Schonbrunn Tasc Gmbh

What Schonbrunn Tasc Gmbh does

Schönbrunn TASC GmbH is a privately held German information security services firm founded in 2021 and headquartered in Leonberg, Baden-Württemberg. The company delivers cybersecurity consulting, compliance advisory, penetration testing, security audits, and accredited training across the DACH region with an extension into MEA markets via a Tunisia subsidiary (S TASC TUN SUARL, Sfax). Its service portfolio spans the full information security lifecycle under the TASC framework: Training, Audit, System, and Consulting, with deep specialization in European regulatory regimes including ISO 27001, TISAX/VDA ISA, NIS2, GDPR/DSGVO, and CRA compliance, and a notable vertical concentration in the automotive and manufacturing supply chain.

The firm operates a hybrid services-plus-software model. Core proprietary technology includes the en-TASC dark web monitoring and threat intelligence platform (covering Telegram, Tor, and I2P sources, listed on the Microsoft Azure Marketplace), the ISB-Portal for ISMS management, the DSB-Portal for GDPR administration, and the TASC Learning Management System for security awareness training. Revenue is generated through hourly consulting engagements (€225/hour for consulting, €150/hour for IT security), fixed-scope certification projects, accredited training programs delivered through partnerships with ISACA, ISC2, CompTIA, DEKRA, PECB, and TRECCERT, plus recurring SaaS subscriptions for en-TASC.

Go-to-market is enterprise-focused and sales-led, combining direct consulting engagements, event-driven demand generation (Cybersecurity Oktoberfest, Capture the Flag competitions, Women in Tech events), and a partnership-driven distribution ecosystem that includes technology vendors (Microsoft, Thales, Xopero, Arctic Wolf, Flare, DRACOON, Myra), institutional programs (Allianz für Cyber-Sicherheit, CYBERsicher), and academic collaboration with DHBW Stuttgart. The customer base of 100+ includes regulated enterprises such as Ionity, Nord/LB, Helaba, Sparkasse, and BBBank alongside SMB and startup clients. The firm is itself ISO/IEC 27001:2024 certified and is co-led by founders Jan-Sebastian Schönbrunn (CEO) and Nouha Schönbrunn, with no external institutional investors disclosed.

Name

Schonbrunn Tasc Gmbh

Legal name

Schönbrunn TASC GmbH

Website

https://schoenbrunn-tasc.de

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

11–50 employees

Short description

Schönbrunn TASC GmbH is a German cybersecurity services firm providing consulting, accredited training, penetration testing, and the en-TASC dark web threat intelligence platform to enterprises across the DACH and MEA regions, with deep specialization in ISO 27001, TISAX, NIS2, and GDPR compliance.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting and Compliance Services

NAICS

Security Systems Services (except Locksmiths) (561621), Other Scientific and Technical Consulting Services (54169), Other Computer Related Services (541519), Investigation and Personal Background Check Services (561611)

SIC

Services-Management Consulting Services (8742), Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Governance, Risk & Compliance (GRC) & Security Management (EDAOAIAG)

akta.pro secondary industry

Email Phishing & BEC Protection (HDADAKAB)

Keywords

• Cybersecurity consulting services
• Penetration testing services
• Threat intelligence platform
• Information security training
• ISO 27001 compliance consulting

Headquarters

HQ city

Leonberg

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Supply Chain

Revenue model

1. Professional Services - Consulting: Core revenue stream from IT security consulting engagements including ISMS implementation, ISO 27001 certification support, TISAX preparation, NIS2 compliance, CRA consulting, and general IT security advisory. Billed at €225/hour for consulting services and €150/hour for IT security services with project-based delivery.
2. Training and Certification Programs: Revenue from cybersecurity training programs including classroom and virtual courses covering Cloud Security, Data Privacy, Ethical Hacking, Governance & Risk, Incident Management, Information Security, AI Security, Network Administration, and Security Architecture. Partnered with ISACA, ISC2, CompTIA, DEKRA, PECB, and TRECCERT for certification delivery.
3. Penetration Testing and Audit Services: Offensive security services including penetration testing (web applications, networks, Active Directory, mobile, cloud), red teaming, ransomware simulation, and security audits. Conducted by certified professionals.
4. Software Subscriptions (en-TASC): SaaS-based threat intelligence platform with subscription pricing, available through Microsoft Azure Marketplace listing.
5. Managed Security Services: Ongoing managed security services including monitoring and risk assessment for implemented security systems.
6. Software Licenses and Hardware: Sale of software licenses and hardware as part of security infrastructure implementations.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels6 records

Core offering

Schönbrunn TASC GmbH is a B2B information security services firm that delivers end-to-end cybersecurity services covering Training, Audit, System, and Consulting (TASC). Its core offerings include IT security consulting (ISO 27001, TISAX, NIS2, CRA, GDPR), penetration testing and red teaming, certified cybersecurity training, and proprietary software platforms such as en-TASC (dark web threat intelligence), the ISB-Portal, DSB-Portal, and TASC LMS for compliance and security culture management.

