What HiScout GmbH does

HiScout GmbH is a Berlin-based enterprise software company that develops and sells an integrated Governance, Risk, and Compliance (GRC) platform primarily to German federal and state government agencies, critical-infrastructure operators (KRITIS), and regulated enterprises in financial services, healthcare, and utilities. Founded in 2009 as a 100% subsidiary of HiSolutions AG, the company focuses on IT security, data protection, and business continuity management software aligned with BSI IT-Grundschutz, ISO 27001/2, ISO 22301, and EU GDPR, NIS-2, and DORA frameworks. Approximately 50 employees support the company, with all development and support conducted in Germany.

The HiScout GRC Suite consists of six core modules — Grundschutz, Datenschutz, ISM, BCM, Auditmanagement, and GSS (Geheim- und Sabotageschutz) — and six add-ons (Questionnaire, DocGen, DataExchange, Business Logic Engine, ADConnect, and Mandantenbackup), all sharing a common object-oriented database and low-code configuration technology (HiScout GUI:do) that enables domain experts to customize the system without programming. Available as both on-premise and SaaS deployments with data hosted in German data centers, the platform's differentiators are its integrated multi-module architecture eliminating data duplication across compliance disciplines, pre-loaded BSI/ISO content catalogs, and government-grade documentation outputs including certifiable A1-A6 reports per BSI-Standard 200-2.

HiScout generates revenue primarily through subscription-based software licensing for its modular GRC suite, supported by recurring annual software maintenance fees, professional services (implementation, training via HiScout Academy, consulting), and SaaS hosting. Sales follow a direct enterprise motion complemented by an extensive partner network of system integrators and consulting firms — Materna, secunet, Bechtle, Computacenter, Sopra Steria, PwC, BearingPoint, InfoGuard (Switzerland), and Intelli Systems (Netherlands) — for implementation, customization, and channel sales. Notable anchor customers include the BITBW Baden-Württemberg state administration (2020-2025 framework), Dataport serving six German federal states (2021-2025), the Free State of Bavaria, and ITZBund's ZeDIS standard solution for federal agencies. Pricing is quote-based, varies by module selection and organizational size, and is not publicly disclosed.

Name

HiScout GmbH

Legal name

HiScout GmbH

Website

https://hiscout.com

Company type

Private

Founded year

2009

Operating status

Operating

Headcount range

11–50 employees

Short description

HiScout GmbH provides an integrated GRC software suite for German federal and state government agencies, KRITIS operators, and regulated enterprises to manage IT-Grundschutz, data protection, BCM, and ISM compliance. Founded 2009 in Berlin as a subsidiary of HiSolutions AG.

Ownership category

akta.pro rank

Product category

Governance, Risk & Compliance (GRC) Software

NAICS

Computer Systems Design Services (541512), Custom Computer Programming Services (541511), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)

akta.pro secondary industries

Compliance, GRC Workflow & Audit Automation Platforms (HDAEAHAL), Privacy, Consent & Data Protection Management (BPAEAPAF)

Keywords

• IT governance risk compliance
• Information security management
• Data protection management
• Business continuity management
• Regulatory compliance software

Headquarters

HQ city

Berlin

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure, Others

Revenue model

1. Software Licenses (GRC Suite Modules): HiScout generates revenue primarily through the sale of licenses for its integrated GRC software suite. The suite consists of core modules (Grundschutz, ISM, Datenschutz, BCM, Auditmanagement, GSS) and extension add-ons (Questionnaire, DocGen, DataExchange, Business Logic Engine, ADConnect, Mandantenbackup). Both on-premise and SaaS delivery options are available with equal functionality. Government agencies (federal and state) and large enterprises are the primary customers, with multi-year framework contracts common.
2. Software Maintenance and Support: Annual software maintenance and support services (Softwarepflege) are offered, including product updates, technical support via a dedicated support team (available Monday–Friday, 9 AM–5 PM GMT+1), and access to the customer portal with product releases and support content. Separate Softwarepflegebedingungen (maintenance terms) govern this stream.
3. Professional Services and Implementation Consulting: HiScout and its partner network provide professional services including software implementation, customization, training (via HiScout Academy), and ongoing consulting support. Partners such as Materna, Bechtle, Computacenter, Sopra Steria, PwC, BearingPoint, and others deliver these services to customers. HiScout's own project team is also available for implementation support.
4. SaaS Hosting: HiScout is available as a SaaS solution (in addition to on-premise), with hosting provided either directly by HiScout or through partners with appropriate IT infrastructure. Data is stored in data centers within Germany. SaaS clients receive automatic updates and maintenance included.

