actago

What actago does

actago GmbH is a German limited liability company headquartered in Landau an der Isar, Bavaria, that delivers subscription-based consulting and proprietary SaaS software for data protection (Datenschutz), information security (Informationssicherheit), AI compliance (KI-Beratung), and whistleblower protection (Hinweisgebersystem). The firm primarily serves German municipalities and public authorities, small-to-mid-sized enterprises, and — through its March 2025 acquisition of insidas GmbH & Co. KG — universities and higher education institutions. Public-sector mandates such as the DPO obligation under Art. 37 DSGVO and BSI IT-Grundschutz requirements, together with private-sector drivers including NIS2, ISO 27001, TISAX, and VdS 10000 certifications, anchor its addressable market.

The technology stack combines four proprietary cloud-delivered products: the Security Suite (automated vulnerability management with CVE cockpit, penetration testing, network anomaly detection, intrusion detection/prevention, asset inventory, and automated patch management); the actago whistleblower system (encrypted reporting, case management, multilingual support, whitelabel option, integrated Ombudsperson review, hosted on ISO 27001-certified German servers); the Kom-E-Learn e-learning module for awareness training including AI Act content; and the my.actago customer portal for compliance documentation. Delivery is turnkey and cloud-based, with no additional on-premise hardware required for Security Suite, and pricing tiers on the whistleblower system scale from €50/month for sub-50-employee organizations up to €175/month for larger entities, with external DPO/ISB consulting starting at €250/month.

Revenue mechanics are predominantly recurring: flat-rate subscriptions for External DPO and External ISB consulting with unlimited time allocation, per-asset pricing for Security Suite, and tiered subscription pricing for the whistleblower platform with optional hourly Ombudsperson services. The go-to-market is sales-led, combining direct outreach, Zoho Bookings-driven consultation scheduling, free twice-monthly webcasts on Security Suite and the whistleblower system, a content marketing engine (blog, newsletter, whitepapers), a formal partner/reseller program for the whistleblower product with whitelabeling, and cross-sell via the actago4IT GmbH managed-IT-services subsidiary. Customer logos skew heavily toward Bavarian municipalities (e.g., Landratsamt Main-Spessart, VG Gunzenhausen, Stadt Miltenberg), with select enterprise and utility clients including Therme Erding, Unterberger GmbH, Stadtwerke Erding, and Hochschule München.

Name

actago

Legal name

actago GmbH

Website

https://actago.de

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

11–50 employees

Short description

actago GmbH is a German consulting and software company delivering subscription-based data protection, information security, AI compliance, and whistleblower protection services. It serves municipalities, SMEs, corporations, and universities across Germany via proprietary cloud software including its Security Suite and Hinweisgebersystem.

Ownership category

akta.pro rank

Product category

Compliance and Information Security Consulting

NAICS

Computer Systems Design and Related Services (54151), Custom Computer Programming Services (541511)

SIC

Services-Management Consulting Services (8742), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)

akta.pro secondary industries

Responsible AI, AI Governance & Compliance Services (BPAEAHAJ), Cloud & SaaS Security Awareness (e.g., M365/Google Workspace) (EDABAGAG), Model Governance, Risk & Compliance (GRC) Platforms (HDAAAKAA)

Keywords

• Data protection consulting
• Information security consulting
• GDPR compliance services
• Whistleblower protection software
• Vulnerability management platform

Headquarters

HQ city

Landau An Der Isar

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. External DPO Consulting (Datenschutzberatung): Ongoing consulting engagement as external data protection officer, with a flat-rate model offering unlimited time allocation. Includes annual audits, GAP analysis, document management, employee training, and regulatory compliance support.
2. External ISB Consulting (Informationssicherheit): External information security officer consulting with a flat-rate subscription model. Includes ISMS implementation, risk analysis, vulnerability management, annual GAP analysis, and 24/7 incident response support.
3. Whistleblower System Subscription: Monthly subscription pricing tiered by organization headcount (starting at €50/month for <50 employees). Includes optional Ombudsperson hours on a per-hour basis.
4. Security Suite Software: Automated security vulnerability management software. Priced per asset/endpoint managed, with automated penetration testing, CVE scanning, and real-time monitoring capabilities.
5. AI Consulting (KI-Beratung): Consulting engagement covering AI Act compliance, from potential analysis through official AI officer appointment. Includes ongoing compliance monitoring for EU AI Regulation.
6. Microsoft 365 Compliance Consulting: Specialized consulting for Microsoft 365 compliance configuration, covering data protection settings, GDPR compliance, and Copilot integration.
7. Phishing Simulation & Social Engineering: Security awareness services including phishing simulations, social engineering campaigns, and related training. Delivered via Kom-E-Learn e-learning platform or in-person.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels6 records

