Tacticx Gmbh

What Tacticx Gmbh does

tacticx Consulting GmbH is a German boutique advisory firm founded in 2003 and headquartered in Geldern, North Rhine-Westphalia, with additional offices in Frankfurt am Main (opened March 2013) and Berlin. The firm specializes in data protection (DSGVO/BDSG, external Datenschutzbeauftragter, data protection audits and management) and information security (ISMS implementation, ISO 27001 certification support, BCM/ISO 22301, NIS2/KRITIS readiness, internal audits, and risk management). It serves both German small and medium enterprises (KMU) and large corporations including DAX-30 entities across diverse industries such as aerospace, research, media, and office supplies. The firm is staffed by approximately 10 internal consultants — all holding multiple international certifications — and deliberately avoids freelancers to maintain service quality.

The firm operates within the broader "tacticx Gruppe," which includes sister companies tacticx Development GmbH (developer of the vaulticx secure communication platform featuring end-to-end encryption, zero-knowledge architecture, and ISO 27001-certified IONOS hosting) and Pentest Factory GmbH (penetration-testing services). The group itself maintains ISO 27001 certification across all entities and locations, valid until April 2029 following a March 2025 recertification by TÜV NORD CERT. In 2025, tacticx also achieved PECB Authorized Gold Partner Status, enabling it to deliver PECB-certified ISO 27001 and ISO 22301 training and examinations.

Revenue is generated entirely through professional services: consulting engagements (quote-based, transparent billing without monthly flat fees or minimum commitments), public and in-house training seminars (delivered in five German cities plus online), and audit services. Distribution is via direct enterprise sales complemented by website-based seminar booking and the PECB partner channel. Marketing is primarily content-driven through the firm's blog (Fachartikel), its NIS2 information hub, and event-led lead generation. The firm maintains industry memberships in BITMi, GDD, and the Allianz für Cybersicherheit (BSI).

Name

Tacticx Gmbh

Legal name

tacticx Consulting GmbH

Website

https://tacticx.de

Company type

Private

Founded year

2003

Operating status

Operating

Headcount range

11–50 employees

Short description

tacticx Consulting GmbH is a German boutique advisory firm (founded 2003, Geldern HQ) providing data protection (DSGVO) and information security (ISO 27001, NIS2, BCM) consulting, audits, and PECB-certified training to KMU and DAX-30 enterprises across Germany.

Ownership category

akta.pro rank

Product category

Compliance and Information Security Consulting

NAICS

Management Consulting Services (54161), Other Management Consulting Services (541618)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Risk, Compliance & Internal Controls Consulting (BPAHACAJ)

akta.pro secondary industry

Enterprise Security Strategy & Program Advisory (BPAKADAA)

Keywords

• Data protection consulting
• Information security consulting
• GDPR compliance advisory
• ISO 27001 consulting
• NIS2 compliance services

Headquarters

HQ city

Geldern

HQ country

Germany

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Marketing or Sales, Operations, Technology or R&D, Infrastructure

Revenue model

1. Consulting Services: Core revenue from data protection (DSGVO/BDSG) and information security (ISO 27001, NIS2, BCM) consulting engagements. Services include external DSB (Datenschutzbeauftragter), ISMS implementation, internal audits, and risk management. Billed transparently without monthly flat fees or minimum commitments.
2. Seminars and Training: Public and in-house seminars covering data protection, ISO 27001, ISO 22301, NIS2, and AI topics. Delivered both online and in-person across German cities (Hamburg, Munich, Cologne, Frankfurt, Berlin). PECB-certified training with integrated examination and certification. Additional revenue stream through partner seminars.
3. Audit Services: Data protection audits and information security audits (Datenschutzaudits, ISMS Audits) for client organizations, supporting certification and compliance verification processes.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels4 records

Core offering

tacticx Consulting GmbH is a German advisory firm providing data protection (DSGVO/BDSG) and information security (ISO 27001, NIS2, BCM) consulting services to business clients. Offerings include external data protection officer (DSB) and information security officer (ISB) services, ISMS implementation, audits, risk management, and PECB-certified training seminars delivered in-person and online across Germany.

Product overview

Tacticx Consulting GmbH is a consulting firm offering advisory and training services rather than a unified software product. The core portfolio consists of Datenschutz (data protection/GDPR consulting) and Informationssicherheit (information security/ISO 27001 consulting) services, supplemented by publicly available seminars and training courses. Related offerings include BCM Beratung (business continuity management) and penetration testing. A sister company, Pentest Factory GmbH, provides specialized pentest services, while another sister company, tacticx Development GmbH, developed the vaulticx secure communication platform.

