What Immunity Systems does

Immunity Systems Sp. z o.o. is a Warsaw-based, privately held cybersecurity firm that delivers both offensive and defensive IT security services to enterprise clients. Its professional services portfolio spans security audits, penetration tests, red teaming, an active dependency scanning service for CI/CD pipelines, and post-breach analysis, all built on proprietary methodologies that extend internationally recognized security standards. The company has been operating since approximately 2009, performs several hundred security tests of web applications, mobile applications, and infrastructure since 2016, and operates with a small team (1-10 employees) based at ul. Optyków 3/65, Warsaw.

The firm complements its services with a portfolio of proprietary software products. APT Defend is a platform for cybersecurity experts to safely simulate APT-style attacks; Phish Sentinel is an early-warning anti-phishing system with four modules (Domain Monitor, Certificate Monitor, Scan Robot, Fake Victim) that integrates with corporate messaging tools such as Microsoft Teams and Slack; webSurgeon is an Azure-based proxy for incident response request manipulation; and PenToster is a software testing platform offered only to select clients. The company is developing VulnLoop, an announced AI-assisted product for the Secure Software Development Life Cycle. The proprietary platform underpinning these tools was modernized in 2023 with PLN 248,133 of EU Digital Europe programme co-funding.

Commercially, Immunity Systems operates a sales-led, consultative go-to-market targeting enterprise organizations requiring comprehensive IT security coverage. The company is ISO/IEC 27001:2022 certified (TÜV Rheinland, certificate no. 9000021294, issued June 2021), generates revenue through a mix of professional services and software products (with subscription-like access for some products), and uses a quote-based engagement model with pricing not publicly disclosed. Geographic footprint is European, with the corporate website delivered in Polish and English. Share capital is PLN 151,337, and no external institutional investors, acquisitions, or M&A activity have been disclosed.

Name

Immunity Systems

Legal name

Immunity Systems Sp. z o.o.

Website

https://immunity-systems.com

Company type

Private

Founded year

2009

Operating status

Operating

Headcount range

1–10 employees

Short description

Immunity Systems is a Warsaw-based cybersecurity firm providing enterprise clients with security audits, penetration testing, red teaming, active dependency scanning, and post-breach analysis, complemented by proprietary software products (APT Defend, Phish Sentinel, webSurgeon, PenToster) and an upcoming AI-assisted SSDLC product.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Investigation and Security Services (5616)

akta.pro primary industry

Vulnerability Management & Penetration Testing Services (BPAEADAD)

akta.pro secondary industry

Deception Technology & Threat Hunting (HDADAGAI)

Keywords

• Penetration testing services
• Cybersecurity consulting
• Red teaming services
• Security audits
• Phishing detection

Headquarters

HQ city

Warszawa

HQ country

Poland

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Security Testing Services: Professional services including security audits, penetration tests, red teaming, active dependency scanning, and post-breach analysis performed by certified security experts using proprietary methodologies.
2. Software Products: Sale of proprietary security software products including APT Defend (subscription-like access), Phish Sentinel (with web console and notification capabilities), and PenToster platform offered to selected clients. webSurgeon is offered as an incident response tool.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels1 record

Core offering

Immunity Systems is a Polish cybersecurity firm providing professional offensive and defensive security services to enterprise clients. The company delivers penetration testing, security audits, red teaming exercises, post-breach analysis, and active dependency scanning as core professional services. Complementing these services, Immunity Systems develops and sells proprietary security software products including APT Defend (threat detection), Phish Sentinel (anti-phishing), webSurgeon (web security), and PenToster (penetration testing tool) for continuous client protection.

Product overview

Immunity Systems offers a portfolio of cybersecurity products focused on protection against advanced persistent threats and phishing attacks. The core offerings include Phish Sentinel (a phishing early warning solution with four modules: Domain Monitor, Certificate Monitor, Scan Robot, and Fake Victim), webSurgeon (an incident response proxy solution), and APT Defend (a simulated attack platform). Additional offerings include PenToster (an internal security testing platform offered to select clients) and the upcoming VulnLoop product. The company positions its products as a response to sophisticated cyber attacks using advanced security-bypass techniques.

