SCHUTZWERK GmbH is an independent IT security consultancy based in Germany, with offices in Ulm and Hamburg. Founded in 2002, we help leading mid-sized companies through to international corporations master high to very high security requirements.
From penetration testing and red teaming to embedded and automotive security, our work spans the full spectrum — mastering cybersecurity from silicon to cloud. 

 To advise our clients objectively, we deliberately forgo any kind of partnership with product or solution providers. This independence is the foundation of our work: every assessment and recommendation reflects your actual risk, not a vendor 
 relationship. With more than two decades of experience and over 2,000 completed projects, we build long-lasting, trust-based partnerships rather than one-off engagements.                                                                    
  
 What we do 

Assessment - Penetration testing, red teaming, breach and attack simulation, and web, mobile, cloud, embedded and automotive security assessments to create transparency about your individual risks. 
Consulting- Strategic guidance for developing security strategies, security concepts and incident response. 
Process - Implementation of sustainable management processes, including information security management (ISMS) and IT risk management (ISO/IEC 27005). 
Compliance - Support across regulatory frameworks such as DORA, NIS2, the Cyber Resilience Act (CRA) and the Radio Equipment Directive (RED), focused on building genuine resilience rather than passing audits. 

 Technical depth across domains 

 Our expertise spans the full technology stack — from silicon-level embedded systems and automotive ECUs to web applications, mobile apps and cloud infrastructure. SCHUTZWERK is a CVE Numbering Authority (CNA) and contributes to the security community 
 through published advisories, open-source tools and academic collaboration. 
  
 Certifications & team 
  
 SCHUTZWERK is certified to ISO/IEC 27001 and ISO 9001 and holds TISAX AL3 results. Our team of security consultants is strongly hands-on certified, with the majority holding the Offensive Security Certified Professional (OSCP) qualification among others.

If you would like to discuss your security challenges, our experts are happy to provide independent advisory assistance. Contact us to plan the next steps for your organisation together.