Product overview

Schönbrunn TASC is an information security services company offering a portfolio of specialized cybersecurity solutions. The core offering includes en-TASC (a threat intelligence platform for dark web monitoring), complementary portal products (ISB-Portal for ISMS management, DSB-Portal for data protection, and TASC LMS for security training), professional penetration testing services, and the TASC Akademie training programs. The company provides end-to-end services from training and audits through penetration testing and consulting to strategy implementation.

Differentiator

Problem solved

Functional benefit

Brands

• en-TASC: Dark Web monitoring and threat intelligence platform that monitors Telegram, Tor, and I2P networks, capturing and analyzing data leaks automatically

Products and services

• en-TASC Dark Web Monitoring Platform Dark web monitoring and threat intelligence platform that automatically captures, analyzes, and structures data from thousands of sources including Telegram, Tor, and I2P networks to detect data leaks, exposed credentials, and digital risks; for enterprise security teams and CISOs.
• ISB-Portal (ISMS Management Portal) Portal for the efficient establishment and daily management of an Information Security Management System (ISMS); for organizations operating and maintaining ISO 27001, NIS2, or TISAX-aligned ISMS environments.
• DSB-Portal (Data Protection Management Portal) Data protection portal for easy management and administration of GDPR/DSGVO compliance requirements; for data protection officers and compliance teams.
• TASC Learning Management System (LMS) Learning management system for establishing a security culture within organizations through training and awareness programs; for security teams running employee awareness initiatives.
• Penetration Testing Services Offensive security services covering web applications, networks, Active Directory, mobile, and cloud environments, including red teaming, ransomware simulation, phishing simulation, and security awareness programs; for organizations needing to identify and remediate security vulnerabilities.
• TASC Akademie Training Programs Classroom and virtual IT and information security training across nine domains (Cloud Security, Data Privacy, Ethical Hacking, Governance & Risk, Incident Management, Information Security, AI Security, Network Administration, Security Architecture); delivered in partnership with ISACA, ISC2, CompTIA, DEKRA, PECB, and TRECCERT for certifications.
• IT Security and Compliance Consulting Consulting services for ISO 27001, TISAX (VDA ISA), NIS2, CRA, ISMS, GDPR, IT security, business continuity management, and digitalization/prozessmanagement; for SMEs and enterprises preparing for certifications or building security programs.
• Information Security and Data Protection Audits Technical security checks, ISMS audits (NIS2, ISO 27001, TISAX, CRA), and data protection audits (GDPR/DSGVO); for organizations needing independent audit evidence and certification readiness.
• OSINT & Darknet Check Service One-time or recurring OSINT and darknet exposure check service; for organizations seeking to assess their external digital footprint and leaked-data exposure.
• IT Infrastructure Planning and Implementation Planning and implementation of secure IT infrastructure including Microsoft Azure security; for organizations seeking architecture-level security hardening.

Quantifiable outcome

• TISAX certification achieved for automotive clients
• +3 more outcomes

Named customers10 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

AI capability3 records

Feature4 records

Partnerships

14 partnerships are on record, tiered core and minor.

