Ceruno
Ceruno AG is a Swiss managed cybersecurity and IT infrastructure services provider serving mid-market and large enterprises, primarily in Eastern Switzerland. It delivers Security Operations, XDR, SASE, PAM, and Resilient Platform services through Consulting, Engineering, and Operations pillars built on leading vendor partnerships.
- Company typePrivate
- Founded2015
- HeadquartersLichtensteig, Switzerland
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Ceruno does
Ceruno AG is a privately held Swiss managed cybersecurity and IT infrastructure services company founded in 2015 and headquartered in St. Gallen, with additional offices in Chur (Switzerland) and Triesen (Liechtenstein). The company serves mid-market and large enterprises primarily in Eastern Switzerland (Ostschweiz), delivering tailored solutions through three service pillars — Consulting, Engineering, and Operations. As of the input data, Ceruno employs 18 people and serves 30+ customers, positioning itself as the leading regional provider combining Swiss-quality service with deep technical expertise in Zero Trust security architectures.
Ceruno's technology stack is built on best-of-breed third-party platforms integrated under a Zero Trust framework. Core cybersecurity offerings include Extended Detection & Response (XDR) powered by SentinelOne, Privileged Access Management (PAM) via Delinea, and Secure Access Service Edge (SASE) delivered through Cato Networks, complemented by E-Mail Security (Xorlab) and Network Access Control. The Platform pillar features the Resilient Platform managed on Nutanix hyperconverged infrastructure with Cisco ACI Multi-Pod SDN for hybrid-multicloud environments. The company has developed custom AI agent workflows using n8n workflow automation connected to SentinelOne APIs, utilizing Mistral LLM and PostgreSQL memory for SOC automation tasks including agent information retrieval, threat detection, and approval-based deactivation workflows (v2 introduced Model Context Protocol in February 2026). The firm holds three SentinelOne Paladin certifications (the highest partner level) and has 15+ years of Cisco partnership experience.
Ceruno's business model combines recurring managed services subscriptions with project-based professional services. Revenue streams include managed Security Operations (Shared and Managed tiers with optional 8x5 or 24x7 SLA coverage), Consulting engagements (Security Assessments, Virtual CTO, IKT Minimalstandard compliance), Engineering and implementation projects, and ongoing Operations services (Secure Connectivity, Resilient Platform management, Support & SLA at 8x5x4 Basic or 24x7x4 Premium tiers). Pricing is quote-based and tailored. The go-to-market combines direct enterprise field sales through named account managers, strategic technology partnerships with SentinelOne, Cisco, Nutanix, Cato Networks, and Delinea, and the annual Cyber Security Day Ostschweiz (CSDO) event — the third edition of which attracted 170 guests in 2025 — as a regional thought-leadership and demand-generation channel.
Ceruno firmographics
Firmographics- Name
- Ceruno
- Legal name
- Ceruno AG
- Website
- https://ceruno.ch
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Ceruno AG is a Swiss managed cybersecurity and IT infrastructure services provider serving mid-market and large enterprises, primarily in Eastern Switzerland. It delivers Security Operations, XDR, SASE, PAM, and Resilient Platform services through Consulting, Engineering, and Operations pillars built on leading vendor partnerships.
- Ownership category
- akta.pro rank
Ceruno industry classification
Industry- Product category
- Managed Cybersecurity Services
- NAICS
- Security Systems Services (except Locksmiths) (561621), Security Systems Services (56162), Computer Systems Design and Related Services (54151)
- SIC
- Services-Computer Integrated Systems Design (7373), Services-Computer Programming Services (7371)
- akta.pro primary industry
- Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)
- akta.pro secondary industries
- Security Operations Center (SOC) as a Service (BPAEADAB), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)
Keywords
Where Ceruno is headquartered
LocationHeadquarters
- HQ city
- Lichtensteig
- HQ country
- Switzerland
- HQ region
- Europe
Offices3 records
Markets served
Ceruno business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Managed Security Services (Security Operations): Recurring managed security services including 24x7 monitoring, incident response, and SOC operations on a subscription basis. Offered in Shared/Managed tiers with optional 8x5 or 24x7 SLA coverage.
- Consulting Services: Advisory and consulting engagements including Security Assessments, Virtual CTO services, IKT Minimalstandard compliance, Zero Trust architecture planning, and Identity Security consulting.
- Engineering & Implementation: Design and implementation of complex cybersecurity and infrastructure solutions including XDR, SASE, PAM, NAC, SDN, and hybrid multicloud platforms.
- Operations Services: Ongoing operational support including Secure Connectivity, Resilient Platform management, and Support & SLA services (8x5x4 Basic, 24x7x4 Premium).