Core offering

actago provides combined consulting and software solutions for data protection (GDPR/DSGVO), information security (BSI IT-Grundschutz, ISO 27001, TISAX), AI compliance (EU AI Act), and whistleblower protection (HinSchG). The company delivers turnkey compliance services via flat-rate subscriptions backed by proprietary SaaS platforms including the Security Suite vulnerability manager, the actago whistleblower system, and the Kom-E-Learn e-learning module.

Product overview

actago is a German consulting and software company offering a combined portfolio of advisory services and software solutions focused on data protection, information security, and compliance. The consulting services include GDPR compliance consulting (Datenschutzberatung), information security consulting (Informationssicherheit), AI regulation consulting (KI-Beratung), Microsoft 365 compliance consulting, and social engineering awareness training. The software solutions consist of the Security Suite (automated vulnerability management and penetration testing platform), actago whistleblower (digital whistleblowing system with optional ombudsman), phishing simulation, and Kom-E-Learn e-learning module. The company also operates actago4IT GmbH as a subsidiary providing managed IT services. The products are offered as both standalone consulting services and integrated software tools, with the Security Suite serving as the flagship software platform for continuous security monitoring.

Differentiator

Problem solved

Functional benefit

Brands

• actago whistleblower: Digital whistleblower system with personal ombudsman for professional processing of reports, made and hosted in Germany.
• actago Security Suite
• Kom-E-Learn
• my.actago

Products and services

• actago Security Suite All-in-One automated security platform providing vulnerability management, penetration testing, CVE monitoring, network anomaly detection, intrusion detection/prevention (IPS), asset inventory, automated patch management, and real-time security dashboards. Priced per asset/endpoint managed and delivered via cloud with one-click installation.
• actago whistleblower (Hinweisgebersystem) Digital whistleblower system with encrypted reporting, case management dashboard, FAQ module, multilingual support, whitelabeling capability, and integrated Ombudsperson legal review service. Cloud-hosted on ISO 27001 certified German servers with monthly subscription pricing tiered by organization headcount.
• Datenschutzberatung (External DSB) External data protection officer (Datenschutzbeauftragter) consulting under a flat-rate subscription model with unlimited time allocation, including annual audits, GAP analysis, document management, employee training, and regulatory compliance support. Starting from €250/month.
• Informationssicherheit (External ISB) External information security officer consulting with a flat-rate subscription model including ISMS implementation, risk analysis, vulnerability management, annual GAP analysis, and 24/7 incident response. Supports ISO 27001, TISAX, B3S, and VdS 10000 certification. Starting from €250/month.
• KI-Beratung (AI Consulting) Consulting engagement covering EU AI Act (KI-VO) compliance, from potential analysis through official AI officer appointment, including ongoing compliance monitoring for high-risk AI systems (mandatory obligations from August 2026).
• Microsoft 365 Compliance-Beratung Specialized consulting for Microsoft 365 compliance configuration, covering data protection settings, GDPR compliance, and Microsoft 365 Copilot integration.
• Phishing Simulation Security awareness service providing phishing simulations with customized scenarios to measure employee sensitivity levels, followed by individualized training for handling fraudulent emails. Delivered via Kom-E-Learn platform or in-person.
• Social Engineering Individualized social engineering awareness campaigns covering phishing, vishing, and manipulation tactics to train employees against identity-spoofing and fraudulent transaction attempts.

