It.sec

What It.sec does

it.sec GmbH is a German IT security consulting firm founded in 1996 and headquartered in Ulm, Germany, providing advisory, implementation, and managed security services to enterprise and government clients. Its portfolio spans seven core service lines: IT Security Consulting (advisory, pentesting, ISMS, CISO-as-a-Service, Security Awareness), Microsoft Services (Copilot & Studio, IAM Modernization, Cloud Platform Transformation, threat protection, cloud compliance), the Cyber Defense Center (SOC, SIEM, MXDR, CSIRT, vulnerability management, threat intelligence), Cryptographic Solutions (PKI, digital signatures, file encryption), Secure IT Services (managed, professional, IT support, outsourcing), Network & Endpoint Security (Zero Trust, SASE, firewall management, workload security), and Identity & Access Management (access management, IGA, PAM and PAM-as-a-Service). Vertically packaged 'Digital Challenges' bundles target Healthcare, Public Sector, Smart eSignature for Government, Multi-Cloud Sovereignty, NIS2, Ransomware Resilience, Supply Chain Intelligence, and Secure AI.

The underlying technology stack is built primarily on the Microsoft security ecosystem — Entra Suite, Microsoft Copilot & Studio, Microsoft Cloud Platform, and Microsoft threat protection — supplemented by third-party identity (Omada), cryptographic, and SOC tooling (SIEM/XDR). Self-described differentiators are integration/interoperability across these stacks and domain specialization in NIS2 compliance and identity governance. The company holds TISAX certification and operates as a certified Microsoft partner at a 'core' partnership tier.

it.sec's revenue model combines project-based Professional Services, recurring Managed Services (SOC, SIEM, MXDR, vulnerability management, IT outsourcing), and subscription offerings (PAM-as-a-Service, NIS2-as-a-Service, CISO-as-a-Service). It goes to market via direct enterprise field sales targeting mid-market and large organizations plus government entities. Named customers include Randstad, Bayer 04 Leverkusen, LeasePlan, Ramudden, ITSG, Utrecht, and finstreet, with operating geography covering Germany and Switzerland through DACH and additional markets via parent SITS Group. In 2024, it.sec GmbH legally merged into SITS Group, which now operates across Germany, Switzerland, Denmark, and globally; existing contracts and service lines continue under SITS Group management.

Name

It.sec

Legal name

it.sec GmbH

Website

https://it-sec.de

Company type

Private

Founded year

1996

Operating status

Acquired

Headcount range

1–10 employees

Short description

it.sec GmbH, founded 1996 in Ulm, Germany, provides IT security consulting, managed security services, and Microsoft-centric cybersecurity solutions to enterprise and government clients across the DACH region. As of 2024, it legally merged into SITS Group.

Ownership category

akta.pro rank

Product category

IT Security Consulting and Managed Security Services

NAICS

Computer Systems Design and Related Services (54151), Computer Facilities Management Services (541513), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Computer Integrated Systems Design (7373), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

akta.pro secondary industries

Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG), Managed Detection & Response (MDR) & SOC Services (HDADAGAG), Cybersecurity Architecture & Security Integration (BPAEAAAL)

Keywords

• IT security consulting
• Managed security services
• Identity access management
• Microsoft security services
• NIS2 compliance advisory

Headquarters

HQ city

Ulm

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Professional Services: Consulting engagements for IT security advisory, compliance management, pentesting, security assessments, and implementation services. Typically project-based with defined scope and duration.
2. Managed Services: Ongoing managed security services including SOC operations, SIEM management, XDR, vulnerability management, and IT outsourcing. Recurring revenue model with monthly/annual contracts.
3. Subscription Services: PAM as a Service, NIS2-as-a-Service, and CISO as a Service offerings delivered on subscription basis with recurring billing.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

It.sec provides cybersecurity consulting and managed security services for organizations, with deep specialization in the Microsoft security ecosystem. Its offering includes IT Security Consulting (compliance, pentesting, CISO-as-a-Service), a Cyber Defense Center (SOC, SIEM, MXDR, threat intelligence), Cryptographic Solutions (PKI, digital signatures), Identity & Access Management, Network & Endpoint Security (Zero Trust, SASE), and Microsoft-focused services (Copilot, IAM modernization, cloud platform transformation). Services are delivered through professional engagements, managed service contracts, and subscription offerings such as NIS2-as-a-Service and PAM-as-a-Service.

Product overview

It.sec (now part of SITS Group) operates as a managed security services provider offering an integrated portfolio of cybersecurity services rather than a single unified software product. The core offerings include IT Security Consulting, Microsoft Services (with Microsoft Copilot, IAM modernization, and cloud security), Cyber Defense Center (SOC, SIEM, MXDR, threat intelligence), Cryptographic Solutions (PKI, digital signatures), Secure IT Services (managed/professional services), Network & Endpoint Security (Zero Trust, SASE), and Identity & Access Management (PAM). These services are delivered through Digital Challenges—industry-specific solution packages addressing Healthcare Cyber Security, Public Sector, Smart eSignature for authorities, Multi-Cloud Sovereignty, NIS2 compliance, Ransomware Resilience, and Secure AI implementation.