Pricing tiers

Go-to-market motion2 records

Distribution channels5 records

Marketing channels6 records

Core offering

HiScout GmbH develops and sells the HiScout GRC Suite, a modular, browser-based integrated management system platform for IT Governance, Risk & Compliance. It combines core modules (BSI IT-Grundschutz, GDPR Data Protection, ISO 27001 Information Security Management, ISO 22301 Business Continuity Management, ISO 19011 Audit Management, Geheim- und Sabotageschutz) with extension add-ons (Questionnaire, DocGen, DataExchange, Business Logic Engine, ADConnect, Mandantenbackup) on a common shared database. The platform is offered both on-premise and as SaaS, with 100% development and support in Germany, targeting federal and state government agencies, KRITIS operators, banks, hospitals and large regulated enterprises.

Product overview

HiScout GmbH offers the HiScout GRC Suite, a modular integrated management system platform for Governance, Risk & Compliance. The platform combines six core modules on a common data basis: HiScout Grundschutz (IT-Grundschutz/BSI compliance), HiScout Datenschutz (GDPR data protection), HiScout ISM (ISO 27001 information security), HiScout BCM (ISO 22301/BSI 200-4 business continuity), HiScout Auditmanagement (ISO 19011 auditing), and HiScout GSS (secret/sabotage protection). Six add-on extensions extend functionality: HiScout Questionnaire (decentralized data collection), HiScout Business Logic Engine (workflow automation), HiScout DocGen (dynamic reporting), HiScout DataExchange (XML interface for third-party systems), HiScout ADConnect (Active Directory sync), and HiScout Mandantenbackup (tenant backup). All modules share the HiScout Plattform as their common foundation with open data models, configurable interfaces, and low-code customization. The solution is available as on-premise or SaaS deployment with 100% development and support in Germany.

Differentiator

Problem solved

Functional benefit

Products and services

• HiScout GRC Suite Integrated management system platform for IT Governance, Risk & Compliance combining multiple modules on a common data basis. Supports on-premise and SaaS deployment with browser-based multi-user access.
• HiScout Grundschutz IT-Grundschutz tool aligned with BSI-Standards 200-1, 200-2, 200-3 and Grundschutz++ for federal agencies, state administrations, and critical-infrastructure operators. BSI-compliant pre-configuration with risk analysis and certifiable reference reports (A1-A6).
• HiScout Datenschutz Data protection management software for EU GDPR compliance that guides users through creating processing directories, managing data subject incidents, conducting Privacy Impact Assessments and managing third-country transfer impact assessments.
• HiScout ISM Information Security Management module aligned with ISO 27001/2 and the ISO 27k family for documenting, automating and standardizing complex distributed security processes, including policy management, outsourcing due-diligence, gap analysis, security incident management and Statement of Applicability.
• HiScout BCM Business Continuity Management software compliant with ISO 22301 and BSI-Standard 200-4 supporting the full BCM lifecycle including automated Business Impact Analysis, continuity planning, exercises and emergency response with crisis communication.
• HiScout Auditmanagement Audit management module for efficient and transparent audits in accordance with ISO 19011, covering annual audit planning, preconfigured checklists, resource management, mobile evidence capture, decentralized questionnaire integration and revision-proof documentation.
• HiScout GSS (Geheim- und Sabotageschutz) Specialized secret and sabotage protection software for government agencies, ministries, KRITIS companies and research institutions with elevated protection requirements, supporting digital, audit-proof and centralized mapping and management of security measures.
• HiScout Questionnaire Digital questionnaire technology for decentralized data collection. Creates questionnaire templates and automatically sends them to internal and external contacts with multimedia support and audit-proof import into the HiScout database.
• HiScout Business Logic Engine Workflow automation tool for standardizing and automating management system processes, supporting simple follow-up creation, complex multi-step workflows, automated email/task notifications and time-controlled execution.
• HiScout DocGen Dynamic reporting system that creates customized documents and live management cockpits from all HiScout data, with dynamic text, charts, formatted tables, calculated values and CI-compliant presentation.
• HiScout DataExchange Generic XML-based import/export interface for connecting third-party systems such as CMDBs, GSTOOL and ARIS, configurable via drag-and-drop with XSLT support.
• HiScout ADConnect LDAP-based interface that automatically synchronizes user and group information from Active Directory into HiScout, with multiple sub-domains, individual synchronization rules and inactive-account identification.
• HiScout Mandantenbackup Tenant backup solution enabling targeted backup of individual tenants (Mandanten) with quick restoration capabilities to support business continuity.
• HiScout Academy Structured training and online seminars covering Grundschutz, Datenschutz, BCM, HiScout Administration and Customizing topics, offered as a customer education program.

Quantifiable outcome

• Baden-Württemberg state administration operates 100+ clients in a single HiScout instance, significantly reducing setup and administration overhead.
• +3 more outcomes

Named customers8 records

Segments5 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

Feature13 records

Partnerships

18 partnerships are on record, tiered core, major and minor.

