CSIS Security Group
Copenhagen-founded security firm providing 24/7 MDR, emergency incident response, threat intelligence and digital risk protection, part of the Allurity group.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
CSIS Security Group A/S was founded in Copenhagen in 2003. It serves clients in the Nordics, the UK and beyond. In October 2022 it was acquired by Allurity, a European cybersecurity group backed by Trill Impact, and kept its own brand and operational independence. In September 2024 CSIS acquired London-based Security Alliance (SecAlliance), a managed threat intelligence firm that runs the ThreatMatch platform.
Its core business is a 24/7 SOC delivering managed detection and response and SOC escalation, alongside emergency response retainers, compromise and Active Directory assessments, cyber threat intelligence feeds, anti-phishing and threat monitoring, and NIS2 and OT services. In June 2025 its incident response practice received CREST accreditation for EMEA. CREST’s marketplace also lists it as assured under the UK NCSC Cyber Incident Response (CIR) Standard.
The company’s website shows customer logos including Vestas, Hempel and Amgros. It claims more than 500,000 users protected and about 2.6 billion compromised credentials recovered each month; these figures are self-reported. No headcount is published; directory estimates put it at about 100-120 staff.
Innovation Matrix Assessment
It has expanded its offering with AI/LLM security assessments, OT and NIS2 services, and threat-intelligence capability from SecAlliance (2024).
Combines 24/7 MDR with emergency response, threat intelligence and credential-leak monitoring, which gives mid-to-large Nordic and UK buyers an integrated detect-and-respond service.
Allurity ownership and the SecAlliance acquisition show progress, but it is a mid-sized regional player with no disclosed revenue or large public growth signals.
A standard MDR/IR model. Its threat-intelligence heritage and proprietary tooling set it apart somewhat but do not change the category.
It holds CREST incident response accreditation (2025) and NCSC CIR assurance, which are independent, plus named customer logos. There are no analyst MDR placements or independent outcome data.
NIS2 enforcement in the Nordics and steady ransomware incidents keep demand high for MDR from a regional provider that also does incident response.
Why CISOs Should Care
Suits Nordic and UK organisations that want a regional MDR provider with a CREST-accredited incident response team and strong threat intelligence under one contract.
What Makes It Different
It has two decades of Danish threat-intelligence work, now combined with SecAlliance's managed threat intelligence. It also runs large-scale credential-leak recovery alongside its MDR.
The Matrix Verdict
58/100 — INCREMENTAL INNOVATOR
Score 35/60 (58/100): Incremental Innovator. It is a credible, accredited regional MDR and incident response provider, but its scale and differentiation are modest and it has little independent outcome evidence.
Editorial Note: Claims vs. Verified Findings
User counts, credential-recovery volumes and Gartner acknowledgement are vendor statements. The CREST IR accreditation, NCSC CIR assurance, and the Allurity and SecAlliance deals are independently verifiable.
Sources
Alternatives to CSIS Security Group
Orange Cyberdefense
Orange Group's cybersecurity services arm, offering managed detection and response, threat intelligence, CERT and consulting across Europe and…
ReliaQuest
ReliaQuest operates GreyMatter, a security operations platform that unifies detection, investigation, and response across a customer's existing security…
Ontinue
Ontinue delivers 24/7 Managed Extended Detection and Response built specifically to maximize the value of an organization's existing…
RADICL
A Boulder, Colorado-based cybersecurity-as-a-service provider built specifically for small and mid-sized Defense Industrial Base contractors, combining managed detection…
CPX
Abu Dhabi cybersecurity company, a G42 company, offering managed detection and response, SOC operations, consulting and in-house security…
Arctic Wolf
Managed detection and response provider delivering a 24/7 human 'Concierge Security Team' as a de facto outsourced SOC…