Differentiator

Problem solved

Functional benefit

Brands

• APT Defend: Platform for conducting simulated hacking attacks performed by cybersecurity experts; safe practice of common threats enabling systems to respond appropriately to attacks, with access to extensive cyber threat knowledge
• Phish Sentinel
• webSurgeon
• PenToster
• VulnLoop

Products and services

• Security Audits Comprehensive security audits of organizational IT infrastructure, systems, and processes to identify vulnerabilities and compliance gaps. Targeted at enterprise and mid-market organizations seeking to assess their security posture.
• Penetration Testing Authorized simulated cyberattacks against client systems to evaluate security defenses and identify exploitable vulnerabilities. Provided to enterprise clients requiring offensive security testing.
• Red Teaming Full-scope adversarial simulation exercises that test an organization's detection and response capabilities against realistic threat actor tactics. Provided to enterprise clients seeking to validate security operations.
• Post-Breach Analysis Forensic investigation and analysis following security incidents to determine breach scope, attack vectors, and remediation steps. Provided to organizations recovering from cybersecurity incidents.
• Active Dependency Scan Analysis service that scans software dependencies for known vulnerabilities and security weaknesses. Targeted at development teams and security operations seeking to identify supply-chain risks.
• APT Defend Proprietary threat detection platform designed to identify advanced persistent threats (APTs) in enterprise environments. Sold to enterprise security teams for continuous threat monitoring.
• Phish Sentinel Proprietary anti-phishing solution that detects and blocks phishing attempts targeting organizations. Sold to enterprise security teams for email and web-based threat protection.
• webSurgeon Proprietary web application security tool for identifying and remediating vulnerabilities in web applications. Targeted at development and security teams managing web assets.
• PenToster Proprietary penetration testing utility that automates aspects of security testing workflows. Sold to security professionals and penetration testers.

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability1 record

Feature5 records

Partnerships

One partnership is on record.

• TÜV RheinlandminorOthers · 1 June 2021Certification body that issued Immunity Systems the ISO/IEC 27001:2022 compliance certificate (no. 9000021294) for information security management processes.

Scale indicators6 records

Recent moves5 records

Expansion highlights4 records

Regional players

• Sentor: Nordic-focused penetration testing and security consulting firm with comparable boutique services model. Similar size and positioning, but geographically focused on Sweden/Nordics rather than Poland/Central Europe.

Broad incumbents

• Positive Technologies: International cybersecurity vendor offering pen testing tools (MaxPatrol), application security, and security consulting. Overlaps with Immunity Systems' offensive security services and complements it with widely-used commercial testing products.
• NCC Group: UK-headquartered global cybersecurity services firm offering penetration testing, red teaming, threat intelligence, and managed security services. Direct overlap with Immunity Systems' audit, pen test, and incident response offerings but at much larger scale and broader geographic reach.
• Orange Cyberdefense: European MSSP within Orange Group offering managed detection, pen testing, threat intelligence, and incident response across multiple geographies. Overlaps with Immunity Systems' services portfolio but as part of a much larger managed services portfolio.
• WithSecure (formerly F-Secure): European cybersecurity vendor offering managed detection, incident response, and offensive security services. Comparable European footprint and enterprise focus, though with a much broader product portfolio.

Direct peers

• Bishop Fox: US-based elite offensive security boutique providing penetration testing, red teaming, and attack surface management. Comparable boutique positioning, talent-driven model, and focus on sophisticated enterprise testing engagements.
• Pentest People: UK-based penetration testing boutique offering managed pen testing, red team services, and a proprietary portal (SecurePortal). Closest small-firm peer in terms of boutique model combined with proprietary tooling and subscription-style delivery.
• Securitum: Polish cybersecurity boutique specialising in web application penetration testing, security audits, and red teaming for enterprise clients. Closest geographic and service-line peer to Immunity Systems, competing for the same Polish and Central European enterprise deals.
• NetSPI: US-based penetration testing and attack surface management firm combining expert-led services with proprietary technology (Resolve). Comparable hybrid services-plus-platform model and enterprise buyer focus to Immunity Systems.

Others

• Trustwave: Global cybersecurity firm offering MDR, pen testing, DFIR, and managed security services. Significantly larger, but competes for the same enterprise security testing and incident response budgets that Immunity Systems targets.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/ImmuSys
• LinkedInlinkedin.com/company/immunity-systems

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Immunity Systems