VORNAC GmbH

VORNAC is a German cybersecurity company that provides continuous, autonomous security validation through automated penetration testing. The platform simulates real-world attack scenarios without relying on static scans or manual engagements, covering the full penetration testing cycle as defined by BSI (Germany's Federal Office for Information Security) standards: Reconnaissance, Initial Access, Privilege Escalation, Lateral Movement, and Exfiltration. Key capabilities of the VORNAC platform include: - Autonomous attack simulation with production-safe exploits and reproducible proof-of-concept findings - Automated chaining of multi-step attack paths across systems - Integration via CI/CD webhooks, API triggers, or scheduled runs, delivering findings within hours - Coverage of cloud, on-premises, APIs, and VPN-protected systems - Iterative testing loops that continue until the attack surface is exhausted VORNAC positions its offering as an alternative to periodic manual penetration tests, targeting organizations that require continuous, audit-ready security validation. The platform generates findings compatible with regulatory frameworks including NIS2, DORA, VAIT/BAIT, KRITIS, TISAX, and ISO/IEC 27001. The company emphasizes German digital sovereignty: all infrastructure is hosted in Germany, with no data processed outside German jurisdiction, and operations are compliant with BDSG and GDPR. VORNAC holds the "IT Security Made in Germany" seal from TeleTrusT and is a partner of the Allianz für Cyber-Sicherheit (Alliance for Cyber Security). Clients include organizations such as Carl Zeiss, Penny/REWE Group, and Hetzner Online. Each customer contact is described as a BSI-qualified penetration tester.