Moxso Due Diligence

Run due diligence on Moxso: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by Independent (Denmark) · moxso.com · 22 vendors

Moxso is a Danish cybersecurity company specializing in phishing simulations and dynamic security awareness training. Their platform delivers continuous phishing simulation campaigns combined with skill-based, individualized training to help organizations improve their cyber hygiene. The solution is designed to reduce human-related security risks by educating employees through targeted, adaptive learning experiences.

Resilience scores

Technology vendors

Services catalogue

3 services in catalogue across 2 categories; runs on 22 sub-vendors.

Insights

Last updated 2026-09-13 · revision 31

22 direct vendors, 249 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

8 in-scope frameworks identified; showing 3.

SOC 2 (source) — No public evidence

Evidence: https://trust.moxso.com/, https://moxso.com, https://moxso.com/legal/privacy-policy

CPRA — Evidence found

Evidence: https://moxso.com/legal/privacy-policy, https://cppa.ca.gov/, https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.100

NIS2 (source) — No public evidence

Evidence: https://moxso.com, https://moxso.com/about, https://www.retsinformation.dk/eli/lta/2024/639, https://www.cfcs.dk/en/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555

Financials

Three-year financials

Financial Resilience Score: 5/10

Moxso ApS is a young Copenhagen-based cybersecurity SaaS company (registered circa 2021 based on CVR numbering) operating in the human risk management space. The actual financial figures (revenue, EBIT, equity) could not be retrieved from Danish authoritative sources (CVR/virk.dk, Erhvervsstyrelsen) or aggregators (Proff.dk, Bizzy.dk) during the research session, so a precise resilience score cannot be anchored in filed accounts. As a small ApS, the company likely files abbreviated accounts under regnskabsklasse B, meaning revenue may not even be disclosed publicly—only gross profit (bruttofortjeneste). Qualitative strengths supporting resilience include a credible Danish enterprise customer base (Bygma, Movia, Seges, NRGi, Aarsleff, Ganni, Whiteaway Group, and others), ISO 27001 certification, EU/GDPR-compliant hosting, and a TDC 2025 cybersecurity award. These provide market credibility and suggest recurring SaaS revenue streams. However, as an early-stage company, Moxso likely has limited equity cushion and may still be investing ahead of revenue with potentially negative EBIT. Customer concentration in a single small market (Denmark) and heavy competition from larger vendors (KnowBe4, Hoxhunt, CultureAI, Cyberpilot, Proofpoint, Mimecast) create material risks. A mid-range score reflects the balance between credible traction signals and unverified financial position typical of a Series-seed/Series-A stage startup.

Key strengths: Credible Danish enterprise customer base (Bygma, Movia, Seges, NRGi, Aarsleff, Ganni, Whiteaway Group), ISO 27001 certification and EU/GDPR-compliant hosting, TDC 2025 cybersecurity award recognition, Product positioning aligned with growing SBCP (Security Behavior and Culture Programs) segment, SaaS subscription model providing recurring revenue predictability

Risk factors: Small, young ApS with likely limited equity cushion, Probable negative EBIT as an early-stage SaaS investing ahead of revenue, Customer concentration in Danish market exposes to single-market risk, Crowded competitive field with larger incumbents (KnowBe4, Hoxhunt, CultureAI, Cyberpilot, Proofpoint, Mimecast), Limited external financial visibility due to ApS abbreviated filing structure, Actual financial figures could not be verified from CVR filings

Revenue by geography

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report