Differentiator

Problem solved

Functional benefit

Brands

• Pentest Factory: Brand within the tacticx Gruppe dedicated to penetration testing and cybersecurity assessment services, operated by Pentest Factory GmbH.

Products and services

• Datenschutz Beratung (Data Protection Consulting)

Quantifiable outcome

• ISO 27001 recertification audit completed with only 3 observations — a very good result
• +1 more outcomes

Named customers6 records

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

Four partnerships are on record, tiered core and minor.

• PECBcoreStrategic or Co-development Partner · 1 September 2024PECB is a leading certification body offering training and certifications per ISO/IEC 17024 for individuals across international standards. Tacticx Consulting GmbH became a member in September 2024 and offers seminars and certifications for ISO 27001 and ISO 22301. In 2025, tacticx earned over 250 partnership points achieving the PECB Authorized Gold Partner Status. All partner seminars include PECB examination and certification.
• Pentest Factory GmbHcoreStrategic or Co-development PartnerSister company (Schwestergesellschaft) within the tacticx Gruppe. Offers specialized penetration testing services including Cyber Security Check for publicly known company information and password leak checks. Tacticx references Pentest Factory's services in their threat intelligence article.
• tacticx Development GmbHcoreStrategic or Co-development PartnerSister company (Schwestergesellschaft) that developed the vaulticx secure communication platform. The entire tacticx group is ISO 27001 certified including development, operations, and support processes. Jointly positioned as part of the group's integrated data protection and information security offering.
• World Vision DeutschlandminorOthersCharitable partnership initiated in 2017: for each client reference published with consent, tacticx donates €100 to the World Vision 'Starthelfer' (starter helper) project supporting children in their first five years of life through nutrition and basic medical care.

Scale indicators5 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• Secunet Security Networks AG: German IT security provider offering consulting, secure communications, and SINA products for government and critical infrastructure. Comparable on the secure communications angle (vs. vaulticx) and on NIS2/KRITIS advisory for regulated clients.
• TÜV SÜD Management Service: Large established German TICx (testing, inspection, certification) body that issues ISO 27001 and ISO 22301 certifications and offers adjacent advisory. Competes with Tacticx on the certification and audit side but as part of a much broader portfolio.
• KPMG Germany (Cyber & Privacy practice): Big Four firm in Germany with a substantial cyber security, privacy, and NIS2 advisory practice serving DAX and large enterprise clients. Overlaps with Tacticx's enterprise/DAX segment but operates at far greater scale and breadth.
• PwC Germany (Cyber, Risk & Regulatory): Big Four advisory practice covering GDPR, NIS2, ISO 27001, BCM, and ISMS implementation for large German enterprises. Broad incumbent alternative to Tacticx for DAX-tier and regulated-entity engagements.
• DEKRA Certification: Major German TICx provider conducting ISO 27001 and related management system audits. Adjacent to Tacticx's audit and certification-readiness services but operates at a much larger scale and broader scope.

Emerging players

• Allgeier (Cybersecurity & Compliance): European IT services group with German cybersecurity and compliance consulting operations. Overlaps with Tacticx on ISMS, GDPR, and NIS2 advisory for mid-market and enterprise clients, but as part of a broader IT services portfolio.

Direct peers

• Datenschutz Nord (DN-Gruppe): German consulting group specializing in external data protection officer (DSB) services, GDPR advisory, and information security. Directly comparable to Tacticx in customer mix (KMU to enterprise) and the combined DSGVO/ISO 27001/NIS2 consulting offering.
• intersoft consulting services AG: Hamburg-headquartered consultancy providing data protection, information security, and DSGVO consulting alongside training. Closely comparable service portfolio and German SME/large-enterprise client base.
• Datenschutzkanzlei: Germany-focused data protection law and consulting firm offering external DSB services, DSGVO audits, and compliance advice. Directly competes with Tacticx's Datenschutz Beratung line across German KMU and mid-market clients.
• UIMC Dr. Vosseler: German consultancy offering data protection, information security, and ISO 27001 consulting with external DSB services. Comparable niche specialization and similar KMU-to-enterprise positioning to Tacticx.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/tacticx-gmbh

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Tacticx Gmbh