CERTFin

What CERTFin does

CERTFin (CERT Finanziario Italiano) is the designated Computer Emergency Response Team for the Italian financial sector, operating as a public-private cooperative initiative jointly led by the Bank of Italy and the Italian Banking Association (ABI), with Consorzio ABI Lab serving as the operational manager. Headquartered in Rome and founded in 2017, the organisation serves payment service providers, banks, financial intermediaries, insurers, market infrastructure managers, service centres, and payment-system technology vendors across Italy through voluntary membership. Its offering is organised around five core services: the Financial Info Sharing and Analysis Centre (FinISAC) for threat and fraud intelligence sharing, the Knowledge and Security Awareness Observatory (CYKSA) for research, awareness campaigns, and cyber exercises, the Cyber Emergency Operations Centre for incident response coordination, the Threat Intelligence platform aggregating data from trusted sources, and a dedicated Cybersecurity in the Insurance Industry vertical. Adjacent offerings include Business Continuity analysis, the AI HUB collaboration platform, and two European Commission-funded projects (REDFin, CyberSec4Europe).

The business model is a subscription-based membership consortium: participants fill in an enrollment form and pay a membership fee (amount not publicly disclosed) for access to the full service stack. Distribution is exclusively direct enrollment ([email protected]) targeting enterprise financial institutions; there is no channel resale or self-service motion. CERTFin also runs co-branded public awareness campaigns (#iNavigati, #Cybersicuri, #OcchioalClic with Polizia di Stato, #DontBeaMule with Europol/EBF, #CyberScams) aimed at consumers, businesses, and payment-system users, extending its reach beyond direct members.

CERTFin sits within the regulatory perimeter of the Italian financial system via Strategic Committee representation from IVASS, ANIA, and Consob, and is partnered with ACN (Agenzia per la Cybersicurezza Nazionale), ABI Lab, Polizia di Stato, Europol/EBF, and several European research networks. It functions as a coordination and information-sharing hub rather than a commercial software vendor, with no app, no public API/SDK, no patents, and no external funding rounds disclosed. Revenue, membership fee structures, and detailed headcount are not publicly disclosed; employee count is reported in the 11-50 range.

Name

CERTFin

Legal name

Consorzio ABI Lab, Centro di Ricerca e Innovazione per la Banca

Website

https://certfin.it

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

CERTFin is the Computer Emergency Response Team for the Italian financial sector, operating as a Bank of Italy and ABI-led consortium run by ABI Lab. It delivers threat intelligence sharing, incident response coordination, awareness campaigns, and regulatory-grade cybersecurity services to Italian banks, insurers, payment providers, and market infrastructure operators via voluntary membership.

Ownership category

akta.pro rank

Product category

Financial Sector Cybersecurity Services

NAICS

Security Systems Services (except Locksmiths) (561621), Finance and Insurance (52)

akta.pro primary industry

Fraud Risk & Financial Crime Controls Advisory (BPAKADAL)

akta.pro secondary industry

Transaction Analytics & Cash-Flow Insights (risk signals, forecasting) (FSAGACAG)

Keywords

• Financial sector cybersecurity
• Threat intelligence sharing
• Incident response coordination
• Cybersecurity awareness training
• Computer emergency response

Headquarters

HQ city

Rome

HQ country

Italy

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Others

Revenue model

1. Membership Fees: Participants are required to pay a membership fee to join CERTFin. The fee structure is not publicly disclosed but covers access to all services including FinISAC, the Knowledge and Security Awareness Observatory, Cyber Emergency Operations Centre, and threat intelligence services.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

CERTFin (CERT Finanziario Italiano) is a public-private cooperative initiative, operated by Consorzio ABI Lab and jointly led by Banca d'Italia and ABI, that delivers cybersecurity services to the Italian financial sector. Its core offerings include the Financial Info Sharing and Analysis Centre (FinISAC), the Knowledge and Security Awareness Observatory (CYKSA), the Cyber Emergency Operations Centre, a Threat Intelligence service, and a specialised insurance-sector cybersecurity offering. Members are financial-sector operators that pay a membership fee and gain access to threat-intelligence sharing, coordinated incident response, sector-wide cyber-intelligence practices, and awareness campaigns targeting both businesses and consumers.

Product overview

CERTFin (CERT Finanziario Italiano) is a public-private cooperative initiative operated by ABI Lab that provides cybersecurity services to the Italian financial sector. The offering consists of five core services: Financial Info Sharing and Analysis Centre (FinISAC) for threat intelligence sharing; Knowledge and Security Awareness Observatory (CYKSA) for cybersecurity research and awareness campaigns; Cyber Emergency Operations Centre for incident response coordination; Threat Intelligence for identifying cyber threats and vulnerabilities; and Cybersecurity in the Insurance Industry for insurance-specific analysis. Additionally, CERTFin operates several European-funded projects (REDFin, CyberSec4Europe) and the AI HUB collaboration platform. The organization also runs multiple cybersecurity awareness campaigns (#iNavigati, #Cybersicuri, #OcchioalClic, #DontBeaMule, #CyberScams) targeting both consumers and businesses. CERTFin functions as a coordination and information-sharing hub rather than a software product company.

