msecure

What msecure does

msecure GmbH is a privately held, owner-managed consulting firm headquartered in Oberhaching near Munich, Germany, founded in 2016. It specializes in data protection (Datenschutz) and information security (Informationssicherheit) advisory for the German Mittelstand, with particular depth in healthcare (hospitals, nursing facilities, pharmacies), education (schools and universities), and IT/information service providers. Services cover external Data Protection Officer (DSB) and Information Security Officer (ISB) mandates, GDPR/DSGVO implementation, ISO 27001 ISMS implementation, TISAX/VDA ISA preparation for the automotive supply chain, penetration testing, license audits, IT due diligence, IT law advisory, and the proprietary ISP27 audit framework for data protection management systems. The company bundles in security assessment services such as a phishing attack simulator, a website compliance scan, and outside-in cyber security scoring.

The firm's offerings are predominantly human-delivered professional services, with one distributed software component: Privacysoft, a cloud-based GDPR-compliant data protection management SaaS developed by Projekt29 and resold by msecure with implementation support (€468/year per primary organization). The company also runs the EU-Datenschutzkoordinator training program, a certification course offered in-person (€548/participant) and via live webmeeting (€450), with a special SMB rate of €395 through the Mittelstandsförderer initiative. Pricing for consulting engagements is individually quoted and structured as monthly retainers or project-based fees. Distribution is direct and on-site for most mid-market engagements, complemented by remote/web-based delivery and channel partnerships for the pharmacy vertical (Deutscher Apotheker Verlag) and the Privacysoft resale. The team is small — approximately 9-10 named professionals — led by Managing Directors Götz Blechschmidt and Lilian Halex. No external funding, parent company, or subsidiary structure has been disclosed.

Name

msecure

Legal name

msecure GmbH

Website

https://msecure.de

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

1–10 employees

Short description

msecure GmbH is a German owner-managed consulting firm that advises mid-sized organizations on data protection (DSGVO), information security, and ISO 27001/NIS-2 compliance, with vertical focus on healthcare, education, and IT service providers.

Ownership category

akta.pro rank

Product category

Cybersecurity and Data Protection Consulting

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM)

akta.pro secondary industries

Vulnerability Management, Pen Testing & Attack Surface Management (ASM) (HLACAJAN), Email Phishing & BEC Protection (HDADAKAB)

Keywords

• Data protection consulting
• Information security advisory
• GDPR compliance services
• ISO 27001 consulting
• Cybersecurity consulting

Headquarters

HQ city

Oberhaching

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Advisory/Consulting Services: Core revenue stream from consulting engagements including external data protection officer (DSB) mandates, information security officer (ISB) roles, audits, gap assessments, and project-based advisory. Services are delivered on-site or via web meeting. Pricing is individually calculated based on organization size, complexity, and scope of services. Billed via monthly retainer/pauschalen (flat-rate monthly fees) or project-based fees.
2. Training and Education Programs: Revenue from instructor-led and webinar-based training programs including the EU-Datenschutzkoordinator certification course. Pricing: €548 + VAT per participant for in-person training; €450 + VAT for live webmeeting; special SMB pricing at €395 + VAT. Additional revenue from webinars and awareness training sessions.
3. Software Resale - Privacysoft: Resale of Privacysoft, a GDPR-compliant data protection management SaaS software. Priced at €468/year for the primary organization and €348/year per additional subsidiary/affiliate. Revenue generated through referral and resale to consulting clients.
4. Phishing Simulation Services: Fees for phishing attack simulation campaigns, including setup, execution, reporting, and ongoing monitoring. Offered in multiple service packages. Revenue recognized per campaign or as part of ongoing awareness programs.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels5 records

Core offering

msecure is a German consulting firm providing information security and data protection (Datenschutz) advisory services to mid-sized organizations (German Mittelstand), particularly in healthcare, education, and IT services. Core offerings include external Data Protection Officer (DSB) and Information Security Officer (ISB) mandates, ISO 27001 ISMS consulting and TISAX preparation, GDPR compliance projects, penetration testing, phishing simulations, cyber security scoring, IT audits, and the proprietary ISP27 audit framework, delivered on-site or via web meeting with retainer or project-based pricing. The firm also resells Privacysoft, a GDPR-compliant data protection management SaaS, and runs the EU-Datenschutzkoordinator certification training program.

Product overview

msecure is a German consulting company focused on information security and data protection for mid-sized organizations (Mittelstand) with high requirements, particularly in healthcare, education, and IT service sectors. The company offers a portfolio of consulting services alongside one software product: Privacysoft, a cloud-based data protection management software developed by Projekt29 (not by msecure) hosted in German ISO 27001-certified data centers, which msecure distributes and supports with implementation assistance, training, and vouchers. All other offerings are consulting engagements including external data protection officer (DSB) and information security officer (ISB) services, security assessments (Basis-Checks for data protection and IT infrastructure), project implementations (Datenschutzprojekte, ISP27 audit framework), specialized testing services (Penetrationstest, Phishing-Attack-Simulator, Cyber Security Website Scan, Cyber Security Scoring), and training programs (EU-Datenschutzkoordinator certification). The company also provides advisory services for specific regulations (NIS-2, EU-Regulatorik) and industry verticals (Automotive/TISAX, Healthcare, Education).

