BOSS IT

What BOSS IT does

BOSSIT is a Belgian cybersecurity services provider operating as a trading brand of CREIT BV, headquartered in Bornem, Belgium. Founded in 2013, the firm offers ethical hacking, penetration testing, vulnerability scanning, and security awareness training to Belgian SMEs, government agencies, healthcare providers, financial institutions, and industrial companies. Named clients include the Vlaamse Overheid (Flemish Government), District09 Gent, Willy Naessens Group, Sporta, and IPC. The team comprises 1–10 employees, with lead practitioner Glenn Bogaerts (Ethical Hacker/Pentester) holding CISSP, OSCP, and PECB Certified NIS2 Lead Implementer credentials, and Evy Talboom serving as Customer Success Officer.

The company's core technology centers on offensive security methodology — manual penetration testing across external, internal, web application, and wireless attack surfaces, combined with automated vulnerability scanning. The Pentest as a Service (PTaaS) product bundles periodic manual testing with daily automated scans for continuous security validation. Through a partnership with Phished announced in February 2023, BOSSIT delivers AI-driven phishing simulations and Behaviour Risk Score (BRS) analytics for security awareness training; the AI capability itself is licensed from Phished rather than developed in-house.

BOSSIT's revenue model blends project-based professional services with recurring subscriptions. PTaaS is sold in monthly tiers from €599 (Lite) to €2,000+ (Custom), while awareness training is priced per seat per month (€1.42–€3.40) on annual contracts. Distribution is direct-to-client via the company website, with Phished serving as a reseller channel for training services. The firm is privately held with no disclosed external funding or investors, and operates exclusively within the Belgian market.

Name

BOSS IT

Legal name

CREIT BV

Website

https://bossit.be

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

1–10 employees

Short description

BOSSIT is a Belgian cybersecurity services provider offering ethical hacking, penetration testing, vulnerability scanning, and AI-driven security awareness training to Belgian SMEs, government agencies, and industrial enterprises via direct sales and a Phished reselling partnership.

Ownership category

akta.pro rank

Product category

Cybersecurity Services (Penetration Testing)

NAICS

Investigation and Security Services (5616)

SIC

Services-Detective, Guard & Armored Car Services (7381)

akta.pro primary industry

Penetration Testing & Red Teaming (BPAKAHAF)

akta.pro secondary industry

Application Security & DevSecOps Services (BPAKAHAJ)

Keywords

• Penetration testing services
• Vulnerability scanning
• Ethical hacking
• Security awareness training
• Cybersecurity consulting

Headquarters

HQ city

Hingene

HQ country

Belgium

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales

Revenue model

1. Penetration Testing Services: One-time and recurring penetration testing engagements including external pentests, internal pentests, web application pentests, and wireless pentests. These are project-based services with custom scoping based on client infrastructure and requirements.
2. Pentest as a Service (PTaaS): Subscription-based pentest service with monthly billing. Clients choose from Lite (€599/month), Business (€799/month), Pro (€1299/month), or custom plans (€2000+/month). Provides recurring revenue through retainer-style contracts with flexible frequency and scope.
3. Security Awareness Training: User awareness training and phishing simulation services delivered in partnership with Phished. Tiered per-user monthly pricing (€1.42-€3.4/user/month based on seat count) with annual contracts.
4. Vulnerability Scanning: Automated scanning service for networks, systems, and applications to identify known vulnerabilities and configuration errors.
5. Shared Cyber Security Expert (SCSE): Fractional cybersecurity expert service providing SMEs access to specialized security expertise without the cost of a full-time employee.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels4 records

Core offering

BOSSIT provides offensive cybersecurity services for Belgian organizations, including external, internal, web application, and wireless penetration testing, automated vulnerability scanning, and security awareness training with phishing simulations. Its portfolio also includes Pentest as a Service (PTaaS) subscription-based recurring testing and a Shared Cyber Security Expert (SCSE) advisory offering for SMEs needing fractional cybersecurity leadership.

Product overview

BOSSIT is a cybersecurity and penetration testing services company offering a portfolio of security assessment services. The core offerings include various types of penetration tests (External, Internal, Web Application, and Wireless), Vulnerability Scanning, and the subscription-based Pentest as a Service (PTaaS). These technical security services are complemented by Security Awareness and Phishing training (in partnership with Phished using AI-driven phishing simulations) and the Shared Cyber Security Expert advisory service. The PTaaS offering combines automated vulnerability scanning with manual penetration testing for comprehensive security evaluation, while the training services leverage AI for personalized phishing simulations and awareness microlearning.

