Detack GmbH

Detack GmbH is a German IT security company founded in 2000 and headquartered in Ludwigsburg, near Stuttgart. For 25 years the company has focused on a specific, persistent problem: weak, reused, and compromised passwords, which remain one of the most common initial-access vectors in real-world breaches despite two decades of industry talk about passwordless authentication.

The company’s flagship product, EPAS (Enterprise Password Analytics Solution), performs automated, large-scale password strength assessment and enforcement by simulating real password-cracking attacks against an organization’s actual credential stores, rather than relying on policy checklists such as length and complexity rules that don’t reflect how passwords actually get broken. EPAS is deployed, according to the company, in more than 30 countries, spanning use cases from mainframe and midrange systems to IoT and industrial systems, ATMs, retail banking, and SAP environments. Detack’s team holds recognized offensive-security certifications, including OSCP and OSWP, and the company itself carries ISO/IEC 27001:2022 certification; it also offers penetration testing and red-teaming consulting alongside its EPAS product.

Detack is a small, privately held company that has stayed narrowly focused rather than expanding into a broader identity or access-management platform, which is both its strength, deep specialization in password and credential risk, and its limit, a niche product category as passwordless and phishing-resistant MFA adoption slowly grows. Its longevity and technical certifications are real, independently verifiable signals; specific deployment-scale claims come from the company itself.