Welabs
Welabs is a Mainz-based IT security consulting firm and digital agency serving the German Mittelstand with ISO 27001, NIS2, Microsoft Purview, and IAM services, supplemented by three proprietary SaaS products (WePhish, Wefairs, Wenovate).
- Company typePrivate
- Founded2015
- HeadquartersMainz, Germany
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Welabs does
Welabs is a Mainz-based, founder-owned IT security consulting firm and digital agency that serves the German Mittelstand (approximately 50–2,000 employees) with regulatory and information-security services, while selectively engaging DAX-scale enterprises on specialized projects. Its core practice covers ISMS implementation, ISO 27001 / NIS2 / TISAX / EU AI Act compliance readiness, Microsoft Purview and DLP deployments, Identity & Access Management, and Security Awareness — delivered as fixed-price assessments, multi-year implementation projects, and annual retainer engagements. The firm monetizes consulting on professional-services terms, supplemented by three proprietary SaaS platforms: WePhish (ISO 27001 A.6.3-compliant phishing simulation and awareness training), Wefairs (white-label hybrid event platform with AI-powered matchmaking), and Wenovate (DSGVO-compliant innovation competition management). All three products are hosted in Germany and run browser-based.
The go-to-market is sales-led, anchored by a free 30-minute security check and interactive self-assessments (NIS2 Betroffenheits-Check, Klassifizierungs-Reifegrad-Check) that feed a CRM pipeline, complemented by content-led SEO and LinkedIn Ads. Pricing spans freemium consultations, fixed-fee assessments, annual retainers (EUR 50K–200K IAM implementations, EUR 37K–215K ISO 27001 SME projects), and per-user SaaS subscriptions (Entra ID cloud solutions from ~EUR 6/user/month). The firm is led by Jens Thekkeveettil (CISM, ISO 27001 Senior Lead Implementer, 12+ years experience including DAX assignments) and operates with fewer than 10 employees, classifying it as a Kleinstunternehmen under German accessibility law. Geographic focus is DACH with emphasis on the Rhine-Main region and nationwide German coverage.
Welabs firmographics
Firmographics- Name
- Welabs
- Legal name
- Welabs
- Website
- https://welabs.de
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Welabs is a Mainz-based IT security consulting firm and digital agency serving the German Mittelstand with ISO 27001, NIS2, Microsoft Purview, and IAM services, supplemented by three proprietary SaaS products (WePhish, Wefairs, Wenovate).
- Ownership category
- akta.pro rank
Welabs industry classification
Industry- Product category
- IT Security Consulting
- NAICS
- Computer Systems Design and Related Services (54151), Custom Computer Programming Services (541511), Computer Systems Design Services (541512)
- SIC
- Services-Management Consulting Services (8742), Services-Computer Programming Services (7371), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- IT Risk Management (ITRM) (HDADAIAD)
- akta.pro secondary industries
- Cybersecurity & Identity Consulting (BPAHAEAG), Phishing, Social Engineering & Business Email Compromise (BEC) Training (EDABAGAB), Security Awareness, Training & Compliance Attestation (HDADAIAJ)
Keywords
Where Welabs is headquartered
LocationHeadquarters
- HQ city
- Mainz
- HQ country
- Germany
- HQ region
- Europe
Offices1 record
Markets served
Welabs business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- IT Security Consulting: Security consulting services including ISMS implementation, NIS2 readiness, ISO 27001 certification support, Microsoft Purview deployments, IAM implementations, and Security Awareness Training. Offered as fixed-price assessments, gap analyses, and retainer-based ongoing engagements.
- Digital Agency Services: Web development, web platforms, e-commerce solutions, and digital consulting services. Security-by-design approach integrated into all digital deliverables.
- WePhish (SaaS Product): Phishing simulation and security awareness platform offered as managed service or self-service. Pricing individualized based on company size and scope.
- Wefairs (SaaS Product): Digital event platform with white-label option. Revenue from event hosting services and platform licensing.
