Retest Security ApS Due Diligence

Run due diligence on Retest Security ApS: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by Independent (Denmark) · www.retest.dk · 9 vendors

Retest Security ApS is a Danish-owned IT security testing and analysis company specializing in vulnerability scanning, penetration testing, and security advisory services. The company offers a broad range of services including web application pentests, red team exercises, cloud security reviews, and DevSecOps consulting for organizations across all industries. Their approach is based on recognized standards such as OWASP, ISO 27XXX, PTES, and NIST, with a focus on independent and technically in-depth security assessments.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 9 sub-vendors.

Insights

Last updated 2026-09-13 · revision 7

9 direct vendors, 142 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

3 in-scope frameworks identified; showing 3.

GDPR (source) — No public evidence

Evidence: https://retest.dk/privatlivspolitik/

SOC 2 (source) — No public evidence

ISO 27001 (source) — No public evidence

Financials

Three-year financials

Financial Resilience Score: 6/10

Retest Security ApS is a young Danish cybersecurity boutique (founded ~2019) operating in a sector with strong tailwinds from NIS2 regulatory implementation in Denmark and the EU. The company has developed a portfolio of subscription-based services (ReScan X, Ongoing Assume Breach, Ongoing Web Pentest) which provides some recurring revenue predictability and improves cash-flow stability compared to pure project-based consulting. Its specialist independent positioning, recognized affiliation with the Danish National Coordination Center for Cyber Security (NCC-DK), and a diverse mix of public sector and private commercial clients further strengthen its market standing. However, as a small private ApS, the company has a limited capital buffer and is vulnerable to key-person risk, particularly given the scarcity and cost of cybersecurity talent in Denmark. Geographic concentration is essentially 100% Denmark, exposing the firm to a single domestic economy. The Danish cybersecurity market is crowded with larger competitors (Dubex, Improsec, FortConsult/NCC Group, Truesec, Globeteam), and automation trends in PtaaS may compress margins on commodity scanning. Specific financial figures (revenue, EBIT, equity) could not be verified from primary sources in this session, limiting the precision of this resilience assessment.

Key strengths: NIS2 regulatory tailwinds driving mandatory pentest demand, Recurring subscription revenue model (ReScan X, Ongoing Assume Breach, Ongoing Web Pentest), Recognized affiliation with NCC-DK, Diverse client base across public sector (municipalities) and private commercial customers, Independent pure-play testing firm positioning (no reseller conflicts), Continued hiring and expanding service portfolio (LLM/AI Pentest, Threat Modelling)

Risk factors: Limited capital buffer typical of small ApS structures, Key-person/founder dependency on senior pentesters, Geographic concentration ~100% in Denmark, Crowded competitive landscape in Danish cybersecurity, Margin pressure from PtaaS automation on commodity scanning, Cybersecurity talent scarcity and cost in Denmark

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report