What ZITiS does

ZITiS (Zentrale Stelle für Informationstechnik im Sicherheitsbereich) is a non-legal-capacity federal agency of the German Federal Ministry of the Interior (BMI), established by ministerial decree on April 6, 2017. Headquartered in Munich, it operates as the central technical service provider for German federal security authorities — primarily the Bundeskriminalamt (BKA), Bundespolizei (BPol), and Bundesamt für Verfassungsschutz (BfV) — under Germany's Cyber Security Strategy. ZITiS has no enforcement powers of its own and is neither a police nor intelligence agency; its mandate is to research and develop tools, methods, and advisory capabilities that keep these authorities technologically sovereign against rapidly evolving threats.

The agency's portfolio is organized into five core business fields: Digital Forensics (hardware, software, and procedures for extracting digital evidence from devices for legal proceedings); Telecommunications Surveillance (TKÜ) tools and consulting; Cryptoanalysis, including the proprietary Behördenwallet cryptocurrency seizure system used by BKA to seize approximately EUR 23 million in assets from the Hydra darknet marketplace; Big Data Analysis leveraging a high-performance computing cluster and AI/ML applications for predictive analytics, anomaly detection, and named entity recognition; and Digital Services & Portfolio Management. Additional capabilities include UAS/drone forensics developed through the Joint Drone Defense Center (GDAZ) partnership from December 2025 onward, and participation in multinational exercises such as NATO Locked Shields (1st place 2025, 2nd place 2026).

Commercially, ZITiS has no traditional revenue model: it is funded exclusively through the German federal budget via BMI, with annual appropriations approved through the Bundeshaushaltsplan and reviewed by the Bundesrechnungshof. Services are delivered at no cost to recipient agencies. The agency has scaled from founding to approximately 300 staff by early 2023, expanded across multiple Munich-area facilities (NEO building in 2021, Dachau technical site in 2022, planned Neubiberg campus with CODE research institute), and built a research ecosystem through formal cooperation with Universität der Bundeswehr München, Universität zu Lübeck, and Hochschule Mittweida, including an AI PhD program launching autumn 2025.

Name

ZITiS

Legal name

Zentrale Stelle für Informationstechnik im Sicherheitsbereich

Website

https://zitis.bund.de

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

ZITiS is a German federal government agency that researches and develops digital forensics, telecommunications surveillance, cryptoanalysis, and Big Data / AI tools for the country's BKA, Bundespolizei, and BfV security authorities, funded entirely through the federal budget via the Interior Ministry.

Ownership category

akta.pro rank

Product category

Government Cybersecurity Services

NAICS

National Security (928110), Police Protection (92212)

akta.pro primary industry

Cyber Defense & Information Security (National Security) (BPAIAHAE)

akta.pro secondary industries

Network Security Services (Firewall/VPN/ZTNA/SASE Integration) (BPAEAEAG), Cybercrime, Ransomware & Illicit Finance Intelligence (Crypto) (FSADALAL)

Keywords

• Digital forensics services
• Telecommunications surveillance tools
• Cryptoanalysis research
• Big data law enforcement analysis
• Federal cyber security agency

Headquarters

HQ city

Munich

HQ country

Germany

HQ region

Europe

Offices4 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Infrastructure, Operations

Revenue model

1. Government Funding: ZITiS is a non-profit government agency funded by the Federal Ministry of the Interior (BMI). It receives annual federal budget allocations to support security authorities with technology development and research. No commercial revenue model exists.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels9 records

Core offering

ZITiS develops and researches as a central service provider for German federal authorities with security tasks innovative technical solutions, tools, and methods across five business fields: Digital Forensics, Telecommunications Surveillance (TKÜ), Cryptoanalysis, Big Data Analysis (including high-performance computing and AI/ML), and Digital Services & Portfolio Management. The agency operates as a 'Sovereignty Engine' within Germany's Cyber Security Strategy, supporting BKA, Federal Police, and the Federal Office for the Protection of the Constitution without holding any enforcement powers itself.

