Sphynx
Sphynx is a privately held European cybersecurity firm, headquartered in Athens with offices in Switzerland and Cyprus, that sells the SPA Suite platform — combining asset/threat modelling, AI/ML analytics, and CACAO-based SOAR — plus managed SOC, NIS2/DORA compliance, training, and a packaged Medical Cyber Shield service to healthcare practices, SMEs, and enterprise customers.
- Company typePrivate
- Founded2016
- HeadquartersAthens, Greece
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What Sphynx does
Sphynx (legal entity SPHYNX HELLAS SA) is a privately held European cybersecurity provider founded in 2016, with its operational headquarters in Athens, Greece, and additional offices in Heraklion (Greece), Zug (Switzerland) and Nicosia (Cyprus). The company serves mid-market and enterprise customers across Southern and Central Europe, with primary verticals including healthcare practices, organizations subject to EU NIS2 and DORA regulation, and SMEs seeking outsourced security operations. Its go-to-market combines direct enterprise sales, an EU-co-financed SOC4SME channel for Greek SMEs, and distribution partnerships for partner technologies such as Deceptive Bytes, Envoid, and DeviceTotal.
Sphynx's core product is the SPA Suite, an integrated cybersecurity risk management platform built around asset and threat modelling, vulnerability assessment, AI/ML-based security analytics, and CACAO-standard incident response playbooks, sold through tiered Bronze, Silver, Gold, and Platinum subscriptions. Supporting modules include Sphynx SOAR (orchestration and automated response), Sphynx Cyber Range (training platform aligned to MITRE ATT&CK, NIST, NICE, and ECF frameworks), and Sphynx Security Analytics (AutoML, UEBA, and LLM-based CTI extraction from unstructured reports). A packaged vertical offering, Medical Cyber Shield, bundles endpoint security, managed SOC services, cyber awareness training, and AIG cyber insurance for private healthcare practices.
The business model combines recurring software subscriptions, managed security services (SOC, alarm monitoring, incident response), professional services (penetration testing, NIS2/DORA advisory, training), and product licensing. The company monetizes a tiered pricing structure with annual billing for SPA Suite tiers and monthly billing for Medical Cyber Shield, and supports customers through multilingual (English, Greek, German) delivery from its four offices. Sphynx also participates in 50+ EU-funded R&D projects, providing a research-led talent base (20% PhDs) and academic credibility led by Founder and CEO Professor George Spanoudakis.
Sphynx firmographics
Firmographics- Name
- Sphynx
- Legal name
- SPHYNX HELLAS SA
- Website
- https://sphynx.ch
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Sphynx is a privately held European cybersecurity firm, headquartered in Athens with offices in Switzerland and Cyprus, that sells the SPA Suite platform — combining asset/threat modelling, AI/ML analytics, and CACAO-based SOAR — plus managed SOC, NIS2/DORA compliance, training, and a packaged Medical Cyber Shield service to healthcare practices, SMEs, and enterprise customers.
- Ownership category
- akta.pro rank
Sphynx industry classification
Industry- Product category
- Cybersecurity Software
- NAICS
- Computer Systems Design and Related Services (5415)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Security Operations Center (SOC) as a Service (BPAEADAB)
- akta.pro secondary industries
- Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG)
Keywords
Where Sphynx is headquartered
LocationHeadquarters
- HQ city
- Athens
- HQ country
- Greece
- HQ region
- Europe
Offices4 records
Markets served
Sphynx business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Software Platform Subscriptions (SPA Suite): Tiered subscription model for the SPA Suite platform with Bronze, Silver, Gold, and Platinum service tiers offering varying levels of asset modelling, vulnerability assessment, monitoring, CTI updates, managed alarm monitoring, incident investigation and response, and DPO services.
- Managed Security Services: Recurring managed security services including SOC services, managed alarm monitoring, incident investigation, and managed incident response delivered as ongoing services.
- Professional Services: Cybersecurity consulting services, penetration testing, compliance advisory (NIS2, DORA), and cybersecurity training services provided on project basis.
