Smb Cybersecurity

SMB Cybersecurity GmbH is a German company providing cybersecurity solutions specifically for small and medium-sized enterprises (SMEs). The company was founded in 2024 by Markus Schulte and Bernd Terbrack. Schulte, the CEO, has decades of experience in cybersecurity, having managed data and network protection for large corporations like Vodafone. He identified a critical gap in the market: SMEs lacked the financial and human resources to implement the robust security measures available to large enterprises. This led to the development of the company's core product, the DEFENDERBOX.

The DEFENDERBOX is a plug-and-play hardware appliance, also available as a virtual instance, designed to simplify IT security for companies without specialized knowledge. It automates the process of identifying vulnerabilities and security gaps within a company's internal and external IT infrastructure. The device functions by simulating cyberattacks and running regular, automated penetration tests to uncover weaknesses before they can be exploited by hackers. Its services include external and internal pentesting, vulnerability analysis, and Darknet research to detect data leaks. The system provides users with detailed, prioritized reports and actionable recommendations to address identified threats. The business model appears to be based on selling or subscribing to the DEFENDERBOX appliance and its associated managed security services. In July 2025, SMB Cybersecurity GmbH secured €715,000 in a seed funding round from four business angels and NRW.BANK to further develop the product, expand its partner network, and enter new European markets.

Keywords: cybersecurity appliance, penetration testing, SME security, vulnerability scanning, automated security audit, network security, IT infrastructure protection, managed security service, data leak detection, cyber resilience, Markus Schulte, plug-and-play security, external pentesting, internal pentesting, darknet research, IT security for SMBs, network vulnerability, automated threat detection, cyberattack simulation, NIS-2 compliance