AWARE7
AWARE7 GmbH is a German cybersecurity services firm that provides penetration testing, red teaming, AI security testing, ISO 27001 advisory, and security awareness training to mid-market and regulated enterprise clients in DACH, supported by 30+ in-house experts.
- Company typePrivate
- Founded2018
- HeadquartersGelsenkirchen, Germany
- Headcount11–50
- GTM typeB2B
- OfferingServices
What AWARE7 does
AWARE7 GmbH is a German cybersecurity services company headquartered in Gelsenkirchen, founded in 2018, that delivers an integrated portfolio of offensive security, advisory, and awareness services to mid-market and regulated enterprises. Its offensive security line covers penetration testing (network, web application, internal), red teaming, vulnerability scanning, and a dedicated KI-Penetrationstest for LLMs, RAG systems, and AI agents. The advisory line provides ISMS establishment, ISO 27001 certification support, internal audits, and outsourced external Information Security Officer (ISB) and Data Protection Officer (DSB) roles under GDPR Article 37. The awareness line delivers phishing simulations, live hacking shows, gamified escape-room training, and certified professional education (NIS-2 executive training, T.I.S.P., IT-Grundschutz-Praktiker), with the latter AZAV-accredited for government funding.
The underlying technology stack follows BSI-Leitfaden and OWASP Testing Guidelines; the company holds ISO/IEC 27001:2022, ISO 9001:2015, TeleTrusT "IT Security made in Germany", AZAV, CVE Numbering Authority, and Trusted Data Processor certifications, and is an OWASP Top 10 for LLMs Core Team Contributor. AWARE7 employs 30+ permanently employed full-time security experts — three of whom are simultaneously professors at German universities — and reinvests approximately 20% of revenue into BSI/BMBF research projects published at venues such as ACM ASIA CCS 2025. Proprietary research datasets on phishing susceptibility (n=68,742) and software vulnerabilities feed threat intelligence into service delivery.
The business model is professional services with a fixed-price engagement model: binding quotes delivered within 24 working hours, dedicated project manager from kickoff through re-test, and pricing ranging from €1,200 for phishing simulations to €15,000+ for red teaming and €1,500/month for external ISB retainers. Go-to-market is direct enterprise sales targeting IT decision-makers and CISOs in companies with 50-2,000 employees across healthcare, financial services, energy/utilities, manufacturing, and the public sector. The company has served 200+ customers since founding, with named enterprise clients including Fujitsu, SAP, Munich Re, PAYBACK, EWE Konzern, Sparkasse, and Land NRW. Operating geographies are primarily DACH, with an English website version and academic publication channels hinting at incremental international reach.
AWARE7 firmographics
Firmographics- Name
- AWARE7
- Legal name
- AWARE7 GmbH
- Website
- https://aware7.com
- Company type
- Private
- Founded year
- 2018
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- AWARE7 GmbH is a German cybersecurity services firm that provides penetration testing, red teaming, AI security testing, ISO 27001 advisory, and security awareness training to mid-market and regulated enterprise clients in DACH, supported by 30+ in-house experts.
- Ownership category
- akta.pro rank
AWARE7 industry classification
Industry- Product category
- Cybersecurity Services
- NAICS
- Computer Systems Design and Related Services (54151)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Cybersecurity & Identity Consulting (BPAHAEAG)
- akta.pro secondary industries
- Security Awareness, Training & Compliance Attestation (HDADAIAJ), Phishing, Social Engineering & Business Email Compromise (BEC) Training (EDABAGAB), Cybersecurity Architecture & Security Integration (BPAEAAAL)
Keywords
Where AWARE7 is headquartered
LocationHeadquarters
- HQ city
- Gelsenkirchen
- HQ country
- Germany
- HQ region
- Europe
Offices1 record
Markets served
AWARE7 business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Others
Revenue model
- Offensive Security Services: Project-based penetration testing, red teaming, vulnerability scanning, and AI penetration testing services. Delivered as fixed-price engagements with defined scopes.
- Security Consulting: ISMS/ISO 27001 implementation, NIS-2 compliance, internal auditing, and external ISB/DSB services. Includes ongoing retainer engagements for external security officer roles.
- Security Awareness & Training: Phishing simulations, live hacking shows, escape desk gamified training, and certified professional education (T.I.S.P., IT-Grundschutz-Praktiker, NIS-2 executive training). AZAV-accredited training eligible for government funding.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| One time/ perpetual license | Multi-year contract | Penetration Testing |
| One time/ perpetual license | Multi-year contract | KI-Penetrationstest |
| One time/ perpetual license | Multi-year contract | Red Teaming |
| Subscription | Monthly | External ISB (Information Security Officer) |
| Subscription | Monthly | Phishing Simulation |
| One time/ perpetual license | Multi-year contract | Live Hacking Show |
| One time/ perpetual license | Multi-year contract | Professional Education & Certifications |
Go-to-market motion1 record
Distribution channels3 records
Marketing channels12 records
AWARE7 product offering
Product offeringCore offering
AWARE7 GmbH is a German cybersecurity services firm offering offensive security testing (penetration testing, red teaming, vulnerability scanning, and specialized AI/LLM penetration testing), security consulting (ISMS/ISO 27001 implementation, internal auditing, external Information Security Officer and Data Protection Officer services), and security awareness training (phishing simulations, live hacking shows, gamified escape desk training, and certified professional education including NIS-2, T.I.S.P., and IT-Grundschutz courses). All services are delivered by 30+ permanently employed security experts using BSI and OWASP methodologies, with fixed-price engagements and German data sovereignty.