- Product Licensing: Licensing of proprietary products including SOAR platform, Cyber Range, and Security Analytics to enterprise clients.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Bronze - Baseline security and risk management |
| Subscription | Annual | Silver - Enhanced monitoring and risk assessment |
| Subscription | Annual | Gold - Comprehensive managed security |
| Subscription | Annual | Platinum - Complete assurance with DPO services |
| Subscription | Monthly | Medical Cyber Shield Silver |
| Subscription | Monthly | Medical Cyber Shield Gold |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels8 records
Sphynx product offering
Product offeringCore offering
Sphynx provides integrated cybersecurity products, managed security services, and consulting across cyber intelligence, analytics, incident response, assurance, and certification. Its core deliverable is the SPA Suite platform, which combines asset and threat modelling, AI/ML-driven analytics, vulnerability assessment, cyber threat intelligence ingestion, and automated incident response via CACAO playbooks, complemented by SOAR, Cyber Range, Security Analytics, and partner-distributed endpoint and mobile security products.
Product overview
Sphynx offers a unified cybersecurity portfolio centered on the SPA Suite as the core integrated platform, complemented by specialized modules and partner technologies. The SPA Suite delivers comprehensive risk management through asset/threat modeling, AI-enabled analytics, automated incident response (CACAO playbooks), vulnerability assessment, and cyber threat intelligence. Supporting modules include SOAR (incident response orchestration), Cyber Range (customizable training with MITRE ATT&CK alignment), and Security Analytics (ML-powered behavioral analysis). The portfolio extends through strategic partnerships with Envoid for mobile threat protection and Deceptive Bytes for proactive endpoint security against ransomware. Specialized vertical offerings include Medical Cyber Shield for healthcare practices. The platform is designed for fast customization to client needs and integrates with existing enterprise infrastructure.
Differentiator
Problem solved
Functional benefit
Brands
- Sphynx SPA Suite: Security and Privacy Assurance Suite - integrated platform for cybersecurity risk management
- Sphynx SOAR
- Sphynx Cyber Range
- Sphynx Security Analytics
- Medical Cyber Shield
- Envoid
- Deceptive Bytes
Products and services
- Sphynx Security and Privacy Assurance (SPA) Suite
Quantifiable outcome
- Reduces average breach cost through proactive vulnerability mitigation
- +3 more outcomes
Companies that use Sphynx
Customer profileNamed customers1 record
Segments5 records
Ideal customer profiles4 records
Sphynx technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration3 records
AI capability11 records
Feature7 records
Sphynx partnerships and signals
Strategic signalPartnerships
Seven partnerships are on record, tiered minor and core.
- Association of Societe Anonyme and EntrepreneurshipminorCollaborative partnership for organizing informational seminars and events for Greek SMEs on cybersecurity awareness and NIS2 compliance. Joint event on July 16, 2025 at The Golden Age Hotel of Athens.
- SOC4SME (EU-funded program)coreCo-financed by the European Union, SOC4SME program enables SPHYNX HELLAS to provide free SOC services for 12 months to Greek SMEs, promoting cybersecurity adoption among small businesses.
- Deceptive BytescorePartnership for distributing Deceptive Bytes ransomware prevention solution in Greece and selected European markets. Deceptive Bytes uses deception technology that prevents ransomware attacks by altering execution environments in <2 seconds with >99.9% prevention rate.
- EnvoidcorePartnership for distributing Envoid mobile threat protection platform offering advanced threat detection and protection for mobile devices including zero-click exploit detection through digital forensic analysis.
- DeviceTotalcorePartnership for distributing DeviceTotal OT and IoT vulnerability management platform using advanced analytical algorithms without requiring agent installation on devices, ensuring broad coverage with minimal operational impact.
- HEIR H2020 Project ConsortiumminorResearch partnership contributing RAMA (Risk Assessment for Medical Applications) scoring system to the HEIR project. RAMA assesses attack surface and resilience of medical devices in real-time.
- AIG (Cyber Insurance)minorAIG provides cyber insurance (Corporate Package) as part of Medical Cyber Shield service offering for healthcare practices.
Scale indicators6 records
Recent moves8 records
Expansion highlights6 records
Sphynx competitors and assessment
Company assessmentBroad incumbents
- CrowdStrike: Global cybersecurity leader in endpoint detection, XDR, and managed security services (Falcon Complete). Comparable as an XDR/SOAR/MSSP competitor, though CrowdStrike operates at vastly greater scale and primarily via a single-agent platform.
