What Cosanta GmbH does

Cosanta GmbH is a Germany-based Managed Security Service Provider (MSSP) founded in 2022 in Solingen by Maurice Kemmann. The company delivers a modular set of managed IT security services — SOC-as-a-Service (24/7 monitoring by certified analysts), SIEM-as-a-Service (real-time log analytics with AI-based anomaly detection and an onboarding AI learning phase), Vulnerability Management (CVE-based scanning using MITRE databases), Centralized Log Management, and Cyber Security Consulting — to organizations that must comply with German KRITIS regulations, IT-Sicherheitsgesetz 2.0, IT-Grundschutz, and ISO 27001, and more recently the EU NIS-2 directive. Target customers are critical infrastructure operators (energy, water, healthcare, transport, IT/telecoms) and other German enterprises with elevated IT security requirements; the company has added mid-market firms newly in scope under NIS-2 as of October 2024.

Underlying technology is a services-led delivery stack rather than a proprietary product: the SIEM platform ingests logs from servers, networks, applications, and endpoints (with EDR/XDR coverage) and applies AI anomaly detection atop policy-based correlation, while the SOC layer is staffed by human analysts. Pricing and engagement terms are quote-based and undisclosed publicly; the go-to-market is direct enterprise field sales, beginning with a non-binding initial consultation and progressing to tailored multi-year managed service contracts. The company is sales-led, single-country (Germany), and differentiated primarily through regulatory domain expertise and German-language delivery rather than through proprietary technology; memberships in Allianz für Cyber-Sicherheit, BSKI, and BITMi support its positioning. Revenue, headcount, and funding are not publicly disclosed.

Name

Cosanta GmbH

Legal name

Cosanta GmbH

Website

https://cosanta.de

Company type

Private

Founded year

2022

Operating status

Operating

Headcount range

1–10 employees

Short description

Cosanta GmbH is a Solingen-based German Managed Security Service Provider, founded in 2022, delivering SOC, SIEM, vulnerability management, and log management services to KRITIS companies and other organizations with elevated IT security requirements under German and EU regulations.

Ownership category

akta.pro rank

Product category

Managed Security Services

NAICS

Computer Systems Design and Related Services (54151), Computer Systems Design and Related Services (5415), Computer Facilities Management Services (541513)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)

akta.pro secondary industries

Security Operations Center (SOC) as a Service (BPAEADAB), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH)

Keywords

• Managed security services
• Security operations center
• Vulnerability management
• Log management services
• Compliance consulting

Headquarters

HQ city

Solingen

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales

Revenue model

1. Managed Security Services (MSS): Recurring managed security services including SOC-as-a-Service, SIEM-as-a-Service, vulnerability management, and log management. Services are provided as modular packages that can be expanded over time. Maximum cost flexibility is emphasized, allowing customers to scale services based on their current needs without infrastructure investments.
2. Cyber Security Consulting: Advisory services including IT security strategy development, compliance assessment for KRITIS/IT-Grundschutz/ISO 27001, and security concept implementation. Provided as professional services alongside or independent of managed services.

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels4 records

Core offering

Cosanta GmbH is a German Managed Security Service Provider (MSSP) delivering 24/7 SOC-as-a-Service, SIEM-as-a-Service with EDR/XDR and AI-based anomaly detection, regular vulnerability management, and centralized log management. The company also provides cyber security and NIS-2 consulting for KRITIS operators and other organizations with elevated IT security requirements. Services are offered as modular subscription packages that can be expanded over time, with professional services available alongside managed services.

Product overview

Cosanta GmbH offers a unified managed IT security services platform with multiple integrated modules. The core offering consists of SOC-as-a-Service (a virtual Security Operations Center with 24/7 monitoring), SIEM-as-a-Service (with EDR & XDR capabilities), Cyber Security-Consulting, Vulnerability Management (Schwachstellenmanagement), and Central Log Management (Zentrales Log Management). These services work together as a comprehensive cybersecurity framework: Central Log Management collects log files from all IT components, SIEM-as-a-Service analyzes these logs using AI-powered anomaly detection, SOC-as-a-Service provides continuous monitoring and incident response, and Vulnerability Management identifies security weaknesses. NIS-2 compliance consulting is available as an add-on service.

