Certitude Consulting

Name

Certitude Consulting

Legal name

Certitude Consulting GmbH

Website

https://certitude.consulting

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

11–50 employees

Short description

Certitude Consulting is an Austrian cybersecurity and ICT risk management consultancy offering security assessments, engineering, governance, and incident response services to critical infrastructure operators and EU-regulated enterprises in the DACH and Benelux regions.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting

NAICS

Management Consulting Services (54161), Management, Scientific, and Technical Consulting Services (5416), Other Scientific and Technical Consulting Services (54169)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Cybersecurity & Identity Consulting (BPAHAEAG)

akta.pro secondary industries

Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH), Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF)

Keywords

• Cybersecurity consulting
• Penetration testing
• NIS2 compliance
• Incident response
• ICT risk management

Headquarters

HQ city

Vienna

HQ country

Austria

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Cybersecurity Consulting Services: Professional services revenue generated from security assessments, penetration testing, security engineering, governance consulting, and incident response engagements. Services are provided on a project basis with senior consultant involvement.
2. Cyber Response Retainer: Guaranteed response retainer service providing clients with an exclusive hotline and agreed SLAs for immediate support during cyber incidents, offering guaranteed response times.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels5 records

Core offering

Certitude Consulting is an Austrian IT security consultancy that sells advisory and technical cybersecurity services to enterprise and mid-market clients, organized into four practice areas: Security Assessments (penetration testing, code review, red teaming, phishing simulations, NIS audits), Security Engineering (application, infrastructure, cloud, and Kubernetes security), Security Governance (ISMS, DSGVO/GDPR, NIS2, DORA, CRA, AI Act compliance), and Cyber Response (incident response, forensics, and retainer). Engagements are project-based, delivered by senior consultants, and complemented by a guaranteed-response cyber incident retainer.

Product overview

Certitude Consulting is a cybersecurity consulting firm offering a comprehensive portfolio of advisory and technical services organized into four core practice areas: Security Assessments (penetration testing, code reviews, red teaming, phishing simulations, and NIS audits), Security Engineering (application security, infrastructure security, cloud security, and Kubernetes security), Security Governance (ISMS/ISO 27001, DSGVO compliance, CRA compliance, AI Act compliance, and NIS2 compliance), and Cyber Response (incident response, forensics, and retainer services). The company provides hands-on consulting from analysis through implementation, with specialization in ICT risk management for Austrian and international organizations.

Differentiator

Problem solved

Functional benefit

Products and services

• Security Assessments Comprehensive security testing services including IT security audits, penetration tests, source code reviews, red team exercises, phishing simulations, and NIS audits, designed to evaluate and identify vulnerabilities in client systems for enterprise and mid-market organizations.
• Security Engineering Technical security implementation services covering application security, infrastructure security, cloud security, and Kubernetes security, helping organizations design and maintain secure systems across cloud-native and traditional environments.
• Security Governance Compliance and governance advisory services including ISMS/ISO 27001, DSGVO/GDPR compliance, CRA compliance, IT risk management, AI Act compliance, and NIS2 compliance, helping organizations meet regulatory requirements and achieve audit readiness.
• Cyber Response Incident response and digital forensics services, including ad-hoc cyber incident response and a cyber incident response retainer providing an exclusive hotline and agreed SLAs with guaranteed response times for clients needing immediate support during cyber incidents.

Named customers6 records

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature9 records

Partnerships

Ten partnerships are on record, tiered minor and core.

