# codecentric AG > **Language / Sprache:** English | [Deutsche Version](https://www.codecentric.de/llms-de.txt) > codecentric AG is a German IT consulting firm specializing in software modernization, generative AI, cloud-native architectures, and digital product development. With over 550 experts across 13 locations in Germany, codecentric combines deep technical expertise with agile methodologies and a strategic consulting approach. ## Homepage - [codecentric AG Homepage](https://www.codecentric.de/en): IT consulting and service provider for agile software development with modern technologies and a focus on sustainable added value. ## Services - [All Services](https://www.codecentric.de/en/services): Overview page of all codecentric services: industry-agnostic IT consulting and software development with specialized expertise, agile approaches, and nearshoring options. ### Cloud & Infrastructure - [Cloud-Native Software Development](https://www.codecentric.de/en/services/cloud-native): Consulting and implementation for cloud-native software development with certified experts for AWS, Azure, and Google Cloud, spanning strategy, architecture, and cloud migration. - [Azure Cloud Solutions](https://www.codecentric.de/en/services/azure-cloud-solutions): Comprehensive Azure migration with structured approach and landing zones, zero-trust-based identity architecture, cloud-native application development, architecture reviews, Infrastructure as Code (Terraform, Bicep), resilience and disaster recovery strategies; Microsoft Azure Partner since 2020, certified for Digital and Application Innovations. - [Platform Engineering](https://www.codecentric.de/en/services/platform-engineering): Automation and standardization of development processes using Internal Developer Platforms (Minimal Viable Platform) to increase productivity and shorten time-to-market. - [Managed Services](https://www.codecentric.de/en/services/managed-services): Management, monitoring, and optimization of IT infrastructure, applications, and cloud hosting. - [Observability](https://www.codecentric.de/en/services/observability): End-to-end observability providing transparency into complex IT systems for higher stability, faster troubleshooting, and reliable software delivery. - [Production Readiness Review](https://www.codecentric.de/en/services/production-readiness-review): Comprehensive audit of the (cloud) production environment covering security, scalability, compliance, and automation prior to go-live, complete with actionable recommendations. ### Data, AI & Machine Learning - [Data Effectiveness](https://www.codecentric.de/en/services/data-effectiveness): Consulting on building a data-driven organization with optimized data strategies, architectures, and processes. - [Data Science & Artificial Intelligence](https://www.codecentric.de/en/services/data-science-and-artificial-intelligence): Consulting and implementation for data science, machine learning, and AI—from Proof of Concept and data architecture to the complete data science lifecycle. - [Data & AI Strategy](https://www.codecentric.de/en/services/data-ai-strategy): Strategic consulting for holistic data and AI strategies that align business, people, governance, and technology. - [Generative AI](https://www.codecentric.de/en/services/generative-ai): Potential analysis, use-case identification, AI-supported software modernization, and acceleration of software development through GenAI. - [Artificial Intelligence](https://www.codecentric.de/en/services/artificial-intelligence): Holistic AI strategy, data quality, AI agents, and governance to create measurable business value from pilot projects. - [Company GPT & LLMs](https://www.codecentric.de/en/services/generative-ai/chat-gpt-large-language-models): Consulting and development of GDPR-compliant Company GPT solutions using Large Language Models: Use-case evaluation, compliance consulting, and technical implementation of a proprietary LLM platform. - [AI Agents](https://www.codecentric.de/en/services/artificial-intelligence/ai-agents): Strategic implementation of AI agents – from Proof of Concept to enterprise-wide rollout, including automation of repetitive tasks and integration via n8n. ### Security, Compliance & Governance - [Digital Sovereignty](https://www.codecentric.de/en/services/digital-sovereignty): Consulting and implementation for digital sovereignty: dependency analysis, risk assessment, and target architecture development to maintain control over IT infrastructure, data, and compliance (NIS2, GDPR, DORA). ### Product, Strategy & Organization - [Digital Products & Solutions](https://www.codecentric.de/en/services/digital-solutions): Development of tailored digital strategies and products to optimize costs, customer satisfaction, and market opportunities. - [Digital Product Development](https://www.codecentric.de/en/services/digital-product-development): Product-thinking approach