Secuway

What Secuway does

Secuway GmbH is a privately held German IT security consulting firm headquartered in Krefeld, Germany, registered as a Gesellschaft mit beschränkter Haftung (GmbH) with the commercial register (Handelsregister HRB 5021). The company provides specialized information security and data protection advisory services to German and international enterprise clients, with explicit positioning around national and international standards including ISO 27001 and GDPR (DSGVO). Its service portfolio is organized into four interconnected practice areas: Security Management & Datenschutz (governance, risk management, policies, and guidelines); Compliance & Outsourcing (supplier audits and security assessments for outsourcing and cloud providers); Projektbegleitung (acting as "Project Security Officer" across the software development lifecycle); and Infrastruktur & Netzwerksicherheit (technical implementation for network, datacenter, mobile, and virtual system security).

There is no proprietary software platform; the underlying offering is professional consulting services delivered through direct, project-based engagements. Secuway's go-to-market relies on direct enterprise outreach and referrals rather than channel partners, and pricing is quote-based and tailored to project scope. The customer base spans large enterprises across telecommunications (fixed-line and mobile operators), insurance (notable insurance companies), industrial conglomerates, public administration and military agencies, and publishing/media — a horizontal segment strategy. Marcus Haas serves as managing director, headcount is reported in the 11–50 range, and the firm has been operating for more than 10 years based on stated team experience. No external funding, subsidiaries, partnerships, M&A activity, or parent-company relationships are disclosed.

Operationally, the business exhibits the profile of a founder/management-owned German SME consulting boutique: active website, single headquarters location, limited public marketing footprint, no disclosed revenue, no app or API surface, and no social media presence beyond what appears on the corporate site. The revenue model is entirely professional-services based, with revenue generated from consulting engagements and ongoing advisory mandates. The combination of multi-vertical enterprise reach, a standards-driven (ISO 27001/DSGVO) service architecture, and technical implementation capability suggests a positioning as a full-stack security advisor rather than a narrow specialist or product vendor.

Name

Secuway

Legal name

Secuway GmbH

Website

https://secuway.de

Company type

Private

Operating status

Operating

Headcount range

11–50 employees

Short description

Secuway GmbH is a Krefeld-based German IT security consulting firm that delivers information security, data protection, compliance, and infrastructure security advisory services to enterprise clients across telecommunications, insurance, industrial, government, and media sectors.

Ownership category

akta.pro rank

Product category

IT Security Consulting

NAICS

Management, Scientific, and Technical Consulting Services (5416), Computer Systems Design and Related Services (54151), Other Scientific and Technical Consulting Services (54169)

akta.pro industry

PRIMARYBPAKADAG

Security Governance, Risk & Compliance (GRC) Advisory

Business & Public Services/Security & Investigations Services/Security Consulting, Risk Assessment & Audits

SECONDARYBPAKADAA

Enterprise Security Strategy & Program Advisory

Business & Public Services/Security & Investigations Services/Security Consulting, Risk Assessment & Audits

SECONDARYBPAEAAAL

Cybersecurity Architecture & Security Integration

Business & Public Services/IT & Digital Services (Managed Services, Systems Integration)/IT Consulting & Systems Integration

Keywords

• IT security consulting
• Information security advisory
• GDPR compliance consulting
• ISO 27001 consulting
• Infrastructure security services

Headquarters

HQ city

Krefeld

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Security Consulting Services: Professional consulting services for IT security, data protection, compliance, and infrastructure security. Revenue generated through project-based engagements and ongoing advisory relationships with enterprise clients.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels1 record

Core offering

Secuway GmbH is an IT security consulting firm that sells professional advisory and implementation services covering information security management, data protection (GDPR/DSGVO), ISO 27001-aligned risk management, outsourcing compliance, project security officer support, and infrastructure and network security. Engagements are delivered as project-based consulting and ongoing advisory relationships to German and international enterprise clients across telecom, insurance, industrial, public sector, and media verticals.

Product overview

Secuway is an IT Security Consulting GmbH offering a portfolio of four interconnected consulting service offerings rather than a unified software platform. The core services include Security Management & Datenschutz (security and risk management consulting), Compliance & Outsourcing (supplier and cloud provider security assessments), Projektbegleitung (project security officer services), and Infrastruktur & Netzwerksicherheit (technical infrastructure security implementation). These services are designed to work together to provide comprehensive information security consulting from policy development through technical implementation.

Differentiator

Problem solved

Functional benefit

Products and services

• Security Management & Datenschutz

Named customers5 records

Segments1 record

Ideal customer profiles1 record

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Scale indicators1 record

Recent moves1 record

Expansion highlights2 records

Others

• Computacenter AG & Co. oHG:

Direct peers

• usd AG: German IT security consulting boutique specializing in penetration testing, PCI DSS, ISO 27001, and GRC advisory for enterprise clients. Closely comparable in being a Germany-based security consultancy of similar scale serving regulated enterprises with GRC and technical security services.
• Akquinet AG: German IT consulting firm headquartered in Hamburg with security, compliance, and software development practices serving mid-market and enterprise clients. Closely comparable in size range, service mix (security consulting, compliance, project support), and DACH focus.
• HiSolutions AG: Berlin-based German IT security and risk management consultancy offering GRC advisory, ISO 27001, and security architecture services. Comparable in size range, GRC-focused service portfolio, and DACH enterprise/government client base.

Broad incumbents

• TÜV SÜD Management Service GmbH: Global testing, inspection and certification body with strong German ISO 27001 audit and information security advisory practice. Comparable because both certify-support and advise enterprises on ISO 27001 and GRC, but TÜV SÜD operates at much greater scale across many disciplines.
• Deutsche Telekom Security (T-Systems): Telecommunications incumbent's enterprise security arm, providing managed security, consulting, and compliance services across DACH. Comparable in serving large German telecom-adjacent and regulated enterprises, though far larger and product-led.
• Allgeier SE: German IT consulting group with security and compliance service lines serving enterprise clients across DACH. Comparable in GRC/security consulting focus but operates at greater scale via multiple acquired specialist firms.
• secunet Security Networks AG: Germany's leading listed cybersecurity specialist serving government, defense, and critical infrastructure. Comparable because both operate in German IT security consulting with federal/public-sector clients, though secunet is far larger, product-led, and publicly traded.
• Sopra Steria (Germany): European IT services group with a German cybersecurity practice advising large enterprises and public sector clients on security and compliance. Comparable in targeting enterprise/government GRC work, though broader in scope and pan-European in footprint.
• KPMG Germany (Cyber & Tech Risk): Big Four advisory practice offering cybersecurity consulting, ISO 27001 readiness, and data protection services to large German enterprises. Comparable in service scope (GRC, ISO 27001, DSGVO) and client segments, though substantially larger and part of a global audit/consulting network.

Market position

Weaknesses5 records

Competitive moat3 records

Key risks6 records

Key highlights5 records

Customer concentration

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Secuway