• ThalescoreTechnology or Integration · 8 July 2026Partnership with Thales, a leading provider of secure technologies for aerospace, defense, and cybersecurity. Goal is to help organizations secure sensitive cryptographic keys using Hardware Security Modules (HSM) and advanced cryptography solutions.
• PECBcoreChannel Partner/ Reseller/ Distributor · 19 March 2026Partnership with PECB, international certification body for digital trust. Enables delivery of internationally recognized training and certification programs in DACH and MEA regions.
• Xopero SoftwarecoreChannel Partner/ Reseller/ Distributor · 21 February 2026Gold partner status with Xopero Software, international provider of backup and cyber-resilience solutions. Jointly offering advanced ransomware protection and disaster recovery solutions to enterprises and MSPs in DACH region.
• ISACAcoreChannel Partner/ Reseller/ DistributorGlobal professional association providing cybersecurity certifications (CISM, CRISC) and guidance. Schönbrunn TASC is an ISACA-accredited training provider offering certified programs.
• ISC2coreChannel Partner/ Reseller/ DistributorWorldwide network for information security certifications including CISSP. Training partner for delivery of ISC2 certification programs.
• CompTIAcoreChannel Partner/ Reseller/ DistributorTraining partner for CompTIA cybersecurity certifications including Security+, Network+, and other vendor-neutral IT security credentials.
• DEKRAminorChannel Partner/ Reseller/ DistributorTraining partnership for DEKRA certification programs related to cybersecurity and information security standards.
• TRECCERTcoreChannel Partner/ Reseller/ DistributorTraining and certification partner for professional credentials in cybersecurity and information security domains.
• DRACOONcoreTechnology or IntegrationGerman platform for secure file sharing and data management with end-to-end encryption. Partnership ensures secure data exchange with customers per GDPR requirements.
• Allianz für Cyber-Sicherheit (ACS)coreStrategic or Co-development PartnerInitiative by BSI and BITKOM since 2012 for strengthening cyber resilience in Germany through knowledge sharing, situation reports, and exchange between businesses, government, and institutions.
• CYBERsicher (BMWK)minorStrategic or Co-development PartnerBMWK initiative providing SMEs, craft businesses, and startups with free prevention and emergency support tools for IT security assessment and improvement.
• KHAIO GmbHminorStrategic or Co-development PartnerStrategic consulting and training with focus on artificial intelligence, leadership development, and digital transformation; also consulting on EU AI Regulation compliance.
• RedmimicryminorStrategic or Co-development PartnerSpecialist for red team training and cyber range simulations for realistic attack detection and defense exercises.
• DHBW StuttgartcoreStrategic or Co-development PartnerDual university partnership for practical training of computer science students. Schönbrunn TASC serves as approved training institution for dual study program.

Scale indicators3 records

Recent moves2 records

Expansion highlights7 records

Direct peers

• cirosec GmbH: Stuttgart-based German cybersecurity consultancy focused on penetration testing, incident response, and security audits. Directly comparable to Schönbrunn TASC's offensive-security and audit lines in the regional DACH mid-market.
• Oneconsult AG: Swiss-German cybersecurity consultancy providing penetration testing, incident response, and managed security. Closely comparable service mix to Schönbrunn TASC's audit and consulting business, with overlapping DACH customer base.
• SySS GmbH: Tübingen-based German penetration testing and security consulting firm. Direct peer to Schönbrunn TASC on offensive security, red-teaming, and IT-security consulting for DACH enterprises.
• Hornetsecurity GmbH: German cloud-security and managed-security provider with a strong DACH channel. Comparable to Schönbrunn TASC on managed security services, email/phishing protection, and security awareness training for SMB and mid-market.
• secunet Security Networks AG: German-listed cybersecurity specialist offering consulting, managed security, and secure-network products to public-sector and enterprise clients. Highly comparable to Schönbrunn TASC's German cybersecurity consulting, ISMS, and TISAX/NIS2 practice, but operating at much larger scale.

Broad incumbents

• Computacenter AG: UK-headquartered but heavily DACH-focused enterprise IT and security services provider. Comparable on large-enterprise security consulting, managed detection, and Microsoft security implementations, though at far greater scale.
• TÜV Rheinland i-sec GmbH: German testing, inspection and certification giant with a dedicated cybersecurity consulting arm. Competes with Schönbrunn TASC on ISO 27001, TISAX, and NIS2 advisory for enterprise clients but as part of a much broader certification portfolio.
• msg group: Major German IT consulting group with dedicated security, GRC, and ISMS practices. Competes with Schönbrunn TASC on regulatory and compliance consulting for DACH financial-services and industrial clients.
• T-Systems International GmbH: Deutsche Telekom's enterprise IT and security arm, offering managed security, GRC, and identity services to large European clients. Broad incumbent competitor to Schönbrunn TASC on enterprise security outsourcing and compliance mandates.
• SVA System Vertrieb Alexander GmbH: Large German IT solutions provider with a cybersecurity consulting and managed-security practice. Overlaps with Schönbrunn TASC on enterprise IT-security consulting, ISMS, and Microsoft Azure security implementations in DACH.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks5 records

Key highlights6 records

Customer concentration

• Facebookfacebook.com/profile.php?id=61567499712042
• LinkedInde.linkedin.com/company/schoenbrunn-tasc-tisax
• Instagraminstagram.com/schoenbrunntasc

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Schonbrunn Tasc Gmbh