NORMA Cyber
NORMA Cyber is a non-profit, membership-based Nordic maritime cybersecurity resilience centre serving 130+ shipping companies, ports, and maritime vendors across Norway, Sweden, Denmark, Finland, and Iceland with threat intelligence, 24/7 incident response, and managed SOC services.
- Company typePrivate
- Founded2020
- HeadquartersOslo, Norway
- Headcount11–50
- GTM typeB2B
- OfferingServices
What NORMA Cyber does
NORMA Cyber is a non-profit, membership-based cybersecurity organization established in 2020 and operational since January 2021, headquartered at Rådhusgata 25, Oslo, Norway. Co-founded by Den Norske Krigsforsikring for Skib (DNK) and Norges Rederiforbund (Norwegian Shipowners' Association), it serves as the Nordic Maritime Cyber Resilience Centre, providing specialized cybersecurity services to shipping companies, ports, terminals, shipbuilders, fisheries, and maritime vendors across Norway, Sweden, Denmark, Finland, and Iceland. As of mid-2024 the organization reported 118 members and by 2025-2026 covered 130+ member organizations representing approximately 2,700 vessels, making it self-described as the first and largest maritime-specific cyber resilience centre in the world. In January 2024 it was designated as the operative partner for the Norwegian Sector Response Environment (SRM) for maritime cybersecurity by Kystverket, embedding it into Norway's national cyber incident coordination framework with NSM NCSC.
The organization's core service portfolio spans four membership tiers and two paid add-on service lines. Core membership includes Threat Intelligence (monthly assessments, maritime OT vulnerability alerts, MISP-based indicator sharing), Incident and Crisis Management (24/7 emergency response for vessel IT, OT, and onshore/cloud infrastructure), External Monitoring (dark web scanning and vulnerability assessment of internet-exposed assets), and Network services (conferences, webinars, and Member Council governance). Paid add-ons include a Managed Security Operations Centre (24/7 monitoring with SOAR-based automated response and AI-assisted false-positive reduction) and Penetration Testing tailored to vessel technology and OT systems. The underlying technology stack combines MISP for threat intelligence sharing, SOAR for incident response automation, AI/ML-assisted anomaly detection in the SOC, and an agnostic integration layer that connects to most maritime and commercial IT/OT systems without requiring hardware installations on vessels.
NORMA Cyber operates on annual membership fees tiered by company type and revenue, ranging from NOK 4,000 per small vessel to NOK 400,000 per year for the largest enterprises, with SOC and penetration testing priced as separate managed-services and professional-services engagements. From 2026 DNK members will have a 15% Loss Prevention contribution added. Distribution is direct via an application process with automatic qualification for DNK and Shipowners' Association members, supported by industry events, monthly threat webinars, and annual threat assessment reports published in English and Norwegian. The organization is governed by a Member Council that meets bi-annually and holds board representation, reflecting its cooperative non-profit structure in which revenues are reinvested into services rather than distributed to owners.
NORMA Cyber firmographics
Firmographics- Name
- NORMA Cyber
- Legal name
- NORMA Cyber
- Website
- https://normacyber.no
- Company type
- Private
- Founded year
- 2020
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- NORMA Cyber is a non-profit, membership-based Nordic maritime cybersecurity resilience centre serving 130+ shipping companies, ports, and maritime vendors across Norway, Sweden, Denmark, Finland, and Iceland with threat intelligence, 24/7 incident response, and managed SOC services.
- Ownership category
- akta.pro rank
NORMA Cyber industry classification
Industry- Product category
- Maritime Cybersecurity Services
- NAICS
- Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (54151)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Maritime Cybersecurity & OT Security Compliance (IMO 2021, Port OT) (TLAHANAJ)
- akta.pro secondary industries
- OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN), Marine Cybersecurity & Networked OT Systems (IMAJAJAH), Security Operations Center (SOC) as a Service (BPAEADAB), Vulnerability Management & Penetration Testing Services (BPAEADAD)
Keywords
Where NORMA Cyber is headquartered
LocationHeadquarters
- HQ city
- Oslo
- HQ country
- Norway
- HQ region
- Europe
Offices1 record
Markets served
NORMA Cyber business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Membership Fees: Annual membership fees based on company type and revenue. Shipping companies pay per vessel with caps; other maritime businesses and vendors pay based on annual global revenue tiers. Fees range from NOK 12,000 to NOK 400,000 per year depending on size and type.
- SOC Services (Add-on): Managed Security Operations Centre services provided as additional service to members, including 24/7 monitoring of IT, OT, land-based infrastructure, and cloud environments.
