DUNEMOUNT CONSULTING LIMITED

What DUNEMOUNT CONSULTING LIMITED does

DuneMount Consulting Limited (legal entity: DuneMount Danışmanlık Limited Şirketi) is a boutique security and resilience consulting firm founded in 2023 and headquartered in the Kadıköy district of Istanbul, Turkey, with a secondary office in Milton Keynes, United Kingdom. The firm is led by founder Serdar Karaman, who brings 14–15 years of professional experience across business continuity, IT continuity, crisis management, risk management, cyber resilience, cyber security, and information security. DuneMount serves enterprise and regulated-industry clients with an integrated portfolio of services including corporate resilience (cyber and earthquake crisis simulations, business continuity, IT continuity), cyber and information security (penetration testing, vulnerability management, secure code analysis, social engineering, red team exercises, and OT/ICS security), enterprise risk management, and governance/risk/compliance advisory aligned with ISO 27001, ISO 22301, KVKK, GDPR, PCI-DSS, SWIFT CSP, DORA, NIST, COBIT, and the Turkish Presidential ICT Security Guide. The firm also delivers structured training programs covering data privacy, institutional resilience, business continuity, crisis management, and cybersecurity.

The service portfolio is augmented by two Core solution partner platforms: GovernID, a KVKK/GDPR personal data compliance management platform with API integration capabilities, and Sotway, an industrial digital maturity assessment tool built on 150+ indexed academic publications and 214 assessment questions across eight axes. Minor logo partnerships with CyberWhiz and Optimate extend the firm's solution ecosystem. DuneMount monetizes through custom project-based consulting engagements and structured training programs, with no publicly disclosed pricing, no standardized product tiers, and no software-as-a-service offering of its own.

The firm is privately held, entirely founder-financed, with no external investors, no parent company, and no disclosed revenue. Headcount is 1–10 employees. Customer acquisition is driven through direct engagement via the bilingual Turkish/English website, downloadable educational content, and the founder's professional network. The geographic footprint spans Turkey and the United Kingdom, and the firm has no disclosed end-client logos, MRR/ARR figures, or media mentions beyond its own website.

Name

DUNEMOUNT CONSULTING LIMITED

Legal name

DuneMount Danışmanlık Limited Şirketi

Website

https://www.dunemount.com/

Company type

Private

Founded year

2025

Operating status

Operating

Headcount range

1–10 employees

Short description

DuneMount Consulting Limited is a boutique Istanbul-based security and resilience consultancy serving enterprise and regulated-industry clients in Turkey and the UK with business continuity, cybersecurity, risk management, and GRC advisory services.

Ownership category

akta.pro rank

Product category

Cybersecurity and Resilience Consulting

NAICS

Other Computer Related Services (541519)

akta.pro primary industry

Executive/Board Security Advisory & Risk Briefings (BPAKADAK)

Keywords

• Security consulting services
• Cyber security advisory
• Business continuity consulting
• Risk management services
• Compliance audit services

Headquarters

HQ city

Milton Keynes

HQ country

United Kingdom

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D

Revenue model

1. Security Consulting Services: DuneMount generates revenue through professional consulting engagements including security consultancy, risk management, business continuity, crisis management, and compliance services. Services are delivered through customized project-based engagements rather than standardized products.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels2 records

Core offering

DuneMount is a consulting firm that delivers technology, cyber security, resilience and risk management advisory and training services to enterprise clients. Its core offerings include Corporate Resilience (crisis simulations, business and IT continuity), Cyber & Information Security (penetration testing, vulnerability management, red team exercises), Risk Management (enterprise and third-party risk), GRC/Audit Services (ISO 27001, ISO 22301, KVKK, GDPR, PCI-DSS, DORA, SWIFT CSP), Operational Technology Security, and structured Training Programs on data privacy, resilience, crisis management and cyber security.

Product overview

DuneMount is a consulting company that offers a portfolio of security and resilience services rather than a unified software product. Its core offerings include Corporate Resilience services (crisis simulations, business/IT continuity), Cyber & Information Security (penetration testing, vulnerability management), Risk Management, Audit Services, and Training Programs. The company also provides access to two solution partner platforms: GovernID (a KVKK/GDPR compliance management platform with API capabilities) and Sotway (an industrial digital maturity assessment tool). Services are delivered through consultancy engagements and training programs, not through a traditional software-as-a-service platform.

Differentiator

Problem solved

Functional benefit

Products and services

• Corporate Resilience (Kurumsal Dayanıklılık)

Segments2 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

Two partnerships are on record, tiered core.

• GovernIDcoreTechnology or IntegrationGovernID is a platform that regulates and processes personal data entry according to KVKK and GDPR legal criteria. DuneMount partners with GovernID to offer data privacy and compliance solutions to clients requiring personal data protection management systems.
• SotwaycoreTechnology or IntegrationSotway provides Industrial Maturity Test and Roadmap determination services. The partnership enables DuneMount to offer digital transformation and Industry 4.0 maturity assessment solutions, with the assessment based on 150+ indexed academic publications and 20+ years of industry experience.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• NCC Group: UK-headquartered cybersecurity and resilience consultancy offering cyber advisory, risk management, and incident response services. Comparable to DuneMount as a specialist cyber and resilience advisor serving regulated enterprise clients.
• Mandiant (Google Cloud): Global incident response and cyber consulting firm with deep expertise in incident response, threat intelligence, and cyber resilience. Directly comparable in the cyber resilience, incident readiness, and crisis simulation services DuneMount offers.
• Optiv Security: US-based cybersecurity solutions and advisory firm providing risk management, GRC, and security consulting services. Comparable to DuneMount in its enterprise-focused cyber advisory and GRC delivery model.
• BAE Systems Applied Intelligence: Global security and resilience consultancy delivering cyber, financial crime, and risk advisory to regulated enterprises and governments. Comparable to DuneMount across cyber resilience, compliance, and risk management engagements.
• Kudelski Security: Cybersecurity advisory and managed security services firm serving enterprises across Europe and the US. Comparable to DuneMount as a mid-sized specialist security consultancy focused on advisory and resilience services.

Broad incumbents

• Booz Allen Hamilton: Large global management and technology consulting firm with a substantial cyber and risk practice serving regulated enterprises and governments. Comparable to DuneMount in the cyber risk and resilience advisory space, but at vastly greater scale and breadth.
• Deloitte (Cyber & Strategic Risk): Big 4 professional services firm with a global cyber risk, GRC, and resilience consulting practice. Comparable to DuneMount in delivering ISO 27001/22301, DORA, GDPR, and resilience engagements, but competing at much larger enterprise scale.
• PwC (Cybersecurity & Privacy): Big 4 firm with a dedicated cybersecurity, privacy, and risk advisory practice serving regulated industries. Overlaps on GRC, ISO certification, DORA, and resilience mandates that DuneMount also services.

Regional players

• HAVELSAN: Turkish defense and IT company with a significant cybersecurity division offering cyber advisory, SOC, and resilience services. Comparable regional peer to DuneMount, particularly for Turkish government, defense, and critical infrastructure clients.
• STM (Savunma Teknolojileri Mühendislik): Turkish defense technology and cybersecurity firm providing cyber consulting, threat intelligence, and resilience services to Turkish and international clients. Comparable regional competitor for cyber and resilience mandates in Turkey.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/dunemount

Compliance11 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about DUNEMOUNT CONSULTING LIMITED