AFINE

AFINE

AFINE sp. z o.o.

Warsaw, Mazowieckie, Poland

Penetration TestingOffensive SecurityApplication SecurityCloud Security
Founded 201411-50 employeesServes Enterprise, Critical Infrastructure
Profile last updated: May 6, 2026

About

Founded in 2014, AFINE is a cybersecurity company based in Warsaw, Poland working in penetration testing, offensive security, application security +5 more.

AFINE is an offensive security firm based in Warsaw, Poland, providing penetration testing, red teaming, security research and threat-led penetration testing (TLPT) under DORA and TIBER-EU. Its services target banking, fintech, healthcare, critical infrastructure and industrial (OT/ICS) organisations, covering core banking systems, payment platforms, EHR and medical device environments, SCADA and cloud/Active Directory environments. The company reports having published over 150 CVEs in enterprise software, including products from SAP, Microsoft, CyberArk, Palo Alto Networks, F5 and IBM. Its deliverables include technical reports with exploitation details and CVSS-based prioritisation, executive summaries for leadership, and red team detection and response assessments. AFINE states it focuses exclusively on offensive security and holds ISO 27001 certification. It also created the DASVS desktop application security standard. Clients cited on its website include banks and enterprises in Poland and abroad. The company operates in English and Polish and serves clients in the United States, Germany, Sweden, Singapore, the United Kingdom, the United Arab Emirates and across Europe.

Location

Warsaw, Poland

Founded

2014

Employees

11-50

Company type

Limited company

Legal name

AFINE sp. z o.o.

Registration

KRS 0000584351

VAT number

PL5223043871

Focus areas

penetration testingred teamingoffensive securityvulnerability researchCVE discoveryTLPTDORATIBER-EUOT/ICS securityapplication securitycloud securityActive Directory security

Languages

ENPL

Services & products

Security domains

Penetration TestingOffensive SecurityApplication SecurityCloud SecurityIdentity & AccessNetwork SecurityOT/ICS SecurityThreat Intelligence

How they deliver

Professional Services

Products

DASVS

Security standard

Desktop Application Security Verification Standard, a security framework with testing requirements for Windows, macOS and Linux desktop applications, created by AFINE.

Customers

EnterpriseCritical Infrastructure

Industries served

BankingFintechFinancial ServicesHealthcareCritical InfrastructureEnergyManufacturing

Compliance & partners

Compliance frameworks

DORATIBER-EUPCI DSSSOC 2ISO 27001NESAFCAHIPAA

Credentials & affiliations

Certifications

ISO 27001

People

Management & team (6)

+ 2 more

Other cybersecurity companies in Poland

View all