Name

Northwave

Legal name

Northwave

Website

https://northwave-security.com

Company type

Private

Founded year

2006

Operating status

Operating

Headcount range

251–500 employees

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (5415), Computer Systems Design and Related Services (54151), Computer Systems Design Services (541512)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Managed Detection & Response (MDR) & SOC Services (HDADAGAG)

akta.pro secondary industries

Governance, Risk & Compliance (GRC) Managed Services (BPAEADAJ), Cybersecurity & Identity Consulting (BPAHAEAG), Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF), Grid Cybersecurity Implementation & OT Security Services (EUAEANAG)

Keywords

• Managed security services
• Incident response
• Cybersecurity consulting
• Red team services
• Security operations

Headquarters

HQ city

Utrecht

HQ country

Netherlands

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed Security Services: Recurring managed security services including Managed Detection & Response, Managed Security & Privacy Office, and Intelligent Security Operations. These services provide continuous protection and monitoring for enterprise clients.
2. Professional Security Services: One-time and project-based services including Incident Response, Red Teaming, Penetration Testing, Security Assessments, ISO 27001 FastTrack, and Cyber Crisis Readiness training. These are typically engagement-based with defined scope and duration.
3. Regulatory Compliance Consulting: EU Regulatory Compliance services helping organisations meet NIS2, DORA, and GDPR requirements through assessments, audits, and implementation support.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

Northwave delivers comprehensive cybersecurity services through a 360-degree Intelligent Security Operations model that integrates organizational (Business), technical (Bytes), and human (Behaviour) security dimensions. The firm provides managed security services (Managed Detection & Response, Intelligent Security Operations, Managed Security & Privacy Office), 24/7 incident response, adversary simulation (Red Teaming, ART, Gold Teaming, TIBER), penetration testing, EU regulatory compliance consulting (NIS2, DORA, GDPR), supply chain security, OT security, and human risk management to enterprise clients across Europe.

Product overview

Northwave Cyber Security is a managed security services provider offering a comprehensive portfolio of cybersecurity services through a unified platform approach. The portfolio integrates organizational (Business), technical (Bytes), and human (Behaviour) security dimensions. Core offerings include Managed Detection & Response (MDR) for continuous monitoring, Incident Response (CERT) for 24/7 emergency support, and Intelligent Security Operations for holistic security management. The technical portfolio spans adversary simulation services (Red Teaming, ART, Gold Teaming, TIBER, Pentesting) and vulnerability management. The human-focused services include Human Risk Management, CyberHeroes awareness programs, and Cyber Crisis Readiness. Additional services cover EU regulatory compliance (NIS2, DORA), Supply Chain Security, OT Security, and various assessment services (State of Security, DPIA, Security Roadmap, ISO 27001 FastTrack). With more than 275 professionals across multiple countries, Northwave delivers security services as a strategic cyber security partnership.

Differentiator

Problem solved

Functional benefit

Brands

• CyberHeroes: Human risk management program focusing on behavioral cybersecurity awareness
• ART (Advanced Red Teaming)
• Gold Teaming

