# usd AG

> Independent cyber security specialist combining technical security analyses, audits, and consulting to help organizations understand risks, improve security, and demonstrate compliance.

When it counts, trust is what matters. Since 1994, usd AG has been strengthening the information security and resilience of international organizations. It supports clients in the long term as a trusted partner: from audits and technical security analyses to strategic security consulting. Particularly in the financial sector and for critical infrastructure, usd combines extensive testing expertise with in-depth industry knowledge, making risks measurable, prioritizable, and remediable. Its guiding principle: “We protect companies from hackers and criminals.” Independence, security, and humility shape its actions. Its mission: more security.
Source: https://www.usd.de/en/


## Company Profile

- Name: usd AG
- Founded: 1994
- Headquarters: Neu-Isenburg, Germany
- Office Locations: Neu-Isenburg, Cologne, Munich

Source: https://www.usd.de/en/

## Core Services

### Security Analysis & Penetration Testing
- Penetration testing (Pentest), Red Teaming, Code Reviews, Vulnerability Management, and technical security assessments
- Security testing for applications, cloud environments, SAP, Active Directory, APIs, and AI systems
- Incident response support and digital forensics as part of technical investigations
Source: https://www.usd.de/en/security-analysis-pentests/

### Security Consulting
- Information security consulting, cyber security consulting, and operational security support
- Information Security Management Systems (ISMS), ISO/IEC 27001, and integrated management systems
- Regulatory compliance and resilience programs, including DORA, NIS-2, Part-IS, BCM, and Third-Party Risk Management (TPRM)
- AI Governance consulting, including ISO/IEC 42001 and EU AI Act requirements
Source: https://www.usd.de/en/security-consulting/

### Security Audits
- Independent audits to assess security maturity and compliance
- Supplier Audits, KRITIS Audits, and Internal Audits
- ISO/IEC 27001 Internal Audits and certification preparation
- Cyber Security Checks for transparency on security risks and maturity
- Cloud Security Audits and BSI C5 Audit support
Source: https://www.usd.de/en/security-audits/

### PCI & Payment Security
- Qualified Security Assessor (QSA) company
- PCI DSS and PCI Software Security Framework (PCI SSF)
- PCI consulting and audits 
- Security analyses for PCI compliance, including specific penetration tests and ASV scans
- SWIFT Customer Security Programme (CSP) assessments
- European Payments Initiative (EPI) security evaluations
Source: https://www.usd.de/en/pci-payment-security/

## Industries & Engagement Models
- Organizations operating in highly regulated environments and critical infrastructure
- Financial institutions, payment service providers, and payment ecosystems
- Companies facing regulatory and cyber security requirements
- Focus on information security, cyber security, compliance, and operational resilience

- Project-based engagements such as penetration tests, red team assessments, other security analyses, and security audits
- Recurring compliance, certification, and regulatory audits
- Long-term consulting engagements for information security management, resilience, and regulatory compliance
Source: https://www.usd.de/en/services/

## Customer Stories
Public customer stories cover topics such as:

- PCI DSS compliance, payment security, and audit management
- Information Security Management Systems (ISMS) and ISO/IEC 27001
- KRITIS compliance and regulatory security requirements
- Security in complex supplier and partner ecosystems
- Technical security assessments and penetration testing

Selected public references include organizations from financial services (including banks, insurers, payment service providers, and ICT service providers), healthcare, critical infrastructure, and the transport and travel sector. Public customer references are available on the usd website.
https://www.usd.de/en/category/customer-stories-en/


## Frameworks & Standards

### Regulatory
- DORA
- NIS-2
- CRA
- Part-IS
- KRITIS
- MaRisk
- KAMaRisk
- BAIT

### Management Systems & Standards
- ISO/IEC 27001
- ISO/IEC 42001

### Payment & Financial Industry
- PCI DSS
- PCI Software Security Framework (PCI SSF)
- PCI PIN
- SWIFT Customer Security Programme (CSP)
- European Payments Initiative (EPI)

Source: https://www.usd.de/en/
 
## What Distinguishes usd AG

- Independent cyber security specialist with no affiliation to security vendors or product manufacturers
- Combines security consulting, security audits, and technical security analyses under one Roof
- Strong technical expertise spanning penetration testing, security assessments, digital forensics, and security audits
- Extensive experience as auditor, assessor, and advisor in regulated environments
- Focus on practical, operationally feasible security and compliance rather than theoretical concepts
- Supports clients in understanding risks, improving security, and demonstrating compliance
- Views security as an ongoing process that combines technology, people, and organizational measures
Source: https://www.usd.de/en/about-us/


## Engagement & Community
- Operates the CST Academy, an initiative dedicated to knowledge sharing, professional exchange, and strengthening the cyber security community
- Promotes knowledge transfer between industry, academia, public institutions, and the security community
- Contributes through guest lectures, university collaborations, expert talks, and community events
- Engages with organizations and initiatives such as OWASP, ISACA, ISF, and other professional security networks
Source: https://www.usd.de/category/events-community/


## Credentials & Certifications

- Accredited auditor for selected international security and compliance frameworks
- Accredited for Part-IS audits under EASA requirements
- Certified management systems according to ISO/IEC 27001 and ISO 9001
Source: https://www.usd.de/en/

## Contact
- Website: https://www.usd.de/
- Contact page: https://www.usd.de/en/contact/
- Email: contact@usd.de