Kudelski Security

Kudelski Security
Name	Kudelski Security
Type	Private subsidiary
Founded	2009
Founder	André Kudelski
Industry	Cybersecurity
Headquarters	Cheseaux-sur-Lausanne
Area served	Global
Parent	Kudelski Group

Kudelski Security is a Swiss-based cybersecurity firm specializing in digital security services, managed detection, and secure software development. Founded as the cyber arm of the Kudelski Group, the company provides offensive and defensive capabilities across enterprise, critical infrastructure, and embedded systems. Its work intersects with major technology, media, and telecommunications firms and with research institutions and government bodies involved in digital resilience.

History

Kudelski Security emerged from the Kudelski Group's long history in conditional access and content protection, aligning with the rise of targeted cyber threats experienced by Sony Pictures Entertainment, Equifax, and Yahoo. Early activities connected to the firm’s lineage include collaborations with Microsoft on content protection and with Thomson and Hughes Network Systems in set-top security. The organization expanded during the 2010s as incidents like the Sony Pictures hack, Stuxnet, and WannaCry reshaped enterprise priorities, prompting partnerships with Intel, Cisco Systems, and Juniper Networks to integrate hardware-rooted defenses. Post-2015, the company established offensive security labs and advisory services influenced by methodologies from MITRE and SANS Institute, aligning with frameworks such as NIST Cybersecurity Framework and compliance regimes used by ISO standards bodies.

Services and Solutions

Kudelski Security offers a portfolio spanning managed detection and response, secure software development, and embedded device protection. The firm provides managed security services comparable to offerings from Accenture, IBM Security, and Palantir Technologies, while also delivering penetration testing and red teaming akin to services by CrowdStrike and FireEye. For telecommunications and media clients like Liberty Global, Sky Group, and Dish Network, the company supplies conditional access solutions and broadcast security similar to work by Nagra Kudelski in its parent group. The company also develops secure boot and hardware trust services interoperable with ARM, Intel, and AMD platforms, and integrates with cloud providers such as Amazon Web Services, Microsoft Azure, and Google Cloud Platform for hybrid security architectures.

Research and Threat Intelligence

The firm maintains threat research teams that publish technical analyses and indicators related to advanced persistent threats observed against NATO member states, European Union institutions, and corporate targets across sectors like finance and media. Research outputs have drawn comparisons to reporting from Mandiant, Kaspersky Lab, and Symantec and sometimes reference malware families associated with campaigns traced to state-aligned actors implicated in incidents like the NotPetya and Olympic Destroyer outbreaks. The company participates in information sharing with organizations such as FIRST and operates intelligence feeds used by security operations centers at enterprises like Deutsche Telekom and Orange S.A..

Global Operations and Offices

Headquartered in Cheseaux-sur-Lausanne, the firm operates regional teams across the United States, United Kingdom, France, Germany, Switzerland, Singapore, and Australia. Its global footprint supports clients in markets dominated by firms like Comcast, Vodafone, and BT Group, enabling local incident response and on-site assessments similar to capabilities maintained by Secureworks and Rapid7. Strategic labs and research centers collaborate with academic partners at institutions such as École polytechnique fédérale de Lausanne, ETH Zurich, Massachusetts Institute of Technology, and Imperial College London.

Corporate Structure and Leadership

Kudelski Security functions as a business unit within the Kudelski Group corporate family, led by executives with backgrounds across cybersecurity consulting, engineering, and intelligence. Leadership profiles often mirror career paths seen at McKinsey & Company, Booz Allen Hamilton, and national cybersecurity agencies such as ANSSI and National Cyber Security Centre (UK), combining private-sector experience with public-sector incident response. Governance includes board-level oversight from the parent company and engagements with standard-setting organizations like ISO and policy fora such as the World Economic Forum.

Clients and Partnerships

The company serves clients across media, telecommunications, finance, and government, including operators and integrators akin to NBCUniversal, AT&T, HSBC, and ministries comparable to those of France and Switzerland. Strategic partnerships extend to technology vendors including Cisco Systems, Microsoft, Palo Alto Networks, and chipset vendors such as ARM Holdings. Collaboration with consultancy and systems integrators like Deloitte, PricewaterhouseCoopers, and Accenture supports large-scale transformation projects and incident response engagements.

Awards and Certifications

Kudelski Security and its parent operations maintain industry certifications and have been recognized in contexts similar to awards granted by Gartner and SC Media. The organization holds accreditations aligning with ISO/IEC 27001 and participates in certification schemes administered by bodies like Common Criteria and national authorities that issue approvals for secure products in markets such as Switzerland and the European Union. The firm’s research has been cited at conferences including Black Hat USA, RSA Conference, Chaos Communication Congress, and DEF CON.

Category:Cybersecurity companies