Sciber

Sweden · owned by Independent (Sweden) · www.sciber.io · 10 vendors

Sciber is a data-driven cybersecurity company founded in 2023, offering Managed Detection & Response (MDR), Security Operations Center (SOC) services, security testing, and incident response. The company serves clients across Sweden and Denmark with 24/7 threat detection and response capabilities. It operates offices in Malmö, Stockholm, and Copenhagen.

Resilience scores

Disruption prediction

Sciber has an estimated 17% probability of disruption in the next 6 months.

7 of Sciber's 10 vendors monitored for disruptions.

Technology vendors

Insights

Last updated 2026-08-04 · revision 20

10 direct vendors, 185 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Sciber exhibits medium migration readiness. A key strength is its modern technology stack, which is largely cloud-native and incorporates advanced security concepts like Zero Trust Architecture, Secure Services Edge (SSE), and Microsegmentation. The company leverages platforms such as CrowdStrike Falcon, SentinelOne, Microsoft Sentinel, Cribl, and Axonius, indicating a foundation that is inherently more flexible and adaptable for migration to cloud environments or new architectures. Furthermore, Sciber utilizes a diverse range of technology partners, which generally reduces single-vendor lock-in for core security platforms. However, significant challenges exist. The complex and high-risk regulatory environment, including GDPR, NIS2 (Swedish and Danish), and DORA (if serving financial clients), presents major hurdles. Ensuring continuous compliance with these regulations during and after any migration effort will add substantial complexity, cost, and risk. Strict EU/EEA data residency requirements for client security telemetry further constrain migration options, limiting the choice of cloud regions and requiring robust legal frameworks (e.g., SCCs) for any international data transfers. While technology vendor diversity is beneficial, managing numerous vendor contracts and Data Processing Agreements (DPAs) with specific data residency clauses during a migration can be administratively complex. Finally, the absence of revenue data makes it impossible to assess Sciber's financial capacity to fund a significant migration initiative. The modern tech stack provides a strong base, but the regulatory and data residency constraints elevate the overall complexity and risk of migration.

Compliance

7 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

ISO 27001 is the internationally recognized standard for Information Security Management Systems (ISMS). For a cybersecurity company like Sciber that provides MDR, SOC, and security testing services, ISO 27001 certification is both commercially critical and operationally expected. Risk is High because: (1) Sciber's clients entrust it with access to their most sensitive security environments, creating a strong expectation of certified information security practices; (2) NIS2 compliance (which applies to Sciber — see above) is significantly supported by ISO 27001 certification, and many NIS2 technical measures align with ISO 27001 controls; (3) enterprise procurement processes in Sweden and Denmark routinely require ISO 27001 certification from cybersecurity vendors; (4) without ISO 27001, Sciber may face competitive disadvantage and potential client contract requirements it cannot meet; (5) as a company founded in 2023, it is possible certification has not yet been achieved, creating a gap between the security assurance Sciber provides to clients and the assurance it can demonstrate about its own operations.

Evidence: https://www.sciber.io/about-sciber/, https://www.sciber.io/services/, https://www.iso.org/standard/27001, https://www.sis.se/en/

GDPR (source) — Assessment Required

GDPR is universally applicable to Sciber AB as a Swedish-registered company (Org.nr: 559423-9401) headquartered in Malmö, Sweden, with additional offices in Stockholm and Copenhagen. Sciber explicitly acknowledges GDPR applicability in its published Privacy Policy, citing compliance with 'the General Data Protection Regulation (GDPR) and applicable Swedish laws.' As a cybersecurity Managed Detection & Response (MDR) provider, Sciber processes significant volumes of customer security telemetry, endpoint data, and potentially sensitive personal data on behalf of its clients — acting as both a Data Controller (for its own website/employee/marketing data) and a Data Processor (for client security monitoring data). The risk level is High because: (1) non-compliance fines can reach €20M or 4% of global annual turnover; (2) as a cybersecurity company, Sciber handles sensitive security event data that may contain personal information; (3) the Swedish Data Protection Authority (IMY) is an active enforcement body; (4) Sciber's MDR/SOC services involve continuous monitoring of client environments, creating ongoing data processing obligations; (5) international data transfers are acknowledged in the Privacy Policy, requiring SCCs or equivalent safeguards. While a Privacy Policy exists and GDPR is acknowledged, no independent audit or DPO appointment has been publicly confirmed, leaving full compliance status as 'Assessment Required'.

