What ERNW does

ERNW (legal entity ERNW Enno Rey Netzwerke GmbH) is an independent, privately held IT security service provider headquartered in Heidelberg, Germany, founded in 2001 by Enno Rey. The firm specializes in offensive security consulting and technical testing, with deep expertise in penetration testing, red teaming, Active Directory/Azure/Windows assessments, AI security, Bluetooth protocol security, IoT/embedded systems, medical device security, and digital forensics/incident response. Its research output is material: 77+ published whitepapers, the TROOPERS IT security conference (running since 2008), the Insinuator.net company blog, and publicly disclosed CVEs affecting major OEMs such as Apple (Beats), Sony, JBL, and Bose. The company has built three wholly owned subsidiaries — ERNW Research GmbH (2015), ERNW Insight GmbH (2016) and ERNW SecTools GmbH (2017) — to separate research, operations and tool development from the core consulting entity.

Name

ERNW

Legal name

ERNW Enno Rey Netzwerke GmbH

Website

https://ernw.de

Company type

Private

Founded year

2001

Operating status

Operating

Headcount range

11–50 employees

Short description

ERNW is an independent German IT security service provider, founded in 2001 in Heidelberg, offering penetration testing, red teaming, and specialized security assessments in AI, Bluetooth, medical device, IoT and Active Directory domains to enterprise customers.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting & Penetration Testing Services

NAICS

Computer Systems Design and Related Services (54151), Other Computer Related Services (541519)

SIC

Services-Computer Integrated Systems Design (7373), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Enterprise Risk Management (ERM) Advisory (BPAHAFAA)

Keywords

• Penetration testing services
• IT security consulting
• Red teaming assessment
• Vulnerability research
• Incident response services

Headquarters

HQ city

Heidelberg

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Security Assessment Services: ERNW generates revenue through providing professional security assessment services including penetration testing, audits, red teaming, and product evaluations. These are typically project-based engagements with enterprise customers requiring specialized technical security testing.
2. Security Consulting: Revenue is generated from consulting services during design, implementation, and approval phases of IT landscapes, including design/concept/process reviews, security concept development, risk assessments, product evaluation, and network security design.
3. Training Services: ERNW offers training and knowledge transfer for IT security areas, with public training delivered through partner HM Training Solutions or during TROOPERS conference.
4. Secure IT Operations: ERNW offers secure operation of IT services and IT security services including Web Application Firewalls, IDPS, or SIEM systems.

Go-to-market motion1 record

Distribution channels2 records

Marketing channels5 records

Core offering

ERNW is an independent IT security service provider delivering consulting and testing services across penetration testing, red teaming, audits, security architecture design, incident response, and digital forensics. Specialized offerings cover Active Directory/Azure/Windows, AI security, mobile, Bluetooth, IoT/embedded, and medical device security for enterprise clients across complex IT environments.

Product overview

ERNW (Enno Rey Netzwerke GmbH) is an independent IT security service provider based in Heidelberg, Germany, founded in 2001. The company operates as a services-focused organization rather than a product company, offering a comprehensive portfolio of security consulting and testing services. The core offerings include Assessment Services (penetration testing, audits, red teaming, product evaluations), Consulting Services (design reviews, security concepts, risk assessments), and specialized security services covering Active Directory/Azure/Windows OS, AI Security, Mobile Penetration Testing, Bluetooth Security, IoT/Embedded Device Security, and Medical Device Security. Supporting services include Research, Digital Forensics & Incident Response, Training & Knowledge Transfer, and Secure IT Operations. ERNW maintains a company blog (Insinuator), operates the TROOPERS IT Security conference, and has established spin-off companies including ERNW Research GmbH (research activities), ERNW Insight GmbH, and ERNW SecTools GmbH. The company publishes whitepapers documenting their security research findings.

