What LAN Security does

LAN-Security Gesellschaft für Netzwerktechnik und -sicherheit mbH is a German IT security boutique headquartered in Rennerod, Rhineland-Palatinate, founded in 2004 by Markus Mengen and operating exclusively as a B2B service provider to German businesses. The firm delivers a holistic IT security and compliance portfolio spanning managed security services (next-generation firewall management, EDR/XDR endpoint protection, SIEM-based monitoring, DLP, NAC, MFA, DNS-layer security, WAF), compliance advisory (NIS2 readiness, ISMS implementation under ISO 27001 and BSI-Grundschutz, GDPR/DSGVO), external Data Protection Officer and Information Security Officer placement, IT engineering (WLAN/LAN, datacenter, network monitoring), and penetration testing aligned to BSI, ISO 27001, NIST, and OWASP standards. Its proprietary Nexora platform offers continuous penetration testing via hardware appliances in 19" Enterprise, Desktop, and DIN-rail (OT/ICS) form factors, with structured assessment plans covering social engineering, network scanning, Active Directory analysis, cloud security, OT/ICS (IEC 62443), and medical facility security (KRITIS, B3S Healthcare, ISO 27799). The company is ISO 27001 certified, partners with Fortinet, Cisco Meraki, Endian, and Macmon, and operates a sales-led direct-engagement model with tiered subscription packages (DSB €149-549/month, ISB €299-899/month), hardware sales, and professional services revenue.

Name

LAN Security

Legal name

LAN-Security Gesellschaft für Netzwerktechnik und -sicherheit mbH

Website

https://lan-security.de

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

11–50 employees

Short description

LAN-Security is a German ISO 27001-certified IT security boutique founded in 2004 that delivers managed security, compliance, penetration testing, and external DSB/ISB services to SMBs, KRITIS operators, and regulated organisations exclusively in Germany, anchored by its proprietary Nexora continuous pentesting platform.

Ownership category

akta.pro rank

Product category

Managed IT Security Services

NAICS

Other Computer Related Services (541519), Computer Systems Design and Related Services (54151), Security Systems Services (56162)

SIC

Services-Testing Laboratories (8734)

akta.pro primary industry

OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)

akta.pro secondary industries

Cybersecurity for OT / SCADA (Monitoring, Access Control, Incident Response) (EUAJAFAJ), Critical Infrastructure Protection (CIP) & NERC-CIP Compliance (HDADAJAC), Vulnerability & Patch Management for OT Assets (EUADANAF), Wi‑Fi Security, Access Control & Policy (NAC/Zero Trust for WLAN) (HDAFACAF)

Keywords

• Managed security services
• Penetration testing
• Network security
• IT compliance consulting
• IT infrastructure engineering

Headquarters

HQ city

Rennerod

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Supply Chain, Marketing or Sales, Infrastructure

Revenue model

1. Managed IT Security Services: Recurring managed security services including firewall management, endpoint protection (EDR/XDR), SIEM monitoring, MFA, DLP, NAC, and network monitoring. Provided as subscription-based managed services billed monthly or annually.
2. Compliance & Consulting Services: Advisory and consulting services including NIS2 readiness assessment, ISMS implementation (ISO 27001 / BSI-Grundschutz), external Data Protection Officer (DSB) placement, external Information Security Officer (ISB) placement, and Security Awareness training programs.
3. Nexora Hardware Appliances: Sale or subscription of proprietary Nexora hardware appliances (19" Enterprise, Desktop, DIN-rail OT) bundled with Penetration Assessment Plans. Hardware is offered alongside managed services including on-site installation, hardware service, and remediation support.
4. Subscription Service Packages (Servicepakete): Tiered monthly subscription packages for external DSB (Essential €149/mo, Plus €299/mo, Premium €549/mo) and external ISB (Essential €299/mo, Plus €599/mo, Premium €899/mo) roles, with defined service hours and reporting cadences.
5. Workshop & Training Services: One-time workshop services including 'Grundlagen einer lokalen KI' at €299 (2-hour local AI basics workshop) and 'Technische Umsetzung einer lokalen KI' at €799 (technical workshop). Also 'KI as a Service' at €299/month plus €499 one-time setup for local AI infrastructure in Germany.
6. Enterprise Penetration Testing & Assessments: Discrete or recurring penetration testing engagements following BSI, ISO 27001, NIST, and OWASP standards, including modules for social engineering, physical security, network scanning, AD analysis, web application testing, darknet analysis, cloud analysis, OT scanning, and malware scanning. Medical Security Assessment included as a specialised module for healthcare/KRITIS.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels7 records