Evidence: https://www.sciber.io/privacy-policy/, https://www.sciber.io/about-sciber/, https://www.imy.se/en/, https://gdpr-info.eu/

DORA (source) — Assessment Required

DORA (EU Regulation 2022/2554, applicable from January 17, 2025) applies to financial entities in the EU and their critical ICT third-party service providers. Sciber, as a cybersecurity and MDR provider, may qualify as a 'critical ICT third-party service provider' (CTPP) if it provides ICT services to financial entities that are deemed critical by EU supervisory authorities. Risk is Medium because: (1) if any of Sciber's clients are EU financial entities (banks, insurance companies, investment firms), those clients must conduct ICT third-party risk management under DORA, which flows down to Sciber as a vendor; (2) Sciber's SOC/MDR services could be classified as critical ICT services for financial sector clients; (3) DORA requires financial entity clients to include specific contractual provisions in agreements with ICT providers, including audit rights, incident reporting, and resilience testing; (4) risk is not High because Sciber is not itself a financial entity and DORA's direct obligations on CTPPs apply only to those formally designated by ESAs.

Evidence: https://www.sciber.io/services/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R2554, https://www.esma.europa.eu/publications-and-data/interactive-single-rulebook/dora

Financials

Three-year financials

Financial Resilience Score: 6/10

Sciber is a very young Swedish cybersecurity company (founded 2023) with limited public financial history. Statutory accounts for FY2023 and FY2024 would exist via Bolagsverket but were not accessible in this research session, so revenue, EBIT, and equity figures are unverified. Despite this, qualitative signals point to a company scaling rapidly for its age: approximately 350,000 monitored endpoints under its 24/7 Nordic SOC, 65 employees in Sweden, tier-1 technology partnerships (Microsoft, CrowdStrike, Palo Alto Networks, Zscaler, SentinelOne), and recognition as a RADAR leader in customer satisfaction. The business model is anchored in recurring revenue (MDR/SOC-as-a-Service and Continuous Security Testing), which provides visibility and resilience compared to project-only work. Milestones such as achieving Microsoft Security Solutions Partner status (May 2025), joining FIRST (Dec 2025), and opening a Copenhagen office / incorporating Sciber A/S (Sep 2025) indicate operational maturation and international expansion. However, risks are meaningful: early-stage cash-flow pressure typical of people-intensive MSSPs, small scale versus Nordic competitors (Truesec, Orange Cyberdefense, Combitech), heavy geographic concentration in Sweden, likely customer concentration among a handful of large SOC contracts, and dependence on Microsoft/CrowdStrike ecosystems. Financial resilience is therefore assessed as moderate — supported by strong commercial traction but constrained by youth, scale, and lack of disclosed financials.

Key strengths: Recurring revenue model via MDR and 24/7 SOC-as-a-Service, ~350,000 monitored endpoints under management, Tier-1 technology partnerships (Microsoft, CrowdStrike, Palo Alto, Zscaler, SentinelOne), Microsoft Security Solutions Partner status (May 2025), RADAR leader in customer satisfaction, Experienced founding team of industry veterans, International expansion into Denmark (Sep 2025), Membership in FIRST incident-response community

Risk factors: Very young company (founded 2023) with limited financial history, Small scale (~65 employees) versus larger Nordic competitors, Geographic concentration in Sweden, Likely customer concentration among a few large SOC contracts, Vendor dependence on Microsoft and CrowdStrike ecosystems, Talent competition and salary inflation in Nordic cybersecurity market, People-intensive cost base ahead of ARR ramp, Financials not independently verified; minimal public disclosure, Execution risk on cross-border Denmark build-out

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report