IT security.
At half the price.
The state of North Rhine-Westphalia covers up to 50% of the costs. We protect your company – and handle the funding application for you.
Free funding check and introductory call · You only commission us after approval
The funding in three numbers.
of your costs are covered by the state of NRW.
is the maximum grant.
to pay back. It’s a grant, not a loan.
Cyberattacks don’t just hit the big players.
Small and medium-sized companies are a favourite target – because basic protection is often missing.
of reported cyberattacks – e.g. ransomware – hit small and medium-sized companies.
of companies suffered damage from cyberattacks in the last 12 months.
new security vulnerabilities become known worldwide every day. That works out to roughly one every 12 minutes.
One dot = 1 percent
Three building blocks. All-round protection.
Analysis, training and technology have been our daily business for years. Every package combines all three – and all three are eligible for funding.
Current-state analysis
External IT service to analyse your current security level.
- Vulnerability and risk analysis
- Network and infrastructure check
- Assessment of applications & cloud services
Human factor
Training and further education for your employees for user-oriented security.
- Awareness workshops (phishing, passwords, social engineering)
- Role-specific training for IT & business teams
- Emergency plans & rules of conduct for an incident
Software & hardware
Basic IT protection through suitable software solutions, licences and their installation.
- Antivirus & anti-ransomware solutions
- Patch management & automated updates
- Firewall solutions incl. installation
Choose your package.
The packages build on each other: every larger package includes the smaller one in full – plus more.
Starter
For micro-enterprises & the first step
for an investment of approx. €4,000 – 8,000
What’s included:
- Two-day IT security workshop
- Introduction of a password manager for all employees and password rotation if needed
- Two-factor authentication (2FA) for important accounts (admin access, cloud services)
- Backup system for internal documents
- Setting up email authentication (SPF, DKIM, DMARC)
Show 2 more services
- Basic network hardening: Wi-Fi encryption, separate guest Wi-Fi and secure router configuration incl. MAC address whitelisting (where supported by the router)
- Documentation of the IT infrastructure (network plan, IP addresses, device list) incl. measurement, documentation and tidying of the network cabling in the server rack
Professional
For growing SMEs with multiple systems
for an investment of approx. €8,000 – 16,000
Includes everything from Starter (S) - plus:
- Managed email security against phishing & CEO fraud (Stoik)
- Phishing awareness campaign or simulated phishing tests
- Network segmentation (VLANs) separating guests, employees and IoT devices
- Incident response plan: clear steps for an active security incident
- Scanning and cleanup of workstations with antivirus software
Show 5 more services
- Website security check incl. detailed report
- Creation or review of an access rights concept (who has access to what)
- Installation of an uninterruptible power supply (UPS) for critical workstations
- Setup of a central, access-controlled server rack
- Printer security review
Enterprise
For established companies with higher protection needs
for an investment of approx. €16,000 – 30,000
Includes everything from Professional (S + M) - plus:
- Managed detection and response (Stoik)
- 3-2-1 backup strategy (incl. offline backup)
- WireGuard / VPN
- Redundant internet connection (failover solution)
- Disaster recovery plan: restoring critical systems after a total outage
Show 3 more services
- Regular vulnerability scans and penetration tests of external systems
- Continuous, automated vulnerability management for servers, clients and software dependencies
- Honeypot as an early-warning system: every access attempt on the decoy system automatically triggers an alert
Bigger project or multiple locations? We’ll put together an individual offer for you. Talk to us ›
All investment volumes and grant amounts are non-binding guide values. The actual funding amount is determined by NRW.BANK on a case-by-case basis.
It’s that simple.
You decide. We take care of the application, implementation and proof of use.
- 1
Funding check
Within minutes you know whether your company generally qualifies.
- 2
Introductory call
We discuss your needs and choose the right package together.
- 3
Lottery & application
NRW.BANK allocates places by monthly lottery. We prepare all documents – you submit them via your own account.
- 4
Implementation
After approval, we carry out the measures in your company.
- 5
Payout
We prepare the proof of use – and your grant is paid out.
Is this for you?
If these points apply, your chances are good.
- Micro, small or medium-sized company based in North Rhine-Westphalia
- You haven’t started the project or signed anything binding yet
- Financing incl. your own share is secured
- The project takes 12 months at most
- No funding received from this programme in the last 2 years
- References from the contracted company – we bring those
Frequently asked questions
Personal, not anonymous.
Behind Bitrebels are the two of us: Lucas and Sebastian. From the first call to the payout, you talk directly to us – no call centre, no waiting line.
Lucas EngelkeFounder · Bitrebels
Sebastian WeißFounder · Bitrebels
Ready for stronger IT security?
The lottery takes place every month - register early so you don't lose a month. Find out within minutes whether you are eligible, or talk to us directly.
All information without guarantee. Based on the NRW.BANK funding programme "Mittelstand Innovativ & Digital (MID) – Digitale Sicherheit". Official funding details at NRW.BANK