STYX Consulting Due Diligence

Run due diligence on STYX Consulting: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by Kærsgaard Theede Holding ApS (Denmark) · styx.consulting · 6 vendors

STYX Consulting is a Danish cybersecurity firm operating under the tagline 'Cybersecurity by Humans,' offering services in security insight, advisory, and technical cybersecurity solutions. The company emphasises a human-centred approach to security, tailoring its work to the people and businesses it protects. It is headquartered in Kongens Lyngby, Denmark, and is registered under CVR number 44796082.

Resilience scores

Technology vendors

Insights

Last updated 2026-10-30 · revision 2

6 direct vendors, 97 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

8 in-scope frameworks identified; showing 3.

GDPR (source) — No public evidence

The company is established in Denmark, an EU member state, making it subject to the General Data Protection Regulation for all its processing of personal data, including that of employees, customers, and suppliers.

ISAE 3000 (source) — No public evidence

This is a voluntary international standard for assurance engagements, often used for reports on non-financial information such as cybersecurity controls. It is relevant for providing tailored assurance to clients.

eIDAS Regulation — No public evidence

This regulation applies to providers of electronic identification and trust services (e.g., electronic signatures, seals). The company's stated services do not appear to include acting as a qualified trust service provider.

Financials

Three-year financials

Financial Resilience Score: 4/10

STYX Consulting remains legally solvent with positive equity of DKK 57.5K at year-end 2025, comfortably above the DKK 20,000 ApS minimum capital requirement. The company has a debt-light structure, essentially no fixed overheads beyond basic administrative costs, and benefits from the strong personal brand of its founder Rasmus Theede, a highly senior Danish cybersecurity executive with 25+ years of experience including leadership roles at A.P. Møller-Mærsk and advisory roles to the Danish Ministry of Defence. However, FY2025 effectively represents a dormancy year: gross profit collapsed from DKK 904K to DKK -8.5K, net profit swung from DKK 224K to DKK -6.73K, and equity fell 78% because the founder took a full-time SVP and Head of Cyberdefense role at Iver (Sweden). The company is a one-person vehicle with 100% key-person dependency, no team, no subsidiaries, no recurring product revenue, and limited balance-sheet strength to pursue larger engagements. While it could be reactivated at any time, its resilience as an operating business is weak because its earnings capacity is entirely contingent on the founder's availability, which is currently committed elsewhere.

Key strengths: Positive equity (DKK 57.5K) above ApS minimum capital requirement, Debt-light balance sheet with minimal fixed costs, Founder has elite cybersecurity credentials (ex-Mærsk CISO, Danish MoD advisor), Low-cost hibernation capability allows company to survive dormancy, FY2024 stub period demonstrated profitable consulting model (DKK 224K net profit)

Risk factors: Revenue/gross profit collapsed in FY2025 as founder took full-time external role at Iver, 100% key-person dependency on single founder-employee, Equity down 78% year-over-year, No recurring product revenue; business model is binary with founder's availability, Insufficient scale/balance sheet to bid on larger engagements, Likely high client concentration given one-consultant delivery model, No subsidiaries, team, or substitutable delivery capability

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report