StartUpSecure

StartUpSecure is a funding program of the German Federal Ministry of Research, Technology and Space (BMFTR). It supports technology-oriented startup projects in the field of IT security – with Cube 5 as the central point of contact.Goal: To strengthen innovation in Germany and Europe and bring good research ideas into application more quickly.Topics: Cloud and edge security, IoT security, secure digital identities, quantum communication, security for and through AI, security of overall systems and networks, usable security &amp; privacyApplication: StartUpSecure can be entered in two independent funding phases (Phase 1 – development phase, Phase 2 – implementation phase).Deadlines: Project outlines can be submitted quarterly in advance via Cube 5 (deadlines: March 31, June 30, September 30, December 31).

Are you still developing your ideas? The primary goal of the development phase is to provide proof of principle for technological concepts in order to validate their feasibility and potential.Target group: People interested in starting a business at universities or research institutions.Funding period: Up to 12 months

Development

Has your startup already been founded? In phase 2, you will develop your product or service to market maturity.Target group: Early-stage startups (founded, less than one year old)Funding period: Up to 12 months

Implementation

How it works

Talk to us about your research and ideas. Submit your project outline via Cube 5 – we will help you with the preparations.

Submission

Our technical advisory board will review your idea and provide a funding recommendation or feedback for further development.

Validation

Benefit from individual support: coaching, mentoring, network access – from the initial idea to market readiness.

Support

Dr. Maik Ender

Anne Plitt

Deutsch

Home

StartUpSecure – Das BMBF Förderprogramm für Startups im Bereich IT-Sicherheit und Cybersecurity

Cybersecurity-Innovation fördern mit StartUpSecure

StartUpSecure

Workshops, panels, and countless lessons learned. WERK X and FOUNDERS LEAGUE invite you to join them:On November 27, 2025, Bochum will transform into a hub for founders, doers, and ambitious young teams. Startup Workshop Day is all about practical sessions, honest exchanges, and the right network to turn ideas into real businesses.The event will feature powerful speakers from Holy Energy, BRYCK Startup Alliance, our health partner Techniker Krankenkasse, and other startup giants. They will share first-hand insights, experiences, and tools.Whether you are just starting out or already have your first product on the market, here you will find the inspiration, knowledge, and contacts to take your startup to the next level.Students receive a 50% discount with the following code: dz4w16df

Workshop

Startup Workshop Day Bochum

Slush – the world&#039;s leading startup event and the largest gathering of VC on the planet. Coming Nov 19–20, 2025 to Helsinki, Finland.Be part of the #startupteam of Startup Team Bochum!mber 18 to 21, 2025, Startup Team Bochum will take you and your co-founders to Helsinki – including flights, accommodation at the Radisson Blu Plaza, Slush tickets, and a pitch slot on the German Pitching Stage of the AHK Finland. The main Slush event will take place on November 19 and 20.Apply by September 8, 2025 with your pitch deck (max. 15 slides) – we are looking for three promising startups based in Bochum and less than three years old. A great opportunity to make a real impact!

Event

SLUSH 2025

Teams or individuals can apply until January 15, 2026.The three best submissions will receive prize money: EUR 100,000 for first place, EUR 20,000 for second place, and EUR 10,000 for third place.The award ceremony will take place on November 5, 2026, as part of the Cybersecurity Innovation Conference in Bochum. Further information will follow.The jury for the 11th German IT Security Award will be chaired by Prof. Dr. Michael Waidner, Director of Fraunhofer SIT and Founding Director of the National Research Center for Applied Cybersecurity ATHENE.The jury brings together renowned experts from the fields of IT security, cryptography, system and network security, and cyber attack defense.The award ceremony is organized by the Horst Görtz Institute for IT Security at Ruhr University on behalf of the Horst Görtz Foundation, in cooperation with Bitkom e. V. and the National Research Center for Applied Cybersecurity ATHENE in Darmstadt.The registration link will be activated in a few days.

Award ceremony

11. Deutscher IT-Sicherheitspreis

It&#039;s a match! ITS.Connect has been bringing companies and students of IT security together since 2008. As the largest educational institution for IT security with around 1,000 students, the Ruhr-Universität Bochum is a pioneer and leader in Europe – half of all ITS graduates in Germany study here. ITS.Connect is therefore the ideal platform to get to know companies and ITS talents.

Fair

ITS.Connect 2026

Forget everything you know about start-up events. We are rethinking, rebuilding, and making room for real experiences: stages instead of panels, encounters instead of buzzwords, energy instead of monotony.What can you expect? Two days with top speakers, networking, new formats, food, and everything that makes the Ruhr region scene what it is.For start-ups, grown-ups, investors, visionaries, and simply anyone who wants to think differently about business.Mark your calendar. Because you don&#039;t want to miss what we&#039;re building right now.