Product overview

ZITiS operates as a central technical service provider for German federal security agencies, developing innovative technical solutions, tools, and methods rather than commercial products. The core portfolio encompasses five interconnected business fields: Digital Forensics (hardware, software, and procedures for extracting data from electronic devices), Telecommunications Surveillance (tools for TKÜ), Cryptoanalysis (methods for working with encryption, including cryptocurrency seizure), Big Data Analysis (AI/ML-powered tools for processing large datasets), and Digital Services & Portfolio Management (secure digital availability of all tools). ZITiS serves as a 'Sovereignty Engine' within Germany's Cyber Security Strategy, supporting agencies like BKA, Federal Police, and Federal Intelligence Service. The agency has no enforcement powers of its own.

Differentiator

Problem solved

Functional benefit

Products and services

• Digitale Forensik (Digital Forensics) Research and development of specialized hardware, software, and procedures for forensic acquisition and preparation of digital traces from various electronic devices for use in legal proceedings. Includes mobile device forensics, chip analysis, and evidence extraction. Intended for German federal security authorities.
• Telekommunikationsüberwachung (Telecommunications Surveillance - TKÜ) Development of tools, methods, and strategies for telecommunications interception, plus consultation to security agencies on implementation. ZITiS itself does not have TKÜ authority. Intended for BKA, Bundespolizei, and BfV.
• Kryptoanalyse (Cryptoanalysis) Advisory services and technical methods development to help security agencies fulfill their legal tasks despite strong encryption, including the Beh\u00f6rdenwallet for cryptocurrency seizure and analysis. Intended for German federal security authorities.
• Big Data Analyse (Big Data Analysis) Development of tools and methods for handling large data volumes, including high-performance computing infrastructure and AI/machine learning applications for automated data evaluation and pattern recognition. Includes Named Entity Recognition, anomaly detection, predictive analytics, and process automation for federal security authorities.
• Digitale Services & Portfoliomanagement (Digital Services & Portfolio Management) Digital provisioning and further development of ZITiS's software components, tools, and methods. Ensures secure availability, supports continuous internal IT development, and maintains strategic alignment of the product and service portfolio with security authority requirements.
• Beh\u00f6rdenwallet (Government Wallet) Secure cryptocurrency seizure and storage system developed for law enforcement agencies. Generates secure wallets using random number generators, prints keys on PVC cards with security labels, and provides an online application for ordering and managing wallets. Intended for BKA and other German federal authorities conducting cryptocurrency seizure operations.
• UAS Forensik (UAS Forensics / Drohnenforensik) Forensic investigation and deep technical knowledge of unmanned aerial systems (drones), providing essential foundations for detection, identification, and countermeasure development. Delivered as ZITiS's contribution to the Joint Drone Defense Center (GDAZ). Intended for German federal security authorities.

Quantifiable outcome

• Successfully participated in NATO Locked Shields cyber defense exercises, placing 1st in 2025 (Blue Team Germany-Singapur) and 2nd in 2026
• +1 more outcomes

Named customers3 records

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability8 records

Feature6 records

Partnerships

Eight partnerships are on record, tiered core and minor.

• Gemeinsames Drohnenabwehrzentrum (GDAZ)coreStrategic or Co-development Partner · 1 January 2025ZITiS is a key partner in the newly opened Joint Drone Defense Center in Berlin. ZITiS leads the forensics pillar and contributes to R&D in drone detection and defense. A permanent representative will be stationed at the facility starting January 2026.
• Bundeswehr (Cyber- und Informationsraum CIR)coreStrategic or Co-development Partner · 1 January 2023Ongoing collaboration with Bundeswehr's Cyber and Information Domain service. ZITiS participates in NATO LOCKED SHIELDS exercises under Bundeswehr leadership. The collaboration provides ZITiS opportunities to demonstrate capabilities and participate in international cyber defense training.
• Universität zu LübeckcoreStrategic or Co-development Partner · 25 August 2021Research cooperation agreement signed on August 25, 2021 establishing framework for exchange between university and ZITiS, including joint research projects, access to research groups and specialized laboratories, talent development, internship supervision, guest lectures, and specialized courses. First project focuses on Reverse Engineering with emphasis on cryptographic functions and forensic investigations, with 3-year duration.
• Universität der Bundeswehr München (UniBw M)coreStrategic or Co-development Partner · 30 June 2021Research cooperation agreement signed on June 30, 2021 for scientific-technical collaboration focusing on digital forensics, cryptoanalysis, Big Data analysis, and telecommunications surveillance technology. Aims to leverage synergies and build specialized expertise to strengthen cyber capabilities of federal security authorities. A new shared building is planned on the university campus in Neubiberg.
• BitkomminorStrategic or Co-development Partner · 1 January 2021Memorandum of understanding signed to jointly identify future technology trends for security authorities. Collaboration aimed at keeping German security agencies informed of emerging technologies and digital threats.
• UNCOVER Consortium (Horizon 2020)coreStrategic or Co-development Partner · 1 January 2020ZITiS participates in the UNCOVER research project funded by European Commission under Horizon 2020. Project involves 22 partners from 9 European countries. ZITiS contributes to 6 of 9 work packages focusing on steganalysis (detecting hidden data in digital media) for law enforcement. Project duration 36 months with approximately 6.9 million EUR total funding.
• NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE)coreStrategic or Co-development PartnerZITiS participates in annual LOCKED SHIELDS exercises organized by CCDCOE in Tallinn, Estonia. This is the world's largest and most complex multinational cyber defense exercise, allowing ZITiS to test and demonstrate capabilities alongside international partners.
• Hochschule MittweidaminorStrategic or Co-development PartnerHeiko Rittelmeier, ZITiS section leader in Digital Forensics, accepted a professorship for 'General and Digital Forensics' at Hochschule Mittweida starting February 1, 2025. Dual role with 50% time allocation to ZITiS and 50% to professorship, enabling knowledge transfer between academic research and practical applications.

