MH SERVICE GMBH

Their core work

MH SERVICE GMBH is a small German technology company from Kandel specializing in digital forensics tools and cybersecurity intelligence products. Their work spans two closely related areas: portable hardware-software labs for digital evidence recovery (SALUS) and kiosk-based platforms for monitoring and analyzing darknet activity to extract cyber threat intelligence (DAN). Both products appear aimed at law enforcement agencies, cybercrime investigators, and corporate security teams that need field-deployable or on-site forensic and surveillance capabilities. The company has operated as a product developer and EU project coordinator, using SME Instrument funding to validate the commercial feasibility of these tools.

What they specialise in

How they've shifted over time

MH SERVICE GMBH entered H2020 in 2018 with SALUS, focused on the reactive end of digital forensics — recovering and processing existing digital evidence in the field. By 2019 they pivoted toward DAN, a proactive intelligence tool for monitoring darknet environments to detect threats before they materialize into incidents. This shift from reactive forensics to proactive threat intelligence reflects a deliberate move up the security value chain, from evidence processing toward threat anticipation. The trajectory is short (only two projects) but directionally consistent: deeper into cybersecurity intelligence rather than broader across other technology domains.

The company appears to be building toward an integrated forensics and intelligence product suite targeting law enforcement and corporate security buyers, with the darknet monitoring angle positioning them in a high-growth, specialized niche.

How they like to work

MH SERVICE GMBH has coordinated both of its H2020 projects independently, with zero recorded consortium partners and no international collaboration footprint within these grants. This is consistent with the SME Instrument Phase 1 format, which funds individual feasibility studies rather than collaborative research. Their H2020 history suggests a company that develops its own proprietary products and uses EU funding for commercial validation rather than joint R&D — meaning any future collaboration would likely be as a technology provider or product integrator, not a co-developer.

MH SERVICE GMBH has no recorded consortium partners in H2020, having operated entirely as a solo SME Instrument applicant. Their EU-funded network is effectively zero — they are a product-focused company rather than a research network node.

What sets them apart

MH SERVICE GMBH occupies a narrow but defensible niche: field-deployable digital forensics combined with active darknet intelligence, both productized for operational (rather than academic) users. Unlike university research groups or large defense contractors, they are building compact, commercially packaged tools that smaller law enforcement agencies or corporate security teams can actually deploy. Their SME size and German base (with proximity to federal and state police structures) may give them practical insight into operational requirements that larger vendors miss.

Highlights from their portfolio

• DAN
  The darknet analysis kiosk concept targets a specialized and commercially underserved intelligence gap — automated forensic monitoring of illicit networks — making it the more strategically differentiated of the two projects.
• SALUS
  A portable all-in-one digital data recovery lab that packages complex forensic workflows into a deployable unit, addressing a genuine operational pain point for investigators working outside lab environments.