Differentiator

Problem solved

Functional benefit

Brands

• FinISAC (Financial Info Sharing and Analysis Centre): Collection and sharing of information on the main cyber threats, attack vectors, vulnerabilities and models adopted for online frauds.
• Cybersecurity Knowledge and Security Awareness Observatory
• Cyber Emergency Operations Centre
• Threat Intelligence
• #iNavigati
• #Cybersicuri
• #OcchioalClic
• #DontBeaMule
• #CyberScams

Products and services

• Financial Info Sharing and Analysis Centre (FinISAC) A core service that collects and shares information on the main cyber threats, attack vectors, vulnerabilities and online-fraud models targeting the Italian financial sector. Available to member financial-sector operators as part of CERTFin membership.
• Knowledge and Security Awareness Observatory (CYKSA) Observatory that regularly addresses operational, regulatory and technology-related cybersecurity topics, develops and promotes awareness campaigns, and runs cyber exercises and simulations for members of the constituency.
• Cyber Emergency Operations Centre Provides support, analysis and coordination in the event of cyber incidents suffered by members of the constituency, updating and sharing response strategies based on best practices.
• Threat Intelligence Identifies and describes new cyber threats and vulnerabilities and helps build defences against potential attacks, using a highly optimised platform to collect, process and analyse cyber-event information from trusted sources.
• Cybersecurity in the Insurance Industry Specialised service providing insights relevant to the insurance industry, including analysis of evolving fraud patterns and sharing of information to assess and classify cyber risks and threats.

Quantifiable outcome

• 422 arrested and 4,031 money mule identified in global anti-money laundering operation

Named customers6 records

Segments2 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Eight partnerships are on record, tiered core and major.

• Banca d'Italia (Bank of Italy)coreStrategic or Co-development PartnerCo-leadership of CERTFin alongside ABI. The Bank of Italy provides regulatory oversight and institutional backing for the financial sector CERT, contributing to strategic direction through the Strategic Committee.
• ABI (Italian Banking Association)coreStrategic or Co-development PartnerCo-leadership of CERTFin alongside Banca d'Italia. ABI represents Italian banks and provides industry coordination, contributing to strategic direction through the Strategic Committee.
• IVASScoreStrategic or Co-development PartnerRepresents the insurance sector on the Strategic Committee of CERTFin, ensuring insurance sector participation in financial cybersecurity initiatives.
• Polizia di StatocoreStrategic or Co-development PartnerItalian State Police partnership for cybersecurity awareness campaigns including #Cybersicuri and #CyberScams, providing law enforcement perspective on cyber crimes and fraud.
• ABI LabcoreStrategic or Co-development PartnerConsorzio ABI Lab is the operational manager of CERTFin, coordinating all operational activities and service development. Headquartered at Piazza del Gesù, 49, Rome.
• ACN (Agenzia per la Cybersicurezza Nazionale)coreStrategic or Co-development PartnerNational Cybersecurity Agency partnership contributing to national cybersecurity initiatives and threat intelligence sharing at the national level.
• Europol/EBFmajorStrategic or Co-development PartnerEuropean partnerships for #CyberScams and #DontBeaMule campaigns, aligning Italian financial sector cybersecurity with European initiatives.
• ABI Lab (European Projects)majorStrategic or Co-development PartnerREDFin (Readiness Enhancement to Defend Financial Sector) - European Community-funded project for improving cyber resilience in the Italian financial system. CyberSec4Europe - pilot project for establishment of European network of cybersecurity expertise.

Scale indicators3 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• CERT-PA / CSIRT Italia: Italy's national CSIRT (formerly CERT-PA) under ACN, responsible for public-administration cyber incident response. Overlaps with CERTFin on national cyber coordination and threat intelligence, but serves the public sector rather than the financial sector specifically.
• IBM X-Force Threat Intelligence: IBM's threat intelligence and incident response unit serving financial sector clients globally. Comparable in providing financial-sector threat intelligence and IR coordination, but as part of a broader commercial security portfolio rather than a dedicated sectoral CERT.
• Mandiant (Google Cloud): Global incident response and threat intelligence provider serving financial institutions worldwide. Overlaps with CERTFin's Cyber Emergency Operations Centre and threat intelligence functions, but at global scale and as a commercial vendor rather than a sectoral consortium.
• NCSC UK (National Cyber Security Centre): UK's national cyber authority providing threat intelligence, incident response coordination, and sector-specific advisories (including for financial services). Comparable as a public-sector CERT with sector-wide coordination responsibilities, though at national scale.

Direct peers

• FS-ISAC: Global Financial Services Information Sharing and Analysis Center, the closest analogue to CERTFin's FinISAC at the international level. Both are sector-specific ISACs providing threat intelligence sharing, incident coordination, and member-driven cyber resilience for financial institutions, though FS-ISAC operates globally while CERTFin is Italy-only.
• CERT-EU: Computer Emergency Response Team for the EU institutions, agencies, and bodies. A peer CERT operating under a similar public-sector mandate but at supranational level; comparable in incident response and threat intelligence methodologies.

Regional players

• CRIF: Italian credit bureau and information services company that also offers cybersecurity and fraud-prevention solutions to financial institutions. Comparable as an Italy-headquartered B2B cybersecurity/fraud vendor serving banks and insurers, though operating as a commercial entity rather than a cooperative.
• CERTFin Svizzera / FS-CSC: Swiss financial-sector cyber competence centre providing sector-wide threat intelligence and incident coordination for Swiss banks and insurers. Directly comparable in mission and consortium model to CERTFin, but operating in Switzerland rather than Italy.

Others

• European Cyber Security Organisation (ECSO): Public-private European partnership coordinating cybersecurity stakeholders including financial sector ISACs and CERTs. Comparable as an ecosystem coordinator; relevant to CERTFin's European project participation (REDFin, CyberSec4Europe).
• ABI Lab: Consorzio ABI Lab is the operational manager of CERTFin and a research/innovation consortium for the Italian banking sector. While the parent operator rather than a peer, it is highly relevant as an ecosystem participant with overlapping cybersecurity, AI, and business continuity research mandates.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xtwitter.com/ABI_Lab
• LinkedInlinkedin.com/company/certfin

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CERTFin