extocode

What extocode does

extocode GmbH is a German software company founded in 2023 and headquartered in Traunstein, Bavaria, that builds COD (Central Operations Dashboard), a vendor-independent IT infrastructure management platform designed to run fully on-premises inside the customer's environment. COD is a modular platform built on Angular 21, Prisma, and PostgreSQL, deployed containerized via Docker or Kubernetes/Helm, that consolidates network asset discovery, NAC with integrated PKI, multi-vendor firewall and switch management, GRC for ISO 27001/9001/22301 and BSI 200-3, monitoring, vulnerability assessment, backup, hypervisor management, OTP/2FA, TACACS+ AAA, captive portal, Ansible-based automation, and a zero-knowledge password vault (Stronghold) on a single living asset database. All modules are pre-installed in the base subscription except the optional VAS vulnerability-assessment module. The company also publishes codPass, an open-source standalone password and secrets manager on GitHub.

The platform is sold on a per-seat subscription starting at EUR 47.50 per seat per month with a 2-seat minimum, plus a tenant fee from EUR 8/month for self-hosted deployments, with a 10% discount on 36-month contracts. Go-to-market is direct enterprise field sales combined with an inside-sales demo motion (three-step process: request, alignment call, hands-on demo in the prospect's own environment), supported by content, an Academy certification program, and a five-language website (English, German, French, Spanish, Turkish).

Customers are concentrated in regulated, on-premises-mandatory verticals: KRITIS operators, municipal utilities, hospitals, mechanical engineering, food production, and IT departments/MSPs. Reported in-production scale includes 2.5M+ monitored sensors and thousands of managed switches under central NAC. The company is privately held, founder-controlled (Lukas Parzinger and Siegmund Gromotka as co-CEOs, with Drazen Savi as CTO), employs 2-10 people, has no disclosed external funding, and has shipped six major COD releases between February and July 2026.

Name

extocode

Legal name

extocode GmbH

Website

https://extoco.de

Company type

Private

Founded year

2023

Operating status

Operating

Headcount range

1–10 employees

Short description

extocode GmbH builds COD (Central Operations Dashboard), a vendor-independent, on-premises IT infrastructure management platform consolidating network, NAC, GRC, firewall, monitoring, backup, and automation for KRITIS operators, municipal utilities, hospitals, and manufacturers in DACH and Europe.

Ownership category

akta.pro rank

Product category

IT Infrastructure Management Software

NAICS

Software Publishers (51321)

SIC

Services-Prepackaged Software (7372)

akta.pro industry

PRIMARYBPAEAKAC

Platform Engineering & Internal Developer Platforms (IDP)

Business & Public Services/IT & Digital Services (Managed Services, Systems Integration)/DevOps, Platform Engineering & SRE Services

Keywords

• IT infrastructure management
• Network access control
• Governance risk compliance
• Vulnerability assessment
• Multi-vendor firewall management

Headquarters

HQ city

Traunstein

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Others

Revenue model

1. COD Platform Subscription: Subscription-based licensing for the Central Operations Dashboard platform. All modules are included in the base price except the optional VAS (Vulnerability Assessment) module. Pricing is per seat with a minimum of 2 seats, plus a Tenant Fee starting at 8 EUR/month for Self-Hosted deployments. Volume discounts available for 36-month contracts (10% discount) and very large environments (25,000+ assets, individually calculated).
2. VAS (Vulnerability Assessment) Module: Optional paid module for vulnerability scanning and risk-based prioritization. Billed as an add-on to the base COD subscription.
3. codPass (Standalone Product): Independent open-source password and secrets manager, operable standalone independently of COD. Free and open-source, downloadable from github.com/extocode/codpass. Revenue may come from support/services rather than the software itself.

