Our Focus. more security.
Security Consulting
ISMS. BCM. Integrated Management Systems. NIS-2. Part-IS. DORA. CRA. Operational Security.
Security Audits
Internal Audit. TPRM. AI. Due Diligence. KRITIS. Cloud.
PCI & Payment Security
PCI. EPI. SWIFT. Consulting. Audits. Certification. ASV Scans.
Pentests & Red Teaming
Systems. Applications. Mainframes. SAP. Cloud. AD. LLM. Red Team Assessments.
Security Analyses
Security Scans. Code Review. Incident Response. Forensic. Vulnerability Management. Threat Modeling.
AI Security
AI Governance. AI Audit. AI Assurance. Pentest of LLM.
~220
Employees
1994
Founding year
3
Locations
(Neu-Isenburg, Cologne, Munich)
> 900
Customers worldwide
Our Clients
Our Certifications and Accreditations
Our Commitment to the Community
News
Mobile App Pentest Insights: What Developers Should Know to Build Secure Applications
Mobile frameworks such as Flutter, React Native, Cordova, and .NET MAUI promise efficient cross-platform development. A shared code base enables faster development and maintenance of iOS and Android applications. However, these benefits also introduce new security...
usd AG Reappointed to the PCI SSC Global Executive Assessor Roundtable
usd AG has once again been appointed to the Global Executive Assessor Roundtable (GEAR) of the PCI Security Standards Council (PCI SSC). This means that, for the 2026–2028 term, we will once again be among the 33 PCI Assessor Companies selected worldwide to support...
NIS-2 Incident Reporting Obligations: Deadlines, Reporting Criteria, and Requirements
A security incident occurs: within 24 hours, your organization must determine whether it is required to notify the German Federal Office for Information Security (BSI). This very time pressure makes the NIS-2 incident reporting obligation a practical challenge for...