OneMore Secure AB Due Diligence

Run due diligence on OneMore Secure AB: check compliance and get alerts when suppliers or ownership change.

Sweden · owned by Independent (Sweden) · www.onemoresecure.se · 8 vendors

OneMore Secure AB is a Swedish cybersecurity company that provides an automated supply chain security platform — the 'Digital Trust Hub' — enabling organisations to assess, monitor, and manage third-party cyber risk. The platform combines vendor self-declaration questionnaires with External Attack Surface Management (EASM) scanning to deliver continuous compliance visibility against frameworks such as NIS2, DORA, GDPR, ISO 27001, and NIST. Used by over 2,000 organisations across 28 countries, it replaces manual spreadsheet-based processes with automated follow-up, vulnerability analysis, and prioritised remediation actions.

Resilience scores

Technology vendors

Insights

Last updated 2026-10-30 · revision 3

8 direct vendors, 83 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

7 in-scope frameworks identified; showing 3.

GDPR (source) — Evidence found

The company is established in Sweden, an EU member state, and its privacy policy confirms it processes personal data of individuals in Europe.

DORA (source) — Evidence found

The company identifies itself as providing a service to help clients comply with DORA, suggesting it operates as a third-party ICT service provider to the financial sector.

Evidence: https://northwave-cybersecurity.com/onemore-secure-ab-and-northwave-cyber-security-enter-strategic-partnership, https://www.onemoresecure.se/en-gb/, https://www.dlapiper.com/en-us/insights/publications/2024/07/dora-when-regulated-entities-additionally-qualify-as-ict-third-party-service-providers, https://simpliant.eu/insights/so-setzen-sie-dora-in-ihrem-unternehmen-um-teil-3, https://airia.com/blog/eu-ai-act-risk-categories-which-tier-is-your-ai-system/, https://www.dpo-consulting.com/blog/high-risk-ai-systems

ISO 27001 (source) — No public evidence

This is a voluntary but widely recognized information security standard, highly relevant for a cybersecurity company to demonstrate best practices to customers.

Financials

Three-year financials

Financial Resilience Score: 4/10

OneMore Secure AB shows strong top-line momentum typical of an early-stage SaaS business, with net sales growing roughly 10x in two years (from 584 kSEK in 2023 to 6,251 kSEK in 2025). Loss intensity is improving relative to revenue, with EBITDA loss narrowing from -4,090 kSEK to -1,581 kSEK while revenue scaled. The company has a clean credit record with no remarks or bankruptcy filings, benefits from regulatory tailwinds (NIS2, DORA, GDPR, Swedish Cybersäkerhetslag), and has an impressive reference customer base including LKAB, Vattenfall, Oatly, and Bravida. However, the resilience picture is weakened materially by the fact that equity turned negative at year-end 2025 (-643 kSEK), which under Swedish aktiebolagslagen typically triggers a mandatory control balance sheet procedure (kontrollbalansräkning). Cumulative losses after net financials over FY2023-25 are approximately -9.3 MSEK against FY2025 revenue of only 8.0 MSEK. Cash ratio (kassalikviditet) of 22.3% in 2025 is well below the 100% threshold and classified as 'unsatisfactory' by UC/Allabolag. The company is a micro-cap with only 5 employees and is dependent on continued funding and multi-year SaaS contract wins to reach breakeven. A capital raise is likely required in the near term.

Key strengths: Net sales grew ~10x in two years (584 → 6,251 kSEK), Loss margin improving: -735% (2023) → -51% (2024) → -41% (2025), Clean credit record with no remarks, debts, or bankruptcy filings, Regulatory tailwinds from NIS2, DORA, GDPR, Swedish Cybersäkerhetslag, Strong Swedish enterprise reference customers (LKAB, Vattenfall, Oatly, Bravida, NIBE), Continuous product investment with intangible assets growing from 2,586 to 4,679 kSEK

Risk factors: Negative equity at year-end 2025 (-643 kSEK), potentially triggering mandatory control balance sheet, Three consecutive years of losses with cumulative loss of ~9.3 MSEK, Thin liquidity: cash ratio of 22.3%, flagged as 'unsatisfactory', Micro-scale operations (5 employees, <10 MSEK revenue), 22% of 2025 revenue is capitalised own work (non-cash accounting income), Dependent on new funding or rapid path to breakeven, 100% male board (no gender diversity), No tax paid in 5 years consistent with persistent losses

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report