a research group at Freie Universität Berlin in 2015

Scale indicators3 records

Recent moves6 records

Expansion highlights4 records

Regional players

• Oneconsult AG: Swiss penetration testing and red-team consultancy serving DACH enterprise clients. Comparable offensive-security services with similar boutique, research-oriented character.
• Compass Security Schweiz AG: Swiss-based pentest and security consulting firm with DACH-wide coverage. Similar offensive security focus, though with broader service lines including identity and managed services.

Direct peers

• SySS GmbH: German pentest and red-teaming specialist with a broad portfolio across IT, OT, and embedded security. Comparable DACH focus and service scope, but larger scale than splone.
• Cure53: Berlin-based boutique cybersecurity consultancy specializing in penetration testing and security audits of web applications and complex systems. Closely matches splone's research-driven, high-touch offensive security positioning.
• RedTeam Pentesting: German penetration testing firm offering red-team and pentest services across enterprise IT and OT. Comparable DACH-focused, boutique offensive-security consultancy.
• SRLabs (Security Research Labs): Berlin-based security research and consulting firm offering penetration testing, red-teaming, and research-driven security services. Directly comparable to splone in geographic footprint, research pedigree, and offensive-security service mix.
• X41 D-Sec: German security research and consulting firm providing penetration testing, code review, and security audits. Overlaps with splone on research-led offensive security for complex software and embedded systems.

Broad incumbents

• NCC Group: Global cybersecurity consultancy with extensive offensive-security, red-team, and managed detection services. Represents a larger-scale incumbent offering similar capabilities as part of a broader portfolio.
• SEC Consult (Atos): DACH-headquartered cybersecurity consultancy providing pentest, red-team, and managed security services. Comparable offensive-security services, with much greater scale as part of a global group.

Emerging players

• HackerOne: Bug bounty and vulnerability disclosure platform that also offers traditional pentest and red-team services. Represents an emerging, platform-enabled model that pressures pure-play consultancies like splone.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/splone

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about splone