VamiSec GmbH

VamiSec GmbH

Speciality: AI/LLM, IoT, and Application Security Pentesting

Bonn, Germany 12 employees
[01] About

VamiSec GmbH is a Germany-based IT services and consulting company specializing in IT security, compliance, and penetration testing; with 5 employees, founded in 2025, led by ISO 27001 Certified Lead Auditor Valeri Milke, and offering services such as penetration testing, red teaming, cloud security, and AI compliance.

VamiSec GmbH – Your Trusted Partner in IT Security, Information Security, and Compliance VamiSec GmbH combines over 15 years of expertise in IT security and compliance with a commitment to delivering tailored solutions that protect assets and foster innovation. Led by ISO 27001 Certified Lead Auditor Valeri Milke, who has successfully completed over 150 projects across 70+ clients, the company specializes in implementing and certifying Information Security Management Systems (ISMS) in accordance with ISO 27001, TISAX, and BSI IT-Grundschutz standards. Our services include governance, risk management, cloud security, and compliance with NIS2, DORA, AI Act, and GDPR. From securing hybrid IT infrastructures to conducting audits and developing risk mitigation strategies, VamiSec provides strategic, innovative, and reliable solutions tailored to your business needs. Our Services: -IT Security: Penetration Testing & Red Teaming, Comprehensive IT security audits, threat modeling, development of security concepts, and implementation of attack detection and prevention measures. -Cloud Security: Tailored CNAPP & CSPM solutions for AWS, Azure, and hybrid IT infrastructures, including secure software development and deployment processes. -Compliance and Certifications: Support in meeting regulatory requirements such as NIS2, DORA, AI Act, GDPR, and CRA, as well as preparation for certifications like ISO 27001 and TISAX. -Virtual CISO Services: Strategic and operational support as an external Chief Information Security Officer (vCISO). -IT Incident and Business Continuity Management: Development and implementation of emergency plans in line with ISO 22301, including simulation exercises. -Awareness Training: Interactive workshops and phishing simulations to raise employee awareness of IT security risks. -Risk Management: Analysis and evaluation of risks, as well as the development of customized risk mitigation strategies.
[02] Services
Provides IT Security And Compliance Services Including Penetration Testing
IT Security Audits
Threat Modeling
Application Security
Vulnerability Management
Attack Detection
Deception Technologies
Cloud Security
Managed Security Services
Incident Response
Compliance Consulting
ISMS Implementation
Security Training And Certification.
[03] Certifications
[05] Notable Clients
  • Orange Cyberdefense
  • OBI Smart Technologies
  • REWE digital
  • Comava