Fraunhofer Institute for Secure Information Technology SIT

Name

Fraunhofer Institute for Secure Information Technology SIT

Legal name

Fraunhofer-Gesellschaft zur Förderung der angewandten Forschung e.V.

Website

https://sit.fraunhofer.de

Company type

Private

Founded year

1949

Operating status

Operating

Headcount range

101–250 employees

Ownership category

akta.pro rank

Headquarters

HQ city

Darmstadt

HQ country

Germany

HQ region

Europe

Offices5 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales, Others

Revenue model

1. Contract Research: Applied research projects funded by government agencies (BMBF, HMWK) and industry partners. Part of the Fraunhofer-Gesellschaft network.
2. Testing and Certification Services: Security testing, testate (certification), and validation services for software and hardware products.
3. Consulting Services: Expert consulting on cybersecurity, IT forensics, and security engineering for industry and government.
4. Licensing: Technology licensing and spin-off companies emerging from research.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels7 records

Core offering

Fraunhofer SIT conducts applied cybersecurity research and delivers immediate-use, customer-tailored IT security solutions for industry, government and academia. Offerings span security testing and certification (testate), expert consulting, custom development, technology licensing, studies, and training programs such as Lernlabor Cybersicherheit, T.I.S.P. preparation courses, and the ATHENE Cyber Range, supported by proprietary tools including the VUSC vulnerability scanner and the Appicaptor mobile app testing service.

Product overview

Fraunhofer SIT is a research institute offering a portfolio of cybersecurity services, training programs, and security testing tools. The core offerings include the Lernlabor Cybersicherheit (cybersecurity learning laboratory) for practical training, VUSC (vulnerability scanner) for code analysis, Appicaptor for app security testing, and the ATHENE Cyber Range for incident response training. Additional services include T.I.S.P. preparation courses for professional certification, crisis simulations for organizations including hospitals, a Security Test Lab, and CVE publication of discovered vulnerabilities. The institute also conducts research across fields including IT forensics, post-quantum cryptography, identity and privacy, media security, mobile systems, and IT law.

Differentiator

Problem solved

Functional benefit

Brands

• ATHENE: National Research Center for Applied Cybersecurity - a joint research center of Fraunhofer SIT and Fraunhofer IGD, in cooperation with universities including Goethe-Universität Frankfurt/Main, Technische Universität Darmstadt, and Darmstadt University of Applied Sciences.
• HNFIZ Cybersicherheit
• VUSC
• Appicaptor

Products and services

• Lernlabor Cybersicherheit (Learning Laboratory Cybersecurity) A practical cybersecurity training programme covering IT forensics, Internet security and automotive security for professionals and executives from industry and public administration, including hands-on exercises and compact theory modules. Course durations range from one hour to five days.
• VUSC (VUlnerability SCanner) A proprietary code scanner developed by Fraunhofer SIT that helps companies and developers detect vulnerabilities in third-party code within minutes, positioning errors and security flaws before they cause damages.
• Appicaptor A Fraunhofer SIT service that tests the security of mobile applications (apps), supporting companies and developers in identifying mobile-specific vulnerabilities.
• ATHENE Cyber Range A training platform that enables participants to practise detecting and defending against real cyber attacks in a simulated environment, used both for professional upskilling and for organisational cyber crisis preparation.
• T.I.S.P. Preparation Course (T.I.S.P.-Vorbereitungskurs) A preparation course for the TeleTrusT Information Security Professional (T.I.S.P.) certification exam, offered by Fraunhofer SIT for prospective T.I.S.P. graduates.
• Krisensimulation Cyberangriff (Cyber Attack Crisis Simulation) Organisation-specific cyber crisis simulations for management teams, conducted as realistic exercises to test and improve crisis response capabilities across IT, communications and leadership.
• Cyber Crisis Simulation for Hospitals (Cyberkrisensimulation für Krankenhäuser) Realistic cyber crisis exercises specifically designed for hospitals, in which teams from technology, medicine and administration train together to detect, communicate about and overcome cyber attacks. Since October 2025 multiple German hospitals have been trained.
• CVE Entries (Common Vulnerabilities and Exposures) Fraunhofer SIT investigates applications and IT systems for security vulnerabilities and publishes CVE entries, security advisories and bulletins for the discoveries, covering products including DNSSEC, Routinator and FORT-validator. 50+ CVE entries have been published.
• Security Test Lab A Fraunhofer SIT testing laboratory for security assessment of IT systems and applications, including cloud storage providers, evaluating encryption, privacy and confidentiality standards.

Quantifiable outcome

• Tested cloud storage providers - none fully met all security requirements
• +1 more outcomes

Named customers1 record

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Nine partnerships are on record, tiered core and minor.

