Fitsec Ltd

What Fitsec Ltd does

Fitsec Ltd (legal name Fitsec Oy) is a Finnish cyber threat intelligence provider founded in 2009 and headquartered in Espoo, Finland, with approximately 8 employees. The company's core offering is an all-in-one Cyber Threat Intelligence Feed built on manual, expert-led research rather than automation, which Fitsec claims produces ~80% unique IOC data not available from competitors. The feed is decomposed into specialized sub-products — APT Feed, DDOS Feed, SandboxIOC Feed, and SinkholeIOC Feed — and is delivered in standardized formats (STIX/TAXII, MISP, CSV, OpenIOC) with integration support for firewalls, IDS/IPS, and SIEM platforms including Microsoft Sentinel, Palo Alto, and FortiGate. A complementary APT Platform provides visualization and search over historical and current APT actor data, while other products include Sentry EDR (endpoint detection), Asset Tracker (SaaS data-leak monitoring), and USBGuard (USB port security hardware).

Fitsec operates a sales-led go-to-market via direct website contact forms, offering both 'I want to buy' and 'please contact me' pathways, and serves governmental institutions, critical infrastructure operators, telecommunications/network operators, defense, finance, technology, municipal, and education customers. Revenue is generated through subscription-based CTI feeds, SaaS (Asset Tracker), hardware-plus-annual-license (USBGuard), and project-based professional services including forensics, incident response, penetration testing, red teaming, SCADA auditing, malware analysis, reverse engineering, and training. In May 2024 the firm added a paid Akira ransomware decryption service with a success-fee commercial model. The company is privately held with no disclosed external funding.

Name

Fitsec Ltd

Legal name

Fitsec Oy

Website

https://fitsec.com

Company type

Private

Founded year

2009

Operating status

Operating

Headcount range

1–10 employees

Short description

Fitsec is a Finnish boutique cyber threat intelligence provider (founded 2009, ~8 employees) selling IOC feeds, EDR, data-leak monitoring, USB security hardware, and professional services to government, critical infrastructure, telecom, defense, and finance customers.

Ownership category

akta.pro rank

Product category

Cyber Threat Intelligence

NAICS

Computer Systems Design and Related Services (5415), Security Systems Services (56162)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Application Security & DevSecOps Services (BPAKAHAJ)

akta.pro secondary industry

Backup, Archiving & Ransomware-Resilient Data Protection (HDADAFAL)

Keywords

• Cyber threat intelligence
• Indicator of compromise feeds
• Advanced persistent threat
• Malware detection feeds
• Incident response services

Headquarters

HQ city

Espoo

HQ country

Finland

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Supply Chain, Marketing or Sales, Infrastructure

Revenue model

1. Cyber Threat Intelligence Feeds: Subscription-based feeds providing IOC data for APT, DDOS, SandboxIOC, and SinkholeIOC threats. Available in multiple formats (STIX/TAXII, CSV, OpenIOC) with integration support included.
2. USBGuard Hardware and Service: Annual license-based comprehensive service including USBGuard devices, maintenance, updates, antivirus license, device warranty, BadUSB protection, and USB Killer protection.
3. Asset Tracker SaaS: SaaS-based service for monitoring organizational assets and detecting data leaks, requiring no installation or own hardware.
4. Professional Services: Forensics, incident response, penetration testing, red teaming, SCADA auditing, malware analysis, reverse engineering, training, and workshops.
5. Akira Ransomware Decryption Service: Paid service (paid after successful decryption) for decrypting files encrypted by Akira ransomware, requiring considerable computing power and manual binary analysis.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

Fitsec Ltd produces and sells subscription-based cyber threat intelligence feeds (IOC data for APT, DDOS, malware C2 servers, and sinkhole-monitored botnets), an APT Platform visualization tool, an endpoint detection (Sentry EDR) solution, a data-leak detection SaaS (Asset Tracker), and a USB security hardware appliance (USBGuard). The company supplements these products with professional services such as forensics, incident response, penetration testing, red teaming, SCADA auditing, training, and Akira ransomware decryption delivered to organizations worldwide.

Product overview

Fitsec Ltd is a Finnish cyber threat intelligence provider established in 2009, offering a comprehensive portfolio centered on its all-in-one Cyber Threat Intelligence Feed as the core product. The portfolio includes specialized feeds (APT Feed, DDOS Feed, SandboxIOC Feed, SinkholeIOC Feed), an optional APT Platform visualization tool, endpoint security (Sentry EDR), data leak detection (Asset Tracker), USB security hardware (USBGuard), and professional services (Forensics, Incident Response, Penetration Testing, Red Teaming, SCADA Auditing, Training, Reverse Engineering). The feeds can be delivered in multiple formats including STIX/TAXII, CSV, MISP, and integrate with major security platforms like Microsoft Sentinel, PaloAlto, and FortiGate.