Differentiator

Problem solved

Functional benefit

Products and services

• Externer Datenschutzbeauftragter (External Data Protection Officer / DSB) External Data Protection Officer service providing organizations with competent self-control expertise as required by German law (mandatory from 10 employees). Includes competence and experience in data protection, current legal requirements, and regular management reports; intended for German organizations across healthcare, education, and IT sectors.
• Externer IT-Sicherheitsbeauftragter (External IT Security Officer / ISB) External information security officer service for organizations lacking internal expertise. Includes systematic vulnerability detection, ongoing threat intelligence, and implementation of protective measures; targets mid-sized German companies needing dedicated ISB functions.
• Phishing-Attack-Simulator Security awareness training service that simulates realistic phishing attacks on client organizations across three difficulty levels (easy, medium, hard), measures employee click rates, and produces statistical campaign reporting with group-based segmentation.
• Cyber Security Website Scan Automated website scanning service that analyzes websites and subpages for privacy compliance, transport encryption, consent platforms, tracking mechanisms, third-party services, and data transfers outside the EU; combines automated scans with expert analysis and reporting.
• Cyber Security Scoring Outside-in analysis service that collects publicly available information about an organization's IT security posture from the internet, producing a risk list and scoring report with expert commentary to identify vulnerabilities and attack vectors.
• Basis-Check Datenschutz Initial data protection assessment evaluating existing documents, evidence, and processes through interviews, system checks, and on-site inspections; delivers a consulting report with prioritized recommendations for improvement.
• Basis-Check IT-Infrastruktur IT infrastructure assessment by auditors and IT experts analyzing IT environments for stability and security; produces a report with prioritized risks and tailored recommendations.
• Datenschutzprojekte Data protection implementation project building essential documentation, guidelines, employee agreements, processor contracts, and technical/organizational measures within approximately 3 months.
• Datenschutzmanagementsystem ISP27 ISP27 is a proprietary data protection management audit framework developed by msecure, aligned with the High-Level Structure (HLS) of ISO standards and incorporating GDPR-specific requirements. It supports certification of client data protection management systems through independent verification, and is also licensed to other consulting firms.
• Ausbildung zum EU-Datenschutzkoordinator Training program certifying EU Data Protection Coordinators; covers GDPR essentials, roles and responsibilities, processing registers, processor agreements, technical measures, and data protection processes. Available as in-person training (€548 + VAT per participant) or live webinar (€450 + VAT); SMB special rate €395 + VAT under Mittelstandsförderung.
• Notfallmanagement / Notfallkonzept IT emergency management consulting covering availability planning, responsibilities, contingency options, recovery plans, capacity management, backup concepts, virus protection, and emergency exercises.
• Lizenz-Audit Neutral software license audit identifying savings potential, action requirements, and alternatives by detecting unused software, balancing capacity, and recommending optimal license models.
• Penetrationstest Security testing service simulating multi-stage attacks including OSINT research, on-site interviews, simulated attacks on IT infrastructure, detailed reporting, and both announced and unannounced follow-up tests.
• IT-Systemprüfung (IDW) IT system audit under IDW standards supporting financial statement audits by evaluating IT-supported processes, applications, infrastructure, and organization to identify control risks in financial reporting.
• IT Due Diligence IT due diligence advisory analyzing business processes and key data of target companies to assess integration feasibility, future security, and scalability of IT systems for investment decisions.
• IT-Recht IT law advisory covering data and trade secret protection, trademark law for domains and e-commerce, IT contract design, digitalization and commercial IP rights, and international data protection questions.
• ISO 27001 Beratung ISO 27001 consulting guiding organizations through Information Security Management System (ISMS) implementation including gap analysis, risk assessment, documentation, staff training, and certification preparation.
• Automotive — VDA ISA & TISAX Automotive sector security assessment and TISAX certification preparation using the VDA ISA questionnaire framework based on ISO 27001 controls plus industry-specific requirements; intended for automotive suppliers.
• EU-Regulatorik Beratung Neutral and independent advisory for EU regulatory compliance including AI Act, Cyber Resilience Act, NIS-2, and other EU-wide directives; helps organizations understand and implement these requirements.
• Privacysoft (resold SaaS) Cloud-based GDPR-compliant data protection management SaaS providing processing activity registers, technical and organizational measures documentation, and processor agreements; distributed by msecure with implementation support, training, and free test vouchers. Priced at €468/year per primary organization and €348/year per additional subsidiary.

