What Access42 does

Access42 B.V. is a privately held Dutch cybersecurity services provider headquartered in Leusden, Netherlands, founded in 2016 by Ronald Kingma. The company delivers an integrated portfolio spanning offensive security (penetration testing, continuous pentesting, red team / simulated attack exercises), defensive security (endpoint, network, cloud, email, OT), managed security services delivered through a proprietary framework called CyberTIM, a 24x7x365 Security Operations Center (SOC), cybersecurity gap assessments against frameworks such as NIS2, ISO 27001, NEN 7510, ISO 27701, DORA, and AVG/GDPR, and professional services including implementation, health checks, and training.

The company's technology approach combines its internally developed CyberTIM framework (its own managed security services backbone) with deep integration of best-of-breed partner platforms including Tenable, Mimecast, CrowdStrike, Stellar Cyber, Vectra AI, Hunters, Delinea, Lookout, Salt Security, Cofense, and SecurityScorecard. Access42 holds MSSP agreements with most of these vendors, enabling it to act as a one-stop managed service provider across the stack. AI capabilities are leveraged through partner platforms (notably Vectra AI for hybrid attack detection and Hunters Next-Gen SIEM), rather than through internally developed AI models.

The business model is hybrid: recurring revenue from managed security services and SOC contracts (annual or multi-year), complemented by project-based revenue from professional services, offensive security engagements, and gap assessments. Go-to-market is primarily direct enterprise sales with inside/field sales motions, supplemented by an active channel/partnership ecosystem, an annual Cybersecurity Summit, and thought-leadership content marketing. The customer base is concentrated in Dutch organizations across multiple sectors, with vertical specialization evidenced by NEN 7510 certification (healthcare) and a knowledge partnership with CIP (government). Specific customer logos are not publicly disclosed.

Name

Access42

Legal name

Access42 B.V.

Website

https://access42.nl

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

11–50 employees

Short description

Access42 is a Dutch cybersecurity services provider offering offensive and defensive security, managed security, and a 24/7 SOC, primarily serving Dutch organizations across healthcare, government, and general enterprise sectors through direct sales and partner channels.

Ownership category

akta.pro rank

Product category

Managed Cybersecurity Services

NAICS

Computer Systems Design and Related Services (54151), Computer Facilities Management Services (541513)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)

akta.pro secondary industries

Vulnerability Management, Pen Testing & Attack Surface Management (ASM) (HLACAJAN), Email Data Loss Prevention & Encryption (HDADAKAD), Application & API Security for Digital Health (WAF/RASP/API gateways) (HLACAJAH)

Keywords

• Managed security services
• Penetration testing services
• Security operations center
• Vulnerability management
• Cybersecurity consulting

Headquarters

HQ city

Leusden

HQ country

Netherlands

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Managed Security Services (MSS): Access42 provides ongoing managed security services through its SOC and CyberTIM framework, including 24x7 monitoring, detection, and response. Revenue is generated through recurring service contracts, typically with annual or multi-year billing arrangements.
2. Professional Services: Access42 offers pre-sales consultancy, implementations, health checks, and training services. Security specialists are certified in vendor solutions and can be deployed globally. Revenue is generated on a project or service basis.
3. Offensive Security Services (Pentesting): Access42 performs penetration testing and simulated attacks as a standalone service. This includes continuous pentesting and red team exercises. Revenue is project-based.
4. Cybersecurity Assessments: Gap analysis and cybersecurity assessments against NIS2, ISO 27001, NEN 7510, and other frameworks, delivered in partnership with Bee Able. Revenue is project-based.

Go-to-market motion4 records

Distribution channels3 records

Marketing channels6 records

Core offering

Access42 is a Dutch cybersecurity services firm that outsources and supports organizations across offensive security (continuous pentesting and red-team simulated attacks), defensive security (endpoint, network, cloud, email, and OT protection using integrated partner platforms), and managed security delivered through a 24x7x365 Security Operations Center built on Access42's proprietary CyberTIM framework. The portfolio also includes cybersecurity assessments against NIS2, ISO 27001, NEN 7510, and other regulatory frameworks, plus professional services for implementation, health checks, and training.

Product overview

Access42 is a Dutch cybersecurity services company offering an integrated portfolio of offensive and defensive security services. The core offering combines Offensive Security (pentesting and simulated attacks), Defensive Security (endpoint, network, cloud, and email protection using integrated partner platforms), Managed Security Services powered by the proprietary CyberTIM framework, and a 24x7 Security Operations Center for continuous monitoring and incident response. Additional services include Cybersecurity Assessments for NIS2/ISO compliance and Professional Services for implementation, health checks, and training. The services integrate leading cybersecurity platforms (Tenable, Mimecast, CrowdStrike, Vectra AI, Hunters, Delinea, Lookout, Salt Security, Cofense, SecurityScorecard, Stellar Cyber) into a cohesive security ecosystem. Access42 positions itself as a one-stop provider handling all cybersecurity needs from awareness training to threat detection, prevention, and prediction.

Differentiator

Problem solved

Functional benefit

Brands

• CyberTIM: A proprietary framework developed by Access42 for Managed Security Services. CyberTIM provides 24x7x365 detection and response capabilities as part of the SOC services.