Products and services

• Managed Detection & Response (MDR) Continuous monitoring service that reduces time to detect and respond to potential threats in customer environments, minimizing the overall impact of cyber incidents. For enterprise organizations requiring 24/7 threat detection capabilities.
• Incident Response (CERT) 24/7 incident response team providing emergency cyber incident support with recognized and accredited incident response capabilities and digital forensic investigation services for enterprise clients facing active cyber incidents.
• Rapid Response Fast-deployment incident response service for urgent cyber threats requiring immediate expert intervention to contain and remediate active attacks.
• Intelligent Security Operations 360-degree holistic security approach integrating organizational (Business), technical (Bytes), and human (Behaviour) aspects of cybersecurity into one unified security operation for enterprises seeking comprehensive cyber protection.
• Managed Security & Privacy Office Holistic security and privacy management service that mitigates cyber risks, ensuring quality and continuity in security measures, acting as the organization's virtual security team.
• Red Teaming Adversary simulation service where Northwave's experts simulate real-world attack scenarios to identify vulnerabilities and improve organizational security posture.
• ART (Advanced Red Teaming) Advanced adversary simulation combining technical red teaming findings with comprehensive cyber crisis exercises to reflect realistic cyberattack scenarios.
• Gold Teaming Most extensive cyber resilience simulation combining technical Red Teaming findings with a Cyber Crisis Exercise to create realistic cyberattack experience, providing the closest possible reflection of a real attack.
• TIBER (Threat Intelligence Based Ethical Red Teaming) Framework implementation following Netherlands TIBER-NL methodology for financial sector cyber resilience testing and regulatory compliance.
• Pentesting & Vulnerability Assessments Penetration testing and vulnerability assessment services to identify and evaluate security weaknesses in systems and applications.
• Vulnerability Management Ongoing vulnerability identification, prioritization, and remediation tracking service for continuous security improvement across enterprise environments.
• SOC CMM (SOC Capability and Maturity Assessment) Security Operations Center Capability and Maturity Assessment service to evaluate SOC effectiveness and identify improvement areas.
• Human Risk Management (including CyberHeroes program) Comprehensive human-centric security service addressing behavioral security risks through training, awareness, and psychological approaches, including the CyberHeroes program focused on building security awareness and changing employee behavior.
• Cyber Crisis Readiness Preparation and simulation services to ensure organizations are ready to respond effectively to major cyber crises through training and exercises.
• EU Regulatory Compliance Advisory services helping organizations comply with EU cybersecurity regulations including NIS2, DORA, and GDPR through assessments, audits, and implementation support.
• Supply Chain Security Integrated approach to supply chain cybersecurity, providing insight into supplier landscape and risk factors across complex supply chains.
• OT Security Operational Technology security services protecting industrial control systems, SCADA, and other OT environments from cyber threats.
• State of Security Assessment Comprehensive assessment evaluating current security posture and identifying vulnerabilities and improvement opportunities.

Quantifiable outcome

• Minimises overall impact of cyber incidents through fast detection and response
• +1 more outcomes

Segments2 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability5 records

Feature5 records

Partnerships

Two partnerships are on record, tiered core.

• Microsoft Intelligent Security AssociationcoreTechnology or IntegrationNorthwave is a member of the Microsoft Intelligent Security Association, an ecosystem of independent software vendors and managed security service providers that collaborate with Microsoft to defend against security threats.
• Cyberveilig NederlandcoreStrategic or Co-development PartnerNorthwave is a co-founder of Cyberveilig Nederland, the Dutch cybersecurity industry association. This strategic position demonstrates leadership in the Dutch cybersecurity ecosystem.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Orange Cyberdefense: European-headquartered (France) MSSP and cybersecurity services firm offering MDR, incident response, threat intel, and consulting across multiple countries; the most direct competitor in scale and geographic footprint to Northwave's enterprise MSSP model.
• Tesorion: Netherlands-based cybersecurity firm offering MDR, incident response, and security consulting — a directly competitive domestic peer to Northwave in the Dutch and Benelux market.
• Kudelski Security: Swiss-headquartered managed security services and cybersecurity consulting firm with a strong European presence in MDR, incident response, and advisory — very similar to Northwave's positioning in continental Europe.
• ReliaQuest: US-headquartered MDR/managed security operations provider competing for similar enterprise MDR engagements, with comparable outcomes around mean-time-to-detect and 24/7 SOC capabilities.
• Optiv: Large North American cybersecurity solutions integrator delivering managed security, advisory, and integration services; broadly comparable to Northwave's mix of managed + advisory + integration engagements.
• NCC Group: UK-based cybersecurity services and consulting firm with Fox-IT (Netherlands) inside it; a close peer in incident response, red teaming, managed services, and EU regulatory positioning.
• WithSecure: Finland-headquartered cybersecurity firm offering MDR, managed security services, incident response, and consulting with a similar European focus and comparable mix of managed + professional services revenue.
• Trellix: Global cybersecurity vendor with a strong managed detection & response and professional services arm (formerly FireEye/McAfee enterprise), comparable to Northwave's MDR, incident response, and security operations consulting offerings.

Broad incumbents

• Deloitte (Cyber & Strategic Risk): Big Four advisory firm with a large cybersecurity practice spanning managed services, regulatory compliance (NIS2/DORA), incident response, and red teaming; competes with Northwave for the largest enterprise advisory engagements.
• Securitas (Digital & Cybersecurity): Swedish global security group with a growing digital/cybersecurity services arm (built partly via Orange Cyberdefense-like M&A); competes broadly for enterprise managed security and advisory spend.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks7 records

Key highlights7 records

Customer concentration

• Facebookfacebook.com/NorthwaveBV

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Northwave