- Wenovate (SaaS Product): Innovation competition platform. Revenue model includes setup services and platform usage fees.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | One-time | Free initial consultation - 30 minutes, no commitment |
| Subscription | Multi-year contract | Fixed-price assessments and gap analyses |
| Subscription | Annual | Retainer-based ongoing consulting |
| Subscription | Annual | WePhish managed service or self-service |
| Professional services/ project-based | Multi-year contract | IAM implementation |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels4 records
Welabs product offering
Product offeringCore offering
Welabs provides IT security consulting and implementation services for mid-sized German companies, covering ISMS/ISO 27001, NIS2, TISAX, and EU AI Act compliance, Microsoft Purview and M365 security deployments, Identity & Access Management projects, CISO sparring retainers, and Security Awareness Training powered by its own WePhish phishing-simulation platform. Alongside consulting, Welabs operates a digital agency building websites, web platforms, and e-commerce sites with security-by-design, and sells three proprietary SaaS platforms: WePhish, Wefairs (hybrid events), and Wenovate (innovation competitions).
Product overview
Welabs offers a portfolio of three proprietary digital platforms alongside IT security consulting and web development services. The three own platforms are WePhish (cybersecurity/anti-phishing training), Wefairs (hybrid event and trade-show platform), and Wenovate (innovation competition management). These are standalone platforms — not modules of a unified suite — but share a common approach of combining structured digital workflows with professional services support from the Welabs team. The consulting services cover ISMS/ISO 27001, NIS2, TISAX compliance, Microsoft Purview and M365 security, Identity & Access Management, and Security Awareness. Web development services include websites, web platforms/SaaS, e-commerce, and digital consulting. The three products are positioned as the company's own software offerings, while consulting and web development are service lines.
Differentiator
Problem solved
Functional benefit
Products and services
- IT Security Consulting End-to-end information security consulting covering ISMS implementation, NIS2 readiness, ISO 27001 certification support, TISAX, EU AI Act compliance, Microsoft Purview and M365 data protection, Identity & Access Management, Security Awareness Training, and CISO-as-a-service retainers, sold as fixed-price assessments, gap analyses, and ongoing retainers for mid-sized German companies.
- Digital Agency Services Web development agency services building accessible, SEO-optimized websites, bespoke web platforms and SaaS solutions, custom e-commerce shops, and digital transformation consulting, with security-by-design, accessibility, and DSGVO-compliant hosting integrated by default.
- WePhish Proprietary SaaS platform for phishing simulation and Security Awareness Training, offering measurable phishing campaigns and gamified, role-based training that is auditable under ISO 27001 control A.6.3. Offered as managed service by welabs or self-service, with individualized pricing by company size and scope.
- Wefairs Proprietary digital event and trade-show platform for hybrid and in-person events, providing virtual booths, live streaming, AI-powered matchmaking, Q&A, surveys, and lead capture; white-label capable and entirely browser-based.
- Wenovate Proprietary innovation competition and idea management platform enabling organizations to run digital idea competitions with structured submission forms, jury-based evaluation using weighted criteria, real-time ranking, and individualized feedback to participants; DSGVO-compliant and hosted in Germany.
Quantifiable outcome
- 23% click rate reduction after phishing simulations
- +2 more outcomes
Companies that use Welabs
Customer profileNamed customers8 records
Segments2 records
Ideal customer profiles3 records
Welabs technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature3 records
Welabs partnerships and signals
Strategic signalScale indicators6 records
Recent moves6 records
Expansion highlights5 records
Welabs competitors and assessment
Company assessmentBroad incumbents
- Avanade: Large Microsoft-focused consultancy delivering Purview, IAM, and M365 security implementations at enterprise scale. Competes with welabs on Microsoft security projects, particularly for large/global accounts.
- Proofpoint Security Awareness: Enterprise security awareness and phishing simulation suite with global reach. Competes with WePhish for compliance- and risk-driven awareness budgets and adjacent managed security consulting.
