SagaLabs ApS Due Diligence
Run due diligence on SagaLabs ApS: check compliance and get alerts when suppliers or ownership change.
Denmark · owned by Independent (Denmark) · sagalabs.dk · 7 vendors
SagaLabs is a Danish cybersecurity company that delivers realistic, scenario-based cybersecurity training, cyber ranges, workshops, and advisory services to businesses and educational institutions. Founded in November 2023 in Aarhus by four founders with backgrounds in the Danish military cyber programme, the company applies a 'Train As You Fight' philosophy to prepare organisations for real-world cyber threats. Their offerings include hands-on incident response simulations, team-based exercises for SOC, IT, and management, and a cloud-based cyber range platform.
Resilience scores
- Digital Sovereignty: 29
- Digital Resilience: 4
- Financial Resilience: 6
Technology vendors
- Amazon Web Services (aws) — Technology — United States
- Framer B.V. — Technology — Netherlands
- Microsoft Corporation — Technology — United States
- and 4 more
Insights
Last updated 2026-11-01 · revision 13
7 direct vendors, 133 subvendors
Direct vendors by controlling owner country (sample)
- United States: 5
- Germany: 1
- Netherlands: 1
Subvendors by controlling owner country (sample)
- Sweden: 5
- Netherlands: 2
- United Kingdom: 1
Compliance
8 in-scope frameworks identified; showing 3.
ISAE 3000 (source) — No public evidence
ISAE 3000 is a standard for assurance engagements other than audits or reviews of historical financial information. It can be used for a wide range of reports, including attestations on cybersecurity controls. It is a plausible framework for SagaLabs ApS to use.
ISO 27001 (source) — No public evidence
ISO 27001 is a globally recognized standard for information security management. For a cybersecurity company like SagaLabs ApS, certification is a common way to demonstrate a commitment to information security best practices to customers and partners.
EU Cybersecurity Act — No public evidence
The EU Cybersecurity Act establishes a framework for voluntary cybersecurity certification schemes for ICT products, services, and processes. As a cybersecurity company, SagaLabs ApS may choose to certify its offerings to demonstrate a high level of security assurance.
Financials
Three-year financials
- 2025: gross profit DKK 1.27M, EBIT DKK 430K, equity DKK 393K
- 2024: gross profit DKK -27.8K, EBIT DKK -27.8K, equity DKK 58.0K
Financial Resilience Score: 6/10
SagaLabs ApS demonstrates strong relative financial health indicators in its first full operating year (FY2025), with Proff.dk rating liquidity (202.8%), return on assets (43.2%), and solvency (50.7%) all as 'Very Good'. The company turned a negative gross profit of DKK -28K in FY2024 into a positive gross profit of DKK 1.27M and net profit of DKK 335K in FY2025, with equity multiplying nearly 7x through retained earnings. This indicates genuine commercial traction and an operationally profitable business model with virtually no financial leverage. However, the absolute scale is extremely small: equity of DKK 393K and total balance of DKK 775K provide essentially no shock absorber against the loss of a major contract or hiring missteps. The company has only two years of filed accounts, no statutory audit (accounts prepared with assistance from Årsregnskabet ApS), undisclosed revenue (permitted under Danish Klasse B rules), and significant key-person concentration with only four founders and the first full-time employee hired in May 2025. Headcount has grown to 8 from an average of 2 in FY2025, implying cost pressure in FY2026. The company benefits from strong regulatory tailwinds (NIS2, DORA, CER) and a credible blue-chip Danish customer base including Forsvaret, Hjemmeværnet, and Erhvervsstyrelsen, but its 100% Denmark concentration and competitive market intensity limit resilience.
Key strengths: Turnaround to profitability in first full operating year (FY2025), Equity grew 578% YoY, funded by retained earnings, Very high solvency (50.7%) and liquidity (202.8%) ratios, Return on assets of 43.2% rated 'Very Good', Virtually no financial leverage, Blue-chip Danish customer references (Forsvaret, Hjemmeværnet, Erhvervsstyrelsen), Regulatory tailwinds from NIS2, DORA, CER compliance demand, Credible founder base from Danish Defence
Risk factors: Very small absolute scale (equity DKK 393K, balance DKK 775K), No statutory audit of financial statements, Revenue not disclosed in filings, Key-person concentration with only 4 founders, 100% geographic concentration in Denmark, Competitive crowding in Danish cybersecurity training market, Headcount growth (8 vs. 2 avg) will pressure FY2026 margins, Only two years of filed accounts available, No segment or product-level disclosure
Revenue by geography
- Denmark: 100%
Revenue by product/service
- Open / public training events: 0%
- Assumed-breach penetration testing: 0%
- Scenario-based cyber-range training: 0%
- Consulting / custom cybersecurity solutions: 0%
- Incident response, threat hunting and attack-simulation training: 0%
Workforce by country
- Denmark: 8
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.