- Penetration Testing Services: Security testing services tailored to vessel technology, IT system attack simulation, and OT security assessments for complex vessel systems, offered as additional service.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Unit Pricing | Annual | Shipping companies (rederier): Per vessel pricing |
| Subscription | Annual | Other maritime businesses (without vessels) |
| Subscription | Annual | Vendor and affiliate membership |
| One time/ perpetual license | Annual | External conference attendance |
Go-to-market motion1 record
Distribution channels4 records
Marketing channels7 records
NORMA Cyber product offering
Product offeringCore offering
NORMA Cyber delivers maritime-focused cybersecurity membership services to Nordic shipping companies, ports, terminals, shipbuilders, fisheries, and maritime vendors. Its core membership services include threat intelligence (monthly assessments, OT vulnerability alerts, MISP indicator sharing), 24/7 incident and crisis response for IT and OT systems aboard vessels and on land, external dark web monitoring, and access to a member community with conferences and Member Council governance. Add-on services include a managed Security Operations Centre (SOC) with SOAR-driven automation and AI-assisted analysis, plus penetration testing tailored to vessel and OT systems.
Product overview
NORMA Cyber offers a membership-based cybersecurity service portfolio for the Nordic maritime sector. Core membership services include Threat Intelligence (monthly threat assessments, OT vulnerability alerts, MISP-based indicator sharing), Incident & Crisis Management (24/7 emergency response for IT/OT systems), External Monitoring (dark web monitoring, vulnerability scanning), and Network services (conferences, Member Council). Additional paid services include Managed SOC (24/7 monitoring with SOAR automation and threat hunting) and Penetration Testing (vessel and OT security testing). A separate vendor/affiliate membership tier is available for equipment suppliers and international companies.
Differentiator
Problem solved
Functional benefit
Products and services
- Threat Intelligence
- Incident and Crisis Management
Quantifiable outcome
- More than 130 member organizations representing approximately 2,700 vessels protected
- +3 more outcomes
Companies that use NORMA Cyber
Customer profileNamed customers3 records
Segments7 records
Ideal customer profiles3 records
NORMA Cyber technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration1 record
AI capability2 records
Feature6 records
NORMA Cyber partnerships and signals
Strategic signalPartnerships
Seven partnerships are on record, tiered core and minor.
- Kystverket (Norwegian Coastal Administration)coreKystverket awarded sector response environment (SRM) role for maritime industry by Ministry of Trade, Industry and Fisheries. Kystverket selected NORMA Cyber as operative partner in January 2024. NORMA Cyber provides technical expertise for SRM operations, including vulnerability warnings, incident coordination, and advisory support during crisis management. Works with NSM NCSC through Kystverket.
- Skipsfartens beredskapssenter (Maritime Emergency Center)minorEstablished in March 2023 as collaboration between DNK IOC, Rederiforbundet security department, and NORMA Cyber to enhance maritime emergency response capabilities.
- Sjøfartsdirektoratet (Norwegian Maritime Authority)minorCollaboration on IMO 2021 Cyber Resolution compliance and ISM audit guidance. Provided overview of resolution requirements and audit experiences during joint webinar with NORMA Cyber and DNV.
- DNV (Det Norske Veritas)minorPartnered on IMO 2021 Cyber Resolution webinar to provide solutions and experiences regarding cyber security as part of ISM audits. DNV provided insights into audit procedures.
- MTS-ISAC (Maritime Transportation System Information Sharing and Analysis Center)coreFormal partnership for cybersecurity threat intelligence exchange, research collaboration, and educational activities between maritime ISACs. While organizations previously collaborated informally, security operations centers now work more directly together. Partnership formalized in July 2021 with aligned vision and mission objectives to reduce cyber risk across the maritime transportation ecosystem.
- DNK (Den Norske Krigsforsikring for Skib)coreCo-founder of NORMA Cyber along with Norwegian Shipowners' Association. DNK is a founding partner that established the initiative in 2020. Provides Loss Prevention contribution (15% in 2026) for DNK members. NORMA Cyber co-located with DNK in Rådhusgata 25, Oslo.
- Norges Rederiforbund (Norwegian Shipowners' Association)coreCo-founder of NORMA Cyber along with DNK. Represents 420+ Norwegian shipping companies controlling 3,400+ vessels. NORMA Cyber co-located with Rederiforbundet in Rådhusgata 25, Oslo. Member Council leader represented in NORMA Cyber board.
