SEC Consult

SEC Consult

SEC Consult Unternehmensberatung GmbH

Vienna, Austria

Penetration TestingOffensive SecurityIncident ResponseApplication Security
Founded 2002201-500 employeesServes Enterprise, Public Sector, Critical Infrastructure
Profile last updated: May 4, 2026

About

Founded in 2002, SEC Consult is a cybersecurity company based in Vienna, Austria working in penetration testing, offensive security, incident response +13 more.

SEC Consult is a cyber and application security consultancy founded in 2002, with offices in Austria and Germany. It provides penetration testing (including its Glass Box method), IoT and embedded systems security assessments, mobile and web application security testing, SAP security assessments, cloud and Kubernetes pentesting, DDoS stress testing, incident response through its SEC Defence service, and consulting on ISO 27001 certification, DORA, NIS2 and the EU Cyber Resilience Act. The company also runs the Vulnerability Lab research unit, publishes security advisories, and offers security training. It states it is accredited as a Qualified Body for NIS Act verification in Austria. Clients include government agencies, international organisations and companies in the private sector and critical infrastructure.

Location

Vienna, Austria

Founded

2002

Employees

201-500

Legal name

SEC Consult Unternehmensberatung GmbH

Focus areas

penetration testingglass boxIoT securitySAP securitycloud pentestingDORANIS2CRAincident responsevulnerability research

Languages

ENDE

Services & products

Security domains

Penetration TestingOffensive SecurityIncident ResponseApplication SecurityCloud SecurityIoT/Embedded SecurityNetwork SecurityIdentity & AccessMobile SecurityGRC & ComplianceData ProtectionSecurity AwarenessEndpoint SecurityOT/ICS SecurityThreat IntelligenceDetection & Response

How they deliver

Professional ServicesConsultingTraining

Products

Glass Box

Penetration testing methodology

Pentest method combining black-box testing with manual review of source code for the most safety-critical parts of an application.

SEC Defence

Incident response service

End-to-end incident management service covering preparation, emergency response, analysis and recovery after cyberattacks.

Customers

EnterprisePublic SectorCritical Infrastructure

Industries served

FinanceTelecommunicationsAutomotiveAviationIndustrial Control SystemsMedical DevicesConsumer Electronics

Compliance & partners

Compliance frameworks

DORANIS2ISO 27001Cyber Resilience Act (CRA)OWASPETSI EN 303 645IEC 62443TISAXVDA ISAKRITISDSGVO/GDPR

Technology partners

EvidenAtos Cybersecurity

Credentials & affiliations

Certifications

ISO 27001

CREST

Issued by: CREST

Awards

Great Place To Work

Great Place To Work2024Best Employer in Germany and Austria