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels6 records

Core offering

extocode GmbH develops and sells COD (Central Operations Dashboard), a vendor-independent, on-premises IT infrastructure management platform that unifies network discovery, Network Access Control with integrated PKI, multi-vendor firewall management, GRC/compliance (NIS2, ISO 27001), Backup, Monitoring, Vulnerability Assessment, Hypervisor, OTP/2FA, TACACS+, Captive Portal, and Ansible-based switch automation on a single living asset base. The platform is licensed as a per-seat subscription, targeting KRITIS operators, municipal utilities, hospitals, manufacturing firms, and managed service providers across the DACH region and Europe.

Product overview

extocode GmbH offers COD (Central Operations Dashboard), a vendor-independent platform that brings heterogeneous IT infrastructure together in one central dashboard. The platform follows a modular architecture where all modules are pre-installed by default, with only the VAS (Vulnerability Assessment) module as an optional paid add-on. The core COD platform integrates Network & Assets (network discovery, topology L2/L3, asset management), NAC with its own PKI (802.1X/MAC authentication, dynamic VLAN assignment), Firewall & VPN management (OPNsense, pfSense, AIMdefense, DynFi), GRC (ISO 27001, ISO 9001, ISO 22301, BSI 200-3), Monitoring, Vulnerability Assessment (VAS), Backup/Disaster Recovery, Hypervisor management (VMware vCenter/ESXi), OTP/2FA, TACACS+ (device AAA server), Captive Portal, and Automation via Ansible. COD is deployed containerized (Docker, Kubernetes/Helm) and runs fully on-premises for KRITIS and NIS2 compliance. The company also offers codPass as a standalone open-source password and secrets manager independent of COD, and Stronghold as the zero-knowledge password vault integrated into COD (available from COD 3.6).

Differentiator

Problem solved

Functional benefit

Brands

• COD (Central Operations Dashboard): Vendor-independent platform that brings IT infrastructure together in one place across vendors, making it searchable and auditable in real time. Includes modules for Network, NAC, Firewall, GRC, Monitoring, Backup, Hypervisor, OTP, Stronghold, Automation, and TACACS+.
• codPass

Products and services

• COD (Central Operations Dashboard) Vendor-independent IT infrastructure management platform that centralizes network, security, compliance, and operations across multi-vendor environments. Runs containerized on-premises (Docker, Kubernetes/Helm) and is licensed as a per-seat subscription with a minimum of 2 seats.
• Network & Assets (COD-Network) Network discovery and asset management module that automatically detects every IP-addressable device from IT through network to OT, providing L2/L3 topology visualization, documentation, and multi-vendor firewall context.
• NAC & PKI (COD-NAC) Vendor-independent Network Access Control solution based on RADIUS with 802.1X (EAP with certificates) and MAC authentication, including integrated PKI for certificate management (CA/Leaf certificates, CRL, PKCS#12 export) and dynamic VLAN assignment. Also supports read-only integration with Windows-CA environments.
• Firewall & VPN (COD-Firewall) Multi-vendor firewall and VPN management module that manages OPNsense, pfSense, AIMdefense, and DynFi from a single interface, including documentation, visualization, and reporting.
• GRC (Governance, Risk & Compliance) GRC module implementing NIS2 requirements with risk management, asset transparency, and complete auditability on living asset data, covering ISO 27001 (all 93 Annex A controls), ISO 9001, ISO 22301, and BSI 200-3 standards with versioned policies and tamper-proof audit logs.
• Monitoring (COD-Monitoring) Integrated monitoring module using fping for availability checks of firewalls and devices, with configurable check intervals, firewall throttling, and a centralized maintenance calendar; Zabbix integration added in COD 3.3.
• VAS (Vulnerability Assessment System) Optional paid module for vulnerability management that brings scans, severity distribution, remediation status, and trends to a common multi-tenant context on living COD assets, enabling risk-based prioritization of findings.
• Backup (COD-Backup) Vendor-independent backup solution for configurations of all SSH-accessible devices (switches, firewalls, servers) and MariaDB/MySQL databases, supporting SSH command, SFTP file/folder, and MariaDB dump methods with optional AES-256-CBC encryption, configurable retention, diff comparison, and SCP replication.
• Hypervisor (COD-Hypervisor) Virtual switch management module for VMware vCenter/ESXi that reads vSwitch inventories, creates/modifies/deletes port groups, manages VLAN IDs (0-4094), NIC-Teaming, and security policies, with dry-run mode and multi-host operations.
• OTP / 2FA Centralized OTP management supporting TOTP (RFC 6238) with SHA-1/256/512, 6-8 digits, and 30-second interval, with QR code or manual provisioning compatible with Google, Microsoft, and Authy apps, plus private user-bound and shared team tokens with group delegation.
• TACACS+

