How Secfix Plans to Cut Compliance Work 90% for European SMBs

Secfix, the all-in-one security compliance platform for Europe, led by Fabiola Munguia, Grigory Emelianov, and Branko Džakula, has raised $12 million Series A led by Alstin Capital, with participation from Bayern Kapital and continued backing from existing investor Neosfer.

The new funding is set to accelerate European expansion and strengthen capabilities. Over the next 12 months, priorities include advancing AI-native features, scaling the automation and CISO-as-a-Service offerings, expanding beyond DACH, and adding support for the EU AI Act and NIS2 Directive, among others.

The platform goes beyond basic automation, streamlining complex certification processes such as ISO/IEC 27001, NIS2 Directive, General Data Protection Regulation, SOC 2, Digital Operational Resilience Act, and ISO 42001, significantly reducing typical timelines. Automation is combined with a CISO-as-a-Service model that delivers continuous monitoring, incident management, security questionnaires, gap assessments, policy reviews, access controls, cloud scanning, and penetration testing.

For European SMBs and mid-market companies, certifications have traditionally required 12–18 months of manual, resource-intensive effort, often delaying enterprise deals. That bottleneck is removed through automation-led workflows and expert oversight. Compliance workloads are reduced by up to 90%, certification timelines shrink from months to weeks, questionnaire response times improve by 50%, sales cycles accelerate by 3x, and customers report 100% audit success rates.

Founded in 2021 in Munich, Secfix emerged from a shared frustration with slow, manual compliance processes. The founding team combined strengths across strategy, product, and security to build a scalable, automation-led compliance platform.

Fabiola Munguia brings experience from Siemens and BMW and was recognized in Forbes 30 Under 30 Europe. CTO Grigory Emelianov previously worked at Amazon, while CISO Branko Džakula has guided 100+ companies through certifications, including ISO/IEC 27001 and SOC 2.

The company has since evolved from a GRC automation tool into a full end-to-end security compliance platform serving hundreds of customers across more than 15 European countries, including WorkMotion and Trafigura.

Secfix was founded by three non-EU entrepreneurs, including CEO Fabiola Munguia. Women represent 50% of both the leadership team and the overall workforce, with team members spanning 15 nationalities.

What began as a solution to help companies achieve certifications quickly and efficiently is evolving into a long-term security and compliance partnership. The vision centers on establishing Secfix as Europe’s leading end-to-end compliance platform, supporting companies from their first ISO/IEC 27001 certification through their broader security journey.

With increasing regulatory pressure from frameworks such as the NIS2 Directive, Digital Operational Resilience Act, and the EU AI Act, the platform is positioned as a long-term compliance infrastructure.

According to Andreas Schenk, Partner at Alstin Capital, the combination of AI-native automation and CISO expertise establishes Secfix as essential infrastructure for European growth companies.