Penetration Testing, ISO 27001 Consulting, and Phishing Simulations

AWARE7 GmbH is a cybersecurity services firm based in Gelsenkirchen, Germany, run by two managing directors who met while completing master's degrees in internet security at the Westphalian University of Applied Sciences. It works with mid-market organizations of roughly 50 to 2,000 employees, concentrated in regulated sectors: healthcare, finance, critical infrastructure, and public administration. The firm is certified to ISO 27001 and ISO 9001 and states it has served more than 200 clients across the DACH region.

The offering splits into three practices. Offensive security covers manual penetration testing, red team engagements, vulnerability scanning, and testing aimed specifically at large language model and RAG deployments. Consulting covers ISMS build-out and ISO 27001 certification support, internal audits, and outsourced roles including external information security officer and GDPR Article 37 data protection officer. Awareness work runs phishing simulations, live hacking demonstrations for staff and executives, and certified training courses including NIS-2 preparation.

Pricing is published rather than quoted privately: penetration tests start at 5,400 euros, red teaming at 15,000 euros, phishing simulations at 1,200 euros, and external security officer retainers at 1,500 euros per month. The firm commits to fixed-price quotations within 24 hours, staffs engagements with its own permanent employees instead of subcontractors, and keeps client data in Germany, avoiding US cloud providers. It also runs research collaborations with the BSI and the German federal research ministry.