What admeritia does

admeritia GmbH is a German owner-managed security consulting firm founded in 2004 and headquartered in Langenfeld (Rhld.), specializing in IT and OT cybersecurity for industrial control systems. The company targets operators, manufacturers, integrators, and critical-infrastructure owners across the process industry, manufacturing, energy, water, transport, and industrial communications sectors in the DACH region and EU. Its portfolio is organized around five service lines (Security Engineering, Security Management, Security Testing, Incident Response, and Conformity Assessment) delivered through direct sales by consultants and account managers, with a quote-based, project-driven pricing model.

The firm's core technology asset is the Security Engineering Tool (SET), a web-based, model-driven platform for function-level modelling of industrial networks, risk analysis against multiple standards (IEC 62443, ISO 27001, CRA), requirements management, and reporting. SET incorporates proprietary IP developed in part through the BMBF-funded IDEAS project and a "Lighthouse" module for critical-function identification, with both cloud (SaaS) and on-premises deployment options. Security testing methodology is anchored on OSSTMM and MITRE ATT&CK, with OT-specific testing protocols designed to preserve automation availability. Product certification services (Common Criteria, BSZ, ISA/IEC 62443) are delivered through the wholly-owned subsidiary adfidetia, which operates as an accredited TÜV NORD test laboratory.

Revenue is generated through three streams: (i) professional services engagements billed on a project basis; (ii) SET software licensing on a recurring basis; and (iii) certification engagement fees via adfidetia. Pricing is quote-driven and not publicly disclosed. The company positions itself as vendor-independent and "Trusted Advisor," reinforcing demand through thought leadership in standardization committees (DIN, IEC, ISO, ISA, CEN/CENELEC, NAMUR) and community building via the co-organized SECURITY UNTER KONTROLLE congress and the monthly Security-Briefing newsletter.

Name

admeritia

Legal name

admeritia GmbH

Website

https://admeritia.de

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

11–50 employees

Short description

admeritia GmbH is a German owner-managed OT/IT security consulting firm serving industrial automation operators, manufacturers, integrators, and critical-infrastructure owners, offering a proprietary Security Engineering Tool (SET) and accredited product certification via its adfidetia subsidiary.

Ownership category

akta.pro rank

Product category

OT/ICS Cybersecurity Consulting

NAICS

Custom Computer Programming Services (541511), Computer Systems Design Services (541512), Management, Scientific, and Technical Consulting Services (5416)

SIC

Services-Engineering Services (8711)

akta.pro primary industry

OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)

akta.pro secondary industries

Managed OT Security Services (MSSP/MDR for ICS/OT) (HDADAJAN), Control System Cybersecurity for OT (ICS Security, Monitoring, Hardening) (IMAGABAL)

Keywords

• OT security consulting
• ICS cybersecurity services
• Industrial security engineering
• OT penetration testing
• Security risk assessment

Headquarters

HQ city

Langenfeld

HQ country

Germany

HQ region

Europe

Offices6 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Professional Security Consulting Services: admeritia generates revenue primarily through project-based professional consulting services in IT and OT security. Engagements include security engineering (risk assessments, security concepts), security management (ISMS implementation), security testing (penetration testing, audits), incident response, and conformity assessments. Pricing is likely project-based and quote-driven, not publicly disclosed.
2. Security Engineering Tool (SET) Licensing: The SET platform is offered as a licensed SaaS or on-premises tool. A valid license is required to use SET. This represents a recurring software licensing revenue stream alongside the consulting business.
3. Conformity Assessment / Product Certification: Through subsidiary adfidetia (accredited test laboratory of TÜV NORD), admeritia offers product security certification services including Common Criteria, BSZ (Accelerated Security Certification), and ISA/IEC 62443 certification. Revenue is generated from certification engagement fees.

Go-to-market motion1 record

Distribution channels3 records

Marketing channels9 records

Core offering

admeritia GmbH provides professional IT and OT (Operational Technology) security consulting services for industrial control systems (ICS), including security engineering, security management (ISMS), security testing/penetration testing, incident response, and conformity assessment (product certification). The company also develops and licenses the Security Engineering Tool (SET), a web-based, model-driven platform for security engineering and risk analysis in industrial environments. Services are delivered to manufacturers, operators, and integrators of automation technology, primarily in the DACH region.

Product overview

admeritia is a services company offering a portfolio of OT/IT security consulting services, with its primary software product being the Security Engineering Tool (SET). The service offerings include Security Engineering, Security Management, Security Testing, Incident Response, and Conformity Assessment. SET is a web-based, model-driven security engineering platform that supports risk analysis, network modeling, and security documentation. The company's subsidiary adfidetia handles product certification services. The portfolio is designed to provide end-to-end security services for industrial control systems.

Differentiator

Problem solved

Functional benefit

Brands

• adfidetia: Subsidiary specializing in conformity assessment, product certification, and security testing services including Common Criteria, BSZ, ISA/IEC 62443, and CRA compliance.

