Schwarzer Regen

Infrastructure security and process automation.

We work with companies facing two real challenges at once: rising regulatory requirements (NIS2, DORA, AI Act) and pressure to cut costs and automate day-to-day processes. These two areas meet on a single attack surface. Most providers cover one of them. We cover both, registered in the German commercial register, with an office in the Bayerischer Wald (Bavarian Forest).

/02

About us

○ accepting engagements

It doesn't matter who you are. We support your work.

Every company faces the same problems; only the manner and scale of the response differ. Automation introduces attack surface: mail bots, RPA access, API keys. Anyone building automation without a cyber layer creates gaps. Anyone doing cyber without an understanding of automation does not understand how SMEs actually adapt. We combine both disciplines and deliver in-house solutions at enterprise quality.

"The company is young. The experience of the people behind it is not."

/03

Our products · in-house tools

3 tools
○ all run locally

We don't only advise. We build tools that solve problems we observed at our clients.

Our tools are built as a direct response to needs we observe at clients. Each one solves a concrete problem we have run into in daily work. They all run locally, on the user's device, and the data does not leave that machine.

— tools 01 / 03

/ 01 available · PL

lexorbis

A legal assistant for legal counsel, attorneys, prosecutors, and trainees. Built on public sources of Polish law. Runs on your own computer, client documentation never leaves the device.

lexorbis.pl ↗ · macOS · Windows

/ 02 coming soon · DE + PL

costio

A mobile app for the trades and craft sector in Germany and Poland. It generates a cost estimate and pricing for the job based on a photograph of a room. Pricing follows the company's own rates or the Gewerbe. No cloud, no images sent to external servers.

costio.app ↗ · iOS · Android · coming soon

/ 03 available · macOS + Win 11

sentinel

Email Threat Intelligence for everyone. It combines the verdicts of multiple antivirus engines, IP reputation databases, and heuristic rules into a single coherent threat assessment. What used to take hours now takes seconds, together with a report in the user's language. Runs locally on macOS ARM64 and Windows 11; message data never leaves the device.

macOS ARM64 · Windows 11

runs locally · data never leaves the device · macOS · Windows 11 · iOS · Android

/04

Cybersecurity · three areas of expertise

3 areas of expertise
○ reports anyone can read

Cybersecurity for the Mittelstand. Three areas of expertise under one roof.

Every company has a different infrastructure, different risks, and a different data value, which is why we do not sell off-the-shelf solutions. We specialise in three areas: security monitoring, infrastructure auditing, and data recovery, aligned with GDPR/DSGVO, BSI IT-Grundschutz, and NIS2.

— areas of expertise 01 / 03

/ 01 monitoring · 24/7

Event monitoring

continuous real-time observation

We deploy our own SIEM or integrate with tools the client already operates. Detection rules follow the principle of layered defence, where each layer of the infrastructure is monitored independently.

/ 02 analysis · pentest

Infrastructure analysis

inventory, vulnerability testing, conclusions and recommendations

We inventory IT assets, map dependencies, and identify weak points. We correlate technical findings with a threat model specific to the client's industry. The output is a map of practical business consequences in language you can actually use, not a dry technical list. We test infrastructure resilience to unauthorised access under controlled conditions, in line with recognised industry standards.

/ 03 forensics · recovery

Data recovery

after failure, human error, or attack

We recover data from damaged media and after human error. We work under controlled conditions. The client never loses the originals; we work on binary copies. Everything is handled in line with applicable standards and best practice.

GDPR · DSGVO · BSI IT-Grundschutz · NIS2 · EU hosting only

/05

Automation · tailored to your needs

8 automation areas
○ each one only after process analysis

Repetitive work eats your time every day.
We automate the processes that deserve it.

We deploy automation on your own infrastructure, adopting new technology while reducing data security risk and keeping fixed costs low. Before we build anything, we analyse which processes in the organisation will actually benefit from automation. Not automating is also a decision, just as much as deliberately limiting AI in your work.

— what we automate 01 / 08

/ 01 e-mail · communication

Inbox and communication

e-mail · classification · replies · summaries

Automations that monitor company mailboxes, classify messages, draft replies in your company's voice, and notify the right person via messenger. Priority items arrive as a voice summary on WhatsApp, Slack, or Telegram. Integrates with Outlook, Gmail, or your own client. Processing runs locally or in the client's cloud.

