SignalFisher is a security testing programme delivered as a software-as-a-service platform by SignalFisher AG of Lucerne, Switzerland, which operated as Bug Bounty Switzerland until August 2026. Instead of a one-off penetration test, it runs a continuous cycle: scoping based on the organisation's context, regulatory requirements and external attack surface, testing by vetted security researchers matched with AI support, and interpretation of the findings. Dashboards, trend analyses and reports are meant to support NIS2, DORA and FINMA audits, according to the vendor.
SignalFisher AG is headquartered in Switzerland, an EFTA country with an EU adequacy decision. No foreign parent company is stated; the company's site names two European growth investors without giving ownership shares. The vendor does not state where platform data is hosted, so ask where findings and reports are stored, how researchers are vetted and under which contract they handle your data. Because findings describe weaknesses in your own systems, these answers matter for any European organisation.