Skip to content

8com

German MSSP operating an ISO 27001 IT-Grundschutz certified SOC with managed detection and response for enterprises and public bodies.

Visit Website ↗ + Add to Compare Claim This Company
60/100Incremental Innovator

Overview

8com, based in Neustadt an der Weinstraße, Germany, began in 2004 as a penetration-testing firm and now delivers managed SOC services monitoring IT and OT environments around the clock. Its SOC is certified under ISO 27001 on the basis of IT-Grundschutz, and its offerings are packaged in Core, Advanced and Infinity tiers with modules for XDR, SIEM-as-a-Service, SAP security, OT security and incident response.

The company states it has more than 140 SOC customers across SMEs, international corporations and the public sector, and reports roughly 150 staff, about half in the SOC.

Innovation Matrix Assessment

Innovation Velocity 6/10

Evolved from pen-testing into tiered SOC, CTEM and SAP security modules; steady rather than rapid innovation.

Operational Value 7/10

Combines 24/7 monitoring, in-house IR and OT/SAP coverage that matter to regulated German buyers.

Market Momentum 6/10

140+ SOC customers claimed and ISG Provider Lens recognition for next-gen SOC/MDR.

Category Disruption 4/10

Traditional managed SOC with added exposure-management modules.

Real-World Efficacy 6/10

BSI-related and ISO certification provide external assurance; no named incident evidence reviewed.

Enduring Relevance 7/10

Compliance-driven demand (NIS2) supports long-term relevance.

Why CISOs Should Care

Offers German-hosted SOC monitoring with certified processes, helping NIS2-exposed firms meet 24/7 monitoring needs.

What Makes It Different

Pairs offensive-security heritage with SOC delivery, plus SAP and OT specific monitoring.

The Matrix Verdict

60/100 — INCREMENTAL INNOVATOR

Tier: Incremental Innovator. Established, certified European MSSP with good coverage breadth but a conventional model.

Editorial Note: Claims vs. Verified Findings

Response-time and customer-count figures are self-reported; certifications are external.

Sources