Differentiator

Problem solved

Functional benefit

Products and services

• IT Security Consulting (IT-Sicherheits-Beratung) Security advisory and consulting services for organizations requiring strategic and operational IT security guidance, including compliance management, pentesting, ISMS implementation, CISO-as-a-Service, security awareness training, and security assessments.
• Microsoft Services Specialized services built around the Microsoft security ecosystem, covering Microsoft Copilot, IAM modernization using Entra Suite, cloud platform transformation, secure modern workplace deployment, Microsoft threat protection, cloud compliance and data security, and NIS2 compliance for Microsoft cloud platforms.
• Cyber Defense Center Managed security operations center providing 24/7 SOC services, SIEM management, Managed Extended Detection & Response (MXDR), IT emergency management/CSIRT capabilities, vulnerability management, and threat intelligence for organizations requiring continuous security monitoring.
• Cryptographic Solutions Cryptographic services providing Public Key Infrastructure (PKI), digital signatures, and file encryption solutions for secure communications, document signing, and data protection.
• Secure IT Services IT infrastructure services providing managed services, professional services, IT support services, and IT outsourcing services for organizations seeking comprehensive IT operational support.
• Network & Endpoint Security Network and endpoint protection services providing Zero Trust Network Access, firewall management, network security solutions, Secure Access Service Edge (SASE), and workload security for distributed enterprise environments.
• Identity & Access Management Identity management services providing access management, identity governance and control, Privileged Access Management (PAM), and PAM as a Service for organizations modernizing identity infrastructure and access controls.
• Digital Challenges Industry-specific bundled solution packages combining multiple services to address targeted challenges across healthcare, public sector, government, and enterprise customers, including Smart eSignature for authorities, Multi-Cloud Sovereignty, NIS2 compliance, Ransomware Resilience, Cyber-Resilient Workplace, Supply Chain Intelligence, AI and Cybersecurity integration, and Healthcare Cyber Security.

Named customers7 records

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

One partnership is on record.

• MicrosoftcoreTechnology or IntegrationDeep technology partnership with Microsoft providing specialized services around Microsoft security ecosystem including Entra Suite (identity), Microsoft Copilot, cloud platform security, and Microsoft threat protection solutions. Certified Microsoft partners delivering IAM modernization, cloud compliance, and secure modern workplace solutions.

Scale indicators1 record

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• SITS Group: Parent company and direct operator of it.sec since 2024. SITS Group is a European IT and security services provider with offices in Germany, Switzerland, and Denmark, offering managed security, identity, and Microsoft services that directly overlap with it.sec's portfolio.
• Computacenter: Large UK-headquartered IT services provider with strong DACH operations offering managed security, workplace, and Microsoft enterprise services. Comparable as a broader IT services firm with overlapping cybersecurity and Microsoft services portfolio.
• secunet Security Networks AG: German cybersecurity specialist publicly listed and serving public sector and enterprise customers with secure IT infrastructure, cryptography, and identity management - closely aligned with it.sec's public sector and cryptographic solutions offerings.
• T-Systems: Deutsche Telekom subsidiary providing managed IT and security services including SOC, identity, and cloud security to enterprise and public sector customers in DACH. Direct competitor for large public sector and enterprise security contracts.
• Sopra Steria Cybersecurity: European IT services group with a dedicated cybersecurity division offering SOC, identity, and compliance services across DACH and Northern Europe. Overlaps with it.sec on Microsoft-centric enterprise security and NIS2-related consulting.
• Capgemini Cybersecurity: Global consultancy with European cybersecurity practice covering identity, cloud, and managed security services. Comparable for enterprise and regulated customers seeking Microsoft-aligned security transformation.

Direct peers

• Orange Cyberdefense: European MSSP and SOC operator with strong DACH presence. Offers managed detection and response, threat intelligence, and security consulting - directly comparable to it.sec's Cyber Defense Center and advisory services.
• Kudelski Security: Switzerland-based managed security services provider offering SOC, MDR, and cybersecurity consulting. Comparable due to DACH-region footprint, similar mid-market/enterprise focus, and overlapping managed services portfolio.
• NVISO Security: European cybersecurity services firm specialising in SOC, MDR, identity, and Microsoft security services for enterprise and financial services customers. Closely comparable business model and service portfolio to it.sec.

Others

• Omada (identity governance vendor): Identity governance vendor that it.sec references as a technology partner for access management projects. Relevant as an ecosystem/partner peer showing the channel of comparable DACH identity security engagements.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/@thesitsgroup
• LinkedInlinkedin.com/company/sits-group
• Instagraminstagram.com/sitsgroup

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about It.sec