Products and services

• Offensive Security Proactive cybersecurity engagement where Access42 performs (continuous) penetration tests and simulated attacks to uncover weaknesses in web applications, infrastructure, and physical security for organizations that want to identify vulnerabilities before attackers can exploit them.
• Defensive Security Comprehensive defensive security solutions covering endpoint, network, cloud, and email security using Access42's integrated cybersecurity partner platforms, tailored to client-specific security requirements.
• Managed Security Services Recurring service in which Access42 works with client organizations to build a security infrastructure that proactively detects, analyzes, and neutralizes threats through continuous monitoring, detection, and prevention, with the basic package guaranteeing baseline security against ransomware.
• Security Operations Center (SOC) 24x7x365 detection and response capability that takes over cybersecurity responsibilities end-to-end — from awareness training to detecting, preventing, and predicting potential threats — across traditional IT, cloud, and OT environments.
• Cybersecurity Assessment Structured GAP analysis that evaluates an organization's cybersecurity posture against NIS2, ISO 27001, NEN 7510, ISO 27701, DORA, and AVG/GDPR, producing a clear set of steps for compliance and risk management.
• Professional Services Pre-sales consultancy, QuickStart implementation, health checks, and training for cybersecurity solutions, delivered by Access42's certified, experienced in-house security specialists on a global deployment basis.

Quantifiable outcome

• 94% of successful attacks start with a phishing email; the remaining 6% involve exploiting vulnerabilities, default/stolen accounts, unnecessary services, or misconfigurations.
• +3 more outcomes

Named customers1 record

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration11 records

AI capability2 records

Feature5 records

Partnerships

Eight partnerships are on record, tiered core and minor.

• Bee AblecoreStrategic or Co-development Partner · 1 January 2026Access42 developed its Cybersecurity Assessment / GAP analysis offering in collaboration with Bee Able. The joint assessment analyzes an organization's cybersecurity posture against NIS2, ISO 27001, NEN 7510, ISO 27701, DORA, and AVG/GDPR frameworks, delivering results within 1–2 working days.
• CIP (Centrum Informatiebeveiliging en Privacybescherming)coreStrategic or Co-development PartnerAccess42 is a knowledge partner of the CIP, contributing knowledge on ethical hacking, vulnerability and threat management, security awareness, and responsible disclosure. CIP is the expertise center for information security and privacy protection for and by government organizations, founded by Belastingdienst, DUO, SVB, and UWV. Ronald Kingma serves as CTO of Access42 and regularly speaks on cybersecurity topics.
• IDProfscoreStrategic or Co-development PartnerAccess42 and IDProfs.com entered a partnership to combine their cybersecurity strengths. Access42's portfolio complements IDProfs' services in Identity & Access Management (IAM), Privileged Access Management (PAM), Public Key Infrastructure (PKI), and Microsoft Active Directory. The partnership enables both companies to better serve customers' cybersecurity challenges by offering strategy, control, monitoring, and management in vulnerability management, security monitoring, and IAM.
• PraegusminorStrategic or Co-development PartnerAccess42 entered a partnership with Praegus, though detailed information about the partnership scope is not publicly available beyond the announcement.
• TenablecoreTechnology or IntegrationTenable is a key technology partner for vulnerability management and exposure management solutions. Access42 holds MSSP agreements with Tenable and has certified staff including Ronald Kingma with Tenable Guardian status (highest technical certification). Access42 uses Tenable's solutions as part of its managed security services and vulnerability scanning offerings. Access42 also participated in the Tenable Guardian Summit in the United States.
• MimecastcoreTechnology or IntegrationMimecast provides email security solutions including protection against impersonation attacks, malware attachments, malicious links, and provides cyber resilience, continuity, and archiving for email. Access42 holds an MSSP agreement with Mimecast and has certified staff including Mimecast Maverick status. More than 90% of hack attempts come through phishing email, making Mimecast a critical component of Access42's security portfolio.
• CrowdStrikecoreTechnology or IntegrationCrowdStrike provides a cloud-native platform for endpoint protection, cloud workloads, identity, and data security. Access42 holds MSSP agreements with CrowdStrike and has certified staff including CrowdStrike Certified Responder. The companies co-host webinars and participate in trade shows together. Access42 was also involved in organizing 'Hacking Exposed' sessions at Infosecurity 2018.
• Vectra AIcoreTechnology or IntegrationVectra AI provides AI-driven hybrid attack detection, investigation, and response solutions. Access42 entered a partnership with Vectra in March 2019 to enable Dutch organizations to discover hidden cyberattacks faster through AI. Vectra Cognito platform is used by Access42 for attacker detection and incident investigations.

Scale indicators3 records

Recent moves5 records

Expansion highlights6 records

Direct peers

• ON2IT: ON2IT is a Dutch cybersecurity services firm specializing in managed detection & response and zero-trust architecture. Like Access42, it combines managed SOC services with technology-agnostic advisory and operates in the same Dutch mid-market and enterprise segment.
• Northwave: Northwave is a Dutch managed security services provider offering SOC, incident response, and offensive security to European enterprises. It is a direct competitor in the Dutch MSSP market with a comparable full-service portfolio.
• Orange Cyberdefense Netherlands (formerly SecureLink): Orange Cyberdefense NL is the Dutch arm of the global MSSP that acquired SecureLink — a former employer of Access42's founder. It competes head-on in Dutch managed security, threat intelligence, and incident response, but with substantially greater scale and resources.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/Access42_NL
• Facebookfacebook.com/access42
• LinkedInlinkedin.com/company/access42-nl

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Access42