Conference

ruhrSUMMIT 2026

Founders&#039; get-together: Cybersecurity &amp; Communication Technology (6G) – network, exchange ideas, grow!Meet other founders from the fields of cybersecurity and future communication technologies (6G), make valuable contacts and talk about your challenges and successes in a relaxed atmosphere.You can expect:<ul><li>Networking in a relaxed atmosphere – because it&#039;s easier together!</li><li>Exchange at eye level with young and experienced founders.</li><li>Changing hosts and exciting locations – always new impulses and fresh ideas.</li><li>Snacks &amp; drinks - your physical well-being is taken care of.</li></ul>Whether you&#039;re just starting out or already in the thick of it – come along and become part of our community! This edition of the Cube 5 Stammtisch is hosted by Innovation anne Theke, a project of the Bochum Wirtschaftsentwicklung (Bochum Economic Development).When? 20.11.2025 um 17:30 UhrWhere? Zum Kuhhirten, Brückstraße 12-14, 44787 Bochum

get-together

Networking

Cube 5 Get-Together

From coal to cloud – for secure digital progressOur world is becoming more digital, more connected, but also more vulnerable. In light of global crises, geopolitical tensions, and rapidly growing cyber threats, the security of digital infrastructures is more important than ever. Small and medium-sized enterprises in particular are facing increasingly complex challenges when it comes to protecting their systems, data, and digital business processes.The NRW IT Security Day offers practical guidance and concrete support. It brings entrepreneurs together with experts to share knowledge, identify risks at an early stage, and jointly develop effective security strategies. With keynote speeches, expert forums, and an accompanying trade exhibition, participants receive concrete assistance in answering individual questions and building a network.5th German-Baltic Digital SummitThe 5th German-Baltic Digital Summit takes place together with the &quot;IT-Sicherheitstag&quot; in Dortmund. On this day and during the company visits, participants have the opportunity to engage actively with top-level professionals of the German IT industry. In engaging discussions about innovation and mutual learning, partakers can experience first hand the German business environment. Furthermore, companies will have the opportunity to establish and strengthen their contacts with partner companies. In 2025, the German-Baltic Chamber of Commerce is cooperating with the federal state of North Rhine-Westphalia, building a solid ground for strong cooperation with its German partners.

NRW IT Security Day

Cube 5 Horst-Goertz-Institute for IT Security Ruhr-Uni­ver­si­tät Bo­chum (Building MC 0/70) Uni­ver­si­täts­stra­ße 150 44780 Bo­chum

LinkedIn

Instagram

Nachgehackt – the IT Security-Podcast Listen now on:

Imprint

Data Privacy

About us

Services

Startups

Events

News

Contact

Podcast

News from the network

ECSO Cyber Investor Days: Call for startups

70 Percent of all Cyber Attacks Encrypt Backups.

ATHENE Startup Award UP25@it-sa: Apply now

Press release

Weekly top 5 hacker-relevant vulnerabilities now available on the IT security marketplace

Cube 5 featured in Tagesschau report

Launch of applications for the 11th German IT Security Award

RIPS Technologies specialized in web application security and delivered a highly efficient software solution for the automated code analysis of web applications. Innovative static code analysis techniques enabled precise detection of even complex security vulnerabilities no other solution can detect. In 2020, RIPS Technologies was acquired by the Swiss company SonarSource and the technology got integrated into Sonar‘s Clean Code solution.

Cybersecurity

HGI Pioneers

Application Security

Detection & Response

RIPS Technologies > Sonar

Filen is engaged in the provision of client-side “zero-knowledge” encrypted cloud storage for the end customer market.Through uniquely implemented AES-256bit encryption, only the user knows his/her encryption key. This allows Filen to offer absolute privacy and security alongside all important cloud features in encrypted form.

Seed

Cloud Computing

Filen

SoSafe is one of the leading security awareness and training providers in Europe. Founded in 2018 by Dr. Niklas Hellemann, Lukas Schaefer and Felix Schürholz, SoSafe now has more than 4,000 customers worldwide.Using elements of behavioral psychology and intelligent algorithms, SoSafe enables personalized learning experiences and attack simulations that help employees actively protect themselves from online threats.

Growth

Education | Awareness

SoSafe

FuturSecure GmbH specializes in next-generation data protection and information security in the field of automation technology.

Pre-Seed

Consulting & Services

FuturSecure

PHYSEC provides innovative IT security solutions for use in the Internet of Things (IoT) based on a unique combination of digital and physical security.By leveraging IoT and innovative technologies, PHYSEC enables the secure digitization of critical infrastructure across manufacturers and technologies.

IoT Security

Physical Layer Security

Physec GmbH

PREVENCY® offers innovative SaaS training and simulation software that helps organizations prepare for incidents and crises such as cyberattacks.As part of the crisis training, employees learn to master challenges virtually before they actually happen.