Core offering

LAN-Security is a German B2B IT security boutique that delivers managed security services (firewall, SIEM, EDR/XDR, NAC, DLP, MFA), IT compliance consulting (NIS2, ISO 27001, GDPR, BSI-Grundschutz), IT engineering (WLAN/LAN, datacenter hosting, monitoring), and external Data Protection/Information Security Officer placement. Its flagship proprietary offering is the Nexora hardware appliance for continuous penetration testing, available in 19" Enterprise, Desktop, and DIN-rail OT form factors, bundled with structured assessment plans.

Product overview

LAN Security offers a portfolio of IT security services centered around its Nexora hardware appliance brand for continuous penetration testing, complemented by managed security services (firewall, endpoint, SIEM, MFA), IT engineering (network infrastructure and monitoring), compliance advisory (NIS2, ISO 27001, GDPR), and packaged external DSB/ISB services. The Nexora appliance (available in 19", desktop, and DIN rail variants) provides ongoing security assessments across enterprise, SMB, and OT environments, while the broader service suite covers from risk analysis and penetration testing to managed datacenter and local AI deployment.

Differentiator

Problem solved

Functional benefit

Brands

• Nexora: A brand of LAN-Security offering intelligent IT security through continuous penetration testing appliances. Nexora transforms traditional point-in-time penetration tests into ongoing security processes with regular automated tests, continuous updates, and expert analysis through a centralized web portal. Available in 19" Enterprise, Desktop, and DIN Rail (for OT) hardware variants.

Products and services

• Nexora Continuous Penetration Testing Appliance Proprietary hardware appliance that runs continuous, automated penetration testing modules (network scanning, social engineering, AD analysis, cloud, OT, medical) and aggregates results in a central web portal with expert review by LAN-Security specialists. Available in 19" rackmount, Desktop, and DIN-rail form factors for enterprise, SMB, and OT environments respectively.
• Managed IT Security Services Subscription-based managed security services for German businesses covering Next-Generation Firewall management (VPN, monitoring, rule optimization), SIEM-based real-time security monitoring, EDR/XDR endpoint protection with DNS-layer security, Web Application Firewall (WAF), Network Access Control (NAC), Data Loss Prevention (DLP), Multi-Factor Authentication (MFA), and network monitoring.
• Compliance and ISMS Services Advisory and implementation services for regulatory compliance including NIS2 readiness assessment, DSGVO (GDPR) data protection, ISMS implementation per ISO 27001 and BSI-Grundschutz, external Information Security Officer (ISB) placement, and security awareness training for German organisations.
• IT Engineering and Network Infrastructure Infrastructure services including planning and deployment of WLAN and LAN networks, network analysis with measurement technology, managed datacenter hosting with high-availability systems, and 24/7 monitoring and management with proactive alerting.
• Enterprise Penetration Testing Discrete or recurring penetration testing engagements following BSI, ISO 27001, NIST, and OWASP standards, covering IT and OT infrastructure, social engineering, web application testing, darknet analysis, cloud analysis, AD analysis, and medical facility security, producing structured reports with prioritized remediation recommendations.
• External Data Protection Officer (DSB) Service Packages Three subscription tiers of external Data Protection Officer (Datenschutzbeauftragter) placement: Essential (€149/month), Plus (€299/month), and Premium (€549/month), differing in status meeting frequency, included consulting hours, and access to templates and training programs. Sold as 12-month subscriptions exclusively to business customers.
• External Information Security Officer (ISB) Service Packages Three subscription tiers of external Information Security Officer (Informationssicherheitsbeauftragter) placement: Essential (€299/month), Plus (€599/month), and Premium (€899/month), differing in monthly consulting hours, status meeting frequency, and service scope. Sold as 12-month subscriptions exclusively to business customers.
• Local AI Service Packages (KI Workshops and KI as a Service) Workshops and managed service for local AI deployment in Germany: 'Grundlagen einer lokalen KI' (€299 one-time) covering AI fundamentals and architecture; 'Technische Umsetzung einer lokalen KI' (€799 one-time) covering platform setup, hardware, and model deployment; 'KI as a Service' (€299/month plus €499 setup) providing hosted local AI infrastructure with no internet access and no external data transmission.

