AMATAS

AMATAS

Sofia, Bulgaria

Penetration TestingOffensive SecurityManaged SecurityDetection & Response24/7 SOC
Serves Enterprise, SMB
Profile last updated: August 14, 2026

About

AMATAS is a cybersecurity company based in Sofia, Bulgaria working in penetration testing, offensive security, managed security +6 more.

AMATAS is a cybersecurity company headquartered in Sofia, Bulgaria. It provides penetration testing services in Essential, Elite, and Continuous tiers, including web application, infrastructure, and WAF testing, with CREST-accredited testers delivering expert-led assessments. Its wider portfolio includes managed detection and response (Managed XDR and MDR) with 24/7 threat monitoring, virtual CISO services, virtual DPO and privacy services, managed IT operations, secure code review, and security awareness. The company supports customers with compliance-oriented testing and reporting aligned with frameworks such as ISO 27001, DORA, NIS2, GDPR, and PCI DSS. Its continuous testing offering is delivered via the Plainsea platform. AMATAS also runs a reseller and referral partner programme.

Location

Sofia, Bulgaria

Focus areas

penetration testingCRESTmanaged XDRvirtual CISOcontinuous testingcompliance

Languages

EN

Services & products

Security domains

Penetration TestingOffensive SecurityManaged SecurityDetection & ResponseIncident ResponseGRC & ComplianceApplication SecuritySecurity AwarenessData Protection

How they deliver

Managed ServicesProfessional ServicesConsulting

Operations

Runs a 24/7 security operations centre

Products

Plainsea

Penetration testing platform

AI-driven continuous testing and validation platform supporting reporting, tracking, and security program management.

Customers

EnterpriseSMB

Industries served

FintechFinancial ServicesBankingCourier and Logistics

Compliance & partners

Compliance frameworks

ISO 27001DORANIS2GDPRSOC 2HIPAAPCI DSSCISNIST

Credentials & affiliations

Certifications

CREST Penetration Testing Accreditation

Issued by: CREST

CREST Offensive Vulnerability Scanning Accreditation

Issued by: CREST

ISO/IEC 27001

ISO 9001

ISO/IEC 20000

People

Management & team (4)

Other cybersecurity companies in Bulgaria

View all