BSM

BSM

Amsterdam, Netherlands

Penetration TestingOffensive SecurityDigital ForensicsIncident Response
Founded 2004Serves SMB, Public Sector
Profile last updated: August 24, 2026

About

Founded in 2004, BSM is a cybersecurity company based in Amsterdam, Netherlands working in penetration testing, offensive security, digital forensics +8 more.

BSM is a Dutch cybersecurity firm based in Amsterdam, active since 2004 and serving businesses, schools and government organisations across the Netherlands. The company offers penetration testing (network, website, application, LAN and WAN), red team versus blue team exercises, phishing simulation tests and security awareness training, information security audits including the ICCM audit and workplace audits, ISO 27001 readiness support, interim CISO services, and consultancy on security policy and risk analysis. Its cybercrime and digital forensics team provides computer and web forensics, evidence preservation for legal proceedings, and cybercrime incident support. BSM also builds and operates SIEM and log monitoring solutions for clients. The company describes itself as small and specialised, operates under an investigation licence from the Dutch Ministry of Justice and Security, and states that its phishing tests are GDPR-compliant and hosted in the Netherlands.

Location

Amsterdam, Netherlands

Founded

2004

Focus areas

penetration testingphishingsecurity awarenessdigital forensicscybercrimeISO 27001interim CISOSIEMsecurity auditred team

Languages

NL

Services & products

Security domains

Penetration TestingOffensive SecurityDigital ForensicsIncident ResponseDetection & ResponseApplication SecurityNetwork SecurityEmail SecurityEndpoint SecurityGRC & ComplianceSecurity Awareness

How they deliver

Professional ServicesConsultingTraining

Products

ICCM Audit

Security audit

Assessment of an organisation's information security maturity across five core areas, with a report and concrete improvement steps.

BSM phishing simulation platform

Phishing simulation

Web-based tool for running customised phishing tests on employees and email systems without software installation.

ClickFix test tool

Security testing

Free measurement instrument to test whether a workplace is vulnerable to ClickFix attacks.

Customers

SMBPublic Sector

Industries served

EducationGovernmentSoftware DevelopmentConstructionLegalE-commerce

Compliance & partners

Compliance frameworks

ISO 27001NEN 7510GDPRIBP

Technology partners

EnCase

Credentials & affiliations

Certifications

POB-vergunning (investigation licence)

Issued by: Ministerie van Justitie en Veiligheid