covering strategy, discovery, delivery, and coaching for customer-centric, commercially successful product design. - [Sustainable Software Development](https://www.codecentric.de/en/services/sustainable-software-development): Consulting on sustainable software engineering across four dimensions (social, ecological, economic, technical) – from code optimization and Green IT to long-term maintainability. ### API & Integration - [API Experience & API Operations](https://www.codecentric.de/en/services/api-experience-api-operations): Consulting offering for API Experience and API Operations, including API-first strategies, developer success, and holistic API lifecycle management based on open-source components. - [API Management](https://www.codecentric.de/en/services/api-management): Consulting and solutions for effective API management, from API design and implementation to security, monitoring, and access control. ### Enterprise Tools & DevOps - [Atlassian Services](https://www.codecentric.de/en/services/atlassian): Atlassian Platinum Partner services: consulting, cloud migration, app development, license management, and security consulting for Jira, Confluence, and other Atlassian products. - [GitLab Solutions](https://www.codecentric.de/en/services/gitlab-solutions): Licensing consulting, professional services, and Managed GitLab from a certified GitLab partner with over 15 years of DevSecOps experience. - [GitLab Migration](https://www.codecentric.de/en/services/gitlab-solutions/gitlab-migration): Upgrades to GitLab 18 and the Duo Agent Platform, executed by the award-winning GitLab EMEA Services Partner of the Year – production-ready within a week. - [GitLab Professional Services](https://www.codecentric.de/en/services/gitlab-solutions/gitlab-professional-services): Consulting on the implementation and optimization of GitLab as a DevSecOps platform, including compliance and security requirements. - [Managed GitLab](https://www.codecentric.de/en/services/gitlab-solutions/managed-gitlab): Fully managed GitLab instance in OVHcloud (German data center) featuring 24/7 monitoring, automated updates, and European data privacy standards. - [Keycloak & IAM](https://www.codecentric.de/en/services/keycloak): Consulting and implementation of Identity and Access Management (IAM) with Keycloak: SSO, two-factor authentication, and centralized user management – based on over 100 successful client projects. ### Software Modernization & Architecture - [Software Modernization](https://www.codecentric.de/en/services/software-modernization): Targeted modernization of legacy systems through optimization, transformation, or rebuilds – starting with analyses, reviews, and training. - [Software Maintenance](https://www.codecentric.de/en/services/software-maintenance): Tailored maintenance and operations strategies to keep software secure, up-to-date, and compliant over the long term. ### Training & Workshops - [Workshops](https://www.codecentric.de/en/services/workshops): Practical workshops for teams and organizations – proven field knowledge from real-world projects on Cloud Native, DevOps, IT Security, Agile methodologies, Java, and beyond. Standardized and customized solutions tailored to your business objectives. ### Automation & Document Processing - [Input Management](https://www.codecentric.de/en/services/input-management): Automated capture and processing of incoming data (emails, forms, letters) to enhance customer communication and boost efficiency. - [SHERLOQ](https://www.codecentric.de/en/services/sherloq): Proprietary AI solution for automated document processing and contract analysis – scalable, efficient, and seamlessly integrable. - [SHERLOQ Input Management](https://www.codecentric.de/en/services/sherloq/sherloq-input-management): AI-powered automation of digital mailrooms – documents in various formats are ingested, processed, and routed in a structured manner. - [SHERLOQ Contract Analysis](https://www.codecentric.de/en/services/sherloq/contract-analysis): AI-supported automated analysis, classification, and extraction of complex contracts to optimize contract management workflows. ### Specialized Solutions - [Industrial IoT](https://www.codecentric.de/en/services/industrial-iot): Consulting and development of custom Industrial IoT and Industry 4.0 solutions: smart machine connectivity, process digitization, and AI deployment in production environments. ### IT Security - [IT Security](https://www.codecentric.de/en/it-security): Holistic security consulting including threat analyses, cloud security assessments, training, offensive penetration testing, and incident response. - [Threat Analysis](https://www.codecentric.de/en/it-security/threat-analysis): Evidence-based security strategy utilizing the MITRE ATT&CK framework to identify real adversaries and their techniques within your industry; generates heatmaps and supports DORA and NIS2 compliance. - [AI & Security](https://www.codecentric.de/en/it-security/artificial-intelligence-security): Threat modeling and specialized pentesting for LLMs and Generative AI systems; covers prompt injection, model poisoning, data leakage, and infrastructure security (AWS, Azure, On-Premises). - [IT Security Training](https://www.codecentric.de/en/it-security/it-security-workshop): Customized workshops on threat analysis, AI security, cloud security, SSDLC assessment, red teaming, phishing, and OSINT; aimed at building security awareness and empowering the first line of defense. - [Cloud Security Assessment](https://www.codecentric.de/en/it-security/cloud-security-assessment): Passive security analysis for AWS and Azure measured against CIS benchmarks, Well-Architected Framework, and Cloud Security Benchmarks; audits identity management, networking, encryption, logging, and delivers prioritized remediation steps. - [Rapid Risk Assessment](https://www.codecentric.de/en/it-security/rapid-risk-assessment): Two-day on-site assessment with structured interviews and configuration reviews (network segmentation, patching, disaster recovery, backup concepts) from an attacker's perspective; detailed report with risk-ranked vulnerabilities. - [SSDLC Assessment](https://www.codecentric.de/en/it-security/ssdlc-assessment): Health check of software development lifecycle processes using OWASP SAMM 2.0 framework across five domains (Governance, Design, Implementation, Verification, Operations); five-day on-site analysis with process shadowing and a prioritized implementation roadmap. - [Red Teaming](https://www.codecentric.de/en/it-security/red-teaming): Comprehensive security assessment using realistic attack scenarios grounded in threat intelligence (MITRE ATT&CK mapping); tests prevention, detection, and incident response; optional purple teaming for collaboration with internal security teams. - [Phishing Campaigns](https://www.codecentric.de/en/it-security/phishing-campaigns): Controlled phishing simulations (bulk and spear phishing) combined with employee behavior analysis and awareness training; scenario-driven and tailored to industry and company profiles. - [OSINT](https://www.codecentric.de/en/it-security/osint): Structured analysis of publicly available information (DNS, code repositories, certificates, social media) to identify exposure, legacy systems, and employee footprints; passive risk analysis with prioritized remediation steps. - [Penetration Testing](https://www.codecentric.de/en/it-security/pentest): Authorized security testing for web applications, IT infrastructure, production networks, and critical OT networks in black-box, grey-box, or white-box variants; threat-led pentesting with scenario-based attacker roles and detection feedback. - [Incident Response](https://www.codecentric.de/en/it-security/incident-response): Immediate assistance during cyber attacks including assessment, forensic investigation (forensically sound evidence preservation), compromised system recovery, and legally compliant documentation to minimize damage. ## Industries - [Industry Expertise](https://www.codecentric.de/en/industries): Deep industry expertise across 13 focus areas (Retail, Insurance, Manufacturing, Automotive, Construction & Environment, Energy, IT, Logistics, Public Sector, Production, Telecommunications, Tourism); featuring specific challenges, digital solution approaches, and case studies per industry. - [Retail: AI-Powered Inventory Intelligence](https://www.codecentric.de/en/industries/retail): Resolves inventory discrepancies (ERP vs. reality), €5B annual shrinkage, and out-of-stock scenarios through AI-driven demand forecasting, risk-based cycle counting, dynamic pricing for perishable goods, AI agents for automated replenishment, and agentic commerce; 20+ years of retail expertise, 150+ clients, 1,000+ projects. - [Insurance: Digital, Efficient, Innovative](https://www.codecentric.de/en/industries/insurance): Overcomes legacy systems, regulatory pressure (DORA, NIS2, EU AI Act), evolving customer expectations, and operational inefficiencies through customer-centric platforms, IT security & compliance, modern software development (GitLab, Platform Engineering), digital product development, IT modernization, and AI process automation. - [Manufacturing: Industry 4.0 & AI Engineering](https://www.codecentric.de/en/industries/manufacturing): Transforms untapped domain expertise and fragmented system landscapes through IoT platforms, customer portals, connected production with real-time data flows, business automation (Single Source of Truth), and agent-based software development; references include Fette Compacting (5,000+ machines), Heinz Glas, BlechCon, and d&b audiotechnik. ## References - [All Case Studies](https://www.codecentric.de/en/references): Portfolio of cross-industry and cross-technology client projects detailing technologies, methodologies, and measurable results. ### Featured