gdata.de

What It Is

G DATA is a German cybersecurity vendor, with the site emphasizing “IT-Sicherheit Made in Germany”: its security software is developed in Germany, services are operated by German teams, and data is stored on German servers. Its enterprise products go beyond traditional antivirus, covering Managed XDR, endpoint security, security awareness training, incident response, penetration testing, and security consulting.

Core Capabilities

G DATA MXDR is positioned as a 24/7 managed SOC, suitable for organizations that want round-the-clock attack detection and blocking without expanding their internal security team. The service works through the NextGen Endpoint Agent and a web console. In the detection phase, it uses graph- and AI-supported event correlation, along with IoC/IoA threat intelligence. In the analysis phase, SOC analysts assess incidents using MITRE ATT&CK, the Cyber Kill Chain, and Root Cause Analysis. In the response phase, remediation measures are carried out and customers are notified by phone or email. Its service levels include G3 for servers, as well as G5/G7 for the entire IT environment; G7 includes broader incident coverage and customer management capabilities.

Pricing and Compliance

The site does not disclose specific pricing, only stating that a free trial is available and that customers can choose based on service level. Incident Response Retainer, 365 Mail Protection, MDM, Device Control, and other features are available as optional add-ons. In terms of compliance, G DATA emphasizes DSGVO/GDPR, EU regulations, and German data residency. The site also mentions ISO 27001 certification, ISO 27001 compliance for its Awareness platform and reporting, BSI-qualified APT response provider status, and support for NIS-2-related requirements.

Pros and Cons

Its strength lies in strong local trust: German-language 24/7 phone support, a personal contact at its Bochum headquarters, and SOC analysts working in the same location as the development team. This makes it suitable for organizations sensitive to data sovereignty and response speed. Its Awareness training is also fairly comprehensive, including gamified courses, phishing simulations, SAML authentication, and a Reporting Cockpit. The drawbacks are that publicly available technical integration information is limited, with no visible details on SIEM/SOAR/API integrations; pricing requires a quote; and the service narrative is clearly geared toward the German and European markets, so suitability for non-German-speaking regions needs further verification.

Who It’s For and Access from China

It is better suited to companies in Germany and the EU, public-sector organizations, municipalities, manufacturers, universities, utilities, and MSPs—especially organizations that lack their own SOC but face compliance pressure. Access from mainland China is not addressed in the main content, so its status is assessed as unknown. If a Chinese company is considering procurement, it should also confirm cross-border data arrangements, language support, network connectivity, and local response arrangements.