cyberxpert

What cyberxpert does

CyberXpert is a privately held Belgian cybersecurity services firm founded in 2009 and registered as CyberXpert BV, headquartered in Schoten with a second office in Mont-Saint-Guibert. The company delivers a 360-degree cybersecurity offering to public and private sector organizations across Belgium and Luxembourg, organized into nine core services: security audits, ISO 27001/27002/27005 audit and implementation, penetration testing (including Black Box, White Box, phishing, and wifi), Microsoft 365 security audits, managed services (vulnerability scanning, NDR, EDR/XDR, and SOC-as-a-Service delivered 24/7), IT project management, CISO-as-a-Service, Cyber SOC strategy, and cyber incident response. These are complemented by dedicated compliance practices for NIS2 and GDPR, the latter leveraging the Dastra automated compliance management platform.

The firm's technology stack is services-led rather than product-led. CyberXpert builds no disclosed proprietary platforms; instead, it acts as both an advisory consultancy and a regional distributor for European third-party cybersecurity solutions, including Dastra (GDPR compliance), Wallix (PAM), Gatewatcher (NDR), Pradeo (mobile security), Trustbuilder and Ilex International (IAM), PrimX (endpoint encryption), Vade (email security), Oodrive (secure file sharing), and Snowpack (digital asset invisibility). Since 2022 CyberXpert has been a member of Hexatrust, describing itself as one of the largest Hexatrust partners in Belgium and Luxembourg, distributing more than 10 Hexatrust solutions and reinforcing a positioning around European sovereign cybersecurity alternatives to US vendors.

CyberXpert's revenue model is professional services plus solution resale. Direct enterprise sales and partner referrals drive engagement across public and private sector clients in the Belux region, with no publicly disclosed pricing or contract structures. Marketing is conducted through the multilingual corporate website (French, Dutch, English), industry events (notably Cybersec 2024 Brussels and Lunch & Learn sessions on industrial cybersecurity), and the Hexatrust partner network. The firm has no disclosed external funding, no parent company, and limited public ownership information, consistent with an independently operated SMB consultancy.

Name

cyberxpert

Legal name

CyberXpert BV

Website

https://cyberxpert.be

Company type

Private

Founded year

2009

Operating status

Operating

Headcount range

1–10 employees

Short description

CyberXpert is a Belgian cybersecurity services firm providing security audits, penetration testing, managed security, CISO-as-a-Service, and NIS2/GDPR compliance to public and private sector clients across Belgium and Luxembourg, distributing European sovereign security solutions via its Hexatrust partnership.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (54151), Custom Computer Programming Services (541511), Computer Facilities Management Services (541513)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)

akta.pro secondary industries

Cybersecurity (General) (EDAOAIAB), Penetration Testing, Red Team & Ethical Hacking (EDAOAIAH)

Keywords

• Cybersecurity consulting
• Penetration testing
• Managed security services
• Compliance advisory
• Incident response

Headquarters

HQ city

Schoten

HQ country

Belgium

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Professional Services: Cybersecurity consulting and advisory services including CISO as a Service, project management, and security audits.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels3 records

Core offering

CyberXpert is a Belgian cybersecurity services company that delivers security audits, penetration testing, ISO 27001 implementation, managed security services (SOC, EDR/XDR, NDR), CISO-as-a-Service, and cyber incident response for IT and OT environments. The firm also distributes third-party European security solutions and supports GDPR/NIS2 compliance for public and private sector clients in Belgium and Luxembourg.

Product overview

CyberXpert is a Belgian cybersecurity services company operating across the public and private sectors in Belgium and Luxembourg. The company offers a portfolio of professional security services (audits, penetration testing, managed services, CISO advisory, incident response, GDPR/NIS2 compliance, and project management) combined with distributed third-party security solutions. Their service offerings are organized into nine main categories: Security Audit, ISO Audit and Implementation, Penetration Testing, O365 Security Audit, Managed Services, Project Management, CISO as a Service, Cyber SOC Strategy, and Cyber Incident Response. These are complemented by a solutions portfolio covering data security, email security, endpoint security, network security, identity and access management, GDPR compliance tools, and security awareness training. The company also provides application development services through a nearshoring model. CyberXpert acts as a distributor for European cybersecurity solutions including Dastra (GDPR compliance), Trustbuilder (authentication), and various endpoint/network security tools. The company is a member of Hexatrust, a collective of European cybersecurity, cloud, and digital trust companies.