Differentiator

Problem solved

Functional benefit

Products and services

• Fitsec Cyber Threat Intelligence Feed All-in-one subscription-based cyber threat intelligence feed providing IOC data for malware fingerprints and targeted attacks. Designed for integration into firewalls, IDS/IPS, and SIEM systems of organizations needing malware detection and APT protection. Contains approximately 80% unique data not available from competitors.
• APT Platform Visual web application for SOC and threat hunting teams to view and search APT actor data, visualize APT activity by sector and country, and access historical threat intelligence for data enrichment and threat scoring. Included with the APT feed at no additional cost.
• Sentry EDR Endpoint Detection and Response solution for detecting targeted attacks and minimizing damage from advanced threats on organizational endpoints.
• Asset Tracker SaaS-based service for detecting company data leaks and breaches. Monitors organizational assets to identify leaked customer data, payment cards, trade secrets, and impersonated domains, and supports GDPR breach-notification obligations.
• USBGuard Hardware device for securing USB file transfers against threats including BadUSB attacks and USB Killer devices. Includes integrated antivirus, touchscreen interface, and management console, delivered as an annual license-based comprehensive service.
• Forensics and Malware Analysis Post-breach forensic analysis identifying and reporting suspicious activity to uncover who, what, and when, combined with malware analysis revealing how malicious programs infiltrate networks, their data theft attempts, propagation methods, and effective removal solutions. For organizations after security incidents.
• Incident Response Security breach response service for containing and neutralizing threats to restore network integrity and prevent further damage after a cyber attack.
• Penetration Testing Security testing including physical penetration testing, cyber testing (social engineering, phishing, malware), open source intelligence gathering, and web application testing to identify and address organizational weaknesses.
• Red Teaming Continuous security testing over extended periods to identify vulnerabilities in systems and software, enabling proactive risk mitigation and simulated insider attack analysis.
• SCADA Auditing Audit service ensuring software and devices operate as intended without extra components, vulnerabilities, or risks, particularly for industrial control and SCADA environments.
• Cybersecurity Training and Workshops Cybersecurity training and workshops drawing on 12+ years of experience, offered in flexible formats tailored to customer needs, including topics from malware infection processes to security best practices.
• Reverse Engineering Expert analysis of program code to uncover functionality and identify risks such as malicious behavior or undiscovered vulnerabilities in software and malware.
• Akira Ransomware Decryption Service Paid decryption service (paid after successful decryption) for victims of the Akira ransomware, requiring considerable computing power and manual binary analysis to recover encrypted files. Delivered to victims worldwide.

Quantifiable outcome

• Organizations can stop advanced attacks altogether or minimize damages by responding to threats detected through the intelligence feed
• +3 more outcomes

Named customers3 records

Segments9 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration7 records

AI capability4 records

Feature7 records

Scale indicators4 records

Recent moves5 records

Expansion highlights5 records

Regional players

• F-Secure (WithSecure): Finnish-headquartered cybersecurity vendor providing EDR, threat intelligence, and incident response services overlapping with Fitsec's product portfolio, competing most directly in the Finnish and Nordic markets.

Broad incumbents

• Mandiant (Google Cloud): Provides threat intelligence, incident response, malware analysis, and red team services that directly overlap with Fitsec's CTI feeds, IR, forensics, and red teaming offerings, with significantly larger global SOC presence.
• Recorded Future (Mastercard): Largest pure-play commercial threat intelligence platform, offering IOC feeds, finished intelligence, and a threat intelligence platform comparable to Fitsec's APT Feed and APT Platform, but at much greater scale and with broader global coverage.
• CrowdStrike Intelligence: Provides integrated threat intelligence alongside its Falcon EDR platform, overlapping with Fitsec's Sentry EDR and APT Feed, and dominating enterprise endpoint security buying decisions globally.
• Kaspersky Threat Intelligence: Provides APT intelligence feeds and malware analysis services overlapping with Fitsec's CTI offerings, with broader global analyst coverage though currently restricted from many Western government customers.

Direct peers

• Group-IB: Threat intelligence and incident response vendor with comparable IOC feeds, malware-analysis capabilities, and forensics/IR services; similarly focused on tracking APT actors and ransomware operations globally.
• ThreatConnect: Provides a threat intelligence platform and curated intel feeds directly comparable to Fitsec's APT Feed and Platform, with STIX/TAXII support and similar enterprise/government customer focus.
• Anomali: Threat intelligence platform vendor offering IOC feeds and a TIP (Threat Intelligence Platform) comparable to Fitsec's APT Platform and CTI feed, with similar integrations into SIEM and firewall products.
• EclecticIQ: European-headquartered (Netherlands) threat intelligence platform vendor with comparable IOC feed, TIP, and CTI workflow capabilities, competing head-to-head with Fitsec in EU public-sector and enterprise deals.
• Blueliv (Outpost24): European threat intelligence vendor offering similar IOC feeds and credential/data-leak monitoring, comparable in size and customer profile to Fitsec, particularly for European enterprise buyers.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/FitsecLtd
• GitHubgithub.com/FitsecLtd
• LinkedInlinkedin.com/company/fitsec
• Instagraminstagram.com/fitsecltd

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Fitsec Ltd