Product overview
AWARE7 is a German cybersecurity services company offering an integrated portfolio of three interconnected service lines: (1) Offensive Security — penetration testing, red teaming, vulnerability scanning, and AI penetration testing for LLMs/RAG systems/AI agents; (2) Security Advisory & Compliance — ISMS establishment, ISO 27001 certification support, internal/external auditing, and provision of external Information Security Officers (ISB) and Data Protection Officers (DSB); and (3) Security Awareness & Training — live hacking demonstrations, phishing simulations, gamified escape desk training, and certified professional education including NIS-2 executive training, T.I.S.P. certification, pentesting workshops, and IT-Grundschutz practitioner courses. The company emphasizes a unified approach combining technical testing with human-focused security training, delivered by 30+ in-house security experts with fixed-price offerings within 24 hours.
Differentiator
Problem solved
Functional benefit
Products and services
- Penetration Testing (Penetrationstest)
Quantifiable outcome
- Employee phishing click rates reduced from 15-40% to under 5% after 3-4 phishing simulation campaigns with accompanying training
- +3 more outcomes
Companies that use AWARE7
Customer profileNamed customers15 records
Segments3 records
Ideal customer profiles3 records
AWARE7 technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability4 records
Feature3 records
AWARE7 partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- OWASP (Open Web Application Security Project)coreAWARE7 serves as a Core Team Contributor to OWASP's Top 10 for Large Language Models project, contributing expertise to the development of security standards and guidance for LLM applications. This collaboration positions AWARE7 at the forefront of AI security standards development.
Scale indicators5 records
Recent moves6 records
Expansion highlights5 records
AWARE7 competitors and assessment
Company assessmentDirect peers
- RedTeam Pentesting GmbH: German penetration testing and red teaming firm of comparable size and focus. Directly competes in the same DACH mid-market pentest niche, with similar offensive-security methodology and BSI/OWASP alignment.
- Oneconsult AG: Swiss/German penetration testing and red team firm with comparable service portfolio. Overlaps with AWARE7 on offensive security and incident response for mid-market and enterprise customers.
- SySS GmbH: Long-established German pentesting and IT security services provider. Overlaps with AWARE7 on penetration testing, red teaming, and security advisories for German enterprise and mid-market clients.
- usd AG: German security consulting firm specializing in pentesting, ISO 27001, PCI, and KRITIS advisory. Competes directly with AWARE7 in regulated German industries and the mid-market CISO buyer segment.
- Secodis GmbH: German IT security services firm offering pentesting, awareness training, and managed security. Direct head-to-head competitor in the DACH mid-market for AWARE7's bundled offensive-security-plus-awareness proposition.
- mgm security partners GmbH: German security and compliance consultancy offering pentesting, ISO 27001, and GRC advisory. Direct competitor in the regulated-Industries segment that AWARE7 targets.
- Hackmanit GmbH: German penetration testing specialist with a strong web-application and research focus. Comparable in academic-adjacent positioning and in the types of mid-market and enterprise customers targeted.
- Compass Security: Swiss-headquartered penetration testing and security awareness provider with German operations. Closely comparable in offering mix: offensive security testing combined with phishing simulations and security training.
Broad incumbents
- TÜV Rheinland i-sec GmbH: Large German testing, inspection, and certification body with a substantial cybersecurity services arm. Competes with AWARE7 on pentesting and ISO 27001 advisory, but as part of a much broader portfolio serving larger enterprise and global clients.
- SVA System Vertrieb Alexander GmbH: Large German IT systems integrator with a cybersecurity practice covering pentesting, GRC, and managed security. Overlaps with AWARE7 in the German mid-market but offers much broader infrastructure and platform services.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights6 records
Customer concentration
AWARE7 social profiles
Digital presenceAWARE7 compliance and trust
Trust signalCompliance4 records
AWARE7 financial estimates
Financial estimateRevenue estimate
Valuation estimate
AWARE7 leadership team
Management profileNumber of profiles
Profiles2 records
AWARE7 funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
AWARE7 M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about AWARE7
What does AWARE7 do?
AWARE7 GmbH is a German cybersecurity services firm offering offensive security testing (penetration testing, red teaming, vulnerability scanning, and specialized AI/LLM penetration testing), security consulting (ISMS/ISO 27001 implementation, internal auditing, external Information Security Officer and Data Protection Officer services), and security awareness training (phishing simulations, live hacking shows, gamified escape desk training, and certified professional education including NIS-2, T.I.S.P., and IT-Grundschutz courses). All services are delivered by 30+ permanently employed security experts using BSI and OWASP methodologies, with fixed-price engagements and German data sovereignty.
Is AWARE7 a public or private company?
AWARE7 is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was AWARE7 founded?
AWARE7 was founded in 2018. It employs 11 to 50 people.
Where is AWARE7 based?
AWARE7 is headquartered in Gelsenkirchen, Germany, in the Europe region.
How does AWARE7 make money?
Three revenue lines are on record. Offensive Security Services are the primary driver. The others are security Consulting and security Awareness & Training.
Who are AWARE7's main competitors?
Direct peers on record are RedTeam Pentesting GmbH, Oneconsult AG, SySS GmbH, usd AG, Secodis GmbH, mgm security partners GmbH, Hackmanit GmbH and Compass Security. Broad incumbents are TÜV Rheinland i-sec GmbH and SVA System Vertrieb Alexander GmbH.
Does AWARE7 have an API?
No public API is recorded for AWARE7.
What industry is AWARE7 in?
AWARE7's product category is Cybersecurity Services. Its primary akta.pro industry code is BPAHAEAG, Cybersecurity & Identity Consulting, with a secondary code of HDADAIAJ, Security Awareness, Training & Compliance Attestation. Its NAICS code is 54151 and its SIC code is 7370.