Differentiator

Problem solved

Functional benefit

Products and services

• Security Audit Services Security audits and vulnerability assessments for public and private sector organizations based on international standards such as ISO, delivering reports on strengths, weaknesses, and actionable improvement plans.
• Penetration Testing Intrusion/penetration testing services (pentests) for verifying effectiveness of security processes and protections on internal and external assets, including Black Box, White Box, phishing, and wifi testing methodologies.
• ISO Audit and Implementation ISO 27001/27002/27005 gap analysis, certification preparation, and standard implementation services ranging from identifying improvement areas to full certification support.
• Managed Security Services 24/7 security management of IT and OT environments including vulnerability scanning as a service, NDR as a service, EDR/XDR as a service, and SOC as a service.
• CISO as a Service Virtual Chief Information Security Officer services where certified CISOs assist clients in defining security strategies and policies based on ISO 27001 standards.
• Cyber SOC Strategy Managed security project guidance from conception to completion, helping clients design and implement security services that meet their specific needs.
• Cyber Incident Response Cyber resilience policy implementation with action plans for responding to attacks including phishing and ransomware, with teams supporting rapid response to cyber-attacks.
• O365/Microsoft 365 Security Audit Security audits for Microsoft 365 environments covering Exchange, SharePoint, OneDrive, and Azure perimeters, addressing security policies required for M365 migrations.
• NIS2 Compliance Services Compliance services for the NIS2 directive, including gap analysis, maturity assessment, and implementation of required measures for essential and important service operators.
• GDPR Compliance Services GDPR compliance services including implementation, legal advice, cookie policy management, data processing policy, legal representation (art. 27), and DPO as a service, leveraging the Dastra compliance management platform.
• Project Management IT project management services combining project management methodologies (ITIL, Prince2) with solution-specific knowledge for implementation projects.
• Application Development / Nearshoring Custom application development services using a nearshoring model, offering cost reduction, specialized expertise access, flexibility, scalability, and innovation through agile methodology with tailored teams.
• Cloud Migration Services Cloud migration consulting services bundled with broader IT infrastructure and security transformation offerings.
• Data Security Solutions Data protection solutions including encryption for office environments (SharePoint, O365, OneDrive), anonymization of personal data, secure file sharing, and authentication services.
• Email Security Solutions Email security services providing protection against phishing, spearphishing, malware, and ransomware, with automatic encryption for emails and attachments integrated in Microsoft 365.
• Endpoint Security Solutions Endpoint and terminal protection services including EDR (Endpoint Detection & Response), XDR (Extended Detection & Response), mobile fleet security, mobile application security audits, and hard disk encryption.
• Network and Asset Security Solutions Network security services including NDR (Network Detection & Response) for real-time 24/7 network traffic visibility, vulnerability scanning, Pentest as a Service (PTaaS), and DMARC/Secure DNS for brand protection.
• Identity and Access Management Solutions IAM solutions including identity governance, Privileged Access Management (PAM), and strong 2FA mobile authentication for securing VPN, web, and cloud applications.
• Security Awareness and Training Security awareness programs including vulnerability audits in real phishing situations, learning through action, automated phishing campaigns, and cyber alert button services.

Segments2 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

Partnerships

One partnership is on record.

• HexatrustcoreStrategic or Co-development PartnerCyberXpert is a member of Hexatrust, one of the largest Hexatrust partners in Belgium and Luxembourg. Hexatrust is a collective of entrepreneurs and industrial players committed to promoting a new European digital ambition in cybersecurity, cloud, and trusted digital solutions. CyberXpert distributes more than 10 Hexatrust solutions.

Scale indicators2 records

Recent moves5 records

Expansion highlights6 records

Direct peers

• NVISO Security: Belgian-headquartered cybersecurity services firm offering security assessments, penetration testing, managed security services and incident response across Benelux and DACH. Closest direct peer: same geography, same service portfolio, same customer segments.
• Secutec: Belgian cybersecurity company combining managed detection & response, security audits and GDPR/NIS2 advisory for SMEs and mid-market in Belux. Highly comparable on regional focus, service mix and target customer profile.
• Davinsi Labs: Belgian cybersecurity consultancy delivering advisory, integration and managed security services to enterprise and public-sector clients. Comparable on service scope and Belux public/private customer focus.
• Toreon: Belgian cybersecurity consultancy focused on application security, threat modelling, secure software development and security training. Overlaps with CyberXpert on penetration testing, ISO consulting and security awareness offerings.
• Approach Cyber: Belgian cybersecurity specialist (Approach group) offering managed security services, compliance and advisory. Comparable Belux-headquartered competitor targeting similar mid-market and public-sector accounts.

Broad incumbents

• Orange Cyberdefense: European cybersecurity arm of Orange, providing managed security services, consulting and incident response across multiple markets including Belgium/Luxembourg. Overlaps with CyberXpert's managed SOC and compliance offerings but at significantly greater scale.
• Capgemini Cybersecurity Services: Global consulting firm with a dedicated cybersecurity practice covering advisory, compliance (NIS2/GDPR/ISO), managed security and incident response. Competes for the same large Belux enterprise and public-sector contracts.
• Thales Cyber Solutions: European defence and cybersecurity incumbent offering managed detection, consulting and critical-infrastructure protection. Comparable in OT/IT security and NIS2-grade compliance work, with much broader portfolio and deeper bench.
• Sopra Steria Cybersecurity: European IT services group with cybersecurity consulting, compliance and managed security offerings active in Belux public sector. Competes for enterprise NIS2/GDPR programmes.

Regional players

• Kudelski Security: European (Swiss-headquartered) cybersecurity services firm delivering managed security, advisory and incident response. Comparable service mix and target enterprise/government customers, with a different home geography but overlapping Benelux accounts.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/cyberxpert

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about cyberxpert