SektorCERT

What SektorCERT does

SektorCERT is a Danish non-profit association (forening) founded in 2020 that operates as the dedicated cybersecurity center for Danish critical infrastructure. The organization monitors and defends critical infrastructure operators across the electricity, district heating, water, gas, and transport sectors, acquiring members primarily through three founding branch associations — Green Power Denmark (electricity), Dansk Fjernvarme (district heating), and Danva (water) — as well as through direct individual membership for critical infrastructure operators and limited information-sharing agreements for energy sector entities outside the main associations.

The company operates a comprehensive sensor network that monitors internet traffic to detect cyberattacks against Danish critical infrastructure, backed by a 24/7 Security Operations Center (SOC) reachable through dedicated phone lines including a satellite phone and SINE radio for resilient communications. Its core digital product is SektorForum, a knowledge-sharing and incident registration platform built on Mattermost that enables members to exchange threat intelligence and coordinate incident response. SektorCERT also delivers tiered training courses (priced 1,000–12,000 DKK), publishes threat reports and a 25-recommendation cybersecurity handbook, and hosts the annual SektorForum LIVE! conference. The technology stack relies on Splunk for network traffic data analysis, Red Canary for extended monitoring analysis, Crowdstrike and AWS EU (Frankfurt) for hosting, and NIL815 for incident registration infrastructure.

Revenue is generated through membership fees paid via branch association contributions and direct individual memberships, supplemented by course fees and annual conference tickets. The organization employs approximately 20 people, including SOC analysts, Threat Intelligence analysts, developers, member coordinators, and managers, led by CEO Søren Maigaard and governed by a board chaired by Jørgen Christensen with representatives from Green Power Denmark, Dansk Fjerndarme, Novafos, Danva, AURA, Skive Fjernvarme, and Energinet. SektorCERT collaborates with other European CERTs and processes personal data in accordance with GDPR, with privacy policies updated in April and July 2025.

Name

SektorCERT

Legal name

SektorCERT

Website

https://sektorcert.dk

Company type

Private

Founded year

2020

Operating status

Operating

Headcount range

11–50 employees

Short description

SektorCERT is a Danish non-profit cybersecurity center founded in 2020 that monitors and defends Danish critical infrastructure operators across electricity, district heating, water, gas, and transport sectors via a sensor network, 24/7 SOC, and member collaboration platform.

Ownership category

akta.pro rank

Product category

Critical Infrastructure Cybersecurity

NAICS

Security Systems Services (except Locksmiths) (561621), Security Systems Services (56162), Investigation and Security Services (5616), Computer Facilities Management Services (541513)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Critical Infrastructure Protection (CIP) & NERC-CIP Compliance (HDADAJAC)

akta.pro secondary industries

Incident Response, Forensics & Recovery for Critical Infrastructure (EUADANAI), Grid Cybersecurity Implementation & OT Security Services (EUAEANAG), Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG)

Keywords

• Critical infrastructure cybersecurity
• Network monitoring services
• Incident response services
• Threat intelligence sharing
• Industrial control security

Headquarters

HQ city

Kolding

HQ country

Denmark

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales

Revenue model

1. Membership Fees: SektorCERT is a non-profit association owned and financed by Danish companies within critical infrastructure. Membership fees are paid through branch association contributions (Dansk Fjernvarme, Green Power Denmark, Danva) and individual membership fees from companies operating critical infrastructure.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels4 records

Core offering

SektorCERT delivers sector-specific cybersecurity services to Danish critical infrastructure operators. Its core offering includes network monitoring through an extensive sensor network that observes internet traffic for cyberattacks, a 24/7 Security Operations Center (SOC) for incident handling, and the SektorForum knowledge-sharing platform (based on Mattermost). Members also receive threat intelligence, incident registration capabilities, extended monitoring services, cybersecurity training courses, and access to the annual SektorForum LIVE! conference and published threat reports.

Product overview

SektorCERT is a non-profit cybersecurity center for Danish critical infrastructure sectors, offering a unified platform combining network monitoring, incident response, and member services. The core offering includes network monitoring via an extensive sensor network that monitors internet traffic for cyberattacks, a 24x7 Security Operations Center (SOC) for incident handling, and the SektorForum knowledge-sharing platform (based on Mattermost). Members also access training courses, an incident registration platform, and the annual SektorForum LIVE! conference. The services are delivered through tiered membership models: branch association membership (via Green Power Denmark, Dansk Fjernvarme, DANVA), individual membership for critical infrastructure operators, and limited information-sharing agreements for energy sector companies not in the main branch associations.