- Endpoint Security Abonnement (Legacy): Legacy endpoint security subscription service (2022) with Pay-per-Incident and Complete models, now evolved into Security Operations.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Security Assessment Standard - Quick evaluation for organizations with straightforward security needs |
| Other | Multi-year contract | Security Assessment Advanced - Deep-dive analysis for complex IT landscapes with technical controls |
| Subscription | Monthly | Security Operations Shared (formerly Pay-per-Incident) - For customers with own SOC resources |
| Subscription | Monthly | Security Operations Managed - Complete service with full incident management |
| Subscription | Monthly | Support & SLA 8x5x4 Basic |
| Subscription | Monthly | Support & SLA 24x7x4 Premium |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels5 records
Ceruno product offering
Product offeringCore offering
Ceruno AG is a Swiss managed security services provider (MSSP) delivering cybersecurity, connectivity, and infrastructure services to mid-market and large enterprises, primarily in Eastern Switzerland. Its portfolio combines consulting, engineering, and operations services built around partner platforms such as SentinelOne (XDR), Cato Networks (SASE), Delinea (PAM), and Nutanix (HCI). The company runs a 24x7 Security Operations Center, performs Zero Trust architecture projects, and supplements its managed services with custom AI-agent workflows for SOC automation.
Product overview
Ceruno is a Swiss managed cybersecurity and IT infrastructure services company founded in 2015, offering a portfolio of professional services and managed offerings across cybersecurity, connectivity, and platform domains. The cybersecurity offering centers on Extended Detection & Response (XDR) powered by SentinelOne, Privileged Access Management (PAM) via Delinea, and Secure Access Service Edge (SASE) through Cato Networks, complemented by E-Mail Security and Network Access Control solutions. The Connectivity portfolio includes Secure Connectivity and SASE services based on Zero Trust architecture. The Platform offering features Resilient Platform services with Nutanix hyperconverged infrastructure for hybrid-multicloud environments. Ceruno delivers services through Consulting, Engineering, and Operations pillars, providing everything from strategy and assessments to fully managed 24x7 Security Operations. The company also develops custom AI agent workflows using n8n connected to SentinelOne for SOC automation. Major annual events include the Cyber Security Day Ostschweiz conference series.
Differentiator
Problem solved
Functional benefit
Products and services
- Security Operations Managed 24x7 security monitoring and incident response service powered by SentinelOne XDR, with AI-augmented detection and automated response across endpoints, network, cloud, identity, and email. Offered in Shared and Managed tiers with optional 8x5 or 24x7 SLA coverage.
- Extended Detection & Response (XDR)
Quantifiable outcome
- 60% more efficient network management through SDN implementation
- +1 more outcomes
Companies that use Ceruno
Customer profileNamed customers2 records
Segments3 records
Ideal customer profiles2 records
Ceruno technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration7 records
AI capability10 records
Feature7 records
Ceruno partnerships and signals
Strategic signalPartnerships
Seven partnerships are on record, tiered core and minor.
- copebitcoreStrategic partnership for Security Facilitator offering combining copebit's AWS Landing Zone expertise with Ceruno's SentinelOne-based Security Operations. Copebit secures AWS environments with Access Management, Infrastructure Protection and Compliance services while Ceruno provides endpoint and detection/response capabilities.
- SentinelOnecoreSentinelOne is Ceruno's primary cybersecurity technology partner. Ceruno has three SentinelOne Paladins (highest certification level) on staff including CTO Yves Forter. Services include XDR, Identity Security (ISPM/IDR), and Security Operations. Ceruno builds custom AI agents with SentinelOne API using n8n workflow automation.
- CiscocoreLong-standing Cisco partner with 15+ years of experience implementing Cisco solutions including networking, security, and compute. Cisco and Nutanix entered strategic partnership, with Ceruno implementing Cisco ACI Multi-Pod SDN solutions and Cisco Intersight for unified management.
- NutanixcoreLong-term Nutanix partner for hyperconverged infrastructure (HCI). Ceruno's Resilient Platform service is built on Nutanix HCI. Cisco and Nutanix partnership enables validated designs and optimized support processes for customers.
- Cato NetworkscoreCato Networks is the SASE platform provider for Ceruno's Secure Access Service Edge solutions. Sponsored the SASE Workshop in May 2025. Provides global PoP backbone for SD-WAN and security services.
- DelineacoreDelinea provides Privileged Access Management (PAM) solutions integrated by Ceruno. Offers both on-premises and cloud/hybrid PAM solutions. Works with SentinelOne AI SIEM for log integration.
- BUREAU54 GmbHminorDesign and development partner for website and digital presence. Located in Altstätten, Switzerland.