• infodascoreStrategic or Co-development Partner · 9 June 2026HiScout GmbH and the German cybersecurity company infodas announced a strategic partnership aimed at supporting organizations in the public sector, operators of critical infrastructures, and other highly regulated environments in implementing information security, governance, risk, and compliance requirements. The collaboration combines HiScout's integrated GRC platform with infodas's cybersecurity expertise.
• BearingPointcoreStrategic or Co-development Partner · 4 March 2026HiScout expanded its partner network with a strategic partnership with management and technology consulting firm BearingPoint. The goal is to provide public sector organizations with more comprehensive and practice-oriented support in information security, Business Continuity Management (BCM), data protection, and compliance.
• MaternacoreImplementation/ SI/ Consulting PartnerMaterna is an international IT service provider offering launch and optimization of information security management systems based on ISO 27001, BSI IT-Basic Protection, or ISIS12. Other topics include Security Operations Centres, Security Awareness, Vulnerability Management, and IAM. Materna offers the complete HiScout service portfolio including customising and hosting. Successfully supporting large organizations together for several years.
• secunet Security Networks AGcoreImplementation/ SI/ Consulting Partnersecunet offers cybersecurity for public authorities and companies, ensuring resilient digital infrastructures and the highest possible level of protection for data, applications, and digital identities. Specializes in Cloud, IIoT, eGovernment, and eHealth. HiScout and secunet jointly support numerous organizations in the public sector at state and federal level.
• BechtlecoreChannel Partner/ Reseller/ DistributorBechtle is the largest German IT system house and one of the leading IT providers in Europe. Offers a complete, seamless cross-vendor range of IT infrastructure and IT operational services. This includes consulting and software implementation for managing data protection and information security. Together, they manage framework agreements for software procurement in public institutions.
• Computacenter AG & Co. oHGmajorImplementation/ SI/ Consulting PartnerComputacenter provides IT strategy consulting as well as IT infrastructure implementation and management. Services range from consulting and support in setting up an information security management system up to certification according to ISO 27001 or BSI IT-Basic Protection.
• Sopra SteriamajorImplementation/ SI/ Consulting PartnerSopra Steria is a leading European technology company in consulting, digital services, and software development. It supports clients in driving digital transformation. Sopra Steria is one of HiScout's first partners and offers tremendous know-how in the application of HiScout Basic Protection.
• HiSolutions AGcoreStrategic or Co-development PartnerHiSolutions AG is one of the leading consulting firms for IT security and IT management in German-speaking areas. HiScout is a spin-off of HiSolutions AG (founded as 100% subsidiary in 2009); both companies operate independently now but maintain a close relationship. HiSolutions and HiScout work together closely on product specifications and jointly support numerous companies in the banking and insurance sectors.
• InfoGuard AGcoreChannel Partner/ Reseller/ DistributorInfoGuard AG specializes in cyber security, information security, and IT security. It is HiScout's exclusive partner in Switzerland and supports customers in information security management, data protection, GRC, and business continuity management, including customization of individual solutions.
• Intelli SystemsminorChannel Partner/ Reseller/ DistributorIntelli Systems offers intelligent solutions for IT governance, risk management, compliance, and information security. The goal is to help companies implement effective IT governance, minimize risks, and ensure regulatory compliance. Active in the Netherlands.
• HUG GmbHminorImplementation/ SI/ Consulting PartnerHUG GmbH is an expert in the practical implementation of regulatory requirements. Established as one of the leading consulting firms in auditing and consulting for regulated companies. Works for internal audit departments of banks, insurance companies, financial institutions, and corporations. Consulting activities include information security, IT management, project management, and certification preparation.
• neam GmbHminorImplementation/ SI/ Consulting Partnerneam combines IT services and information security expertise with nearly 30 years of experience. With more than 120 highly qualified IT professionals, they serve customers nationally and internationally. ISO 9001 and 27001 certified. Provides professional IT department services including consulting, technology, and support — on-prem, hybrid, or cloud.
• OWL-IT (Ostwestfalen-Lippe IT)minorChannel Partner/ Reseller/ DistributorOWL-IT is an innovative municipal IT service company that enhances the efficiency of municipalities by providing secure IT infrastructure, modern technology, and specialized software. As a municipal IT service provider, it serves around 9 million residents in North Rhine-Westphalia. It was the first municipal service provider to be BSI-certified according to IT baseline protection standards. Offers HiScout-based SaaS.
• telent GmbHmajorImplementation/ SI/ Consulting Partnertelent GmbH offers tailor-made technology solutions and services in critical infrastructures (KRITIS), digitalisation, and Industry 4.0. Emphasis on cybersecurity, technology, and infrastructure services. Jointly advises customers in the area of integrated management systems for several years.
• TÜV NORD IT Secure Communications (TÜV IT)minorImplementation/ SI/ Consulting PartnerTÜV NORD IT Secure Communications advises customers in strengthening trust in robust, high-availability IT infrastructures and organizations. Founded in Berlin in 2018, specializes in consulting for information technologies and telecommunications. Together with HiScout, they support the launch of management systems for information security, data protection, and business continuity management.
• KIK-S GmbH (with SEPRO Consulting)minorImplementation/ SI/ Consulting PartnerKIK-S GmbH specializes in consulting, project management, process and IT management including operation for critical infrastructure operators. Together with SEPRO Consulting, it supports municipal utilities with the launch and operation of their ISMS. Their HiScout-based SaaS solution ISMS4energy is a leader in ISMS implementation for municipal utilities.
• PwC DeutschlandmajorImplementation/ SI/ Consulting PartnerPwC Deutschland combines professional expertise with technology partner capabilities to effectively support companies on their path to IT security and compliance. Through close partnerships with leading technology providers, PwC finds optimal solutions and guides customers through the entire process from planning to implementation.
• ITZBund (ZeDIS)coreChannel Partner/ Reseller/ DistributorITZBund (Informationstechnisches Zentrum Bund) provides the ZeDIS standard solution, which is based on HiScout Basic Protection, as a SaaS solution for federal agencies. This is an official white-label/government channel arrangement.