Products and services

• Security Engineering Consulting service that helps industrial clients transition from security problems to solutions through risk assessment, security concepts, security-for-safety analyses, and recovery concepts using model-based approaches. Targeted at operators, manufacturers, and integrators of automation systems.

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Partnerships

Seven partnerships are on record, tiered core and minor.

• TÜV NORDcoreStrategic or Co-development Partneradmeritia's subsidiary adfidetia operates as an accredited test laboratory of TÜV NORD, providing product security certification services including Common Criteria, BSZ (Accelerated Security Certification), and ISA/IEC 62443 certification. This accreditation relationship enables admeritia to issue technically credible and reproducible product security certifications under the TÜV NORD brand.
• IBF SolutionsminorStrategic or Co-development PartnerListed as a partnership on the admeritia website. IBF Solutions appears in the standardization/partnerships section of the About page.
• Vulkan VerlagcoreStrategic or Co-development Partneradmeritia and Vulkan Verlag jointly organize the SECURITY UNTER KONTROLLE congress, an annual event for the German-speaking industrial security community. admeritia heads the congress advisory board and coordinates the programme content. Both entities are jointly responsible for processing participants' personal data (first and last name, company affiliation) for demographics tracking and networking purposes.
• ISECOM (Institute for Security and Open Methodologies)minorStrategic or Co-development Partneradmeritia references OSSTMM (Open Source Security Testing Methodology Manual) as the basis for its security testing methodology. ISECOM is the organization behind OSSTMM. This represents methodological alignment rather than formal partnership.
• International Society of Automation (ISA)coreStrategic or Co-development Partneradmeritia has deep engagement with ISA through CTO Sarah Fluchs' role as Co-Convenor of ISA/IEC 62443-3-2 and her appointment as ISA Fellow. The company participates in ISA OT Cybersecurity Summit and contributes to ISA standardization work, positioning admeritia as a key contributor to ISA's automation cybersecurity mission.
• NAMUR (Nutzerorganisation Automatisierungstechnik der Prozessindustrie)coreStrategic or Co-development Partneradmeritia participates in NAMUR, the user organization for automation technology in the process industry. NAMUR NE 193 (An Information Model for Automation Security Engineering) was published in 2024 with contributions from admeritia, and the company has published research at NAMUR Hauptsitzung.
• OTCEP (OT Cybersecurity Expert Programme)minorStrategic or Co-development Partneradmeritia participates in OTCEP, an OT cybersecurity expert programme organized by Singapore's Cyber Security Agency. Sarah Fluchs delivered lectures at OTCEP 2022 and 2023 on securing PLC code and turning security by design from myth to reality.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Claroty: Israel/US-based pure-play OT/ICS cybersecurity platform vendor offering visibility, threat detection and risk management. Direct competitor to admeritia in OT security engagement for industrial operators, although admeritia is more consulting-led and Claroty more product-led.
• Dragos: US OT cybersecurity specialist combining OT-specific threat intelligence, incident response and professional services for industrial operators. Highly comparable offering along consulting / response / standards axis.
• Rhebo (Landis+Gyr): German OT network monitoring and anomaly detection specialist, now part of Landis+Gyr. Competes directly with admeritia in the DACH industrial OT security market, especially for network visibility and asset monitoring in critical infrastructure.
• Applied Risk (Accenture): Dutch-origin OT/ICS security consultancy acquired by Accenture; provides risk assessments, penetration testing and compliance services for industrial clients in Europe. Closest European consulting competitor to admeritia.
• Nozomi Networks: US/Swiss OT and IoT cybersecurity vendor with strong presence in critical infrastructure and industrial operators across Europe. Closely comparable customer base (utilities, manufacturing, transport) and overlapping standards-driven value proposition.

Broad incumbents

• TÜV SÜD: Global testing, inspection and certification body with cybersecurity certification schemes (Common Criteria, IEC 62443) and OT advisory services. Direct overlap with admeritia's adfidetia certification arm.
• Siemens Industrial Security: Industrial OEM with substantial in-house OT cybersecurity capabilities (Charter of Trust, internal product security). Competes for large industrial customers but as part of a much broader automation portfolio.
• TÜV Rheinland: Major TIC provider with industrial cybersecurity testing and conformity assessment services, competitive with TÜV NORD-accredited adfidetia on the certification side of admeritia's portfolio.
• secunet Security Networks: Germany's largest pure-play cybersecurity firm, with a growing industrial/OT security practice and SINA platform. Overlaps with admeritia on German enterprise and critical-infrastructure security engagements.

Others

• Fraunhofer IOSB / AISEC: German applied-research institutes working on OT/ICS security, with which admeritia collaborates on standards and publicly funded projects (e.g., IDEAS). Adjacent ecosystem participant rather than a market competitor.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xtwitter.com/admeritia
• YouTubeyoutube.com/channel/UCLlKGAapzpn4qZsiwf4UcLA
• LinkedInlinkedin.com/company/admeritia-gmbh

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about admeritia