What Sonpo does

Sonpo (legal entity SONPO, a.s.) is a privately held Czech ICT services firm founded in 2006 and headquartered in Prague 8 - Karlín. The company operates as an ICT specialist focused on three intertwined service lines: custom application development, implementation and managed service of Fortinet security products (firewalls, sandboxing, web application firewall, email security, DDoS protection, SIEM), and compliance / security audits covering GDPR, ISO 27000, NUKIB, and ZoKB alongside penetration testing. Sonpo sells primarily through direct enterprise field sales into Czech central government, regional government, healthcare providers, universities, telecom, and regulated enterprises, with named reference customers including the Ministry for Regional Development of the Czech Republic, Czech Technical University, IKEM, Na Homolce Hospital, T-mobile Czech Republic, PENTA, and Konica Minolta.

Beyond services, Sonpo maintains a small proprietary product portfolio targeting the security operations layer. SEAL provides security alerting, vulnerability intelligence, and software supply chain monitoring via SBOM. 2Element is a general multi-factor authentication solution. SOFiE is a secure file exchange platform with documented integrations to Fortinet FortiSandbox and Check Point Sandblast, jointly published as solution briefs by both vendors. The company also offers multi-cloud application hosting on AWS and Microsoft Azure as part of its development engagements.

Sonpo's revenue is generated through professional services (project-based custom development and audits), managed services (24/7 Fortinet infrastructure operations), and subscription / licensing of its proprietary SEAL, 2Element, and SOFiE products. Pricing is quote-based and not publicly disclosed. The firm holds no disclosed funding, no parent company, and operates with 1-10 employees from a single Prague headquarters, with no documented international expansion beyond Central European clientele.

Name

Sonpo

Legal name

SONPO, a.s.

Website

https://sonpo.cz

Company type

Private

Founded year

2006

Operating status

Operating

Headcount range

1–10 employees

Short description

Sonpo is a Prague-based Czech ICT specialist providing custom software development, Fortinet cybersecurity implementation, compliance audits, and penetration testing to government, healthcare, education, and enterprise clients, complemented by three proprietary security products (SEAL, 2Element, SOFiE).

Ownership category

akta.pro rank

Product category

ICT Security Services

NAICS

Other Computer Related Services (541519)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Application Security & DevSecOps Services (BPAKAHAJ)

akta.pro secondary industry

Privacy, Data Protection & Compliance (zk compliance, GDPR/PII handling) (FSAPAJAM)

Keywords

• ICT security services
• Custom software development
• Fortinet implementation
• Penetration testing
• Compliance auditing

Headquarters

HQ city

Prague

HQ country

Czechia

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Supply Chain

Revenue model

1. Professional Services - Software Development: Custom software development services including consultation, system analysis, application design, development, testing, integration, migration, and user training. Includes mobile app development and application hosting on AWS, Azure, and other cloud platforms.
2. Cybersecurity Services and Products: Implementation and ongoing service of Fortinet security products, including firewalls, threat detection, network authentication, web application firewalls, email security gateways, and DDoS protection. Includes 24/7 support and managed security services.
3. Compliance and Audit Services: Process analysis and audits including risk analysis, compliance analysis for ZoKB, ISO 27000, GDPR, and NUKIB standards, plus ICT security audits and penetration testing services.
4. Proprietary Products (SEAL, 2Element, SOFiE): Sales and licensing of proprietary security products including SEAL security alerting, 2Element MFA solution, and SOFiE secure file exchange platform with enterprise integrations.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels2 records

Core offering

Sonpo is an ICT specialist that helps clients with security, development, and integration of applications and systems, and ensures operation and service of their cyber infrastructure. Core services include custom application and mobile app development, implementation and ongoing service of Fortinet security products, process analyses and audits (ZoKB, ISO 27000, GDPR, NUKIB), and penetration testing and technical audits. The company also sells three proprietary security products: SEAL (security alerting, vulnerability intelligence, SBOM), 2Element (multi-factor authentication), and SOFiE (secure file exchange with Fortinet and Check Point integrations).

Product overview

SONPO is an ICT specialist company offering a portfolio of three distinct security products: SEAL (security alerting and vulnerability intelligence), 2Element (multi-factor authentication), and SOFiE (secure file exchange). The company also provides custom software development services and implements Fortinet security products including firewalls, sandboxing, and network security solutions. The products work independently while sharing a unified security focus, with SOFiE offering documented integrations with Fortinet and Check Point security platforms.

Differentiator

Problem solved

Functional benefit

Brands

• SEAL: Security Alerting and Vulnerability Intelligence product for monitoring and securing software supply chain (SBOM)
• 2Element
• SOFiE

Products and services

• Custom Application and Mobile Development
• Fortinet Cybersecurity Implementation and Managed Service
• Process Analyses and Compliance Audits
• Penetration Testing and Technical Audits

Named customers19 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

Feature5 records

Partnerships

One partnership is on record.

• FortinetcoreTechnology or IntegrationSonpo is a certified Fortinet partner providing implementation and service of Fortinet security products including FortiGate Next Generation Firewalls, FortiSandbox advanced threat detection, FortiWeb web application firewall, FortiMail email security gateway, FortiDDoS, and FortiSIEM. They hold FortiSandbox Specialist certification for implementations. Fortinet products form a core part of Sonpo's security service offerings to customers.

Recent moves6 records

Expansion highlights5 records

Direct peers

• Soitron Group: Central European IT services and cybersecurity integrator operating across CEE with a comparable mix of managed services, security operations, and custom application development targeting enterprise and government accounts.
• ICZ (Intelligent Communication Zone): Czech ICT integrator with strong public-sector and defense exposure, delivering custom systems, security solutions, and managed services — overlapping Sonpo's enterprise and government focus.
• AUTOCONT: Czech ICT systems integrator delivering custom software development, infrastructure, and cybersecurity services to enterprise and public-sector customers — directly overlapping Sonpo's core services portfolio in the same geography.
• ALEF Group: CEE value-added distributor and integrator of cybersecurity and networking technologies (including Fortinet), competing head-on with Sonpo's Fortinet-led security services in the same regional channel.
• AEC (Advanced Engineering Cooperative): Czech cybersecurity-focused integrator delivering security audits, penetration testing, and managed security services to enterprise and public-sector clients — a direct competitor in Sonpo's core cyber-audit and pen-testing practice.
• Ness Czech (formerly Ness Technologies): Czech arm of a global IT services group providing custom development, integration, and digital transformation for enterprise and government customers — directly comparable in service mix and customer segments.

Broad incumbents

• Snyk: Global incumbent in developer security and vulnerability intelligence with SBOM capabilities — directly comparable to Sonpo's SEAL product, but operating at vastly larger scale and broader geography.

Regional players

• Gordic: Czech public-sector software and IT services specialist focused on government and municipalities — directly comparable in customer vertical but with a narrower software-product orientation.
• Adastra: Central European IT consulting and software engineering firm with data and security practices serving enterprise and public-sector clients across CEE — comparable in services mix and regional scope.
• Istrosec: Slovak cybersecurity integrator delivering pen testing, audits, and managed security across CEE — comparable offering but primarily Slovakia-based rather than Czech Republic.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks5 records

Key highlights6 records

Customer concentration

• Facebookfacebook.com/SonpoCZ
• LinkedInlinkedin.com/company/sonpo

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Sonpo