Case Studies - [Hermes: Productivity Boost with AI Coding](https://www.codecentric.de/en/references/hermes-accelerating-powered-software-development-scaling-ai-coding-adoption-in-three-weeks): Claude Code, Gemini, Coding Agents with Context Engineering and Model Context Protocol (MCP); enablement for 20 developers across 4 teams; stories completed 50% faster, bugs identified within 5 minutes, rollout continued across additional teams. - [Jokey: AI Agent at Trade Show Booth](https://www.codecentric.de/en/references/jokey-rom-conversation-to-crm-in-seconds-ai-powered-lead-capture-at-trade-shows): Qwen 35B LLM agent, Open WebUI, FastAPI, Nvidia DGX-Spark; business card capture + voice note recording; 2,000+ chat interactions near-flawlessly handled, 320 digital trade show leads captured in one week, 1-minute capture time per contact, 6-week turnaround. - [R+V: DevOps Transformation](https://www.codecentric.de/en/references/r-u-v-efficient-software-development-as-a-competitive-advantage-devops-transformation): GitLab Unified Platform, Azure Kubernetes Service (AKS), HashiCorp Vault; consolidated tool ecosystem, automated pipelines, embedded compliance. - [Green Banana: BNPL Orchestration Platform](https://www.codecentric.de/en/references/green-banana-from-pitch-deck-to-scalable-bnpl-platform): Cloud-native architecture, API-first with 10+ BNPL provider integrations, e-commerce integrations (Shopify, Shopware, WooCommerce); bnplx.io operational in 25+ countries, automated failover increases acceptance rates by 10%, enterprise adoption via VR Payment, enablement partnership model. - [Protones: Jira Epic Organizer](https://www.codecentric.de/en/references/protones-optimizing-complex-business-processes-with-custom-jira-apps): Custom Forge App for Jira Service Management; structured overview of linked issues with direct actions (assignments, status updates), concept to production in weeks (4 days of active development); faster info retrieval, improved process control. - [STAEDEAN: From Failed PoC to Scalable AI Solution](https://www.codecentric.de/en/references/staedean-future-proof-ai-solution-how-a-step-back-can-help-to-go-beyond): RAG system integrated with OpenAI on Microsoft Azure; transformation of a failed PoC into a production-grade solution through client-centric use-case definitions and Streamlit prototyping; ~4 months deployment time, significantly faster queries, scalable architecture. - [QORO: Quantum & HPC on AWS](https://www.codecentric.de/en/references/qoro-quantum-scalable-hpc-infrastructure-on-aws-cost-efficiency-stability-momdernization): AWS Spot Instances, Infrastructure as Code, auto-scaling for quantum simulation software; automated zero-touch operations, 40% cost savings, pay-per-use model; completed in 2 months with AWS PoC funding. - [Tchibo: Data Orchestration with Apache Airflow](https://www.codecentric.de/en/references/tchibo-informed-decisions-thanks-to-efficient-data-orchestration): Apache Airflow (Cloud Composer) for hundreds of data pipelines, BigQuery Data Warehouse; lift-and-shift migration from SAP Data Intelligence, zero-downtime, cost reduction, enhanced scalability. - [Hettich: Digital Furniture Configurator FurnSpin](https://www.codecentric.de/en/references/hettich-digital-furniture-configurator): Vue.js frontend + NestJS backend for automated furniture configuration replacing manual Excel calculations; 1,500 configurations in 3 months, 4–8 hours of time savings per configuration, 600 newsletter leads, 70 person-days of development. - [DEVK: Premium Calculator Modernization](https://www.codecentric.de/en/references/devk-rate-calculators-application-modernization): TypeScript full-stack (Node.js frontend, Koa backend), AWS Cloud, Anypoint Flex Gateway, automated testing; policy updates in 1–2 sprints, flexible vehicle type integration, significantly higher conversion rate. - [JobRad: AI Enablement](https://www.codecentric.de/en/references/jobrad-ai-enablement): One-year integration program with use-case workshops, GDPR-compliant JobRadGPT system across multiple LLMs, AI strategy covering governance, compliance, technology; 85% adoption rate, 30–60 minutes daily time savings per employee, 30% increase in tender processing. - [DTAD: AI-Powered Search](https://www.codecentric.de/en/references/dtad-ai-supported-search-feature): OpenAI Embeddings, MongoDB Atlas, AWS Lambda, Vue.js for semantic search across public tenders; context-aware matching instead of keyword search; 5,500+ daily active users. ## Locations - [Locations](https://www.codecentric.de/en/locations): 13 offices across Germany: Berlin, Bielefeld, Dortmund, Erfurt, Frankfurt am Main, Hamburg, Karlsruhe, Leipzig, Munich, Münster, Nuremberg, Solingen, Stuttgart. ## Knowledge Hub - [Knowledge Hub](https://www.codecentric.de/en/knowledge-hub): Central hub for IT knowledge sharing featuring magazines, podcasts, conferences, and community formats. - [Events & Talks](https://www.codecentric.de/wissens-hub/events): Overview of appearances at meetups, hackathons, trade shows, conferences, and exclusive CxO network formats (content primarily in German). - [Der Softwerker](https://www.codecentric.de/wissens-hub/softwerker): Tech magazine (print and digital), SoftwerkerCast podcast, and annual IT conference (SoftwerkerKonf) covering modern software engineering (in German). - [Webinars](https://www.codecentric.de/wissens-hub/webinare): IT webinars on current tech trends and best practices, available live and on-demand. - [SoftwerkerCast](https://www.codecentric.de/wissens-hub/softwerker/softwerkercast): IT podcast offering practical insight into software engineering, architecture patterns, API design, and zero-downtime strategies (in German). ## Blog - [All Blog Posts](https://www.codecentric.de/en/knowledge-hub/blog): Expert knowledge on agile methodologies, software architecture, AI, DevOps, and testing, written by developers for developers. ### Selected Recent Blog Posts - [AI Engineering: Coding Loop, Validation Loop, Learning Loop, Business Loop](https://www.codecentric.de/en/knowledge-hub/blog/ai-engineering-coding-loop-business-loop): Four-loop model for holistic AI engineering; Enterprise Context Management bridging business goals and technical implementation. - [Agentic Engineering: Failure Patterns in Practice](https://www.codecentric.de/en/knowledge-hub/blog/agentic-engineering-loops-practice-failure-patterns): Five failure patterns of autonomous AI agents (flawed specifications, test gaming, loss of maintainability, hallucinations, deteriorating QA). - [The Human Side of AI Transformation](https://www.codecentric.de/en/knowledge-hub/blog/the-human-side-of-the-ai-transformation): Implementing AI requires realigning professional identity; focusing on judgment, domain expertise, and systems thinking. - [AI Code Review: Why Loops Without Tests Are Dangerous](https://www.codecentric.de/en/knowledge-hub/blog/ai-code-review-loop-verification): Three risks (lack of independent verification, cognitive overload, normalization of oversight); solution: structurally enforced verification. - [Weak vs. Strong Authentication](https://www.codecentric.de/en/knowledge-hub/blog/weak-and-strong-authentication-why-a-password-alone-is-no-longer-enough): Passwords alone are no longer enough; multi-factor authentication, hardware keys, and passkeys as phishing-resistant alternatives. - [Loop, Harness, Context Engineering Explained](https://www.codecentric.de/en/knowledge-hub/blog/loop-harness-context-engineering-explained): Three foundational layers; each inherits weaknesses from the layer below; structural guardrails are essential. - [Autonomous Development Workflows with Claude Code](https://www.codecentric.de/en/knowledge-hub/blog/autonomous-development-workflows-with-claude-code): Structure over simple prompting; reproducible blueprints with clear roles, rules, and quality gates. - [Local LLMs in Daily Development Workflows](https://www.codecentric.de/en/knowledge-hub/blog/local-llms-in-a-software-developers-day-to-day-work): GLM-5.2 price-performance champion; Claude Opus for deep code analysis; local models for lightweight tasks. - [AI Development & Costs: What Really Accrues](https://www.codecentric.de/en/knowledge-hub/blog/ai-development-and-cost-what-really-adds-up): Verification tax, comprehension debt, technical debt; budgeting and structurally managing real AI costs. - [EXACT Coding: AI Quality Over Vibe Chaos](https://www.codecentric.de/en/knowledge-hub/blog/exact-coding-with-ai): Example-guided test-driven workflow; concrete examples before code, tests as control mechanisms, humans as final authority. ## About Us - [About Us](https://www.codecentric.de/en/about-us): Agile, innovative IT consulting and software development since 2004 empowering companies to build high-quality software. - [Hard Facts](https://www.codecentric.de/en/about-us/hard-facts): Key metrics of codecentric AG featuring 550+ employees, 13 locations, ISO 27001 and TISAX certifications, and top placement on the Lünendonk list. - [Partners & Networks](https://www.codecentric.de/en/about-us/partners): Strategic partnerships with AWS, GitLab, Google Cloud, Microsoft Azure, IBM Instana, Insiders Technologies (AI document processing), Tungsten Automation, and UX&I to expand technology and consulting capabilities. - [How We Work](https://www.codecentric.de/en/how-we-work): Collaborative, agile, and iterative approach centered on clear communication and customized solution development. ## Contact - [Contact Page](https://www.codecentric.de/en/contact): Get in touch with codecentric for project inquiries and requests. ## Careers - [Careers at codecentric](https://www.codecentric.de/en/careers): Agile culture, 550+ employees across 13 locations; flexible roles, hybrid work, no overtime policy, continuous growth; open positions; Diversity & Inclusion. --- 2026-08-26