Differentiator

Problem solved

Functional benefit

Products and services

• Vulnerability Scanning Automated scan of networks, systems, and applications to identify known weaknesses, configuration errors, and version-level vulnerabilities for Belgian organizations.
• External Penetration Test Thorough penetration test examining all ICT services offered externally or connected to the internet, identifying exploitable weaknesses in perimeter-facing systems.
• Internal Penetration Test Security assessment of an organization's internal network and systems to identify insider threats and lateral-movement risks originating from within the corporate environment.
• Web Application Penetration Test Comprehensive security assessment of web applications, executed in collaboration with the client's development team to identify and resolve application-layer vulnerabilities.
• Wireless Penetration Test Security testing of wireless networks using White Box, Grey Box, and Black Box approaches to identify weaknesses and assess how easily the wireless network could be breached.
• Pentest as a Service (PTaaS) Subscription-based penetration testing service combining recurring vulnerability scans with scheduled manual pentests on IT infrastructure, systems, and applications, with tiered monthly plans including optional CISO consultation hours and 24/7 monitoring on the Custom tier.
• Security Awareness and Phishing Simulation AI-driven security awareness training and automated phishing simulation service delivered in partnership with Phished, including personalized simulations, microlearning content, and Behaviour Risk Score analytics for organizations.
• Shared Cyber Security Expert (SCSE) Fractional cybersecurity expert advisory service giving small and medium-sized enterprises ongoing access to senior cybersecurity expertise without the cost of a full-time in-house security hire.

Quantifiable outcome

• Claims to reduce phishing risk by up to 96% through user awareness training and phishing simulations
• +1 more outcomes

Named customers5 records

Segments5 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability2 records

Feature4 records

Partnerships

One partnership is on record.

• PhishedcoreTechnology or Integration · 4 February 2023BOSSIT partnered with Phished, a pioneer in AI-driven Security Awareness Training, to offer comprehensive cybersecurity awareness and phishing simulation services. Phished provides an award-winning platform combining automation and neuroscience with personalized phishing simulations. The partnership enables BOSSIT to offer advanced user awareness training, automated phishing simulations, and behavioral risk scoring to their Belgian client base.

Scale indicators4 records

Recent moves5 records

Expansion highlights5 records

Emerging players

• HackerOne: Bug-bounty and penetration testing platform connecting organizations to a global crowd of ethical hackers. Comparable to BOSSIT as an alternative model for offensive security sourcing, particularly for application and external attack surface testing.
• Outpost24: European cybersecurity vendor offering automated vulnerability management and penetration testing services with strong Nordic and Benelux footprint. Overlaps with BOSSIT on vulnerability scanning and external pentest engagements for mid-market customers.
• Phished: Belgian AI-driven security awareness training and phishing simulation platform and BOSSIT's named technology partner. Directly comparable in the Belgian market on the awareness training line and adjacent in the broader human-risk / offensive-security conversation.

Direct peers

• Cobalt: Pentest-as-a-Service platform combining on-demand human penetration testing with a SaaS delivery model. Direct conceptual competitor to BOSSIT's PTaaS subscription offering, targeting tech-forward European and US mid-market customers.
• Secura: Amsterdam-based cybersecurity services firm with strong Belgian operations, offering penetration testing, red teaming, vulnerability assessments, and NIS2 advisory. Closest like-for-like competitor to BOSSIT, serving the same Benelux SME and enterprise market with similar offensive-security positioning.

Broad incumbents

• Deloitte Cyber Risk: Big Four cybersecurity practice offering penetration testing, application security, NIS2 advisory, and managed security at global scale. Competes with BOSSIT for enterprise and government security testing budgets, typically where buyers want a single provider across risk, compliance, and testing.
• NCC Group: UK-listed cybersecurity services and software company with extensive European delivery, providing penetration testing, red teaming, and managed detection services. Competes with BOSSIT for pan-European and large enterprise security testing mandates, often in the same government and regulated verticals.
• Cegeka: Large Belgian-headquartered IT services group with a dedicated security practice offering pentesting, managed security, and compliance services. Competes with BOSSIT for Belgian mid-market and enterprise security testing work but from a much broader portfolio and larger delivery footprint.
• Orange Cyberdefense: Global managed security services provider with significant Belgian presence, offering pentesting alongside SOC, MDR, threat intelligence, and incident response. A typical large-incumbent alternative for enterprise clients that BOSSIT also targets.

Regional players

• Davinsi Labs: Belgian cybersecurity consultancy specializing in offensive security, red teaming, and managed security services. Direct regional competitor serving the same Belgian enterprise and government buyer profile as BOSSIT.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about BOSS IT