difesa

What difesa does

difesa GmbH & Co. KG is a Munich-headquartered security consulting firm focused on IT, OT, and AI security for upper midmarket enterprises across the DACH region (Germany, Austria, Switzerland). The firm operates along three engagement tracks — Explore (a knowledge graph of advisory insights), Envision (thought leadership on AI and adaptive defense), and Execute (interactive demos and operational services) — and targets primarily Financial Services and Manufacturing enterprises with complex OT landscapes. Its service portfolio spans Strategy, Risk Management, and Compliance advisory (with a fixed-price "Smart Start" route), CISO Support (including fractional and interim CISO), and operational hardening of IT, OT, Agentic, and Data environments.

The company monetizes through professional services engagements (OT/IT security, advisory, CISO operational support) and a paid three-day CISO Master Class seminar priced at €2,499 per participant, delivered in-person at Seespitz Gästehaus, Herrsching am Ammersee. Proprietary AI capabilities include an AI Anonymizer for PII detection and reversible redaction, a Secure AI Inference HUB acting as a safety agent over AI workflows, and a CISO tabletop exercise ("06:47, Monday") for ransomware response training; these are exposed as interactive demos on the Execute page alongside the company's services marketing. The GTM motion combines direct advisory sales with product-led growth via self-serve demos, and content marketing through an Explore knowledge graph plus a Brevo-powered newsletter. Ownership is founder-led: difesa is a GmbH & Co. KG whose general partner is phronimos GmbH, managed by John-Erik Horn, with no external investment disclosed in available sources.

Business model mechanics remain opaque — no revenue, headcount, or customer-logo disclosures are present in the data — which constrains firm-level benchmarking. The structure (closely held partnership, no public funding, in-person training as a separate revenue line) suggests a small, founder-driven boutique consultancy with deliberate but measured growth, where AI-enabled tooling is used to differentiate a service-led offering rather than as a standalone product business.

Name

difesa

Legal name

difesa GmbH & Co. KG

Website

https://difesa.de

Company type

Private

Operating status

Operating

Headcount range

11–50 employees

Short description

difesa GmbH & Co. KG is a Munich-based security consulting firm delivering advisory, CISO support, and OT/IT/AI security services to upper midmarket enterprises in the DACH region, primarily in Financial Services and Manufacturing.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting

NAICS

Computer Systems Design and Related Services (54151), Educational Support Services (61171), Security Systems Services (56162)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Prepackaged Software (7372)

akta.pro primary industry

Model Governance, Risk & Compliance (GRC) Platforms (HDAAAKAA)

akta.pro secondary industries

Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG), IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)

Keywords

• Information security advisory
• OT security services
• CISO as a service
• AI security governance
• Cybersecurity consulting

Headquarters

HQ city

Munich

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Professional Services / Advisory: Information security advisory services including strategy, risk management, and compliance consulting. Delivered through engagements shaped to client business models.
2. CISO Services: CISO Support, CISO as a Service (fractional), and Interim CISO services providing operational leadership for security offices.
3. CISO Master Class Training: Three-day leadership seminar for CISOs covering self-leadership, personal resilience, and rhetoric skills. Offered at €2,499 per participant.
4. OT/IT Security Services: Continuous discovery, hardening and monitoring for heterogeneous, legacy-bound industrial systems. Includes secure remote maintenance, data governance frameworks, and hardware installation.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels3 records

Core offering

Difesa provides information security advisory and operational services for IT, OT, and AI environments, structured around three pillars: Strategy, Risk Management, and Compliance, plus operational Security services (OT, IT, Agentic, Data) and CISO Support (Support, fractional CISO as a Service, Interim CISO). It also delivers a three-day CISO Master Class leadership seminar and exposes interactive demo tools (AI Anonymizer, Secure AI Inference HUB, and a ransomware tabletop exercise) through its Execute section.

Product overview

difesa is a German security company (difesa GmbH & Co. KG) that offers a portfolio of advisory and operational security services along with interactive demo tools. The advisory services include Strategy, Risk Management, and Compliance consulting, with a 'Smart Start' fixed-price route (Eye Opener → Smart Start → Fast Track). The CISO support offerings include CISO Support, CISO as a Service (fractional), and Interim CISO. Operational security services cover OT Security (industrial systems), IT Security, Agentic Security (AI agents), and Data Security. The three demo tools — AI Anonymizer (PII detection and reversible redaction), Secure AI Inference HUB (AI workflow safety monitoring), and 06:47 Monday (CISO tabletop exercise) — are experiential tools available on the Execute page. The company also offers a CISO Master Class three-day leadership seminar.