Quantifiable outcome

• Reduced network downtime by over 50% for a mid-sized multi-site enterprise following managed monitoring deployment (illustrative case study)

Segments4 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Scale indicators3 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• CrowdStrike: CrowdStrike's Falcon platform provides EDR/XDR, MDR, and identity protection — overlapping with LAN-Security's endpoint protection and managed SOC offerings. It competes particularly for German enterprise and KRITIS customers prioritising global best-of-breed vendors.
• Rapid7: Rapid7 offers vulnerability management, pen testing, and SIEM/managed detection globally, including DACH coverage. Its InsightConnect and Metasploit products compete with aspects of LAN-Security's continuous testing and SIEM-based monitoring services.
• Arctic Wolf: Arctic Wolf is a leading global managed detection and response (MDR) provider expanding aggressively in Europe. It overlaps with LAN-Security's SIEM-based monitoring and managed security offerings, although at much larger scale and with a software-only delivery model.
• TÜV Rheinland i-sec: TÜV Rheinland's cybersecurity arm delivers managed security, ISO 27001 certification support, and pen testing as part of a broader TIC portfolio. It competes with LAN-Security in compliance and security services but operates at much larger scale and brand recognition.

Direct peers

• SySS GmbH: SySS is a German penetration testing and security consulting specialist serving Mittelstand and enterprise customers. Like LAN-Security, it focuses on hands-on offensive security and German compliance frameworks, making it a direct niche peer.
• usd AG: usd AG is a German security consulting firm offering pen testing, ISMS/ISO 27001 implementation, and compliance advisory. Its service portfolio closely mirrors LAN-Security's compliance and pen testing suites, especially for regulated German customers.
• Pentera: Pentera offers automated, continuous security validation as a software-only SaaS platform — the closest direct competitor to LAN-Security's Nexora continuous penetration testing appliance. Both target the same need of replacing periodic pentests with ongoing automated assessments, though Pentera is cloud-delivered whereas Nexora is hardware-deployed.
• SEC Consult (part of Atos): SEC Consult provides cybersecurity consulting, penetration testing, and managed security services across DACH with strong German-language delivery. Overlap with LAN-Security on pen testing, ISO 27001, and OT/ICS engagements is significant.

Regional players

• Hornetsecurity: Hornetsecurity is a German-headquartered cloud security provider offering email security, backup, and managed security services to SMEs across Europe. Comparable to LAN-Security in target customer (German Mittelstand) and managed-security delivery model.
• Rohde & Schwarz Cybersecurity: Rohde & Schwarz Cybersecurity is a Munich-based provider of network encryption, secure communications, and cybersecurity solutions, primarily serving European enterprises and governments. Comparable to LAN-Security in its German/European focus and emphasis on regulated customers.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• YouTubevimeo.com/showcase/10929062
• Facebookfacebook.com/profile.php?id=100057608913334
• LinkedInlinkedin.com/company/lan-security
• Instagraminstagram.com/lan_security

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about LAN Security