Truesec Due Diligence
Run due diligence on Truesec: check compliance and get alerts when suppliers or ownership change.
Sweden · owned by IK Partners (United Kingdom) · www.truesec.com · 14 vendors
Truesec is a global cybersecurity company with a clear purpose: To create safety and sustainability in a digital world by preventing and minimizing cybercrime.
Resilience scores
- Digital Sovereignty: 0
- Digital Resilience: 8
- Financial Resilience: 7
Technology vendors
- Hotjar Ltd — Technology — Malta
- Teamtailor AB — Technology — Sweden
- WP Engine, Inc. — Technology — United States
- and 11 more
Insights
Last updated 2026-07-23 · revision 9
14 direct vendors, 148 subvendors
Direct vendors by controlling owner country (sample)
- Australia: 1
- France: 2
- Sweden: 3
Subvendors by controlling owner country (sample)
- Sweden: 5
- Cyprus: 1
- Germany: 2
Compliance
8 in-scope frameworks identified; showing 3.
GDPR (source) — Evidence found
Evidence: https://www.truesec.com/privacy-and-terms, https://www.truesec.com/who-we-are, https://edpb.europa.eu/about-edpb/about-edpb/members_en
Swedish Personal Data Act — Evidence found
Evidence: https://www.truesec.com/privacy-and-terms, https://www.imy.se/en/
DORA (source) — No public evidence
Evidence: https://www.truesec.com/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R2554
Financials
Three-year financials
- 2024:
- 2023:
- 2022:
Financial Resilience Score: 7/10
Truesec demonstrates strong qualitative financial resilience despite the lack of publicly verified figures in this report. The company was awarded Gazelle Company status by Dagens Industri in 2025, which requires doubling revenue over four fiscal years, positive operating results each year, and organic growth. This external validation, combined with headcount doubling from ~200 employees in 2020 to 400+ in 2025/26, points to sustained profitable growth. Backing from FSN Capital (majority owner since 2021) provides financial firepower for M&A and scaling. Structural tailwinds support continued resilience: Nordic cybersecurity spending is growing double-digit annually, driven by NIS2, DORA, and rising ransomware. Truesec's recurring-revenue mix (MDR, Managed Threat Exposure, Managed Identity Security, IR Retainers) provides visibility, while a blue-chip customer base (Vattenfall, Swedbank, Coop, Addtech, Bufab, Solar, plus public sector) limits concentration risk. ISO 9001/14001/27001 certifications and MSSP Alert Top 250 listing reinforce reputational moat. Risks constraining a higher score include talent-cost inflation in scarce cybersecurity labor markets, project revenue lumpiness from event-driven Incident Response fees, geographic concentration in Sweden, integration risk from serial acquisitions, and PE ownership implying eventual exit pressure and potential debt on the balance sheet. Limited public disclosure also constrains external verification.
Key strengths: Gazelle Company status 2025 (doubled revenue over 4 years, positive operating result each year), FSN Capital majority ownership since 2021 providing M&A firepower, Recurring-revenue mix from MDR and managed services, Blue-chip customer base including Vattenfall, Swedbank, Coop, Structural double-digit growth in Nordic cybersecurity spending (NIS2, DORA), ISO 9001/14001/27001 certifications and MSSP Alert Top 250 listing, Headcount doubled from ~200 (2020) to 400+ (2025/26)
Risk factors: Talent-cost inflation in scarce cybersecurity labor market, Project revenue lumpiness from event-driven Incident Response, Geographic concentration heavily in Sweden, Integration risk from serial acquisitions (Cygate parts, Subset), PE ownership implies exit pressure and potential leverage, Limited public disclosure as a private company
Revenue by geography
- Sweden: 70%
- Denmark: 15%
- Finland: 10%
- Germany: 5%
Revenue by product/service
- Managed Services (MDR): 45%
- Digital Forensics & Incident Response: 30%
- Consulting / Expert Services: 20%
- Training and Events: 5%
Workforce by country
- Total: 400
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.