LEVEL7 ApS Due Diligence

Run due diligence on LEVEL7 ApS: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by Baco Holding ApS (Denmark) · l7consulting.dk · 7 vendors

LEVEL7 ApS is a Danish cybersecurity and transformation consulting firm specializing in critical infrastructure protection, helping organizations meet regulatory requirements and strengthen security resilience. Their services include national security advisory, cyber leadership, governance, risk & compliance, program management, and executive cyber search. They serve clients across the Nordic region and Germany.

Resilience scores

Technology vendors

Insights

Last updated 2026-11-01 · revision 37

7 direct vendors, 127 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

6 in-scope frameworks identified; showing 3.

GDPR (source) — No public evidence

The company is established in Denmark, an EU member state, and therefore processes personal data of employees, customers, and suppliers within the scope of the GDPR.

NIS2 (source) — No public evidence

As a cybersecurity provider, the company likely falls under 'ICT service management (B2B)' or as a 'managed security service provider'. With 4 employees reported in July 2026, it is below the size-cap for automatic inclusion and would be covered only if designated by the state.

ISAE 3000 (source) — No public evidence

This is a voluntary international standard for assurance engagements on non-financial information. In Denmark, it is commonly used by data processors to provide assurance to their customers regarding GDPR compliance and IT controls.

Financials

Three-year financials

Financial Resilience Score: 6/10

LEVEL7 ApS has demonstrated consistent profitability across all four reported years (2022-2025), with EBIT margins on gross profit of 40-60%. Even in the weaker FY2025, net profit remained positive at DKK 2.13M. The equity cushion of DKK 7.03M at end-2025 is more than 3x the retained net profit, providing a comfortable buffer for a 4-person consultancy. The company benefits from a specialized, high-value positioning in National Security Advisory, Cyber Leadership, and GRC consulting, with regulatory tailwinds from NIS2, DORA, GDPR, and other mandatory EU compliance frameworks through 2026-2027. However, FY2025 saw a sharp reversal with gross profit, EBIT, and net profit roughly halving. The equity decline (DKK 11.0M to 7.03M) exceeds the DKK 2.13M profit, implying a dividend distribution of approximately DKK 6M during 2025. Headcount fell from 8 (FY2023) to 6 (FY2024) to 4 (FY2025), indicating significant structural change. Extreme key-person concentration with only 4 average employees and founder Bassil Salameh as the public face creates high dependence on a small group of senior consultants. The ~50% drop in gross profit from FY2024 to FY2025 shows exposure to the loss or delay of a few large engagements. Combined with equity depletion through distributions, these factors moderate the resilience assessment despite the historical profitability track record.

Key strengths: Consistent profitability across all four reported years (2022-2025), Strong EBIT margins on gross profit of 40-60%, Positive equity cushion of DKK 7.03M at end-2025, Specialized high-value positioning in National Security Advisory and Cyber Leadership, Product diversification into FITS SaaS compliance platform, Regulatory tailwinds from NIS2, DORA, GDPR, CER Directive compliance mandates, Favorable Danish market context (ranked world's most cyber safe nation)

Risk factors: Extreme key-person concentration with only 4 average employees, Severe FY2025 contraction - gross profit, EBIT, and net profit roughly halved, Equity depletion through estimated DKK 6M dividend distribution in 2025, Headcount reduction from 8 to 4 over two years, Competitive intensity with 134 cybersecurity consulting providers in Denmark, Revenue opacity - top-line not disclosed under class B reporting, Volatility exposure typical of small consultancies dependent on few large engagements

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report