Upright

What Upright does

Upright Security (DBA Upright) is a privately held, Belgium-based boutique cybersecurity consultancy founded in 2018 by Bart Cools and Cédric Gossé in Kontich. The firm delivers end-to-end advisory, implementation, and managed services across four interlocking identity and access security domains: Identity & Access Management (IAM), Customer Identity Access Management (CIAM, via Auth0 by Okta), Identity Governance & Administration (IGA, via SailPoint), and Secure Access Service Edge (SASE, via Netskope). It has more recently added Wiz as a fifth partner for cloud security. Upright deliberately limits its vendor stack to these domain leaders — a positioning built around depth of expertise rather than breadth — and has earned the top 'EMEA Delivery Admiral' tier from SailPoint. Its client base is concentrated in the EMEA region, anchored by enterprise and mid-market organizations (CIO, CISO, IT Security Director buyers). One publicly named customer is the Royal Belgian Football Association, for which Upright consolidated all digital platforms onto a single Auth0-based CIAM hub.

The company does not develop proprietary core technology. Its intellectual property resides in solution architecture, integration patterns, and implementation methodologies built atop Okta, Auth0, SailPoint, Netskope, and Wiz — the platforms Upright implements, configures, and operates on behalf of clients. Its service lifecycle comprises four stages: (1) intake by a Security Architect to identify gaps; (2) solution guidance and architecture design, with engagement across IT, business and security stakeholders; (3) implementation and testing with IT staff, including training; (4) ongoing managed services ranging from operational and incident support to strategic guidance for security leaders, plus active license management for Okta, SailPoint and Netskope.

Upright's revenue mechanics combine three streams: (a) professional services and advisory fees for scoped engagements, (b) recurring managed services contracts that follow implementation, and (c) software license resale on Okta, SailPoint and Netskope, which generates margin and recurring partner rebates. Pricing is not publicly disclosed; engagements are quote-based, tailored to client scope, and structured as multi-year contracts. The go-to-market is consultative and relationship-driven, with every engagement beginning with a first conversation rather than a sales pitch, and no indirect channels or self-serve motions. The firm has ~22-25 staff (mostly senior Security Advisors with 3-28 years of experience) and discloses no external funding or institutional shareholders.

Name

Upright

Legal name

Upright Security

Website

https://uprightsecurity.be

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

1–10 employees

Short description

Upright Security is a Belgium-based boutique cybersecurity consultancy founded in 2018 that delivers end-to-end advisory, implementation, and managed services in identity governance, IAM, CIAM, IGA and SASE for enterprise and mid-market clients in EMEA, built exclusively on Okta, Auth0, SailPoint, Netskope and Wiz.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting Services

NAICS

Computer Systems Design and Related Services (54151), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Computer Integrated Systems Design (7373), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro industry

PRIMARYBPAEAAAL

Cybersecurity Architecture & Security Integration

Business & Public Services/IT & Digital Services (Managed Services, Systems Integration)/IT Consulting & Systems Integration

SECONDARYHDAEAJAE

Identity Governance & Administration (IGA)

Hardware, Technology & Telecom/Enterprise Platforms & Databases/Identity & Access Management (IAM) & Directory Services Platforms

SECONDARYHDAEAJAB

Single Sign-On (SSO) & Federation (SAML/OIDC, Identity Providers)

Hardware, Technology & Telecom/Enterprise Platforms & Databases/Identity & Access Management (IAM) & Directory Services Platforms

SECONDARYHDADABAB

Secure Access Service Edge (SASE) & SSE

Hardware, Technology & Telecom/Cybersecurity/Network Security (Perimeter, SASE, Firewalls)

SECONDARYBPAEADAG

Network Security Managed Services (Firewall/IDS/IPS/SASE)

Business & Public Services/IT & Digital Services (Managed Services, Systems Integration)/Cybersecurity Services (MSSP)

Keywords

• Identity access management
• Identity governance administration
• Customer identity management
• Secure access service edge
• Cybersecurity consulting services

Headquarters

HQ city

Kontich

HQ country

Belgium

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales

Revenue model

1. Professional Services & Advisory: Upright Security generates revenue primarily through consulting and advisory services, including security architecture assessments, solution design, and implementation. Their engagement model starts with a paid/intake conversation leading to scoped engagements covering the full solution lifecycle.
2. Managed Services & License Management: Upright offers ongoing managed services ranging from operational support to incident management, as well as continuous guidance to CISO, CIO, and IT Security Directors. As part of their end-to-end approach, they handle all licensing of Okta, SailPoint, and Netskope, likely earning commissions or margins on software licenses sold to clients.
3. Software Licensing Resale: Upright acts as a reseller/partner for Okta, Auth0, SailPoint, Netskope, and Wiz, managing software licenses on behalf of clients and ensuring they receive the best deal, generating revenue through license resale and partner incentives.

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels5 records

Core offering

Upright Security is a boutique cybersecurity consultancy that delivers end-to-end advisory, architecture, implementation, and managed services across four interconnected solution domains: Identity & Access Management (IAM), Customer Identity Access Management (CIAM), Identity Governance & Administration (IGA), and Secure Access Service Edge (SASE). Services are built exclusively on four software domain leaders — Okta (with Auth0), SailPoint, Netskope, and Wiz — covering the engagement from business case and intake through solution design, deployment, license management, and ongoing operational support.