Differentiator

Problem solved

Functional benefit

Products and services

• SOC-as-a-Service A virtual Security Operations Center providing 24/7 monitoring of customer IT infrastructure, with certified SOC analysts detecting, qualifying, analyzing, and responding to security incidents around the clock.
• SIEM-as-a-Service Security Information and Event Management delivered as a managed service. Collects and analyzes log files from servers, network infrastructure, applications, and clients in real time using policies and AI-based anomaly detection, with alerts routed to the SOC.
• Cyber Security Consulting Advisory services that identify IT security needs together with the customer and consult on IT security strategy, including support for compliance with IT-Sicherheitsgesetz 2.0, IT-Grundschutz, and ISO 27001.
• Schwachstellenmanagement (Vulnerability Management) Regular automated vulnerability scanning (VAS-as-a-Service) monitoring IT assets against CVE databases from MITRE, with individualized reports and structured, risk-based remediation support.
• Zentrales Log Management (Central Log Management) Centralized collection and management of log files from all IT components, including AD servers, internal applications, websites, and external applications, fulfilling BSI IT-Grundschutz log retention requirements for KRITIS companies.
• NIS-2-Richtlinie Beratung Advisory services helping companies understand and implement NIS-2 directive requirements, including compliance assessment and certification support.

Quantifiable outcome

• 24/7 security monitoring and incident response capability
• +1 more outcomes

Named customers1 record

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability2 records

Feature4 records

Partnerships

Three partnerships are on record, tiered core and minor.

• Allianz für Cyber-Sicherheit (Alliance for Cyber Security)coreStrategic or Co-development PartnerCosanta is a participant member of the Allianz für Cyber-Sicherheit, a German initiative supported by the Federal Ministry of the Interior and Home Affairs (BMI) and the BSI (Federal Office for Information Security) to strengthen cyber security cooperation between government, business, and research institutions in Germany.
• Bundesverband Schutz Kritischer Infrastrukturen (BSKI)coreStrategic or Co-development PartnerCosanta is a member of BSKI, the Federal Association for the Protection of Critical Infrastructure in Germany. This membership demonstrates expertise in KRITIS security and provides networking opportunities with other critical infrastructure operators and security providers.
• Bundesverband IT-Mittelstand (BITMi)minorGTM or Marketing PartnerCosanta is a member of BITMi, representing German mid-sized IT companies. The association advocates for the interests of IT SMEs in Germany and provides a platform for visibility and networking.

Scale indicators2 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Arvato Systems (Bertelsmann): German IT services provider with managed security, compliance, and KRITIS-relevant offerings for regulated industries. Comparable as a German MSSP selling into similar enterprise and public-sector segments.
• CANCOM GmbH: Large German IT services and managed services provider with a dedicated cybersecurity practice covering SOC, endpoint protection, and compliance advisory. Comparable because it sells subscription-based managed security into German enterprises and public-sector organizations.
• SVA System Vertrieb Alexander GmbH: German IT system house offering managed security, SIEM, and consulting across enterprise customers. Comparable MSSP-style model with strong German mid-market and regulated-industry presence.
• Controlware GmbH: German systems integrator and managed security services provider offering SOC, SIEM, and cybersecurity consulting to enterprise and public-sector customers. Direct MSSP competitor focused on the German market with overlapping KRITIS and mid-market customer segments.
• Allgeier Enterprise IT: German mid-market IT and security services provider offering managed security, consulting, and compliance support to regulated German enterprises. Comparable because it competes for the same SME-KRITIS buyer profile Cosanta targets.

Emerging players

• Arctic Wolf Networks: Global managed detection and response provider entering the European/KRITIS market with 24/7 SOC capabilities. Comparable because it sells a similar subscription SOC/SIEM model to mid-market and enterprise customers, though at greater scale and without Cosanta's deep German regulatory specialization.
• Eye Security: European cybersecurity scale-up offering managed detection and response (MDR) and SOC services to mid-market companies across Germany and the Netherlands. Comparable as a fast-growing specialist MSSP targeting SMEs, although more threat-detection focused and less KRITIS-niche than Cosanta.

Broad incumbents

• secunet Security Networks AG: Leading German cybersecurity specialist with deep public-sector and critical-infrastructure footprint, offering managed security, consulting, and certified products. Comparable as a much larger incumbent in the same KRITIS/government security niche Cosanta targets.
• T-Systems (Deutsche Telekom): Subsidiary of Deutsche Telekom delivering managed security, SOC, and compliance services to German enterprises, KRITIS operators, and public-sector clients. Comparable as a large incumbent competing for the same regulated buyers.
• Atos (Germany / Eviden): Global IT services group with significant German managed security, SOC, and digital sovereignty offerings for KRITIS-adjacent customers. Comparable as a broad incumbent MSSP serving German regulated enterprises.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/cosanta-gmbh

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cosanta GmbH