Scale indicators7 records
Recent moves8 records
Expansion highlights6 records
NORMA Cyber competitors and assessment
Company assessmentBroad incumbents
- ABS (American Bureau of Shipping): Maritime classification society offering cyber safety services and notations. Overlaps with NORMA Cyber's maritime cyber advisory, particularly for IMO 2021 and IACS UR E26/E27 compliance.
- Bureau Veritas: Global classification society with a marine cyber security certification line and advisory practice. Competes indirectly with NORMA Cyber on cyber certification, pen testing, and IMO 2021 compliance support for shipping clients.
- Lloyd's Register: Maritime classification society with a digital and cyber practice. Provides cyber certification and advisory comparable to NORMA Cyber's compliance and penetration testing offerings, though without a dedicated member SOC.
- DNV (Det Norske Veritas): Major maritime classification society and a co-founder/partner of NORMA Cyber. Offers broader cyber security advisory, certification, and ISM audit services that overlap with NORMA Cyber's pen testing and compliance work, though not as a dedicated SOC.
Direct peers
- CyberOwl: UK-based maritime cybersecurity company providing vessel cyber risk monitoring and analytics. Directly comparable to NORMA Cyber's SOC and threat intelligence offerings for shipowners, focused on remote monitoring of onboard systems.
- Cydome: Maritime cybersecurity company offering endpoint and network protection specifically for ships. Competes with NORMA Cyber's SOC and OT monitoring services for shipping operators.
- Naval Dome (OTORIO): Provider of maritime OT cybersecurity, now part of OTORIO. One of the early specialist vendors of vessel OT security and a close competitor to NORMA Cyber's maritime OT monitoring and penetration testing services.
Emerging players
- Navarino: Maritime IT and communications provider serving shipowners with connectivity and cyber services. Comparable to NORMA Cyber in serving the same shipowner customer base, though via commercial SaaS rather than membership.
- Marlink: Global provider of maritime connectivity and IT services, increasingly bundling cybersecurity for shipowners. Overlaps with NORMA Cyber's managed SOC and cyber advisory offerings via a different commercial channel.
Others
- MTS-ISAC: US-based Maritime Transportation System Information Sharing and Analysis Center. A formal information-sharing partner of NORMA Cyber (signed 2021) — not a competitor, but an adjacent ecosystem player that operates in the same maritime cyber threat intelligence domain.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
NORMA Cyber social profiles
Digital presenceNORMA Cyber financial estimates
Financial estimateRevenue estimate
Valuation estimate
NORMA Cyber leadership team
Management profileNumber of profiles
Profiles15 records
NORMA Cyber funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
NORMA Cyber M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about NORMA Cyber
What does NORMA Cyber do?
NORMA Cyber delivers maritime-focused cybersecurity membership services to Nordic shipping companies, ports, terminals, shipbuilders, fisheries, and maritime vendors. Its core membership services include threat intelligence (monthly assessments, OT vulnerability alerts, MISP indicator sharing), 24/7 incident and crisis response for IT and OT systems aboard vessels and on land, external dark web monitoring, and access to a member community with conferences and Member Council governance. Add-on services include a managed Security Operations Centre (SOC) with SOAR-driven automation and AI-assisted analysis, plus penetration testing tailored to vessel and OT systems.
Is NORMA Cyber a public or private company?
NORMA Cyber is a private company. It is classified as nonprofit foundation owned and is currently operating.
When was NORMA Cyber founded?
NORMA Cyber was founded in 2020. It employs 11 to 50 people.
Where is NORMA Cyber based?
NORMA Cyber is headquartered in Oslo, Norway, in the Europe region.
How does NORMA Cyber make money?
Three revenue lines are on record. Membership Fees are the primary driver. The others are SOC Services (Add-on) and penetration Testing Services.
Who are NORMA Cyber's main competitors?
Broad incumbents on record are ABS (American Bureau of Shipping), Bureau Veritas, Lloyd's Register and DNV (Det Norske Veritas). Direct peers are CyberOwl, Cydome and Naval Dome (OTORIO). Emerging players are Navarino and Marlink. MTS-ISAC is listed as an others.
Does NORMA Cyber have an API?
No public API is recorded for NORMA Cyber.
What industry is NORMA Cyber in?
NORMA Cyber's product category is Maritime Cybersecurity Services. Its primary akta.pro industry code is TLAHANAJ, Maritime Cybersecurity & OT Security Compliance (IMO 2021, Port OT), with a secondary code of BPAKAHAN, OT/ICS & Critical Infrastructure Cybersecurity Services. Its NAICS code is 561621 and its SIC code is 7370.