Differentiator

Problem solved

Functional benefit

Products and services

• Information Security Advisory Three-pillar information security advisory (Strategy, Risk Management, Compliance) adapted to recognized industry standards and shaped to the client's business model; includes a fixed-price Smart Start route (Eye Opener → Smart Start → Fast Track). For upper midmarket enterprises in DACH, particularly regulated industries.
• OT Security Services Continuous discovery, hardening and monitoring for heterogeneous, legacy-bound industrial OT systems, including secure remote maintenance, data governance enablement, and on-site hardware installation on the factory floor. For manufacturing enterprises with complex OT environments.
• IT Security Services Security services for IT infrastructure and systems, part of the overall hardening of the IT landscape. For enterprise clients needing IT security strategy and implementation.
• Agentic Security Services Security services focused on AI agents and autonomous systems, addressing the unique challenges of securing AI workflows. For enterprises deploying AI agents and needing policy-enforced AI operation.
• Data Security Services Services for protecting data assets, enabling data governance frameworks, and ensuring secure handling of sensitive information. For enterprises needing data governance and secure data handling.
• CISO Services Three CISO service lines: CISO Support (coverage for new or staffing gaps), CISO as a Service (fractional operational lead of the CISO office, including ISMS, communication, coordination, reporting), and Interim CISO (experienced lead taking line responsibility and shaping security strategy temporarily). For organizations needing operational CISO leadership on a flexible basis.
• CISO Master Class Three-day in-person leadership seminar covering self-leadership, personal resilience, and rhetoric skills for security managers, CISOs, and IT/OT Security Officers. Priced at €2,499 excluding VAT, includes accommodation and meals. Leadership module by xpand (Jürgen Kast), Resilience module by Starkes Dach (Dunja Horn), Rhetoric module by BE YOUR VOICE (Christina Jenssen).
• AI Anonymizer Interactive AI tool providing PII detection and reversible redaction — sensitive data (emails, names, phone numbers, IBANs, credit cards, VAT IDs, license plates, IP addresses) goes in, anonymized data comes out, with one-click restoration of original values. Available as a self-serve demo on the Execute page.
• Secure AI Inference HUB Interactive AI safety agent that watches AI workflows in real time, auditing prompts, tool calls, and outputs against organizational policies in Permissive, Standard, or Strict modes. Available as a self-serve demo on the Execute page.
• 06:47, Monday (Tabletop Exercise) Interactive CISO tabletop exercise dealing with ransomware on the plant floor, where regulatory clocks are the antagonist and every decision costs time. Available as a self-serve demo on the Execute page, used for incident response training.

Segments2 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability4 records

Feature3 records

Partnerships

Three partnerships are on record, tiered minor.

• xpand (Jürgen Kast)minorStrategic or Co-development PartnerLeadership coaching provider for CISO Master Class. Jürgen Kast delivers the Leadership module covering personality profiles (DISG system), self-leadership, and stakeholder interaction with C-level, peers and staff.
• Starkes Dach (Dunja Horn)minorStrategic or Co-development PartnerPersonal resilience training provider for CISO Master Class. Dunja Horn delivers the Resilience module covering control under criticism, crisis management, and separating thoughts from feelings.
• BE YOUR VOICE (Christina Jenssen)minorStrategic or Co-development PartnerRhetoric and communication training provider for CISO Master Class. Christina Jenssen delivers the Rhetoric module covering presentation skills, body language, and negotiating position.

Scale indicators2 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• Optiv: US-headquartered cybersecurity solutions integrator providing advisory, integration, and managed services to enterprise clients. Comparable on advisory-to-implementation model and enterprise security services breadth, though larger and US-centric.
• Capgemini Cybersecurity: Global consulting giant with significant cybersecurity advisory and managed services practice serving European enterprises including DACH. Comparable on enterprise cyber advisory but operates at vastly larger scale across geographies.
• Trustwave: Global cybersecurity services and MDR provider offering advisory, managed detection, and offensive security. Comparable on services breadth and enterprise client base, though operates at meaningfully larger scale and broader geographic footprint than difesa.
• Orange Cyberdefense: European cybersecurity arm of Orange with managed security, consulting, and threat intelligence across multiple geographies. Comparable on the OT/IT security services portfolio but operates at significantly larger scale and broader reach than difesa.

Direct peers

• Wavestone: European-origin management and cybersecurity consultancy with strong DACH and French footprint, advising large enterprises on cyber strategy, GRC, and transformation. Highly comparable boutique-to-mid-tier positioning with similar upper-midmarket enterprise client base and advisory-led services model.
• Kudelski Security: Swiss-headquartered cybersecurity services firm offering advisory, managed detection/response, and OT/IoT security to European enterprises. Directly comparable given shared DACH base, regulated-industry focus, and blend of consulting and operational security services.
• NCC Group: UK-listed cybersecurity and resilience consultancy offering advisory, assurance, and managed security services to global enterprises. Comparable as a mid-sized specialist with both consulting depth and proprietary tooling/managed services.
• SEC Consult (Atos-owned): European cybersecurity consultancy headquartered in the DACH region with deep penetration testing, OT security, and incident response capabilities. Comparable mix of advisory services, OT expertise, and DACH midmarket client focus.

Emerging players

• Robust Intelligence (Cisco): AI security and model governance platform providing AI firewall, red-teaming, and model risk controls. Comparable on the AI workflow safety and model governance positioning that difesa's Secure AI Inference HUB addresses, though product-led rather than services-led.

Regional players

• TÜV SÜD (Cybersecurity division): DACH-rooted testing, certification, and industrial security services firm with established relationships in manufacturing and OT-heavy sectors. Comparable on the DACH midmarket and OT/industrial cybersecurity positioning, though broader portfolio beyond pure security.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/difesa-security

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about difesa