Gold Security
Stockholm-based boutique offensive cybersecurity firm founded in 2009, providing manual penetration testing and red teaming across six domains to Nordic enterprise clients including Truecaller, Trustly, and Northmill.
- Company typePrivate
- Founded2009
- HeadquartersStockholm, Sweden
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Gold Security does
Gold Security is a Stockholm-based boutique offensive cybersecurity firm founded in 2009 that specializes in manual penetration testing and red team engagements for enterprise clients in the Nordic region. The firm delivers six core service lines covering Web & API, Mobile, Network, Red Team, Cloud Security Review, and Secure Code Review, with engagement durations ranging from one to eight weeks depending on scope. Its disclosed customers include Truecaller, Trustly, and Northmill, all Nordic-headquartered scale-ups in telecom and fintech, served under engagement-based multi-year contracts that bundle a 30-day retest window.
The firm operates with a core team of 18 employees supplemented by an independent specialist network engaged per project, and its methodology is anchored to recognized industry frameworks including OWASP WSTG, PTES, and MITRE ATT&CK. Gold Security holds Certified Scandinavian Partner status with vulnerability scanner vendor Acunetix, and its talent base includes contributors to the Google Security Hall of Fame, positioning the firm around manual expertise in opposition to automated tooling.
Gold Security's go-to-market is built on direct relationships with regulated enterprise buyers, with compliance frameworks spanning SOC 2, ISO 27001, PCI-DSS, and newer EU regulations including DORA and NIS2. The business model is services-led with no platform, product, or SaaS revenue disclosed, and pricing is set per engagement rather than on recurring subscription terms. The firm has not raised external funding and operates as an independent boutique.
Gold Security firmographics
Firmographics- Name
- Gold Security
- Legal name
- GoldSecurity.com
- Website
- https://goldsecurity.com
- Company type
- Private
- Founded year
- 2009
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Stockholm-based boutique offensive cybersecurity firm founded in 2009, providing manual penetration testing and red teaming across six domains to Nordic enterprise clients including Truecaller, Trustly, and Northmill.
- Ownership category
- akta.pro rank
Gold Security industry classification
Industry- Product category
- Cybersecurity Services
- NAICS
- Testing Laboratories and Services (54138), Other Scientific and Technical Consulting Services (541690)
- SIC
- Services-Testing Laboratories (8734)
- akta.pro industry
- Penetration Testing & Red TeamingBusiness & Public Services/Security & Investigations Services/Cybersecurity & Digital Forensics ServicesPenetration Testing & Red TeamingBusiness & Public Services/Security & Investigations Services/Security Consulting, Risk Assessment & AuditsSecurity Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX)Business & Public Services/Security & Investigations Services/Security Consulting, Risk Assessment & AuditsCybersecurity & Identity ConsultingBusiness & Public Services/Professional Services (Legal, Accounting, Consulting)/Technology & Digital Consulting
Keywords
Where Gold Security is headquartered
LocationHeadquarters
- HQ city
- Stockholm
- HQ country
- Sweden
- HQ region
- Europe
Offices1 record
Markets served
Gold Security business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Technology or R&D, Marketing or Sales
Revenue model
- Penetration Testing Engagements: Professional services revenue from penetration testing and red teaming engagements. Pricing based on scope (number of applications, APIs, infrastructure components). Deliverables include severity-rated reports with reproduction steps, business impact, remediation guidance, and included retest within 30 days.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Custom engagement-based pricing |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels3 records
Gold Security product offering
Product offeringCore offering
Boutique offensive security firm offering manual penetration testing and red teaming services. Assembles vetted independent senior specialists per engagement, matched to the client's technology stack. Reports are aligned to compliance frameworks including SOC 2, ISO 27001, PCI-DSS, DORA, and NIS2.
Product overview
Gold Security is a boutique offensive security firm offering manual penetration testing and red teaming services delivered exclusively by vetted, independent senior specialists assembled per engagement. The portfolio consists of six core service offerings: Web & API Penetration Testing, Mobile Application Testing, External & Internal Network Testing, Red Team Engagements, Cloud Security Review, and Secure Code Review. All services include findings delivered within 10 business days and complimentary retesting within 30 days. Reports are structured to satisfy compliance frameworks including SOC 2, ISO 27001, PCI-DSS, DORA, and NIS2.