Differentiator

Problem solved

Functional benefit

Products and services

• Assessment Services Security assessment services including penetration testing, audits, red teaming, and closed-source product evaluations covering IoT/embedded/industrial/medical devices, cloud/virtualization/hosting platforms, Microsoft & Active Directory environments, and network/security appliances. Targeted at enterprise customers with complex IT environments.
• Consulting Services Design, implementation, and approval support for IT landscapes including design/concept/process reviews, security concept development, risk assessments, product evaluation, and network security design. For enterprises building or hardening IT environments.
• Red Teaming Holistic security assessment evaluating established security measures including physical security and human element considerations, conducted with internal ethics committee oversight. For organizations seeking adversarial-scenario validation of their defenses.
• Active Directory-, Azure- & Windows OS Platform Security Services Security services covering Active Directory assessments, Azure security evaluations, and Windows OS platform security including hardening, penetration testing, and security analysis for embedded or medical Windows systems. Targeted at organizations running Microsoft-centric enterprise environments.
• Artificial Intelligence Security Services to help customers recognize risks associated with AI products (particularly generative AI) and evaluate AI technology security from design phase through implementation and usage. For enterprises deploying or integrating AI/ML systems.
• Mobile Penetration Testing Security testing and code analysis for native Android and iOS apps as well as cross-platform apps, covering OWASP Mobile Top 10, backend infrastructure, and APIs. For organizations developing mobile applications.
• Bluetooth Security Baseline security checks and in-depth security assessments of Bluetooth implementations across the full protocol stack, from controller to host and applications, including design and implementation consulting. For manufacturers of Bluetooth-enabled devices.
• IoT and Embedded Device Security Security assessments covering the full scope of IoT and embedded ecosystems from device hardware and firmware to communication protocols, cloud backends, and mobile applications. For IoT product manufacturers and operators.
• Medical Device Security Security assessments and research for medical devices covering firmware analysis, hardware interface testing, proprietary protocols, and clinical network environments. For medical device manufacturers and healthcare providers.
• Digital Forensics & Incident Response Incident response process implementation support, incident analysis, development of preparation plans, immediate and on-site incident response, malware analysis, and technical forensic reports. For organizations responding to or preparing for cyber incidents.
• Research Services Research services addressing scientific and pragmatic problems in IT security, including Security Awareness, Digital Forensics, Reverse Engineering & Vulnerability Analysis, and telecommunications security. Delivered primarily through ERNW Research GmbH (2015 spin-off).
• Training & Knowledge Transfer Training and knowledge transfer for IT security areas, ranging from video content to on-site trainings and gamified IT security challenges, offered through HM Training Solutions partner and during TROOPERS conference. For IT security professionals and enterprise teams.
• Secure IT Operations Secure operation of IT systems including security services such as Web Application Firewalls, IDPS, and SIEM systems. For organizations needing managed security infrastructure operations.

Quantifiable outcome

• ERNW has discovered and responsibly disclosed critical vulnerabilities affecting major manufacturers including Apple, Sony, JBL, and Bose
• +1 more outcomes

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

One partnership is on record.

• HM Training SolutionscoreChannel Partner/ Reseller/ DistributorERNW exclusively offers public training through HM Training Solutions partner or during TROOPERS conference. This partnership enables ERNW to reach broader audience for training services while maintaining focus on core consulting and assessment activities.

Scale indicators5 records

Recent moves9 records

Expansion highlights6 records

Broad incumbents

• Mandiant (Google Cloud): Mandiant, now part of Google Cloud, is a leading incident response and cyber threat intelligence firm with adjacent offensive security services. A scaled incumbent that competes for high-end enterprise IR and red team engagements.
• Trustwave: Trustwave is a global cybersecurity services and managed security provider offering penetration testing, MDR, and consulting. Competes with ERNW in the offensive security segment but at much broader scale.
• NCC Group: NCC Group is a UK-listed global cybersecurity services firm with extensive offensive security, assurance, and software resilience practices. A larger, broad incumbent that competes for the same enterprise security testing mandates as ERNW.

Direct peers

• X41 D-Sec: X41 D-Sec is a German boutique cybersecurity firm offering penetration testing, source code audits, and security research. Comparable in size, geographic base, and service mix to ERNW.
• Bishop Fox: Bishop Fox is a US-based offensive security firm known for research-driven penetration testing and red teaming. Comparable boutique positioning, deep technical reputation, and enterprise customer base.
• Pen Test Partners: Pen Test Partners is a UK-based independent penetration testing firm with strong IoT and connected-device practices. Comparable boutique model with overlapping specialization in embedded/IoT security.
• SRLabs (Security Research Labs): SRLabs is a Berlin-based security research and consulting firm covering IoT, mobile, telecom, and embedded systems security. Strong overlap with ERNW's IoT/embedded/medical device practices and similar boutique positioning.
• Cure53: Cure53 is a Berlin-based boutique security consultancy specializing in web, browser, and applied cryptography penetration testing with a similar high-expertise, research-driven culture. Closely comparable in size, model, and reputation for deep technical research.
• modzero: modzero is a Switzerland-based independent security research and consulting firm providing penetration tests, code audits, and incident response. Comparable boutique independent model with strong research orientation.
• SEC Consult: SEC Consult is a European cybersecurity consulting firm with comparable service portfolio (penetration testing, red teaming, IoT/embedded security, incident response) and similar boutique scale. Most directly comparable peer given shared DACH origins and offensive-security focus.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/ernw-gmbh

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Subsidiaries3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ERNW