Quantifiable outcome

• First-level support finds devices in seconds instead of minutes (MSP consolidation case)
• +4 more outcomes

Named customers9 records

Segments6 records

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration16 records

Feature9 records

Partnerships

One partnership is on record.

• Digitales Gründerzentrum Stellwerk18minorOthersDigital startup hub in the Traunstein/Bavaria region. extocode participates in Stellwerk18 events including the Startup Festival and annual Christmas tree decoration. extocode is listed among startup members/organizations associated with the hub. The relationship appears community-based rather than commercial.

Scale indicators6 records

Recent moves1 record

Expansion highlights6 records

Direct peers

• ManageEngine (Zoho): ManageEngine offers an integrated IT management suite spanning network monitoring, firewall log analysis, password management, IT asset management, and compliance. Like extocode, it consolidates heterogeneous infrastructure tooling into a unified platform, though ManageEngine is broader and primarily cloud/SaaS-delivered versus COD's on-premises focus.
• Infoblox: Infoblox provides network services platforms including DDI (DNS/DHCP/IPAM), Network Access Control, and threat detection. Its multi-vendor network visibility and NAC capabilities directly overlap with COD-Network and COD-NAC, and it similarly serves regulated enterprise and service provider customers.
• Fortinet (FortiNAC): FortiNAC delivers network access control with device profiling, dynamic VLAN assignment, and integrated security fabric integration. It is the most direct commercial competitor to COD-NAC, though Fortinet is a single-vendor suite whereas extocode emphasizes vendor independence.
• Aruba ClearPass (HPE): Aruba ClearPass is an enterprise NAC platform with policy management, 802.1X authentication, and posture assessment. It is a primary competitor in the same NAC category extocode targets, though it is typically deployed alongside HPE Aruba networking infrastructure rather than as vendor-independent.
• Device42 (Freshworks): Device42 provides IT asset management, network discovery, and CMDB capabilities with automatic device detection. It directly parallels COD-Network's living asset base concept and addresses the same documentation/visibility pain points for multi-vendor IT environments.
• Lansweeper: Lansweeper offers agentless IT asset discovery and network inventory across heterogeneous environments. Its asset intelligence capabilities overlap with COD-Network, and both vendors target mid-market and enterprise IT teams needing a single source of truth for their infrastructure.
• NinjaOne: NinjaOne delivers an automated endpoint and IT management platform targeting MSPs and IT departments. While more endpoint-focused than COD, it shares the unified-platform philosophy and serves a similar horizontal IT operations buyer, including European MSPs managing heterogeneous environments.

Emerging players

• PacketFence: PacketFence is an open-source NAC solution explicitly referenced in COD's integration documentation as an alternative to COD-NAC. It targets the same regulated, cost-sensitive European buyers with similar RADIUS/802.1X capabilities and represents the most direct open-source competitive threat.

Broad incumbents

• Cisco (Catalyst Center / ISE): Cisco's Identity Services Engine (NAC) and Catalyst Center (network management) compete with COD-NAC and COD-Network, but as part of a much broader single-vendor portfolio. Customers choosing Cisco typically trade vendor independence for unified support and procurement simplicity.
• ServiceNow: ServiceNow's ITOM, CMDB, and GRC modules overlap with COD's compliance, asset, and operational governance capabilities. ServiceNow is a much larger platform player with established enterprise traction, but extocode competes favorably on price, on-premises deployment, and KRITIS-specific German market fit.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/extocode/codpass
• LinkedInlinkedin.com/company/extocode

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about extocode