CyberShield Due Diligence

Run due diligence on CyberShield: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by Independent (Denmark) · cybershield.dk · 6 vendors

CyberShield is an independent Danish IT security consultancy that helps small and medium-sized businesses protect their data, comply with GDPR, and reduce the risk of cyberattacks. Services include IT security advisory, vulnerability testing and audits, employee awareness training, and GDPR compliance support. The company operates as a sole consultant practice, working from frameworks such as ISO 27001, NIS2, and CIS Controls.

Resilience scores

Technology vendors

Insights

Last updated 2026-10-15 · revision 42

6 direct vendors, 128 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

6 in-scope frameworks identified; showing 3.

NIS2 (source) — No public evidence

As a cybersecurity company, CyberShield likely provides 'ICT service management' or 'digital provider' services, which are sectors covered by NIS2. Its classification as 'Essential' or 'Important' would depend on its size and specific client base.

ISAE 3000 (source) — No public evidence

This international standard for assurance engagements other than audits or reviews of historical financial information can be used for reports on cybersecurity controls or GDPR compliance, which would be relevant for a company like CyberShield.

ECCF — No public evidence

The European Cybersecurity Certification Framework (ECCF) is relevant as it aims to establish a common framework for cybersecurity certification schemes across the EU, which would apply to a Danish cybersecurity company's products and services.

Financials

Three-year financials

Financial Resilience Score: 4/10

CyberShield is a Danish sole proprietorship (enkeltmandsvirksomhed) with no obligation to publish financial statements, so revenue, EBIT, and equity are entirely undisclosed. Resilience must be assessed qualitatively. On the positive side, the business operates with a very low fixed-cost base, has no employees beyond the owner, and benefits from diversified revenue streams including consulting, vulnerability testing, software reselling (WinRAR, TSplus), and in-house tools. The owner has deep industry experience since 1991, strong credentials (ISO 27001, NIS2, CIS Controls, D-mærket), and is well-networked through the IT Security Committee, Defend Denmark, and prior NC3 cooperation. Market tailwinds are favorable given NIS2 rollout and high cyber threat levels against Danish SMEs. However, resilience is materially constrained by total key-person dependency on Henrik K. Sørensen, unlimited personal liability inherent to the sole-proprietorship form, no visible capital buffer, and an inherent revenue ceiling from the one-consultant model. The Danish cybersecurity market is competitive with large incumbents (Check Point, NNIT, Fortinet, Cisco) and numerous SME-focused boutiques. Reputation risk is acute in the sector, as illustrated by the Pays ApS CPR breach. The complete opacity of financials makes counterparty, lender, or acquirer due diligence impossible, which itself is a resilience limitation. Overall, this is a viable but fragile micro-business.

Key strengths: Very low fixed-cost base with no employees beyond owner, Diversified revenue streams (consulting, vulnerability testing, software reselling, in-house tools), Credible niche positioning aligned with ISO 27001, NIS2, D-mærket, CIS Controls, Authorised reseller of WinRAR and TSplus providing recurring license revenue, Owner has IT industry experience since 1991, Strong network via IT Security Committee, Defend Denmark, prior NC3 cooperation, Favorable macro backdrop with NIS2 rollout and high Danish cyber threat level

Risk factors: Total key-person risk - entire business depends on one individual, Unlimited personal liability as sole proprietorship, No visible capital buffer or published equity base, Revenue ceiling from one-consultant billable-hour model, Competitive intensity from large incumbents and SME boutiques, Reputation-sensitive market with tail risk from security incidents, Complete financial opacity prevents external solvency assessment

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report