• ATHENE National Research Center for Applied CybersecuritycoreStrategic or Co-development PartnerATHENE is a research center of Fraunhofer-Gesellschaft for its two Darmstadt-based institutes SIT and IGD, in cooperation with Goethe-Universität Frankfurt/Main, Technische Universität Darmstadt, and Darmstadt University of Applied Sciences. Fraunhofer SIT serves as one of the two founding institutes of this national cybersecurity research center.
• Technische Universität Darmstadt (TU Darmstadt)coreStrategic or Co-development PartnerMain university partner for ATHENE research center. Fraunhofer SIT is located in Darmstadt and maintains close research collaboration with TU Darmstadt's Department of Electrical Engineering and Computer Science.
• Hebrew University of JerusalemminorStrategic or Co-development PartnerInternational research cooperation with The Rachel and Selim Benin School of Computer Science and Engineering at Hebrew University of Jerusalem.
• FH Münster University of Applied SciencesminorStrategic or Co-development PartnerCooperation with FH Münster, Department of Electrical Engineering and Computer Science, located in Steinfurt.
• Dieter Schwarz StiftungcoreStrategic or Co-development PartnerHNFIZ Cybersicherheit is being established on the education campus of Dieter Schwarz Stiftung in Heilbronn as a new institute section of Fraunhofer SIT.
• TeleTrusTminorStrategic or Co-development PartnerActive participation in TeleTrusT - a German IT security association.
• Fraunhofer IGD (Institute for Computer Graphics)coreStrategic or Co-development PartnerSister Fraunhofer institute in Darmstadt, co-founding ATHENE National Research Center for Applied Cybersecurity together with Fraunhofer SIT.
• Goethe-Universität Frankfurt/MaincoreStrategic or Co-development PartnerUniversity partner in the ATHENE National Research Center for Applied Cybersecurity.
• Darmstadt University of Applied Sciences (h_da)coreStrategic or Co-development PartnerUniversity of applied sciences partner in the ATHENE National Research Center for Applied Cybersecurity.

Scale indicators3 records

Recent moves7 records

Expansion highlights5 records

Emerging players

• Immersive Labs: Commercial cybersecurity training and cyber-range platform. Comparable to SIT's Lernlabor Cybersicherheit and ATHENE Cyber Range training offerings, but delivered as a subscription SaaS platform with global reach.
• Snyk: Developer security platform for code and open-source vulnerability scanning. Snyk competes directly with SIT's VUSC in the code vulnerability scanning space, with a SaaS GTM motion that contrasts with SIT's research-driven delivery.
• Veracode: Application security testing platform (SAST/DAST/SCA). Direct commercial peer to SIT's application security testing capabilities, including tooling that overlaps with VUSC and Appicaptor, but delivered as an enterprise SaaS product.

Direct peers

• TNO (Netherlands Organisation for Applied Scientific Research): Dutch applied research organization with cybersecurity among its focus areas, operating a similar contract research and public-private partnership model. Most analogous European peer at the applied-research-institute level.
• Fraunhofer FKIE: Fraunhofer Institute for Communication, Information Processing and Ergonomics, a peer Fraunhofer institute with a strong cybersecurity research focus on cyber defense, situation awareness, and IT forensics — directly comparable to SIT's research-and-applied-services model.
• CISPA Helmholtz Center for Information Security: Germany's largest dedicated cybersecurity research center (Helmholtz Association). Comparable to SIT/ATHENE in scope of cybersecurity research and government funding, with overlapping focus areas including vulnerability research and secure software engineering.
• Fraunhofer AISEC: Another Fraunhofer institute focused on applied cybersecurity research (attestation, secure hardware, embedded systems, AI security). Closest sister-institute peer in the same Fraunhofer-Gesellschaft network, operating a comparable contract research, testing, and consulting model.

Broad incumbents

• German Federal Office for Information Security (BSI): Germany's national cybersecurity authority, which both regulates and conducts cybersecurity research/certification. BSI is a key counterpart and occasional collaborator of SIT, and operates in the same testing, certification, and standards-setting space at a national-policy level.
• NCC Group: Global cybersecurity services firm offering security consulting, vulnerability assessments, and penetration testing. Comparable to SIT's commercial security testing and certification services, though NCC Group operates as a for-profit, listed company with a global footprint.

Regional players

• CEA-Leti: French applied research institute with cybersecurity activities (hardware security, cryptography, secure components). Comparable institute-level applied research model in a different geography, making it a regional analog rather than a direct competitor.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• YouTubeyoutube.com/user/fraunhofersitda
• Facebookfacebook.com/FraunhoferSIT
• LinkedInlinkedin.com/company/337960
• Xx.com/FraunhoferSIT

Revenue estimate

Valuation estimate

Number of profiles

Profiles9 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Fraunhofer Institute for Secure Information Technology SIT