IstroSec

Incident response, penetration testing and threat intelligence services, plus the GRYPHON defense product, for European organisations

Bratislava, SlovakiaFounded 2021istrosec.comWebsite technologies

+ Add to sales board

Highlights

  • ProfitableFY2025 net profit €1.2M · RÚZ
  • GrowingRevenue +104% YoY (FY2025) · RÚZ

Recent signals

What changed at IstroSec in the last 6 months, newest first. Each line links to its public source.

  • 23 Oct 2026 Revenue jump · Revenue €2.6M → €5.3M (+104%) in FY2025 registeruz.sk

Get signals like these for the companies you sell to →

About IstroSec

IstroSec is a cybersecurity company that provides incident response, digital forensics, malware analysis, threat intelligence, penetration testing and managed defense services. It also develops GRYPHON, an offline-first defense and incident-response product that the company describes as AI-powered. Its research work covers new cybersecurity incidents, vulnerabilities and malware, and the company reports publishing its own CVEs.

Its customers are SMEs, corporations and governmental entities across industries. Services include SOC Level 3+ managed defense, attack simulations, security audits and advisory, trainings and exercises, and IstroCSIRT 24/7 DFIR services. The company sells these services together with the GRYPHON product.

IstroSec was founded in 2021 and is headquartered in Bratislava, Slovakia, where it operates as an s.r.o. The company presents itself as a European cybersecurity company and lists a range of professional certifications held by its team, including GIAC, OSCP and CISSP.

Product: GRYPHON, an offline-first defense and incident-response product, alongside incident response, pentesting, threat intelligence and managed defense services.

Financials

FY2025FY2024FY2023FY2022FY20216 months
Revenue€5.3M€2.6M€1.9M€1.0M€63k
Growth+104%+38%+86%——
EBITDA€1.4M€379k€772k€180k€2k
Operating profit€1.4M€363k€759k€176k€2k
Net profit€1.2M€345k€727k€127k€214
Net margin22.3%13.2%38.4%12.5%0.3%
Personnel costs€1.8M€1.2M€648k€428k€28k
Total assets€7.7M€2.0M€1.1M€485k€29k
Cash€5.8M€586k€503k€106k€26k
Liabilities€1.7M€1.4M€275k€332k€23k
Equity€1.6M€406k€819k€153k€5k

As filed with RÚZ (Slovak register of financial statements). Each year links to its statement.

Public contracts

Contracts IstroSec signed since 1 Nov 2024, from the Slovak and Czech public contract registers. Values as published; amendments are not counted.

Customers

17 contracts with 11 buyers · €2.9M

ContractsValue
Univerzita Pavla Jozefa Šafárika v Košiciach2€1.7M
Úrad vlády Slovenskej republiky, Úrad podpredsedu vlády, ktorý neriadi ministerstvo v zastúpení Ministerstvo hospodárstva Slovenskej republiky1€793k
Ministerstvo financií SR3€141k
Národná agentúra pre sieťové a elektronické služby1€139k
Národný bezpečnostný úrad1€10k
Univerzitná nemocnica Bratislava1€8k
Železničná spoločnosť Cargo Slovakia, a.s.2—
MH Teplárenský holding, a.s.1—

Open public tenders for IstroSec →

Suppliers

5 contracts with 3 suppliers · €21k

ContractsValue
Kompetenčné a certifikačné centrum kybernetickej bezpečnosti2€20k
Žilinská univerzita v Žiline1€918
Slovenská elektrizačná prenosová sústava, a.s.2—

Latest contracts

  • 3 Nov 2026 for Železničná spoločnosť Cargo Slovakia, a.s. · Business Impact Analysis (BIA) a Business Continuity Management (BCM) register
  • 28 Sep 2026 from Slovenská elektrizačná prenosová sústava, a.s. · Dohoda o zachovávaní mlčanlivosti register
  • 31 Jul 2026 for Železnice Slovenskej republiky · ZMLUVA O POSKYTOVANÍ SLUŽIEB INCIDENT RESPONSE register
  • 11 Mar 2026 from Žilinská univerzita v Žiline · ZMLUVA o nájme nebytových priestorov č. 5/2006 · €918 register
  • 2 Feb 2026 for Ministerstvo financií SR · Zmluva o poskytovaní expertnej podpory v oblasti kybernetickej bezpečnosti a služieb riešenia kybernetických bezpečnostných incidentov · €67k register
  • 2 Feb 2026 from Kompetenčné a certifikačné centrum kybernetickej bezpečnosti · Memorandum o spolupráci · €10k register

Jobs at IstroSec

No open positions listed right now.

Leadership

More cybersecurity companies

  • KOLAS

    IT cybersecurity services, audits and network solutions for businesses and public-sector organizations
    Bratislava, SlovakiaCybersecurityFounded 20131 open job
    ProfitableRemote-friendlySalary transparent
  • KV - Security

    Physical guarding and security-system services for businesses and property operators across Slovakia
    Bratislava, SlovakiaCybersecurityFounded 2011
    ProfitableNew on Evolc
  • KYBERGUARD

    Cybersecurity compliance, infrastructure protection and testing services for Slovak public institutions and mid-sized businesses
    Žilina, SlovakiaCybersecurityFounded 2024
    Young companyProfitable
  • KyberTeQ

    Cybersecurity and IT infrastructure services for businesses and institutions
    Bratislava, SlovakiaCybersecurityFounded 2021
    Young companyProfitable
  • LorXIS

    Cybersecurity consulting and NIS2 compliance for small and mid-sized Slovak organisations, plus IT and security training
    Hrhov, SlovakiaCybersecurityFounded 2025
    Young companyProfitable
  • LYNX

    IT company offering cybersecurity, network infrastructure and information systems for organisations, plus the MIDS monitoring system
    Bratislava, SlovakiaCybersecurityFounded 19911 open job
    ProfitableGrowing

All cybersecurity companies →

Website technologies

Tools and platforms detected on this company’s website, grouped by purpose. Dates record when Evolc observed them.

Analytics

Content delivery

  • CloudflareHigh confidence
    First detected
    Last detected
    Last checked
    Detection evidence

Frontend frameworks

  • BootstrapHigh confidence
    First detected
    Last detected
    Last checked
    Detection evidence
  • jQueryHigh confidence
    First detected
    Last detected
    Last checked
    Detection evidence

Privacy & consent

  • OsanoHigh confidence
    First detected
    Last detected
    Last checked
    Detection evidence

Website detection does not establish a paid subscription or company-wide use. Tools loaded after consent or sign-in may be missed. “No longer observed” does not prove the company stopped using a tool.