Scale indicators7 records
Recent moves6 records
Expansion highlights5 records
Ceruno competitors and assessment
Company assessmentDirect peers
- InfoGuard AG: Swiss-headquartered MSSP and cybersecurity services provider offering managed security, consulting, and incident response across DACH. Direct comparable in geography, service portfolio, and target customer base (Swiss mid-market and enterprise).
- Hacknowledge AG: Swiss SOC and managed security services provider based in Winterthur, serving SMEs and mid-market Swiss companies. Direct comparable in 24/7 SOC operations, regional Swiss focus, and the consulting/managed services hybrid model.
- terreActive AG: Swiss managed security services provider focused on detection, response, and security monitoring for Swiss enterprises. Comparable in regional MSSP positioning, SOC-as-a-service delivery, and Swiss Mittelstand customer base.
- OneConsult GmbH: Swiss cybersecurity consulting and managed detection firm specializing in penetration testing, incident response, and SOC services. Highly comparable in service mix, Swiss mid-market focus, and the blend of consulting with managed operations.
Broad incumbents
- Trustwave: Global cybersecurity services firm offering managed detection, MDR, and consulting across all major security domains. Comparable in full-stack MSSP delivery, though much larger and broader geographically than Ceruno's regional positioning.
- Secureworks: Global MSSP and MDR provider with broad XDR, SOC, and consulting capabilities. Comparable in managed detection, XDR delivery, and security advisory services, but operates as a broad incumbent serving large enterprise globally rather than regional mid-market.
Emerging players
- eSentire: MDR-focused MSSP delivering 24/7 threat hunting and managed detection across endpoints, network, and cloud. Comparable in AI-augmented SOC vision and XDR-centric delivery model, though it competes at the upper end of the mid-market and enterprise.
- Arctic Wolf Networks: Global MDR/MSSP using a concierge delivery model that bundles 24/7 SOC, vulnerability management, and compliance. Comparable in outcome-based managed security positioning and XDR-led architecture, but operates at vastly larger scale and serves a broader geographic footprint.
- Nuspire: MSSP offering managed security, EDR/XDR, and SOC services to mid-market and enterprise customers. Comparable in XDR-led managed services delivery and focus on outcomes for the mid-market segment Ceruno serves.
Regional players
- mod IT Services: Swiss IT and cybersecurity services provider with strong DACH regional focus. Comparable as a regional managed security and infrastructure services competitor, though with a somewhat broader IT services portfolio than Ceruno's cybersecurity-led mix.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat4 records
Key risks5 records
Key highlights6 records
Customer concentration
Ceruno social profiles
Digital presenceCeruno compliance and trust
Trust signalCompliance2 records
Ceruno financial estimates
Financial estimateRevenue estimate
Valuation estimate
Ceruno leadership team
Management profileNumber of profiles
Profiles8 records
Ceruno funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Ceruno M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Ceruno
What does Ceruno do?
Ceruno AG is a Swiss managed security services provider (MSSP) delivering cybersecurity, connectivity, and infrastructure services to mid-market and large enterprises, primarily in Eastern Switzerland. Its portfolio combines consulting, engineering, and operations services built around partner platforms such as SentinelOne (XDR), Cato Networks (SASE), Delinea (PAM), and Nutanix (HCI). The company runs a 24x7 Security Operations Center, performs Zero Trust architecture projects, and supplements its managed services with custom AI-agent workflows for SOC automation.
Is Ceruno a public or private company?
Ceruno is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Ceruno founded?
Ceruno was founded in 2015. It employs 11 to 50 people.
Where is Ceruno based?
Ceruno is headquartered in Lichtensteig, Switzerland, in the Europe region.
How does Ceruno make money?
Five revenue lines are on record. Managed Security Services (Security Operations) is the primary driver. The others are consulting Services, engineering & Implementation, operations Services and endpoint Security Abonnement (Legacy).
Who are Ceruno's main competitors?
Direct peers on record are InfoGuard AG, Hacknowledge AG, terreActive AG and OneConsult GmbH. Broad incumbents are Trustwave and Secureworks. Emerging players are eSentire, Arctic Wolf Networks and Nuspire. mod IT Services is listed as a regional player.
Does Ceruno have an API?
No public API is recorded for Ceruno.
What industry is Ceruno in?
Ceruno's product category is Managed Cybersecurity Services. Its primary akta.pro industry code is BPAKAHAA, Managed Security Services (MSSP) & 24/7 SOC Operations, with a secondary code of BPAEADAB, Security Operations Center (SOC) as a Service. Its NAICS code is 561621 and its SIC code is 7373.