Product overview

Upright Security is a boutique cybersecurity consultancy offering end-to-end services across four interconnected domains: CIAM (Customer Identity Access Management), IAM (Identity & Access Management), IGA (Identity Governance & Administration), and SASE (Secure Access Service Edge). Together, these four service domains address the Zero Trust model's requirements, providing comprehensive solutions that protect against modern digital threats by ensuring access is securely managed, continuously verified, and consistently governed. The company specializes in implementing and integrating solutions from four vendor platforms: Okta (including Auth0 for CIAM), SailPoint (for IGA), and Netskope (for SASE), offering services from initial guidance and business case building through solution design, implementation, and ongoing managed services.

Differentiator

Problem solved

Functional benefit

Products and services

• CIAM - Customer Identity Access Management Customer Identity Access Management service that merges advanced security with enhanced user experiences for B2B/B2C applications. Protects customer data with multi-factor authentication and single sign-on, enables personalized interactions, and ensures regulatory compliance globally across omnichannel customer experiences.
• IAM - Identity & Access Management Identity & Access Management service that guides organizations through IAM in an end-to-end model. Addresses the increasing complexity of IT environments, hybrid working, and regulatory landscapes, ensuring foundational principles of well-architected IAM systems are effectively executed and maintained.
• IGA - Identity Governance & Administration Identity Governance & Administration service that integrates governance and access controls in a unified framework. Automates joiner-mover-leaver processes, enables self-service access requests, integrates IGA with service desk operations, and provides automated certification and audit-ready compliance reporting.
• SASE - Secure Access Service Edge Secure Access Service Edge service that merges network security and WAN into a cloud-native platform. Offers secure, location-independent access to organizational resources, eliminates VPN requirements through Zero Trust Network Access (ZTNA), and protects users and sensitive data across cloud platforms.
• Managed Services & License Management Post-implementation managed services including operational support, incident management, and ongoing strategic guidance to CISO, CIO, and IT Security Directors. Also covers license handling and best-deal procurement for Okta, SailPoint, and Netskope on behalf of clients.

Named customers1 record

Segments4 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

Feature5 records

Partnerships

Five partnerships are on record, tiered core.

• OktacoreTechnology or IntegrationUpright Security is an Okta EMEA partner. Okta is a leading identity management platform providing secure user identity and access management across applications, cloud infrastructure, and devices, with features including passwordless SSO, adaptive MFA, Identity Governance, and PAM. Upright implements and manages Okta solutions for enterprise clients and handles all Okta licensing.
• Auth0 by OktacoreTechnology or IntegrationAuth0, now part of Okta, is a customer identity platform that Upright Security leverages for CIAM implementations. Upright has an 'Identity Security Engineer (Auth0)' job opening, indicating active Auth0-focused delivery capabilities for customer identity and access management.
• SailPointcoreTechnology or IntegrationUpright Security is a SailPoint EMEA partner and has achieved 'SailPoint EMEA Delivery Admiral' status after dozens of successful SailPoint IGA deployments. SailPoint specializes in identity governance solutions, helping enterprises manage and govern user access to applications and data, enforce compliance policies, and mitigate security risks.
• NetskopecoreTechnology or IntegrationUpright Security is a Netskope partner. Netskope is a SASE provider recognized by Forrester and Gartner as a leader, distinguished by its unique private infrastructure and extensive peering to major SaaS and IaaS platforms. Upright uses Netskope to deliver cloud-native, secure access solutions for clients.
• WizcoreTechnology or IntegrationUpright Security partners with Wiz for cloud security solutions. They have a dedicated Wiz page on their website and are hiring a 'Cloud Solution Architect (Wiz)' role, indicating active Wiz-focused cloud security delivery capabilities.

Scale indicators4 records

Recent moves5 records

Expansion highlights4 records

Broad incumbents

• Accenture Security: Global consulting giant with a dedicated security practice delivering large-scale IAM, IGA and Zero Trust programs — frequently the incumbent that Upright competes against on enterprise identity deals.
• Devoteam: EMEA-headquartered IT consultancy with a sizable cybersecurity and identity practice; competes with Upright for Okta/SailPoint deployments but at significantly larger scale and broader service portfolio.
• Capgemini: Global systems integrator with a large cybersecurity and identity practice delivering Okta, SailPoint and SASE programs — overlaps with Upright on enterprise IAM/IGA RFPs at much larger scale.
• Optiv: Large US-based security solutions integrator delivering identity and access management services across Okta, SailPoint and Microsoft — competing with Upright on enterprise IAM deals at greater scale.
• Orange Cyberdefense: European MSSP and security services arm of Orange, providing identity and access security implementation alongside managed services — larger incumbent competing for the same enterprise EMEA security budgets.

Emerging players

• Trace3: US-based technology consultancy with a security and identity practice delivering vendor platform implementations and managed services — comparable boutique-to-mid-market services positioning.

Direct peers

• Simeio: Identity-focused services firm delivering IAM, IGA and CIAM implementations (including SailPoint) on a managed services basis — directly comparable business model and vendor alignment to Upright.
• iC Consult Group: German-headquartered boutique IAM consultancy delivering Okta, SailPoint and Microsoft Entra ID implementations across EMEA — same vendor stack, similar boutique positioning and enterprise buyer profile as Upright.

Regional players

• NVISO Security: Belgian cybersecurity consultancy offering advisory, integration and managed security services across identity, cloud and SOC — same Belgium/EMEA footprint and overlapping CISO buyer set as Upright.
• Kudelski Security: Swiss-rooted EMEA cybersecurity services provider offering advisory, integration and managed services across identity and cloud security — comparable regional boutique-to-mid-market positioning.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights5 records

Customer concentration

• Xx.com/UprightSecurit1

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Upright