Prevency

Novoflect develops intelligent and reflective surfaces (RIS = Reconfigurable Intelligent Surfaces) for the future 6th generation of mobile communications (6G). These surfaces are to be designed in such a way that they can guide and control radio waves in a targeted manner, e.g. to efficiently close dead spots. To this end, suitable materials, design approaches and circuits will be investigated in order to develop a single reflective element for use in the GHz frequency range. The individual elements are then combined to form an array. By developing a phase shifter circuit and a control unit for the array, a demonstrator of the overall system will be created.

Communications

Future Communications Technology

Novoflect

With tegolySIGN, you can bring the digital signature directly into your Microsoft Teams. Our product stands for fast and efficient contract processes that save you time and money. Take advantage of the benefits of digital signatures now and experience a new level of working methods. With tegolySIGN, you can digitize your contract workflow quickly and effectively.

Identity & Fraud

tegoly

XignSys provides technology to protect against cyber security incidents in digital ecosystems. The focus is on securing services and infrastructures through digital identity and access management solutions.The protection of digital identities is ensured with the help of established cryptographic methods and has been evaluated by the German Federal Office for Information Security (BSI) for its high level of trust in the eGovernment sector. XignSys offers additional products and services based on this technology.

XignSys

Simplyblock develops cyber block storage software for cross-cloud use that is suitable for supplementing and replacing both conventional company data storage systems and cloud-based block storage services in the high-performance segment.The focus is on the particularly secure storage of data in such scenarios.

simplyblock.io

With its IT security solutions and services, Ruhr Security GmbH addresses the demanding needs of large enterprises when it comes to the secure use of cloud infrastructures.Founded in 2022 in Bochum, Germany, we aim to expand the IT security industry with our experience in the areas of cloud system security, CI/CD environments and attack surface monitoring.

Data | Network Security | Infrastructure

Ruhr Security

The startup ITAR, short for “Innovative Test procedures for radio systems based on Augmented Reality technologies”, is revolutionizing the control of wireless systems by integrating an augmented reality interface (XR).

AR Technologies

ITAR

Hackmanit&#039;s areas of expertise include web security, single sign-on, web services, and TLS.The company&#039;s primary objective is to provide customized solutions to businesses to combat cybercrime, identify critical vulnerabilities, and implement effective protective measures.Hackmanit offers a suite of services that includes penetration testing, consulting, and training.

Web Security

Hackmanit

Reduce noise. Uncover risks. Control your threat exposure with ENTRYZERO&#039;s AI wingman.For organizations with an increasingly complex IT landscape and security teams operating at maximum capacity, ENTRYZERO provides an always-on AI wingman to scale workforce. It continuously monitors the attack surface, provides automated evidence of exploitability, and recommends prioritized remediations actions.ENTRYZERO supports building digital resilience with:- Proactive Risk Reduction: With 0 % false positives on vulnerabilities- Productivity boost: Scaled to the level of at least two full-time positions- Compliance with facts: For legal entities and supply chain under DORA and NIS2

Offensive Security

ENTRYZERO

The MPC platform developed by utilacy offers companies a simple, cost-effective and flexible solution for collaborative confidential computing. It allows data to be analyzed within the company, across company boundaries and even with competitors without exposing sensitive information. The utilacy platform enables companies to fully exploit the untapped potential of their confidential data. The platform encrypts the data to be analyzed directly on the data source (e.g. server or mobile device) and then distributes the data to multiple parties. What is special about this is that the source data never leaves the data source and therefore no party, including us as the operator of the utilacy platform, has access to this data.

utilacy

Edgeless Systems is a cybersecurity startup based in Bochum, Germany. Our confidential computing products elevate the security of your applications and workflows to unprecedented levels.We make always encrypted and verifiable processing of sensitive data scalable, thus enabling new and exciting forms of trustworthy data processing. With Edgeless Systems, your data and code are always protected — whether at rest or in use. Our company is built on the principles of open source and is a member of the Confidential Computing Consortium including Microsoft, Google, Red Hat, Intel and Huawei.

Kubernetes Security

Edgeless Systems

OTraze is a cybersecurity start-up based in Berlin, Germany, rethinking how critical infrastructure defends against cyber threats. Instead of waiting for alarms, OTraze lets operators see their networks through the eyes of an attacker. The platform automatically discovers assets, maps potential attack paths, and reveals how intruders could move laterally through industrial systems. This transparency empowers organizations to spot weak points early, block attack routes, and keep operations resilient against evolving threats.