• LSZ Future ConnectionsminorGTM or Marketing Partner · 1 May 2026Managing Partner Marc Nimmerrichter participated in podium discussion on Agentic AI at LSZ IT-Security Kongress in Kitzbühel.
• Women4Cyber AustriaminorGTM or Marketing Partner · 1 March 2026Certitude employee Yvonne Bauer elected to Women4Cyber Austria Board. Partnership focuses on promoting women in cybersecurity through educational outreach, including school visits and mentoring programs.
• BSides BerlinminorGTM or Marketing Partner · 26 October 2024Presented at BSides Berlin security conference on vulnerabilities in UPS (Uninterruptible Power Supply) systems in critical infrastructure.
• Kubernetes Community DaysminorGTM or Marketing Partner · 28 September 2023Participated in Kubernetes Community Days 2023 at Cineplexx Wienerberg, connecting with software developers, platform and DevOps engineers on container security topics.
• Red HatcoreStrategic or Co-development Partner · 21 September 2023Joint webinar on OpenShift security held on September 21, 2023. Webinar covered how OpenShift addresses the most common Kubernetes security vulnerabilities and 25 additional security features. Demonstrates Certitude's expertise in container and Kubernetes security.
• Austrian Platform Engineering CommunityminorGTM or Marketing Partner · 1 September 2023Annual participation in Austrian Platform Engineering Community event, discussing Docker image vulnerabilities and platform security.
• DeepSecminorGTM or Marketing Partner · 17 November 2022Active participation in DeepSec security conference with over 50 talks and workshops covering security topics.
• S&TcoreStrategic or Co-development Partner · 15 June 2022Certitude closed an alliance with S&T, strengthening capabilities in cybersecurity consulting services. S&T is a technology and consulting company providing IT services and solutions.
• Banking Association and Vienna Business AgencyminorGTM or Marketing Partner · 7 June 2022Contributed hacking demonstration to FinTechWeek, an event organized by the Banking Association and Vienna Business Agency.
• OpenShift User CommunityminorGTM or Marketing Partner · 10 September 2021Participated in 26th OpenShift User Meeting with Michael Hauenschild and Edvin Seferovic, discussing container security topics with Austrian OpenShift users.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• Mandiant (Google Cloud): Global incident response, threat intelligence, and cybersecurity consulting leader. Comparable to Certitude on incident response, forensics, and high-end advisory, but at vastly larger scale and with proprietary intelligence products.
• Trustwave: Global cybersecurity consulting and managed detection & response provider with strong EMEA presence. Comparable on penetration testing, governance, and incident response, but with a much broader MSSP/managed services portfolio.
• TÜV Austria: Large Austrian/German certification and compliance body offering ISMS, ISO 27001, and broader GRC services. Comparable to Certitude on the compliance/audit side of the portfolio but at materially greater scale and broader scope.
• NCC Group: Global cybersecurity consulting and assurance firm with strong European presence offering penetration testing, GRC, and incident response. Comparable across Certitude's core service lines but at significantly larger scale and broader geographic reach.
• KPMG Austria (Cyber & Risk): Big 4 firm with a sizable cybersecurity and risk consulting practice serving Austrian and DACH enterprises and financial institutions. Comparable on governance, risk, compliance, and ICT risk services, but operates as a much broader portfolio player.
• PwC Austria (Cybersecurity & Privacy): Big 4 advisory practice with cybersecurity, privacy, and ICT risk services overlapping with Certitude's governance and risk management offerings, anchored in Austrian and CEE enterprise accounts.

Direct peers

• Cure53: Berlin-based boutique cybersecurity firm focused on penetration testing, code review, and applied security research, known for frequent CVE disclosures. Highly comparable to Certitude in research-driven positioning and technical advisory offering.
• X41 D-Sec: German independent security research and consulting firm offering source code audits, penetration testing, and incident response. Closely comparable to Certitude in size, technical research profile, and DACH enterprise focus.
• ERNW Research: Heidelberg-based independent security consulting firm specializing in penetration testing, security reviews, and vulnerability research, with strong DACH enterprise and government clientele. Comparable to Certitude in technical depth, research-driven reputation, and boutique consulting model.
• SEC Consult (Eviden/Atos): Vienna-headquartered cybersecurity consulting firm offering penetration testing, red teaming, security assessments, and incident response across DACH. Closely comparable to Certitude in service portfolio, target customers, and Austrian/DACH geographic focus.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xtwitter.com/certitude_lab
• LinkedInlinkedin.com/company/certitude-consulting

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Certitude Consulting