Security Tech Space Due Diligence
Run due diligence on Security Tech Space: check compliance and get alerts when suppliers or ownership change.
Denmark · owned by Independent (Denmark) · securitytechspace.dk · 5 vendors
Security Tech Space is a Danish national strategic cybersecurity initiative and knowledge centre based in Aarhus, founded by Alexandra Instituttet, INCUBA, Via University College, Aarhus Municipality, and Aarhus University. It operates a consortium of approximately 80 organisations and companies with the goal of strengthening Denmark's digital defence through research, innovation, talent development, and business collaboration. Its focus areas include an innovation lab for cybersecurity startups, matchmaking between students and companies, and knowledge/advisory services including a municipal cybershield and SMV:CERT.
Resilience scores
- Digital Sovereignty: 40
- Digital Resilience: 4
- Financial Resilience: 6
Technology vendors
- Cookiebot (Cybot A/S) — Technology — Denmark
- Elementor Ltd. — Technology — Israel
- Microsoft Corporation — Technology — United States
- and 2 more
Insights
Last updated 2026-09-14 · revision 7
5 direct vendors, 101 subvendors
Direct vendors by controlling owner country (sample)
- Belgium: 1
- Denmark: 1
- United States: 2
Subvendors by controlling owner country (sample)
- India: 1
- Switzerland: 1
- Sweden: 2
Compliance
6 in-scope frameworks identified; showing 3.
DORA (source) — No public evidence
It is unlikely that the Digital Operational Resilience Act applies directly, as the consortium is not a financial entity. However, if it provides critical ICT services to financial entities within its consortium, it could be indirectly impacted.
Evidence: https://learn.microsoft.com/en-us/compliance/dora/dora-what-is-dora, https://www.dlapiper.com/en-us/insights/publications/2024/07/dora-when-regulated-entities-additionally-qualify-as-ict-third-party-service-providers, https://www.morganlewis.com/blogs/sourcingatmorganlewis/2025/01/dora-european-commission-clarifies-scope-of-ict-services, https://advisera.com/articles/dora-compliance-it-service-providers/, https://sts.ly/ar/products/, https://www.glocertinternational.com/resources/guides/dora-applicability-and-in-scope-entities/
Danish DNS — No public evidence
Applicability depends on whether the consortium operates online platforms that fall under the definition of intermediary services. Given its collaborative nature, it might host forums or other platforms for its members.
Evidence: https://sts.ly/ar/products/, https://en.digst.dk/about-us/organisation/division-for-digital-regulation-and-supervision/, https://en.digst.dk/digital-governance/nis-2/are-you-covered-by-the-danish-nis-2-law/
NIS2 (source) — No public evidence
Applicability is uncertain. As a cybersecurity knowledge center, it could be considered an 'Important Entity' under the 'digital providers' category. However, its status as a consortium and its size (employee count and turnover are unknown) require further assessment.
Financials
Three-year financials
- 2025:
- 2024:
- 2023:
Financial Resilience Score: 6/10
Security Tech Space is a Danish Forening (association/non-profit) established on 29 August 2023, not a commercial vendor. As a result, no annual financial statements are publicly available on CVR/Virk, Proff.dk or ErhvervPlus, and traditional financial resilience metrics (revenue, EBIT, equity) cannot be assessed. The organisation's financial sustainability instead rests on grant funding, in-kind partner contributions and public-sector support. On the strength side, the consortium has a diversified and credible funding base: a DKK 4.8M cash grant from Salling Fondene, approximately DKK 33.5M in donated services from ~23 Danish cybersecurity companies, plus operational support from Aarhus Municipality, Industriens Fond, Aarhus University, the Alexandra Institute and INCUBA A/S. Membership has more than doubled from 35 to 80+ partner organisations, and governance has been strengthened by the appointment of Jakob Ellemann-Jensen as chairperson in May 2026. On the risk side, the entity is highly dependent on continued renewal of grants and in-kind contributions, has no independent commercial revenue stream, is very young (less than 3 years old), and outsources critical finance/communications functions to the Alexandra Institute. The absence of any public financial disclosure prevents external verification of liquidity, solvency or cost structure, which caps confidence in the resilience assessment.
Key strengths: Diversified funding base across municipal, foundation and industry sources, DKK 4.8M grant from Salling Fondene, DKK 33.5M in donated services from ~23 Danish cybersecurity companies, Institutional backing from Aarhus University, Alexandra Institute, INCUBA A/S and Aarhus Municipality, Broad consortium of 80+ partner organisations (grown from 35), High-profile governance under chair Jakob Ellemann-Jensen, Strategic tailwind from rising Danish focus on cyber and defence
Risk factors: Complete dependency on grants and in-kind donor contributions, No public financial disclosure — solvency and liquidity cannot be verified, Very young entity (established August 2023, limited track record), Not a revenue-generating business — cannot grow out of a funding shortfall, Finance and communications functions dependent on the Alexandra Institute, Vulnerability to non-renewal of municipal appropriations or foundation grants
Revenue by geography
- Denmark: 100%
Workforce by country
- Denmark: 9
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.