OT-Security

Otraze

Apheris is an AI and data analytics product that enables organizations to develop and deploy data and AI algorithms across geographic and enterprise boundaries without compromising the privacy or intellectual property of the training data. Our federated infrastructure easily integrates with existing technology stacks, allowing existing code (e.g., models) to be trained on distributed data. As data privacy regulations continue to evolve and vary by geography, Apheris provides a compliant and secure solution for organizations to extract value from their data.Our customers can use Apheris to drive innovation and growth from their data assets in a secure and privacy-preserving manner.

Apheris

Zealience is a cybersecurity start-up based in Frankfurt am Main, Germany, dedicated to helping IoT manufacturers ensure their devices meet European cybersecurity regulations. Our flagship product, Zealience Compliance Management Software (Z-CMS), automates the documentation process required to comply with the ETSI EN 303 645 standard, preparing manufacturers for EU regulations such as the UK Product Security and Telecommunications Infrastructure regime (UK PSTI), Radio Equipment Directive Delegated Regulation (RED DR), and the Cyber Resilience Act (CRA).

Zealience

Code Intelligence provides an AI-powered software testing platform that enables developers to identify bugs and vulnerabilities that are inaccessible to traditional testing tools.By leveraging Code Intelligence, development teams can execute automated tests on every code change, ensuring the identification of quality and security issues well in advance of their entry into the codebase.

Software Security

Code Intelligence GmbH

VIVAM develops digital, data protection-compliant solutions specifically for psychotherapists. The focus is on resource-optimized training of large language models in 6G networks for applications involving sensitive medical data. The VIVAM GUIDE application simplifies documentation in everyday practice and saves valuable time. The goal: to relieve therapists so they can focus on their patients.

VIVAM

Kasper &amp; Oswald GmbH offers comprehensive product and consulting services in the field of security for embedded systems and IT applications. The range of services includes the analysis, design and implementation of appropriate security solutions. In training courses and presentations, we familiarize you and your employees with problems and modern approaches to hardware and software security.

Embedded Security

Kasper & Oswald

TF-Industries specializes in the development of secure data storage solutions. With the growing threat of cyber-attacks and the need to be able to recover business critical data at any time, TF-Industries offers a solution: Safe Storage.Safe Storage is specialized hardware that uses a patented locking system to create a physical separation between the local network and the backup. Safe Storage provides not only data security, but also fast and reliable recovery options. Grey Rook supported TF Industries with the technical implementation of the software used.

TF-Industries

The Bochum-based cybersecurity company specializes in solutions for the detection and analysis of advanced malware and phishing threats.The product portfolio is designed to make the work of security teams more efficient. Typical applications include incident response, threat intelligence generation, and automated alarm validation and triage.

VMRAY

Honett GmbH is an IT security service provider for the Economy for the Common Good (ECG). We provide specialized services to help our ECG members enhance their resilience, ensuring they can contribute to long-term value creation while also benefiting society. We provide expert guidance on the implementation and management of information security management systems (ISMS), offering streamlined solutions tailored to the needs of small and medium-sized enterprises (SMEs). We are currently initiating an IT security hub for the ECG.

Honett

Identeco protects accounts - no compromise.In 2020, Identeco GmbH &amp; Co. KG was founded at the University of Bonn. We safeguard millions of customer relationships and employee accounts from account takeover, without compromising your own security.With Identeco, you can assess your own infrastructure to determine the potential risks to customer or employee accounts. Try our services today and experience the efficiency and security they provide.

identeco

Small and medium-sized enterprises (SMEs) in particular are threatened by cybercrime. The majority of IT security solutions and companies are only aimed at larger companies. Securious closes the gap with a web solution that is understandable for small/medium-sized companies with risk analysis, suitable recommendations, follow-up and cooperation with IT security consultants.

Vulnerability Assessment

securious

Emproof delivers high levels of security and IP integrity for embedded systems, using unique techniques that protect algorithms and data while securing the entire device. Our solution, Emproof Nyx, prevents reverse engineering, securing your valuable intellectual property and protecting against exploitation attacks.

emproof

The startup ai.dopt supports AI consultants in companies without their own AI developers in using artificial intelligence responsibly and exploiting the enormous potential of AI. AI consultants can be internal or external consultants.

Startup

ai.dopt

BINAMIC Security offers a solution that analyzes binary code independently of the underlying programming language, providing comprehensive protection across all platforms.

BINAMIC Security

Montsecure&#039;s mission is to eliminate the complexity of 5G mobile networks through research, training and software tools for customers. Through this approach, the startup wants to enable customers to take the design, construction and maintenance of a secure 5G mobile network into their own hands. The aim is to make mobile communication secure and accessible for everyone.

Montsecure

AWARE7 GmbH is an ISO27001 certified cybersecurity company based in Gelsenkirchen, Germany. We focus on awareness, pentesting and the development of management systems.We are committed to a broad understanding and increased use of IT security technologies in Germany and Europe. We rely on low-threshold entry formats such as live hacking and awareness shows to reach the majority of people.