Differentiator

Problem solved

Functional benefit

Products and services

• Netværksmonitorering (Network Monitoring) Monitoring of member companies through SektorCERT's extensive sensor network that observes internet traffic to detect cyberattacks against Danish critical infrastructure. Provided to members signed up via branch association or individual connection agreements.
• SOC (Security Operations Center) 24/7 Security Operations Center providing round-the-clock assistance for cybersecurity incidents affecting member critical infrastructure operators, reachable at 51 59 60 25.
• SektorForum (SektorForum/Mattermost) A knowledge-sharing and communication platform based on Mattermost, enabling members to share security information, incident alerts, and threat intelligence across Danish critical infrastructure sectors. Login at https://mattermost.energicert.dk/login.
• Hændelsesregistrering (Incident Registration Platform) A platform for members to register and report security incidents, enabling structured information sharing with other members and across critical sectors in Denmark. Sub-processor NIL815 provides hosting infrastructure in Frankfurt.
• Udvidet Monitorering (Extended Monitoring) Advanced monitoring services for members, leveraging sub-processors Red Canary for analysis and Crowdstrike for hosting within the EU, providing deeper detection coverage on top of the base sensor network.
• Cybersikkerhedskurser (Cybersecurity Training Courses) Cybersecurity training courses including 'Introduktion til industriel cybersikkerhed' (2-hour online, members 1,000 DKK / non-members 2,000 DKK), 'Introduktion til industrielle cyberangreb og -forsvar' (full-day in Kolding, members 4,000 DKK / non-members 6,000 DKK), and 'Kom med hackeren på arbejde' (2-day technical course in Kolding, members 8,000 DKK / non-members 12,000 DKK).
• SektorForum LIVE! Konference (Annual Conference) Annual conference for SektorCERT members providing a closed forum to exchange experiences and gain knowledge about cybersecurity for critical infrastructure. Held in Kolding.
• Rapporter og Publikationer (Reports and Publications) Cybersecurity reports and publications including threat assessments, botnet analysis, and the '25 Anbefalinger' (25 Recommendations) handbook providing concrete cybersecurity recommendations for critical infrastructure organizations.
• Informationsdeling (Information Sharing) Sharing of cybersecurity threat information, threat intelligence, and incident details among members, sector partners, and authorities. Available via full membership and limited information-sharing agreements.

Quantifiable outcome

• Detects and monitors botnet attacks targeting Danish critical infrastructure daily
• +2 more outcomes

Named customers4 records

Segments4 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability3 records

Feature4 records

Partnerships

Five partnerships are on record, tiered core.

• Dansk FjernvarmecoreStrategic or Co-development PartnerFounding member organization representing the district heating sector. Members of Dansk Fjernvarme have access to SektorCERT services through the branch membership agreement.
• Green Power DenmarkcoreStrategic or Co-development PartnerFounding member organization representing the electricity sector. Members have access to SektorCERT through branch membership.
• DanvacoreStrategic or Co-development PartnerFounding member organization representing the water sector. Water utility members access SektorCERT cybersecurity services through Danva membership.
• EnerginetcoreStrategic or Co-development PartnerGovernment-owned energy system operator that is part of SektorCERT. Represents the electricity sector on the board and contributes to threat intelligence analysis.
• European CERTscoreTechnology or IntegrationSektorCERT collaborates with other European CERTs and participates in cybersecurity organizations across Europe, gaining knowledge about threats against critical infrastructure.

Scale indicators3 records

Recent moves5 records

Expansion highlights6 records

Emerging players

• Claroty: Cybersecurity provider for industrial and critical infrastructure environments, including extended monitoring and incident response. It is comparable to SektorCERT's extended monitoring and OT/ICS defense capabilities, though as a commercial vendor serving multiple geographies.
• Dragos: Specialist OT/ICS cybersecurity vendor focused on industrial environments including energy and water. It is comparable to SektorCERT in OT/ICS threat detection and incident response focus, though it is a commercial vendor rather than a member-funded sector association.
• Norse Atlantic (formerly Norse Corporation): Historical threat intelligence provider with strong emphasis on critical infrastructure and dark-web monitoring. It is comparable to SektorCERT's threat intelligence and sensor-based monitoring capabilities, though with a different commercial and geographic model.
• Nozomi Networks: OT and IoT cybersecurity vendor with strong deployments in utilities, energy, and water. It is comparable to SektorCERT in the OT network monitoring and threat detection domain, although it operates as a global commercial vendor rather than a sector-funded non-profit.

Direct peers

• E-ISAC: Electricity Information Sharing and Analysis Center (North America). It is a sector-specific ISAC for the electricity subsector, performing many of the same functions as SektorCERT (information sharing, threat analysis, sector-specific incident coordination) for a different geography.
• EE-ISAC: European Energy Information Sharing and Analysis Centre. It is a sector-specific ISAC for European energy operators, providing threat intelligence sharing among energy sector members — directly comparable to SektorCERT's information-sharing and threat intelligence function for Danish energy, heating, and water operators.

Regional players

• CERT-EU: Computer Emergency Response Team for EU institutions. It is a regional counterpart that collaborates with national and sector-specific CERTs in Europe (including SektorCERT) on cross-border threat intelligence and incident coordination.
• CFCS (Center for Cybersikkerhed): Denmark's national cyber security center under the Danish Defence Intelligence Service. It is a regional counterpart that coordinates national-level cybersecurity for Danish authorities and critical infrastructure, overlapping with SektorCERT's mandate on critical infrastructure cyber defense.

Broad incumbents

• Hitachi Energy: Provider of grid and OT solutions for utilities, including cybersecurity services for energy operators. It is a broad incumbent with capabilities intersecting SektorCERT's OT/ICS cybersecurity mandate for energy-sector members.
• Siemens Energy Cybersecurity: Major vendor to global energy utilities, offering OT/ICS cybersecurity services alongside broader grid technology. It is a broad incumbent with overlapping critical infrastructure cybersecurity capabilities relevant to SektorCERT's members (electricity, district heating, gas).

Market position

Strengths4 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/sektorcert

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles9 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about SektorCERT