- TÜV Rheinland (iT/sec consulting): Large German TIC player offering ISO 27001 audit, certification and consulting services. Competes with welabs for the same Mittelstand certification and ISMS-implementation engagements and is also the certifying body for the founder's ISO 27001 lead implementer credential.
- Secunet Security Networks AG: Established German cybersecurity firm with consulting and managed services across public sector and KRITIS. Competes for high-end German security mandates and benefits from cross-border political backing.
- Microsoft (Purview / M365 Security / Compliance): Vendor of the Purview, Entra ID, and Copilot ecosystem that welabs specializes in implementing. Sets roadmap, pricing, and partner-program rules that shape welabs's delivery scope and partner-margin economics.
Emerging players
- Link11: DACH-rooted cybersecurity vendor with web/DDoS protection and adjacent compliance services. Comparable as a smaller, regionally anchored European cybersecurity brand pursuing enterprise and mid-market customers.
Direct peers
- SoSafe: DACH-focused phishing simulation and security awareness platform. Directly competes with WePhish on phishing campaigns, awareness training, and human-risk reporting for German mid-market and enterprise customers.
- KnowBe4: Global leader in security awareness training and phishing simulation. Competes head-to-head with WePhish and adjacent to welabs's managed awareness offering for compliance-driven buying personas.
- Kaspersky Security Awareness / Automated Security Awareness Platform: Security awareness and phishing simulation product family targeting enterprise and mid-market compliance buyers; directly comparable feature set and use case (ISO 27001 A.6.3-aligned training) to WePhish.
Regional players
- Syss (SySS GmbH): Germany-based penetration testing and security consulting firm. Overlaps with welabs on technical security consulting and is often cited alongside niche DACH security boutiques.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
Welabs social profiles
Digital presenceWelabs compliance and trust
Trust signalCompliance2 records
Welabs financial estimates
Financial estimateRevenue estimate
Valuation estimate
Welabs leadership team
Management profileNumber of profiles
Profiles1 record
Welabs funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Welabs M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Welabs
What does Welabs do?
Welabs provides IT security consulting and implementation services for mid-sized German companies, covering ISMS/ISO 27001, NIS2, TISAX, and EU AI Act compliance, Microsoft Purview and M365 security deployments, Identity & Access Management projects, CISO sparring retainers, and Security Awareness Training powered by its own WePhish phishing-simulation platform. Alongside consulting, Welabs operates a digital agency building websites, web platforms, and e-commerce sites with security-by-design, and sells three proprietary SaaS platforms: WePhish, Wefairs (hybrid events), and Wenovate (innovation competitions).
Is Welabs a public or private company?
Welabs is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Welabs founded?
Welabs was founded in 2015. It employs 11 to 50 people.
Where is Welabs based?
Welabs is headquartered in Mainz, Germany, in the Europe region.
How does Welabs make money?
Five revenue lines are on record. IT Security Consulting is the primary driver. The others are digital Agency Services, wePhish (SaaS Product), wefairs (SaaS Product) and wenovate (SaaS Product).
Who are Welabs's main competitors?
Broad incumbents on record are Avanade, Proofpoint Security Awareness, TÜV Rheinland (iT/sec consulting), Secunet Security Networks AG and Microsoft (Purview / M365 Security / Compliance). Link11 is listed as an emerging player. Direct peers are SoSafe, KnowBe4 and Kaspersky Security Awareness / Automated Security Awareness Platform. Syss (SySS GmbH) is listed as a regional player.
Does Welabs have an API?
No public API is recorded for Welabs.
What industry is Welabs in?
Welabs's product category is IT Security Consulting. Its primary akta.pro industry code is HDADAIAD, IT Risk Management (ITRM), with a secondary code of BPAHAEAG, Cybersecurity & Identity Consulting. Its NAICS code is 54151 and its SIC code is 8742.