Accuris Ag

What Accuris Ag does

Accuris AG (accuris AG) is an independent German information security and data protection consulting firm headquartered in Munich (Georg-Muche-Str. 5, 80807 München), founded in May 2007 and registered as an Aktiengesellschaft with the Commercial Register of Amtsgericht München (HRB 169048). The company provides a portfolio of professional services centered on BSI-recognized ISO 27001 certification audits on the basis of IT-Grundschutz, security audits, penetration testing, information security revisions, business continuity/emergency management consulting, KRITIS (§8a BSIG) advisory, and comprehensive GDPR (DS-GVO/BDSG) data protection services including external data protection officer mandates. Customer segments are German federal and state agencies, KRITIS operators across energy, IT/telecom, transport, health, water, nutrition and finance/insurance, and large/medium enterprises, with client references kept confidential.

The firm's core technology consists of certified human expertise rather than proprietary software: personnel hold BSI IT-Grundschutz auditor and IS-Revisor credentials, TÜV data protection officer/auditor certifications, and penetration testing credentials from EC-Council (CEH), (ISC)² (CISSP), GIAC/SANS (GCIA, GCFA), Sourcefire (SFCP), and ISACA (CISA). Accuris AG explicitly does not deliver, install, or resell hardware or software, positioning vendor independence as a differentiator. In 2021, the company received an official BSI certification decision (BSI-IGZ-0436-2021) granting it the right to issue ISO 27001 certificates on the basis of IT-Grundschutz.

The business model is entirely professional services revenue across five streams: certification audits, security assessments and penetration testing, external data protection officer services, consulting/advisory, and training. Training is priced per participant (EUR 1,095–2,875) with hybrid in-person/online (MS Teams) and in-house formats; audit and consulting work is project-based. The go-to-market is sales-led and referral-driven through the corporate website (accuris.de), XING, direct contact forms, and publicly scheduled training catalogs. The company is privately held with no disclosed funding rounds, M&A, or geographic expansion beyond Germany.

Name

Accuris Ag

Legal name

accuris AG

Website

https://accuris.de

Company type

Private

Founded year

2007

Operating status

Operating

Headcount range

1–10 employees

Short description

Accuris AG is a Munich-based, BSI-certified German information security and data protection consulting firm providing ISO 27001 certification audits on IT-Grundschutz, penetration testing, GDPR/DPO, and KRITIS services to government agencies, critical infrastructure operators, and enterprises across Germany.

Ownership category

akta.pro rank

Product category

Cybersecurity & Data Protection Consulting Services

NAICS

Other Scientific and Technical Consulting Services (54169)

SIC

Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Information Technology (IT) & Cybersecurity Certifications (EDAAANAA)

Keywords

• Information security auditing
• ISO 27001 certification
• Penetration testing services
• GDPR data protection consulting
• IT-Grundschutz training

Headquarters

HQ city

München

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Training and Education Services: Accuris AG offers professional training programs including IT-Grundschutz-Praktiker, IT-Grundschutz-Berater, and Information Security Officer with KRITIS courses. Training is delivered in-person or online with optional certification exams. Pricing is per participant with group discounts available.
2. Consulting and Advisory Services: Advisory services for DS-GVO/GDPR implementation, data protection compliance, security assessments, and certification consulting. Revenue is generated through project-based consulting engagements.
3. Certification Audit Services: Conducting ISO 27001 certification audits on the basis of IT-Grundschutz, including document review, on-site audits, and report preparation. Audits are performed by certified ISO 27001 auditors.
4. Penetration Testing and Security Assessments: Technical security testing services including network/system penetration tests and application-level tests. Performed by certified security specialists.
5. External Data Protection Officer Services: Provision of external DPO services fulfilling legal requirements under GDPR Article 37 and BDSG §38. TÜV-certified data protection officers are provided to organizations.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels4 records

Core offering

Accuris AG provides vendor-independent information security and data protection professional services. Core offerings include ISO 27001 certification audits on the basis of BSI IT-Grundschutz, security audits, penetration tests (network/system and application level), BSI-certified information security revisions, GDPR/DS-GVO consulting and external data protection officer services, KRITIS compliance support, and business continuity management audits. The firm also delivers scheduled professional training courses (IT-Grundschutz-Praktiker, IT-Grundschutz-Berater, ISB with KRITIS) leading to BSI-administered examinations.

Product overview

Accuris AG is an independent consulting firm specializing in information security and data protection services. The company offers a comprehensive portfolio of consulting services organized around two core pillars: (1) Information Security services including certification audits (ISO 27001 based on IT-Grundschutz), security audits, penetration tests, information security revision, business continuity/emergency management, and critical infrastructure services; and (2) GDPR data protection services including DS-GVO implementation consulting, data protection inventory assessment, and external data protection officer offerings. Additionally, Accuris AG provides professional training courses including IT-Grundschutz-Praktiker (basic certification), IT-Grundschutz-Berater (advanced certification), and Informationssicherheitsbeauftragter with KRITIS competence. The company neither delivers nor installs hardware or software solutions, ensuring complete independence from vendor specifications.

