DCSO – Deutsche Cyber-Sicherheitsorganisation
Berlin-based managed security provider founded by Allianz, BASF, Bayer and Volkswagen, offering German-operated MDR, incident response and threat intelligence.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
DCSO Deutsche Cyber-Sicherheitsorganisation GmbH was announced in September 2015 by Allianz, BASF, Bayer and Volkswagen as a jointly owned cyber security competence centre for German industry, with each partner intended to hold 25% after antitrust approval. It is registered in Berlin as a financially independent GmbH and is headquartered on the EUREF-Campus in Berlin-Schöneberg. The founding plan included cooperation with the Federal Ministry of the Interior and the BSI; the company states that it does not distribute profits to shareholders but reinvests them.
DCSO’s core business is managed security services, organised into ‘Defend’ (managed detection and response through a 24/7/365 managed SOC, incident response, internet exposure monitoring, threat intelligence), ‘Improve’ (security consulting, assessments and security technology testing) and ‘Connect’ (a closed community in which member companies, authorities and research institutes share threat information). Its MDR uses an ‘Embedded SIEM’ developed and operated in Germany, high-throughput network sensors, and endpoint, cloud and Active Directory telemetry; it sells only products it develops itself.
Recent milestones include a BSI C5 Type 1 attestation (August 2025) extended to Type 2 in September 2026, ISO 27001 certification, a partnership with ]init[ for public-administration security, plans to run on Deutsche Telekom’s T Cloud Public, and a 2026 joint solution brief with Tenzir on ‘sovereign MDR’ using customer-controlled OCSF data pipelines.
Innovation Matrix Assessment
Incremental but relevant moves: in-house German Embedded SIEM, sovereign MDR on OCSF pipelines with Tenzir, C5 Type 2 attestation; no step-change technology.
Combines 24/7 MDR with community-sourced, DACH-specific threat intelligence and incident response, plus compliance artefacts (C5, ISO 27001) that ease procurement for regulated German organisations.
Backed by four DAX-scale founders and active partnerships (]init[, Telekom T Cloud, Tenzir, BVMW), but customer count, revenue and headcount are not disclosed and it remains a primarily German player.
Fundamentally an MSSP/MDR provider; the industry-owned, non-profit-distributing community model and sovereignty focus are distinctive in DACH but not category-disrupting.
Independent BSI C5 Type 1/Type 2 and ISO 27001 attestations verify controls, not detection quality; no published independent detection tests or named incident outcomes found.
Digital sovereignty, NIS2 and German-hosted security operations are durable buying criteria in Europe, supporting relevance over 3-5 years.
Why CISOs Should Care
For German and DACH organisations that need 24/7 MDR and incident response with data operated in Germany, BSI C5 attestation and access to a peer threat-sharing community of large German enterprises and authorities.
What Makes It Different
Industry-founded (Allianz, BASF, Bayer, Volkswagen) provider that reinvests profits, runs a closed threat-sharing community, and builds its own Germany-operated SIEM and sensors rather than reselling third-party products.
The Matrix Verdict
57/100 — INCREMENTAL INNOVATOR
DCSO scores 34/60 (56.7), placing it in the Incremental Innovator tier. It is a credible, sovereignty-focused German MDR provider with strong institutional backing, but its service model is conventional and public evidence of detection efficacy is limited.
Editorial Note: Claims vs. Verified Findings
Independently verifiable: 2015 founding by Allianz, BASF, Bayer and Volkswagen (BASF press release), Berlin registration (HRB 172382), BSI C5 attestations and ISO 27001 certification (reported by DCSO, issued by independent auditors). Vendor claims: unique access to the most current DACH threat information, 30-100 Gbit/s sensor performance, and self-reported counts (threat intelligence reports, products tested) are not independently verified. No funding total is published, so none is given.
Sources
Alternatives to DCSO – Deutsche Cyber-Sicherheitsorganisation
ReliaQuest
ReliaQuest operates GreyMatter, a security operations platform that unifies detection, investigation, and response across a customer's existing security…
sirar by stc
Saudi cybersecurity subsidiary of stc and NCA Tier 1 licensed managed SOC provider serving government and critical national…
Ontinue
Ontinue delivers 24/7 Managed Extended Detection and Response built specifically to maximize the value of an organization's existing…
RADICL
A Boulder, Colorado-based cybersecurity-as-a-service provider built specifically for small and mid-sized Defense Industrial Base contractors, combining managed detection…
CPX
Abu Dhabi cybersecurity company, a G42 company, offering managed detection and response, SOC operations, consulting and in-house security…
Arctic Wolf
Managed detection and response provider delivering a 24/7 human 'Concierge Security Team' as a de facto outsourced SOC…