- Orange Cyberdefense: European MSSP division of Orange, operating 24/7 SOCs across multiple countries with managed detection and response services. Comparable as a pan-European MSSP with overlapping SOC service delivery and compliance focus, though with substantially greater scale.
- WithSecure: Nordic-headquartered cybersecurity company providing managed security services (Countercept), EDR, and consulting across Europe. Comparable as a European MSSP with a similar product-plus-services portfolio, though materially larger and broader in scope.
- Darktrace: AI-driven cybersecurity platform specializing in anomaly detection, UEBA, and autonomous response. Comparable on the AI/ML-based security analytics dimension of Sphynx's SPA Suite, though Darktrace focuses on autonomous response rather than compliance-driven risk management.
Others
- Palo Alto Networks: Global cybersecurity platform spanning network security, EDR/XDR (Cortex), and SOAR (XSOAR). Comparable as a broad incumbent in the same MSSP-adjacent and SOAR/XDR categories, with overlapping capabilities to Sphynx's SPA Suite and SOAR products.
Emerging players
- Cybereason: XDR and EDR vendor offering endpoint detection, behavioral analytics, and managed detection and response services. Comparable on the UEBA/anomaly detection and managed security service dimensions of Sphynx's Security Analytics and SPA Suite.
- SenseOn: UK-based cybersecurity vendor offering an AI-driven SOC platform with extended detection and autonomous response capabilities. Comparable as a smaller European competitor combining AI/ML-based threat detection with SOC operational tooling.
- Tines: Irish-headquartered security orchestration and automation platform. Comparable on the SOAR dimension of Sphynx's portfolio, particularly for organizations seeking interoperable, standards-based workflow automation rather than vendor-locked platforms.
- Binalyze: Estonia-headquartered DFIR and SOC platform providing automated digital forensics and incident response. Comparable as a smaller European cybersecurity vendor focused on SOC and incident response workflows, with similar research-driven pedigree.
Direct peers
- Obrela Security Industries: Greek-headquartered MSSP offering managed security, SOC, and risk management services to enterprise clients across Southern Europe. Most directly comparable peer given overlapping geography, MSSP/SOC service model, and mid-market to enterprise customer focus.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Sphynx social profiles
Digital presenceSphynx financial estimates
Financial estimateRevenue estimate
Valuation estimate
Sphynx leadership team
Management profileNumber of profiles
Profiles4 records
Sphynx funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Sphynx M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Sphynx
What does Sphynx do?
Sphynx provides integrated cybersecurity products, managed security services, and consulting across cyber intelligence, analytics, incident response, assurance, and certification. Its core deliverable is the SPA Suite platform, which combines asset and threat modelling, AI/ML-driven analytics, vulnerability assessment, cyber threat intelligence ingestion, and automated incident response via CACAO playbooks, complemented by SOAR, Cyber Range, Security Analytics, and partner-distributed endpoint and mobile security products.
Is Sphynx a public or private company?
Sphynx is a private company. It is classified as venture growth investor backed and is currently operating.
When was Sphynx founded?
Sphynx was founded in 2016. It employs 51 to 100 people.
Where is Sphynx based?
Sphynx is headquartered in Athens, Greece, in the Europe region.
How does Sphynx make money?
Four revenue lines are on record. Software Platform Subscriptions (SPA Suite) is the primary driver. The others are managed Security Services, professional Services and product Licensing.
Who are Sphynx's main competitors?
Broad incumbents on record are CrowdStrike, Orange Cyberdefense, WithSecure and Darktrace. Palo Alto Networks is listed as an others. Emerging players are Cybereason, SenseOn, Tines and Binalyze. Obrela Security Industries is listed as a direct peer.
Does Sphynx have an API?
No public API is recorded for Sphynx.
What industry is Sphynx in?
Sphynx's product category is Cybersecurity Software. Its primary akta.pro industry code is BPAEADAB, Security Operations Center (SOC) as a Service, with a secondary code of BPAKAHAA, Managed Security Services (MSSP) & 24/7 SOC Operations. Its NAICS code is 5415 and its SIC code is 7370.