/ 02 OCR · accounting

Invoices and accounting

OCR · DATEV · KSeF · expense tracking

An automation that monitors the mailbox for invoices and receipts. The system reads the file, classifies it, assigns it to a project or expense category, and stores it in a folder structure on disk (Drive, OneDrive, local NAS). For shop orders it issues invoices to customers automatically. By combining several solutions, export to your accounting system is possible (formats compatible with DATEV, KSeF, and similar).

/ 03 CRM · calendar

Meetings and calendar

transcripts · bookings · voice · CRM

Automations that generate transcripts, summaries, and action lists for participants, and book meetings with clients from a form or messenger, including capturing contact details and times. Integrates with Google Meet, Microsoft Teams, Zoom, Google Calendar, Outlook, ClickUp, HubSpot, Pipedrive, and CRM systems.

/ 04 B2B · leads

B2B sales

leads · CRM · proposals · qualification

Automations that source B2B contacts from Google Maps based on your criteria (industry, location, profile). With enrichment from sources such as LinkedIn and Handelsregister, every new lead lands in your CRM with full data and context. Personalised messages and proposals are generated from templates.

/ 05 SEO · publishing

Marketing and content

blog · social media · newsletter · publishing

Automations that produce content in your brand's voice — from text posts, graphics, and video reels with an AI background or your avatar, through to blog articles with SEO optimisation (800–2,500 words). Published from a single place, generated across multiple platforms.

/ 06 e-commerce · orders

Shop and e-commerce

product descriptions · invoices · order handling

Automations that generate complete product descriptions for online shops and marketplaces (Allegro, Amazon, eBay) from wholesaler files or basic information. Titles, descriptions, metadata, and images are created automatically. Every order produces an invoice that is sent to the customer automatically.

/ 07 chatbot · 24/7 support

Customer service 24/7

chatbot · website · voice · support

An automation that handles customer enquiries on your website in real time. Trained on the company's knowledge base (products, prices, FAQ, terms, delivery conditions). Depending on the configuration, the customer writes or speaks in their own language and the automation answers in the same one; a transcript is forwarded to the support team with a translation. Complex requests are escalated to a human contact with full context.

/ 08 Sentinel · phishing

Message security

Sentinel · phishing · in-house Schwarzer Regen

Every incoming message is analysed for phishing, suspicious attachments, and credential-theft attempts. Sentinel runs locally on the user's computer or on the client's server; messages do not leave your infrastructure. An in-house Schwarzer Regen product, included at no extra cost as part of an automation or customer-protection engagement. Deployment is on-prem or in the client's cloud.

/06

Cyber News · EU · live

CC0 data
○ EU live · daily updates

— threat map · Europe abuse.ch · CC0

source abuse.ch · Feodo Tracker ↗

licence CC0 · public domain

status —

visible —

— EU source feed · live snapshot

07.05.2026 BSI · hochIBM App Connect Enterprise Certified Container · mehrere Schwachstellen 06.05.2026 BSI · hochMozilla Firefox · mehrere Schwachstellen 05.05.2026 BSI · hochNvidia Treiber · privilege escalation 07.05.2026 BSI · mittelLinux Kernel · mehrere Schwachstellen 05.2026 CERT.AT · hochMicrosoft Patch Tuesday · 12 kritische Schwachstellen 04.2026 CERT.AT · hochFortinet FortiOS · authentisierte RCE · Update dringend 05.2026 CERT.PL · phishingFake DHL notifications · undelivered parcels · DE/PL 05.2026 CERT.PL · scamBLIK fraud · impersonation of contacts on messaging apps 04.2026 CERT.PL · ransomAkira ransomware · attacks on SMEs · manufacturing sector 12.03.2026 C2 · QakBot50.16.16.211:443 · AMAZON-AES · online 05.2026 CERT.CZ · varováníZranitelnost VMware vCenter · upozornění pro veřejnou správu

BSI CERT-Bund WID DE · gov CERT.PL CERT Polska PL · gov CERT.AT CERT Austria AT · gov abuse.ch Feodo Tracker CH · CC0

/07

Contact · inquiry form

response within 24h
○ free consultation

— form Send your inquiry

Company / full name

Contact e-mail

I'm interested in

Brief description of the matter

Sent directly to kontakt@schwarzerregen.de · response within 24 business hours.