Quantifiable outcome

• Phishing click rates typically ~10% even for easily identifiable phishing emails, demonstrating the need for systematic awareness training
• +3 more outcomes

Named customers6 records

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Nine partnerships are on record, tiered core and minor.

• Deutscher Apotheker VerlagcoreStrategic or Co-development PartnerPartnership in which msecure supports the German pharmacist association's member pharmacies with data protection implementation. Many essential pharmacy processes have been prepared by msecure experts as templates. msecure offers lectures, training sessions, and telephone consulting for pharmacy operations.
• Allianz für Cybersicherheit (ACS)coreStrategic or Co-development Partnermsecure is a member of the Allianz für Cybersicherheit (Alliance for Cybersecurity), a German initiative coordinated by the BSI (Bundesamt für Sicherheit in der Informationstechnik) to strengthen cybersecurity across German organizations.
• GDD (Gesellschaft für Datenschutz)coreOthersmsecure is a member of GDD (Gesellschaft für Datenschutz), a professional association for data protection practitioners in Germany. GDD promotes professional exchange and further education in data protection.
• BvD (Berufsverband der Datenschutzbeauftragten Deutschlands)coreOthersmsecure is a member of BvD, the professional association for data protection officers in Germany. The association represents the interests of DPOs and promotes professional standards.
• Mittelstandsinitiative / MittelstandsförderercoreOthersmsecure is recognized as a 'Mittelstandsförderer' (SME Promoter), a designation awarded through the Mittelstandsinitiative. The company also participates in the EU-Digitalbonus Bayern funding program.
• Baker TillyminorGTM or Marketing PartnerListed as a supporter and initiative partner of the EU-Datenschutzkoordinator training program. Baker Tilly is an international auditing and consulting firm.
• Evernine Group (Evernine)minorStrategic or Co-development PartnerListed as a supporter of the EU-Datenschutzkoordinator training initiative. Evernine Group provides web design services for msecure. The COO of Evernine Group provided a testimonial reference for the training program.
• IS4ITminorGTM or Marketing PartnerListed as a supporter/initiative partner of the EU-Datenschutzkoordinator training program. IS4IT is an IT services company.
• OCG (Austrian Computer Gesellschaft)minorGTM or Marketing PartnerListed as a supporter/initiative partner of the EU-Datenschutzkoordinator training program. OCG is an Austrian professional association for computer science.

Scale indicators2 records

Recent moves6 records

Expansion highlights4 records

Broad incumbents

• KPMG Germany: Big 4 firm with a substantial German cybersecurity, privacy, and ISO 27001 advisory practice serving enterprise and mid-market clients. A broad incumbent that competes for many of the same mandates msecure pursues, but at significantly greater scale.
• TÜV SÜD: Global certification and testing giant offering ISO 27001, TISAX, and cybersecurity advisory services across Germany and internationally. Competes in the same certification-adjacent consulting space but operates as a broad, multi-vertical incumbent.

Regional players

• Schalast & Partner: Frankfurt-based law firm with a data protection and IT compliance practice focused on German Mittelstand and regulated industries. Comparable on GDPR advisory for mid-market, but with a legal-services positioning rather than technical cybersecurity consulting.
• Peters, Schönberger & Partner: Munich-based law firm with a dedicated data protection and IT law practice serving German mid-market and enterprise clients. Adjacent to msecure's IT-Recht advisory line and competes for similar mandates, but with a legal-services lens.

Direct peers

• GRC Partner GmbH: German GRC and information security consultancy offering ISO 27001, ISMS implementation, and data protection advisory. Closely comparable to msecure on service mix, regulatory focus, and Mittelstand customer base.
• Dataguard GmbH: German data protection and information security consultancy offering external DPO mandates, ISO 27001 support, and compliance tooling. Closely aligned with msecure on service portfolio, DACH focus, and mid-market customer base.
• Corporate Trust: Munich-headquartered business risk, crisis management, and data protection consultancy providing external DSB services and cybersecurity advisory to mid-market German companies. Comparable in geography, service lines, and target segment.
• Datenschutzkanzlei: One of the most established German DSB-as-a-service and data protection consulting firms, serving mid-market and enterprise clients across Germany with a similar external data protection officer and GDPR advisory model. Directly comparable in service mix, vertical coverage, and Mittelstand focus.
• DORNBACH GmbH: German mid-market accounting, tax, and consulting firm with a data protection advisory practice serving SMEs and Mittelstand clients. Overlaps with msecure on external DSB services for the same target customer profile.

Emerging players

• Proliance GmbH: Munich-based GDPR and data protection management software + services provider. Comparable in that it sits at the intersection of privacy SaaS and advisory, but with a more software-led GTM that overlaps with msecure's Privacysoft resale line.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks6 records

Key highlights6 records

Customer concentration

• Facebookfacebook.com/msecuregmbh
• LinkedInlinkedin.com/company/msecure-gmbh

Revenue estimate

Valuation estimate

Number of profiles

Profiles10 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about msecure