2025 was a year that clearly demonstrated the strength of our organization. In a market characterized by uncertainty, increased demands and rapid change, we continued to do what we do best: creating accurate matches between organizations with needs and consultants with the right skills.

Through deeper customer relationships, a growing consultant network and a consistent focus on quality, we took an even clearer position in the market. It is a year that reflects who we are – business-driven, relationship-focused and long-term.

When the right match makes a real difference

Our strategic work with both clients and consultants in finding solutions to challenging skills needs has never been more extensive than in 2025. Our role is about more than adding resources – it is about understanding businesses, contexts and people to create sustainable solutions to business-critical challenges.

Feedback from both clients and consultants shows that our presence, accessibility and understanding of the market are appreciated. In a time of increasing pace and complexity, the ability to quickly, but with precision, find the right solution has become increasingly important.

Stable growth in a changing market

Despite a challenging market situation, Upgraded People continued to develop during the year. We saw an increased demand for flexible skills solutions and for a partner who can act as an advisor, not just an intermediary.

The growth has been done with clear consideration. We have prioritized:

• long-term customer relationships
• a strong and quality-assured consulting network
• businesses where transparency and trust are at the center

By sticking to our business model and values, we have created stability, even when the surrounding conditions have changed.

The consultant network – our most important asset

Alongside our fantastic employees, one of our greatest strengths is the network of consultants who actively choose to collaborate with us. In 2025, the network has continued to grow, both in scope, depth and breadth, with specialist skills in several business and technology-related areas.

We see the consulting relationship as a partnership. This means clear communication, the right expectations and a shared responsibility for delivery. When consultants thrive and are given the right conditions, better business results are also created for our clients.

Trust from customers with high demands

During the year, we have continued to win new assignments and extend collaborations with organizations that place high demands on delivery, pace and quality. Our working method, with short decision-making paths and close dialogue, has made us a valued partner in both private and public contexts.

In 2025, Upgraded People has contributed expertise in assignments that have been crucial to our customers’ businesses – from change initiatives and system development to operational roles where the right person in the right place has been crucial.

An year to build on

When we sum up 2025, we see a year where relationships have been deepened, business has developed and trust has been created and strengthened. We have been awarded the title of Master Gazelle by Dagens Industri as we achieve gazelle status for the third year in a row. A recognition that reflects a business built on quality, consistency and long-term thinking.

With the same business focus, responsiveness, energy and commitment, we step into 2026, with a stable foundation, clear direction and continued

Since Upgraded People signed a framework agreement with the Swedish Property Administration (SFV) last fall, the collaboration has gotten off to a very good start. We already have several current and attractive assignments published on our website – and more are on the way.

As a consultant broker, we match SFV’s needs with experienced and independent consultants, and demand is currently increasing in several key areas. The assignments involve supporting SFV’s team in operational development initiatives and projects where quality, flexibility and close dialogue with the business are central.

Areas of expertise often requested within the agreement:

• Business Development & Strategy
• Usability, Information and Web
• Management and Governance
• System Development, System Management and Infrastructure
• Specialist Competencies such as BIM, GIS and Property IT
• IT Architecture
• IT and Information Security

– “Things have gone really well since we signed the framework agreement with the Swedish Property Board (SFV) last fall, and we already have several exciting assignments out there and strong demand going forward. We are therefore actively and proactively looking for consultants with a focus on business analysis, requirements management and requirements analysis, business management, IT project management, support technology and IT architecture.”, says Oskar Bolin, Upgraded People AB.

About Upgraded People

Upgraded People is one of Northern Europe’s fastest growing companies in skills supply and strategic staffing. We offer tailor-made solutions that match the right skills with the right context – always with people at the center. Our clients are in both the public and private sectors, and we deliver resources in Sweden, Germany, Norway and Denmark. With over 1,100 consultants on assignment, we help organizations achieve their goals and visions in a sustainable way.

Many organizations are working intensively on digitalization and new developments. New solutions, modern frameworks and cloud platforms are often in focus. At the same time, older systems continue to live on in the background. They often carry mission-critical functions, but rarely receive the same attention. From a cybersecurity perspective, this may be where the greatest risks lie.

