SCHUTZWERK GmbH

SCHUTZWERK GmbH is an independent, international IT security consultancy headquartered in Ulm, Germany, with a second office in Hamburg. Founded in 2002, our 30+ security consultants have completed more than 2,000 projects for clients ranging from well-known mid-sized companies tointernational corporations with high security requirements. Sector experience spans automotive, embedded and IoT, critical infrastructure, financial services and public administration.

Mastering cybersecurity from silicon to cloud, we organise our work across three service pillars.

• Assessment - penetration testing, red teaming, embedded and automotive security assessments, cloud security assessments, web and mobile application security, AI/LLM security assessments, social engineering and phishing awareness exercises, threat and risk assessments, and Cyber Resilience Act (CRA) readiness for product manufacturers.
• Consulting - security strategy, security concept development, maturity-level optimisation and security incident consulting. Our advice is methodologically transparent and grounded in published research.
• Process - information security management (ISMS) operation, ISO/IEC 27005 risk management and incident response management.

To guarantee objective advice,  SCHUTZWERK deliberately maintains no partnerships with product or solution vendors. We are an authorised CVE Numbering Authority (CNA) and certified to ISO/IEC 27001, ISO 9001 and TISAX. The team contributes to the security community through published advisories, open-source tools and academic collaborations, including BMBF-funded research projects. SCHUTZWERK does not sell products, operate SOC services or integrate systems.

We create risk transparency and build sustainable security capabilities together with our clients - and we are happy to schedule a free initial consultation to discuss how that might look for your organisation.