Scale indicators6 records

Recent moves2 records

Expansion highlights6 records

Direct peers

• otris Software AG: German GRC software vendor headquartered in Dortmund offering integrated ISMS, data protection, BCM, and complaint management solutions for regulated organizations. Most direct comparable to HiScout given overlapping product scope (ISMS, GDPR, BCM), German-speaking market focus, and similar customer base in DACH enterprises and public sector.
• OneTrust: Privacy, security, and GRC platform with strong penetration among large multinationals for consent management, PIA, and vendor risk. Overlaps with HiScout's data protection module and broader GRC positioning; serves many of the same regulated enterprise buyers but with a heavier privacy-marketing focus.

Broad incumbents

• RSA Archer (Regnology): Long-standing enterprise IT GRC and operational risk platform, formerly RSA Archer, now part of Regnology. Competes directly with HiScout in IT risk, regulatory compliance, and policy management for large financial institutions and multinationals, offering a broader global footprint and bigger enterprise install base.
• ServiceNow Governance, Risk, and Compliance: ServiceNow's Integrated Risk Management (IRM) module embeds GRC into a platform that also handles ITSM, HR, and workflows. Competes with HiScout in enterprise and increasingly public sector accounts, leveraging scale, AI capabilities, and unified data model as a broad alternative to specialized GRC platforms.
• SAP GRC and Process Control: SAP's governance, risk, and compliance suite covers access control, process control, and risk management, primarily for SAP-centric enterprises. Strong incumbent in banking/insurance where HiScout also competes, with deep ERP integration that specialized GRC vendors must integrate around.
• Microsoft Purview Compliance Manager: Microsoft's compliance and risk management portfolio spans Purview Compliance Manager, Defender, and Entra ID Governance, bundled into the M365 and Azure ecosystem. Competes with HiScout for Microsoft-centric enterprises and government bodies seeking integrated compliance within a hyperscaler stack.
• IBM OpenPages with Watson: IBM's enterprise GRC platform covering operational risk, regulatory compliance, IT governance, and internal audit. Competes with HiScout in large banking and insurance accounts, leveraging IBM's installed base and consulting arm as broad-enterprise alternative.

Emerging players

• LogicGate Risk Cloud: No-code GRC platform for risk, compliance, and third-party risk management, used by mid-market and enterprise customers. Comparable to HiScout on configurability and use-case breadth but differentiated by SaaS-native delivery and stronger North American traction.
• Hyperproof: SaaS compliance operations platform focused on audit, controls, and framework management (SOC 2, ISO 27001, NIST). Competes with HiScout's ISM and Auditmanagement modules in regulated enterprises pursuing ISO 27001 certification, particularly in North America.
• Vanta: Automated compliance evidence collection and continuous monitoring for SOC 2, ISO 27001, HIPAA, and related frameworks. Overlaps with HiScout's ISM module for mid-market and growth-stage companies; not a direct fit for HiScout's federal/state government base but increasingly competitive in regulated enterprises.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• YouTubeyoutube.com/channel/UCwtunpPOrDpDTJ2wQfMQuEA/about
• LinkedInlinkedin.com/company/hiscout-gmbh
• Xx.com/hiscoutgmbh

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about HiScout GmbH