Quantifiable outcome

• External DPO with €5M liability coverage included in standard flat-rate service
• +4 more outcomes

Named customers21 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Five partnerships are on record, tiered core and minor.

• insidas GmbH & Co. KGcoreStrategic or Co-development Partner · 1 March 2025insidas GmbH & Co. KG became part of the actago group in March 2025, extending actago's customer portfolio specifically to include universities and higher education institutions. insidas brings specialized expertise in academic data protection and information security requirements.
• IT-Sicherheitscluster e.V.minorOthersActive membership in the IT Security Cluster (IT-Sicherheitscluster e.V.), a German network of IT security companies and professionals. Signals industry engagement and professional networking.
• BvD e.V. (Berufsverband der Datenschutzbeauftragten Deutschlands)minorOthersMember of the German Professional Association of Data Protection Officers (BvD e.V.). Signals professional credibility and compliance with professional standards.
• Allianz für Cyber-Sicherheit (Cyber-Sicherheitsagentur des BSI)minorOthersParticipant in the Alliance for Cyber-Security (Allianz für Cyber-Sicherheit), initiated by the German Federal Office for Information Security (BSI). Provides access to cyber security resources, best practices, and network for threat intelligence.
• actago4IT GmbHcoreStrategic or Co-development PartnerSister company and IT services subsidiary of actago GmbH, providing IT'ler as a Service, Managed Services, Backup as a Service, 360° IT Support, and Digitalization Consulting. Emerged from actago's long-standing experience. Cross-sells IT services to actago's compliance consulting clients.

Scale indicators5 records

Recent moves8 records

Expansion highlights6 records

Broad incumbents

• Controlware GmbH: Established German managed security services provider and IT infrastructure integrator with a broad portfolio across networking, cybersecurity, and data center. Broader incumbent overlapping with actago's Security Suite and information security consulting but at significantly larger scale and enterprise focus.
• NAVEX Global: US-headquartered GRC and ethics-and-compliance software vendor, best known for whistleblower hotline and case management. Comparable to actago's Hinweisgebersystem product as an established global competitor entering the German HinSchG-mandated market.
• OneTrust: US-headquartered trust intelligence platform spanning consent, privacy, GRC, and ethics/whistleblower software with significant EU presence. Comparable to actago's whistleblower and data protection software modules as a global SaaS incumbent expanding into the German market.
• PwC Germany: Big 4 advisory firm offering enterprise-scale data protection, cybersecurity, NIS2, AI governance, and risk consulting across Germany. Comparable to actago on the consulting side of the GRC portfolio but serves upper-mid-market and enterprise customers that actago does not target.
• Bechtle AG: Listed German IT services and systems integrator with comprehensive cybersecurity, managed services, and cloud offerings. Overlaps with actago's Security Suite-adjacent IT-security consulting and with actago4IT subsidiary's managed services, but at much larger enterprise scale.

Direct peers

• Datenschutz Nord GmbH: German data protection and information security consulting firm offering external DPO services, ISMS support, and compliance software. Closely comparable to actago in vertical mix (public sector + SMEs), German-only focus, and bundled consulting-plus-software model.
• Business Keeper GmbH: Berlin-based provider of digital whistleblower and case-management software for HinSchG compliance. Directly comparable to actago's whistleblower product as a German HinSchG-focused SaaS competitor.
• EQS Group AG: Munich-based provider of compliance, whistleblower, and corporate-governance SaaS, including the EQS Integrity Line whistleblower platform. Comparable to actago on the whistleblower and integrity/compliance software side, with a stronger SaaS-only positioning and broader European footprint.
• SySS GmbH: Tübingen-based German security consulting firm specializing in penetration testing, red teaming, and security audits. Comparable to actago on the information-security consulting side and as a German mid-market-focused technical security service provider.
• Greenbone AG: German vendor of open-source-based vulnerability management and CVE scanning software. Directly comparable to actago's Security Suite on automated vulnerability management and CVE monitoring for German mid-market and public-sector customers.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Facebookfacebook.com/actago.de
• LinkedInlinkedin.com/company/actago-gmbh
• Instagraminstagram.com/actago_gmbh

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Subsidiaries3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about actago