Rethink Cyber ApS Due Diligence

Run due diligence on Rethink Cyber ApS: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by Independent (Denmark) · rethink-cyber.com · 8 vendors

Rethink Cyber ApS is a Danish cybersecurity advisory firm that provides tailored consulting services within cyber and information security, helping organisations rethink their security approach strategically, effectively, and uncompromisingly. The company serves critical sectors including finance, energy, healthcare, transport, telecommunications, and the public sector, with offices in Copenhagen (Frederiksberg) and Aarhus. Their work spans strategic cybersecurity, governance, risk management, security architecture, behavioural design, and crisis preparedness.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-13 · revision 2

8 direct vendors, 140 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

4 in-scope frameworks identified; showing 3.

SOC 2 (source) — No public evidence

GDPR (source) — No public evidence

Evidence: https://www.rethink-cyber.com/privatlivspolitik

ISO 27001 (source) — No public evidence

Financials

Three-year financials

Financial Resilience Score: 4/10

Rethink Cyber ApS is a very young Danish boutique cybersecurity advisory firm, likely founded in 2024-2025, with no publicly retrievable financial data. As an ApS in Danish accounting class B/micro, disclosure is limited and at most one annual report may have been filed. The advisory/consulting business model is inherently low capital intensity with minimal working capital requirements, which supports resilience for boutique consultancies that can typically operate profitably from year one if utilization is healthy. The company targets attractive end-markets including critical infrastructure clients in finance, energy, healthcare, public sector, telecom, and transport. These segments benefit from strong regulatory tailwinds (NIS2, DORA, GDPR) driving steady cybersecurity budgets. The company's differentiated positioning around LEGO Serious Play, co-creation methodologies, and automation across GRC/IAM/ITSM/SecOps suggests an attempt to move up-market from commoditized compliance work. However, significant risks include very small early-stage scale with limited equity buffer, unproven multi-year track record, key-person dependency typical of boutique advisory firms, single-country exposure to Denmark, and intense competition from larger Nordic and global cyber-advisory firms like Deloitte, EY, PwC, KPMG, Devoteam, Netcompany, Dubex, and Improsec. Limited public disclosure itself is a risk factor for counterparties assessing credit. The score of 4 reflects the high uncertainty inherent in an early-stage boutique with no public financial track record, despite favorable market positioning.

Key strengths: Attractive end-market focus on critical infrastructure with regulatory tailwinds (NIS2, DORA, GDPR), Low capital intensity advisory/consulting business model, Differentiated positioning with proprietary methodologies, Two-office Danish footprint (Copenhagen + Aarhus), Strong demand drivers in cybersecurity sector

Risk factors: Very small/early-stage ApS with limited equity buffer, Unproven multi-year track record, Key-person dependency typical of boutique advisory firms, Single-country exposure to Denmark only, Intense competition from Big 4 and established Nordic cyber-advisory firms, Limited public financial disclosure as ApS class B/micro, Cash burn risk if utilization drops

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report