Differentiator

Problem solved

Functional benefit

Products and services

• Certification Audits (Zertifizierungsaudits) Conducting certification audits according to ISO/IEC 27001 on the basis of IT-Grundschutz, performed by certified ISO 27001 auditors who review documentation, conduct on-site inspections, and prepare audit reports that the BSI uses to issue certificates. Targeted at organizations pursuing formal ISO 27001 certification aligned with BSI IT-Grundschutz.
• Security Audits (Sicherheitsaudits) Security audits that identify vulnerabilities and gaps in operational systems, examining technical, personnel, organizational, and construction measures for implementation status and effectiveness. Includes GAP analyses and security checks for organizations needing an independent assessment of their security posture.
• Penetration Tests (Penetrationstests)
• Information Security Revision (Revision der Informationssicherheit)
• Business Continuity / Emergency Management
• Critical Infrastructure Services (Kritische Infrastrukturen)
• GDPR Data Protection Services (DS-GVO Datenschutzleistungen)
• External Data Protection Officer (Externer Datenschutzbeauftragter)
• IT-Grundschutz-Praktiker Training (Basic Certification)
• IT-Grundschutz-Berater Training (Advanced Certification)
• Information Security Officer (ISB) with KRITIS Competence Training

Named customers1 record

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Five partnerships are on record, tiered core and minor.

• Bundesamt für Sicherheit in der Informationstechnik (BSI)coreStrategic or Co-development PartnerAccuris AG works closely with BSI as a certified auditor organization. The company conducts ISO 27001 certification audits on the basis of IT-Grundschutz, with BSI issuing certificates based on Accuris audit reports. Accuris auditors include BSI-certified IT-Grundschutzauditoren and BSI-certified IS-Revisors. Training courses prepare participants for BSI-administered examinations.
• TÜV Rheinland/NordcoreStrategic or Co-development PartnerAccuris AG employs TÜV-certified data protection officers and data protection auditors. External DPO services fulfill GDPR Article 37 requirements and BDSG §38 obligations. TÜV certification serves as a quality standard for data protection expertise.
• EC-CouncilminorStrategic or Co-development PartnerAccuris penetration testing specialists hold CEH (Certified Ethical Hacker) certification from EC-Council, demonstrating expertise in ethical hacking and network security testing methodologies.
• (ISC)²minorStrategic or Co-development PartnerAccuris penetration testing specialists hold CISSP (Certified Information Systems Security Professional) certification from (ISC)², demonstrating global recognition in information security expertise.
• GIAC (SANS Institute)minorStrategic or Co-development PartnerAccuris penetration testing specialists hold GCIA (GIAC Certified Intrusion Analyst) and GCFA (GIAC Certified Forensic Analyst) certifications from GIAC/SANS Institute, demonstrating advanced security analysis and forensic capabilities.

Scale indicators4 records

Recent moves4 records

Expansion highlights4 records

Broad incumbents

• TÜV Rheinland: Global testing, inspection, and certification body operating extensively in information security audits, ISO 27001 certification, and data protection services. Also a partner (Accuris uses TÜV-certified DPOs). Offers overlapping services at much larger scale across multiple geographies.
• Deloitte (Cyber Risk Services): Big 4 firm with substantial German cybersecurity practice offering ISO 27001, penetration testing, DPO-as-a-service, and IT-Grundschutz advisory. Competes with Accuris for large-enterprise and public-sector clients, with vastly deeper bench and global delivery.
• PwC Germany (Cybersecurity & Privacy): Big 4 firm offering GDPR/DSGVO consulting, ISO 27001 audits, penetration testing, and CISO advisory to German enterprises. Competes with Accuris for mid-market and enterprise security work, with much larger headcount and broader service portfolio.
• TÜV SÜD: Major German testing and certification organization offering ISO 27001 audits, cybersecurity assessments, and data protection officer services. Overlaps with Accuris's audit and DPO offerings, but at much larger scale and broader service portfolio.
• DEKRA: One of the world's largest testing and certification organizations, with significant cybersecurity and information security certification offerings. Competes with Accuris in ISO 27001 audits and security assessments, with broader portfolio and global reach.

Direct peers

• SRC Security Research & Consulting GmbH: Bonn-based German security consultancy offering ISO 27001 audits, penetration testing, and BSI-aligned services. Comparable in service scope and target customers to Accuris, with similar focus on German public-sector and KRITIS clients.
• secunet Security Networks AG: Germany-based publicly listed cybersecurity firm providing IT security consulting, audits, and SINA products to federal agencies and KRITIS operators. Overlaps with Accuris in BSI IT-Grundschutz auditing and government security consulting, though at significantly larger scale.
• HiSolutions AG: German IT security and risk management consulting firm offering ISO 27001 audits, penetration testing, ISMS consulting, and BSI IT-Grundschutz services to public sector and enterprises. Most direct comparable in size, geography, and service portfolio to Accuris AG.
• cirosec GmbH: German IT security consulting boutique specializing in penetration testing, security audits, and incident response. Directly comparable to Accuris in service mix (especially pen testing) and target market of German enterprises and public institutions.
• RedTeam Pentesting GmbH: Specialized German penetration testing firm offering network and application-level security testing. Directly competes with Accuris's pen testing service line, serving similar enterprise and government customers with certified specialists.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/accuris-ag

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Accuris Ag