Differentiator
Problem solved
Functional benefit
Products and services
- Penetration Testing
- Red Team Engagements
- Web Application Security Testing
- Mobile Application Security Testing
- Cloud Security Testing
- Compliance-Aligned Security Reporting
Quantifiable outcome
- Findings delivered within 10 business days
- +2 more outcomes
Companies that use Gold Security
Customer profileNamed customers3 records
Segments1 record
Ideal customer profiles2 records
Gold Security technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature3 records
Gold Security partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- AcunetixcoreCertified Scandinavian Acunetix Partner. Gold Security is recognized as the certified Acunetix partner for the Scandinavian region, indicating deep integration with Acunetix's automated web vulnerability scanning technology to complement manual testing services.
Scale indicators3 records
Recent moves4 records
Expansion highlights4 records
Gold Security competitors and assessment
Company assessmentDirect peers
- Secarma: UK-based independent penetration testing and security consultancy with a boutique model comparable to Gold Security's vetted-specialist positioning.
- Bishop Fox: Boutique US-based offensive security firm offering manual penetration testing and red team services delivered by senior specialists — the closest analog to Gold Security's boutique, senior-only model.
- NetSPI: US penetration testing firm with a strong platform-augmented approach covering web, API, mobile, network, and cloud testing — directly comparable service lines to Gold Security across enterprise compliance needs.
- Praetorian: Offensive security firm offering manual pentesting, red team, and cloud security assessments — a near-identical boutique-style service mix to Gold Security's portfolio.
- Coalfire: US-based cybersecurity advisory and testing firm specializing in compliance-driven penetration testing (PCI-DSS, SOC 2, ISO 27001) — directly overlapping with Gold Security's compliance-aligned service model.
Broad incumbents
- Trustwave: Global cybersecurity services provider with established penetration testing, red team, and compliance offerings serving enterprise and mid-market clients across multiple geographies.
- NCC Group: Global cybersecurity consultancy with extensive European presence offering penetration testing, red teaming, and compliance services. A larger incumbent competing for the same enterprise RFPs.
- Trustwave SpiderLabs: The elite research and offensive security arm of Trustwave, providing research-grade penetration testing expertise — a comparable talent-network positioning within a larger incumbent.
- WithSecure: Finland-headquartered cybersecurity vendor with a dedicated offensive security services arm. Overlaps with Gold Security on pentesting but offers a much broader portfolio including endpoint, cloud, and managed detection.
Regional players
- Sentor: Nordic-region managed security services provider with penetration testing offerings, primarily serving Scandinavian enterprise clients — overlapping with Gold Security's home market.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat3 records
Key risks5 records
Key highlights6 records
Customer concentration
Gold Security social profiles
Digital presenceGold Security compliance and trust
Trust signalCompliance5 records
Gold Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Gold Security leadership team
Management profileNumber of profiles
Gold Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Gold Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Gold Security
What does Gold Security do?
Boutique offensive security firm offering manual penetration testing and red teaming services. Assembles vetted independent senior specialists per engagement, matched to the client's technology stack. Reports are aligned to compliance frameworks including SOC 2, ISO 27001, PCI-DSS, DORA, and NIS2.
Is Gold Security a public or private company?
Gold Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Gold Security founded?
Gold Security was founded in 2009. It employs 11 to 50 people.
Where is Gold Security based?
Gold Security is headquartered in Stockholm, Sweden, in the Europe region.
How does Gold Security make money?
One revenue line is on record: penetration Testing Engagements.
Who are Gold Security's main competitors?
Direct peers on record are Secarma, Bishop Fox, NetSPI, Praetorian and Coalfire. Broad incumbents are Trustwave, NCC Group, Trustwave SpiderLabs and WithSecure. Sentor is listed as a regional player.
Does Gold Security have an API?
No public API is recorded for Gold Security.
What industry is Gold Security in?
Gold Security's product category is Cybersecurity Services. Its primary akta.pro industry code is BPAKAHAF, Penetration Testing & Red Teaming, with a secondary code of BPAKADAE, Penetration Testing & Red Teaming. Its NAICS code is 54138 and its SIC code is 8734.