Scale indicators5 records

Recent moves10 records

Expansion highlights6 records

Emerging players

• Cellebrite: Commercial leader in mobile device digital forensics, serving law enforcement globally. ZITiS's digital forensics business field develops comparable capabilities in-house for German federal agencies, positioning the two as adjacent technology developers in the same forensics domain.
• Magnet Forensics: Provider of digital forensics software for law enforcement, including mobile, computer, and cloud investigations. ZITiS's R&D into forensic hardware and software overlaps with Magnet Forensics' commercial product focus.

Broad incumbents

• Palantir Technologies: Big data analytics platform widely deployed by law enforcement and intelligence agencies globally. ZITiS's Big Data Analysis business field develops comparable AI/ML-driven analytics capabilities in-house for BKA, Bundespolizei, and BfV.
• Thales: Global defense and cybersecurity prime with significant operations in Germany. Provides cyber defense, encryption, and intelligence solutions to security authorities, overlapping with several of ZITiS's business fields from a private-sector delivery perspective.
• Cybersecurity and Infrastructure Security Agency (CISA): U.S. federal agency responsible for critical infrastructure cybersecurity and federal network defense. While broader in scope and more focused on civilian resilience, CISA is the closest U.S. analogue to ZITiS's mandate of providing technical capabilities to federal security authorities.

Direct peers

• Netherlands National Cyber Security Centre (NCSC-NL): Dutch national cybersecurity authority under the Ministry of Justice and Security. Comparable mandate supporting central government and critical infrastructure, and a fellow UNCOVER consortium participant alongside ZITiS.
• Bundesamt für Sicherheit in der Informationstechnik (BSI): Germany's federal cybersecurity agency, also under the BMI. While BSI focuses on defensive cybersecurity for government, business, and citizens, ZITiS focuses on offensive and technical R&D for security authorities; together they form the two pillars of Germany's national cyber architecture.
• ANSSI (Agence nationale de la sécurité des systèmes d'information): France's national cybersecurity agency, equivalent in mandate to a combination of BSI and ZITiS roles. Provides the closest cross-country comparison for a federally mandated cyber R&D and operational authority.
• National Cyber Security Centre (NCSC-UK): United Kingdom's national technical authority for cyber incidents, providing advice and support to government, critical infrastructure, and law enforcement. Operates under GCHQ with a comparable blend of technical services and federal security agency support.

Others

• Bundesnachrichtendienst (BND) Technical Division: Germany's federal foreign intelligence service, with which ZITiS's CTO Dr. Jens Römer previously held a senior role. The BND's technical capabilities overlap with ZITiS's surveillance and signals intelligence research, making it a structurally comparable organization within the German security ecosystem.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks7 records

Key highlights7 records

Customer concentration

• Xxing.com/company/zitis
• YouTubeyoutube.com/@ZITiS_Bund
• LinkedInde.linkedin.com/company/zitis

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ZITiS