Information Security for Your Business – Consulting, Auditing & Certification
SecuraPoint is your partner for planning and implementing your information security strategy. We are experts in ISO 27001, BSI IT-Grundschutz, Open Source Compliance & DevSecOps.
View Services
ISMS Consulting
We help you establish or develop your Information Security Management System (ISMS) – and support you all the way to ISO 27001 certification if desired.
- Structured setup and optimization of your ISMS
- Support in preparing for ISO 27001 certification
- Practical consulting for effective security measures
Internal Audits
Our internal audits identify weaknesses and provide concrete actions to improve your IT security architecture.
- Detailed analysis of your security measures
- Practical recommendations for risk mitigation
- Preparation for certifications and external audits
Cyber Resilience Act
The CRA introduces mandatory security requirements for software and connected products – we support you in implementing them early and effectively.
- Assessment of whether and how your products are affected by the CRA
- Integration of Security by Design into your software and the entire product lifecycle
- Development and maintenance of an SBOM (Software Bill of Materials) with SCA-Tooling
- Support with technical documentation and conformity assessments
- Preparation for market surveillance and reporting obligations
Open source Compliance
We help you manage the use of open source components in a structured way – with a focus on license compliance, security, and international standards like ISO/IEC 5230 (OpenChain).
- Structured identification, documentation, and management of open source components
- Automated security vulnerability and weakness detection
- Consulting on compliance with licensing requirements and legal regulations
- Integration of open-source management into existing development processes
- Support in building a compliance program based on OpenChain
BSI IT-Grundschutz
Using a structured BSI questionnaire, we conduct an interview together to assess your information security level. We then show you the necessary steps to ensure compliance with BSI IT-Grundschutz.
- Systematic analysis of your information security
- Clear recommendations for improving security measures
- Alignment with BSI IT-Grundschutz guidelines for maximum security
DevSecOps Implementation
We analyze your current software development processes and determine how DevSecOps can best be integrated. We help introduce security processes, automation tools like SCA or SAST, and support tool selection in close collaboration with your development teams.
- Analysis and optimization of existing development processes
- Implementation of automated security checks (e.g., SCA, SAST)
- Support in tool selection and integration into existing systems
These Reasons Speak for Us
With over 15 years of experience in information security, recognized certifications such as ISO 27001 Auditor, BSI Basic Protection Practitioner, and CISM, as well as a pragmatic and technical approach, we help you implement security requirements efficiently – with a team from Germany that understands your challenges and delivers practical solutions.
Our experts hold certifications in ISO 27001, BSI Basic Protection, CISM, as well as AWS and Azure – combining deep expertise in IT systems and information security.
Certified Experts
Certified Professionals
We bring over 15 years of experience in consulting and software development. Our approach is pragmatic and implementation-focused.
Experience
Software Development and Consulting
We operate as a GmbH based in the Black Forest. All of our staff are employed and reside in Germany.
Made in Germany
Local Company and Staff