Pointsharp AB Due Diligence

Run due diligence on Pointsharp AB: check compliance and get alerts when suppliers or ownership change.

Sweden · owned by Main Capital Partners (Netherlands) · www.pointsharp.com · 9 vendors

Pointsharp is a European cybersecurity company headquartered in Stockholm, Sweden, that provides advanced Multi-Factor Authentication (MFA), Identity and Access Management (IAM), and Secure Information Exchange solutions. The company serves large enterprise organizations and governmental institutions across sectors such as finance, defense, and government, supporting on-premises, cloud, and hybrid infrastructures. Founded in 2006, Pointsharp has grown through acquisitions including SecMaker, Cryptshare, SIVIS, and Vemendo, and employs approximately 200 people with offices in Sweden, Germany, Denmark, the Netherlands, and Switzerland.

Resilience scores

Technology vendors

Insights

Last updated 2026-04-13 · revision 2

9 direct vendors, 134 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

5 in-scope frameworks identified; showing 3.

SOC 2 (source) — No public evidence

Evidence: https://www.pointsharp.com/en/secure-cloud

GDPR (source) — Evidence found

Evidence: https://www.pointsharp.com/en/privacy-notice, https://www.pointsharp.com/en/certifications

ISO 27001 (source) — No public evidence

Evidence: https://www.pointsharp.com/en/certifications

Financials

Three-year financials

Financial Resilience Score: 6/10

Pointsharp AB operates in a structurally attractive and high-growth segment of the cybersecurity market — Identity and Access Management (IAM), Identity Governance & Administration (IGA), PKI, and Secure Information Exchange. The company was explicitly described as profitable and growing autonomously at the time of Main Capital's acquisition in November 2020, indicating a sound underlying business model prior to the PE-backed expansion phase. Its software and SaaS-oriented product portfolio is consistent with high gross margins and recurring, predictable revenue streams, which are hallmarks of financial resilience in the software sector. Strong regulatory tailwinds from EU mandates including NIS2 (October 2024), DORA (January 2025), eIDAS 2, and the Cyber Resilience Act create durable structural demand for exactly the solutions Pointsharp provides, reducing the risk of revenue cyclicality. However, the company's financial resilience is materially constrained by a lack of public financial transparency. No audited revenue, EBIT, equity, or leverage figures are available from accessible sources, making it impossible to independently verify profitability, debt serviceability, or balance sheet strength. PE-backed buy-and-build strategies of the type pursued by Main Capital typically involve acquisition financing that introduces leverage onto the consolidated balance sheet, and the interest burden associated with four acquisitions completed between 2021 and 2025 is entirely unknown. Additionally, the rapid pace of M&A — four deals in approximately four years across two countries and multiple product stacks — creates meaningful integration risk that could weigh on margins and management bandwidth. The company's customer base in defense, finance, industrial, and government sectors provides high switching costs and long contract cycles, supporting revenue retention. Its 'Made in Europe' positioning is a genuine differentiator for data-sovereignty-sensitive public-sector and regulated-industry clients. With approximately 200 employees and a multi-country footprint, Pointsharp is a credible mid-market player, though it remains small relative to global IAM incumbents such as Microsoft Entra, Okta, and CyberArk, which limits pricing power and R&D scale. The PE ownership cycle also introduces exit-timing uncertainty, with a potential exit window estimated at 2024–2027 based on Main Capital's typical hold period.

Key strengths: Recurring software/SaaS revenue model with high gross margin characteristics, Confirmed organic profitability at time of PE entry in November 2020, Strong regulatory tailwinds: NIS2, DORA, eIDAS 2, Cyber Resilience Act driving structural demand, High switching costs and long contract cycles in defense, finance, government, and industrial customer base, PE backing from Main Capital Partners (~€1B AUM) providing acquisition capital and strategic support, Diversified product portfolio post-acquisitions covering IAM, IGA, PKI, and Secure Information Exchange, 'Made in Europe' data sovereignty positioning as competitive differentiator for regulated sectors, Approximately 200 employees across Sweden, Germany, Netherlands, and Denmark

Risk factors: Financial leverage and debt load entirely unknown — PE-backed serial acquisitions typically carry significant acquisition debt, No public financial statements accessible — revenue, EBIT, equity, and margins cannot be independently verified, Integration risk from four acquisitions (2021–2025) across two countries and multiple product stacks, Likely large goodwill and intangible asset balances on balance sheet; impairment risk unquantifiable, Small absolute scale (~200 employees) relative to global IAM competitors limits R&D and sales leverage, PE exit timing uncertainty (estimated 2024–2027 window) could affect strategy and investment levels, No country-level or product-level revenue breakdown available to assess concentration risk, Multi-currency exposure across SEK, EUR, and DKK, though largely intra-European

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report