Penetration Testing & Vulnerability Assessment
We attack your systems in a controlled way before criminals do – and show you exactly where action is needed.
Learn more
IT & Cyber Security · Kiel, Germany
IT security that actually protects your business.
TSBSec is your partner for cyber security and IT infrastructure in Kiel, Schleswig-Holstein and across Germany. We find vulnerabilities before attackers do – and keep your systems, data and people protected.
- Local contacts in Kiel
- GDPR- and NIS2-compliant advice
- Response within 24 hours
- Transparent quotes, no hidden costs
From Kiel, for the NorthPersonal on-site support in Schleswig-Holstein and Hamburg – and remotely throughout Germany.
Recognised standardsWe work to BSI IT-Grundschutz, ISO 27001 and OWASP – traceable and auditable.
Fast responseAnswers to enquiries within 24 hours. In an emergency: immediate support.
Privacy as a principleNo cookies, no tracking, no sharing of your data. Security starts with ourselves.
Services
Everything your business needs for secure IT
From the first analysis to ongoing operations: we cover the entire security lifecycle – as individual modules or as a complete package.
Security Audits & Compliance
ISO 27001, NIS2, GDPR, BSI IT-Grundschutz: we bring your security organisation to an auditable level.
Learn more
Managed Security & Monitoring
Around the clock: we monitor your systems, detect attacks early and respond before damage occurs.
Learn more
Incident Response & Digital Forensics
When it happens, every minute counts. We help with ransomware, data exfiltration and system compromise – fast and structured.
Learn more
Security Awareness & Training
Most successful attacks start with people. We turn your team into your strongest line of defence.
Learn more
IT Infrastructure & Cloud Security
Secure networks, hardened servers, protected cloud: we build and run the IT you can rely on.
Learn more
IT emergency
Have your systems been attacked?
With ransomware, data exfiltration or suspicious access, every hour counts. Contact us immediately – we prioritise your request and support containment, analysis and recovery.
+49 15778716239
Report incident
or by e-mail: info@tsbsec.de
First response to incidents within 2 hours (weekdays 9–17), outside these hours on the next working day.
Why TSBSec
Security you understand – and that works in everyday operations
We believe good IT security is not wizardry but craftsmanship: careful, traceable and tailored to your reality.
- 01
Plain language, not jargon
We explain risks so you can make decisions – with clear priorities instead of 200-page reports.
- 02
Pragmatic, not dogmatic
Not every company needs a fortress. We recommend what really protects you – and tell you what you can skip.
- 03
Personal, not a ticket number
You have a dedicated contact who knows your business and is reachable when it matters.
- 04
Independent, not vendor-bound
We do not sell products, we deliver solutions. Our recommendations are based on your needs, not on commissions.
How we work
Four steps to resilient security
1
Initial consultation & analysis
We get to know your business, your systems and your risks – free of charge and without obligation.
2
Concept & quote
You receive a prioritised action plan with a transparent quote. No surprises.
3
Implementation
We implement the measures – coordinated with your team and with minimal disruption to daily operations.
4
Operations & evolution
Security stays. We monitor, review and adapt whenever your business or the threat landscape changes.
NIS2 · Now in force
Does NIS2 apply to your company?
With the NIS2 directive transposed into German law, far more companies than before are obliged to implement risk management, incident reporting and evidence of compliance – in affected sectors often from 50 employees or EUR 10 million in turnover. Management is personally responsible for implementation.
Request NIS2 check
- Applicability check in 30 minutes
- Gap analysis against the NIS2 requirements
- Prioritised implementation roadmap
Two minutes, no sign-up – the assessment runs in your browser.
Industries
Who we work for
From craft businesses to logistics companies: we speak the language of the Mittelstand.
- SMEs & mid-sized companies
- Trades & manufacturing
- Healthcare & practices
- Logistics & transport
- Municipalities & public bodies
- Retail & e-commerce
- Law firms & consultancies
- Software & IT providers
Standards
We work to recognised standards
Our approach follows established frameworks – so results are comparable, traceable and usable for audits.
- BSI IT-Grundschutz
- ISO/IEC 27001
- NIS2 Directive
- OWASP Top 10 & ASVS
- NIST Cybersecurity Framework
- GDPR / BDSG
- CIS Controls
- MITRE ATT&CK
Insights
IT security, explained in plain language
Practical articles on NIS2, phishing, emergency planning and secure cloud configuration – for management and IT.
NIS2 in Germany: Who is affected and what to do now
The German NIS2 implementation act has applied since December 2025. Which companies qualify as important or essential entities, what the obligations are and where to start.
Read moreSpotting phishing: Seven signs every team should know
Most successful attacks start with an e-mail. Seven signs that help employees recognise phishing – and what to do when in doubt.
Read moreIT emergency plan for SMEs: What matters in the first 24 hours
Ransomware rarely strikes at a convenient time. A two-page emergency plan, clear roles and the right first steps decide between days and weeks of downtime.
Read more
FAQ
What companies ask us most often
Which company sizes is TSBSec the right partner for?
Our focus is on small and mid-sized companies with roughly 10 to 500 employees – from craft businesses to logistics companies. We also serve municipalities, law firms and medical practices. What matters is not size, but that you want to take IT security seriously.
How much does a penetration test cost?
It depends on scope: a focused test of a single web application costs considerably less than testing the entire infrastructure. After a short initial call you receive a transparent quote with a clearly defined scope – no hidden costs.
Do I need to deal with NIS2 already?
If your company falls into one of the affected sectors and meets the thresholds: yes. Implementation usually takes several months. In a short call we check whether and how you are affected – free of charge.
Do you work remotely or on site?
Both. Penetration tests, audits and managed security are mostly delivered remotely. For workshops, training and infrastructure projects we are happy to come to you in Schleswig-Holstein and Hamburg.
How fast do you respond to a security incident?
Requests with the subject "URGENT" are handled immediately. During an ongoing attack you receive first recommendations right away so that no further damage occurs. An incident response retainer gives you guaranteed response times.
What happens in the free initial consultation?
In about 30 minutes we clarify your situation, your biggest risks and the sensible next step. You get an honest assessment – even if it is that you currently need nothing.