Solutions
Software that came out of consulting practice.
ITSB-OS is our platform for security and compliance management: capture the status, manage the measures, produce the evidence – in one place.
Why we build our own software
Nearly every consulting engagement raised the same question: where is all of this actually maintained? The answer was almost always spreadsheets, email threads and a folder of documents whose current status nobody could confirm. Evidence had to be reassembled before every audit.
ITSB-OS is our answer. Not as yet another tool among many, but as the single place where security status, measures and evidence come together.
Product
ITSB-OS
Security and compliance platform for mid-sized companies, IT service providers and consultants.
Security status, measures and evidence in one place.
ITSB-OS provides an assessment of your own position without a consulting project having to come first: a structured self-assessment and a technical vulnerability scan produce a picture of the status quo and a list of measures derived from it.
From that point on, the platform works as a management instrument: measures are given owners, deadlines and evidence. Whatever is documented can be issued as a report at any time – with your own logo, for auditors, insurers or customers.
Subject areas covered
Capabilities
What the platform does.
Six building blocks that build on one another – from the first assessment to finished evidence.
Security cockpit
The overview: security status, open measures, critical findings and priorities on a single screen – without collecting data first.
Self-assessment
A structured questionnaire positioning the organisation against NIS2 or ISO 27001. The result is not a score but a list of concrete gaps.
Vulnerability scan
A technical check of the externally reachable attack surface – mail servers, web servers, open ports and certificates – without intervening in your systems.
- No agent, no installation
- No changes to the systems being checked
- Findings with context rather than raw data
Measure management
Every measure with an owner, a deadline and its evidence. That turns a recommendation into a trackable task.
Evidence at the push of a button
Reports and evidence documents on demand, carrying your own logo. The current state is always ready to be issued – not after weeks of preparation.
Integrations
Existing security tools can be connected, including Microsoft 365, Sophos, Bitdefender, CrowdStrike, SentinelOne, ESET, WatchGuard and UniFi.
Who it is for
Two groups of users with different vantage points.
Mid-sized companies
Management and IT leads who have to satisfy requirements from NIS2, cyber insurers or customer audits – without an in-house compliance team and without a preceding consulting project.
IT service providers and consultants
Providers managing several client mandates in a structured way: tenant-separated, with reports in their own visual identity and, on request, under their own brand.
Operations
Deployment models and data residency.
The platform is available in three variants. Data remains tenant-separated and exportable.
ITSB-OS Cloud
Operated in a German data centre. The standard choice for companies without specific hosting requirements.
Private cloud
Dedicated operation for organisations with elevated requirements for separation and control.
On-premise
Operated on your own network, including without internet access – for particularly sensitive environments.
For partners
Consultant licence and white label.
For IT service providers, consultancies and data protection practices there is a consultant licence that handles multiple mandates in one environment – under your own brand if you prefer.
- Up to 25 client mandates in one licence
- Reports carrying your own logo
- Partner pricing and partner portal
- Partner edition as a dedicated instance available
Open itsb-os.app (opens in a new tab)
Current packages, scope and pricing are published on itsb-os.app. We deliberately do not repeat prices here, so that no conflicting versions arise.
Further solutions
Complementary offerings in the ITSB ecosystem.
Alongside the platform, ITSB Deutschland operates further offerings that can be used independently.
Cyber-Siegel (cyber seal)
An annually renewable seal certifying, on the basis of an expert review, that a company meets central IT security standards – including a QR code for verification. It is not an accredited certification under ISO/IEC 17065.
Managed data protection
The external data protection officer function together with the operational implementation of GDPR obligations – from the initial review to continuing support.
Managed CISO
The external information security officer in three tiers – from a baseline role to the full CISO function including audit representation.
See ITSB-OS for yourself.
You can explore the platform directly on itsb-os.app. If you would rather discuss your situation first, that works too.