Knowledge. Practice. Orientation.

Consulting portfolio, whitepapers, studies and practical guides on current security and compliance topics — concise, well-founded, ready to use.

Knowledge by topic

Our knowledge is organized into five topic areas. Each topic area has its own knowledge page with in-depth content, related pages and the matching whitepapers for download.

GRC – Governance, Risk & Compliance

ISO 27001, BSI IT-Grundschutz, DORA, NIS2, the EU CRA and the EU AI Act — governance, risk management and audit-ready compliance.

27 TopicsExplore topic

IT Security

Penetration testing, secure coding, threat modeling and a secure SDLC — technical security across the entire lifecycle.

21 TopicsExplore topic

Agentic AI Security

LLM & agentic-AI pentesting, prompt injection, OWASP LLM Top 10 and AI threat modeling — securing AI systems.

22 TopicsExplore topic

Cloud Security

CSPM & CNAPP (partner: Wiz), sovereign cloud architecture, BSI C5, ISO 27017 and the EU Cloud & AI Act (CADA) — cloud security, compliance and sovereignty as one.

10 TopicsExplore topic

Secure Software & Product Development

Secure coding, SSDLC, CI/CD security, supply chain (SLSA, SBOM) and product regulation from CRA to IEC 62443 — security across the entire product lifecycle.

23 TopicsExplore topic

News & pinned posts

Partnerships, milestones and new offerings — the most important posts from the VamiSec universe.

All news

📌 PinnedGRC & Compliance12 August 2026Up to €15,000 in grants: GRC consulting via MID-Digitale Prozesse (NRW)The NRW state programme “Mittelstand Innovativ & Digital” funds external consulting for digitalising your GRC processes — from NIS2, CRA, EU AI Act and ISO 27001 gap analyses to roadmap, tool selection and VamiGRC implementation. At a €500 net day rate: €0 own contribution for the consulting. 2026 call: applications from 7 Sep to 1 Dec 2026 via NRW.BANK — we guide you through the entire funding process.Read more →

📌 PinnedCloud SecurityMay 1, 2026VamiSec is a Wiz Partner for Germany and EMEA — with Technical Foundations and Demo AccreditationVamiSec GmbH is an official member of the Wiz Partner Alliance for the EMEA region — listed in the Wiz Partner Alliance Directory and holding the Wiz Partner Technical Foundations Badge as well as the Wiz Partner Demo Accreditation.Read more →📌 PinnedCompanyApril 19, 2026VamiSec and softScheck — strategy meets technical depthValeri Milke also takes on the role of Managing Director at softScheck GmbH. VamiSec remains the strategic home for GRC, compliance, and management systems — complemented by softScheck’s 20+ years of product security expertise (threat modeling, pentest, SSDLC, fuzzing).Read more →

IT Security1 August 2026VamiSec becomes a CrowdStrike partner — Falcon from a single sourceVamiSec is an authorised CrowdStrike implementation and reselling partner: licensing, rollout and 24/7 operation of the AI-native Falcon platform — from EDR/XDR to cloud security, identity protection and MDR. Full details on our CrowdStrike landing page.Read more →IT SecurityJuly 11, 2026VamiSec is an authorized KnowBe4 partner & reseller — security awareness training & human risk managementVamiSec GmbH is an authorized KnowBe4 partner & reseller, bringing the world's largest platform for security awareness training and simulated phishing to the DACH region — from licensing to a fully managed awareness program...Read more →GRC & ComplianceJune 30, 2026VamiSec is an accredited PECB Training Partner — 300+ official certifications (ISO 27001, NIS 2, EU AI Act & more)VamiSec GmbH is an accredited PECB Training Partner, delivering 300+ internationally recognized certifications — from ISO 27001 and NIS 2 to the EU AI Act — taught by active Lead Auditors who live these standards in client projects every day.Read more →IT SecurityJune 26, 2026VamiSec is an authorized OffSec Partner for the DACH region — official trainings & certifications (OSCP, OSEP, OSWE & more)VamiSec GmbH is an authorized OffSec partner, bringing official offensive-security trainings, live labs and certifications — from OSCP and OSEP to OSWE — with German-speaking guidance to companies in Germany, Austria and Switzerland.Read more →GRC & ComplianceApril 2026Grundschutz++ now available as a consulting serviceWe now offer Grundschutz++ as an integrated consulting service — the combination of BSI IT-Grundschutz and ISO 27001, delivered within the Vami IMS framework. One management system, two certification goals, no duplicate effort.Read more →CompanyMarch 2026Valeri Milke speaking at the IT Security ConferenceOur CEO Valeri Milke was invited as a speaker and presented on integrated management systems (NIS2, DORA, AI Act, CRA) and the Vami IMS approach — with hands-on experience from current client projects.Read more →

Consulting Portfolio · 2026

VamiSec Consulting Portfolio 2026

Trusted · Holistic · Engineered

Our complete service portfolio in one deck — from ISO 27001, NIS2, DORA and CRA to IT- & Cloud Security, AI Governance, Managed Services and the Vami IMS Framework. 27 pages, compact.

📄 27 pages·2.7 MB · PDF·EN

View online →↓ Download PDF