River Security

River Security

River Security AS

Oslo, Norway

Penetration TestingOffensive SecurityThreat IntelligenceIncident Response24/7 SOC
Founded 2020Serves Enterprise, Critical Infrastructure, Public Sector
Profile last updated: October 30, 2026

About

Founded in 2020, River Security is a cybersecurity company based in Oslo, Norway working in penetration testing, offensive security, threat intelligence +4 more.

River Security is a European offensive security company founded in 2020 to transform penetration testing into a continuous, always-on practice. Its core service, Active Focus, combines attack surface management with human-led, change-driven penetration testing across external internet-facing IT and OT assets. The company operates an Offensive Security Operations Centre and offers incident response with 24/7 standby experts, threat intelligence, assumed breach and red team exercises, application and AI testing, and digital footprint assessments. Its clients include organisations in energy, finance, maritime and the public sector, and it supports compliance work for frameworks such as NIS2, DORA and ISO 27001. The company is headquartered in the Nordics with offices in Oslo and Stockholm, is self-owned, and reinvests profits into research and development.

Location

Oslo, Norway

Founded

2020

Legal name

River Security AS

Registration

925178810

Focus areas

penetration testingattack surface managementcontinuous penetration testingoffensive securityred teamassumed breachincident responseNIS2

Languages

ENNOSV

Services & products

Security domains

Penetration TestingOffensive SecurityThreat IntelligenceIncident ResponseApplication SecurityCloud SecurityEmail Security

How they deliver

Managed ServicesProfessional Services

Operations

Runs a 24/7 security operations centre

Products

Active Focus

Attack Surface Management and Continuous Penetration Testing

Managed service combining continuous discovery and mapping of internet-facing assets with human-led penetration testing, delivering validated findings, prioritised risks and remediation guidance.

Customers

EnterpriseCritical InfrastructurePublic Sector

Industries served

EnergyFinanceMaritime & ShippingLogistics & TransportPublic SectorRetail & ConsumerGaming & BettingLegal & Professional

Compliance & partners

Compliance frameworks

NIS2DORAISO 27001CIS ControlsCyber Resilience ActDigital Security Act

People

Management & team (2)

Other cybersecurity companies in Norway

View all