Technical debt as a security risk

Building on existing code is common. Many systems have evolved over several years with different developers, tools, and requirements. The result is often a complex environment that is difficult to monitor and maintain, which also affects security.

Old components and dependencies are not always updated and may contain known vulnerabilities. Code written in another era often lacks modern security principles. Accountability can be unclear, especially in systems that many people have worked with over the years. Older integrations can create unexpected attack surfaces. And when the focus is on new development, the old easily falls into the shadows.

Thinking “it still works” is human, but that’s precisely why old systems can become the weakest link in an organization’s security.

Therefore, we must secure the old

Security work is not just about new projects and technologies. Older systems are often a central part of the business, and a vulnerability there can have major consequences. An outdated API, a forgotten server, or a library that hasn’t been updated in years can open up avenues that no one is monitoring anymore.

Taking responsibility for cybersecurity therefore also means taking care of what we have already built.

How development teams can act

There are several ways to reduce risks in legacy systems:

• Map dependencies and versions to understand what is actually being used.
• Perform security audits even on legacy code. Automated analysis and penetration testing often reveal more than you think.
• Plan for refactoring where needed. Security is a strong argument for modernization.
• Strengthen protection around legacy systems through better access controls, logging, and monitoring.
• Invest in skills development. Awareness and knowledge are often the most effective protection.

A cultural issue as much as a technical one

Security is not just about code, it’s about culture and priorities. If older systems are seen as something to “be replaced later,” they risk being left out of security efforts. But if we instead view them as an active part of our security environment, it’s natural that they will be subject to the same demands for quality, follow-up, and improvement as new solutions.

Old systems are not just a cost. They are part of the organization’s digital backbone – and therefore also part of its security.

Summary

Cybersecurity is about integrity and long-term thinking. New systems should be built secure, but what we already have must be managed with the same care. Legacy environments will rarely disappear overnight, but risks can be reduced with the right strategy, the right skills and a culture that takes security seriously.

Upgraded People continues its strong growth journey and has a turnover of SEK 1,314 million during the first nine months of the year – an increase of 8.0% compared to the same period in 2024.

– We see a continued positive trend where we are gaining market share and strengthening our position in several of our markets. It is a clear testament to our strong offering and the team’s ability to deliver value to both clients and candidates, says Birgitta Hedegård, CEO of Upgraded People.

During the third quarter of the year, Upgraded People welcomed several new customers. In particular, the company has strengthened its position in the public sector by winning procurements with several municipalities. The most notable deal of the quarter is the win of an exclusive framework agreement with the Swedish Tax Agency for the mediation of IT and AI skills. The agreement, “IT consulting broker”, has a estimated value of SEK 5.55 billion and runs over four years. Upgraded People are sole supplier awarded the contract.

In addition to the Swedish Tax Agency, the agreement also covers The Swedish Enforcement Authority, the Election Authority, the Payment Authority and the Tax Law and Research Tax Board. The aim is to strengthen digital administration through flexible supply of skills in areas such as AI, systems development, architecture, security and management.

“This assignment is proof that our way of working makes a difference. As a sole supplier, we now have the opportunity to actively contribute to shaping the digital public services of the future – where AI and automation play a central role,” says Birgitta. The framework agreement will enter into force in autumn 2026 and is valid for four years.

Continued strong growth in Sweden and internationally

During the first nine months of the year, Upgraded People has continued its expansion in both the Swedish and international markets. Interest is particularly increasing in Germany, Norway and Denmark, where the company sees a stable demand for qualified IT and management skills.

Despite geopolitical unrest and US trade discussions, there is a noticeable no negative impact – on the contrary, the company notes a continued increasing influx of inquiries.

Demand is strong in several industry segments, including banking and insurance, defense, infrastructure, energy and manufacturing industry. Even areas like cyber defense, AI as well as organizational and management services continue to grow in scope.

– “We are convinced that success is built through long-term and value-creating collaborations. By combining action, innovation and new thinking, we create solutions that make a real difference – for individuals, organizations and society,” says Birgitta Hedegård, CEO of Upgraded People AB.

About Upgraded People

Upgraded People is one of Northern Europe’s fastest growing companies in skills supply and strategic staffing. We offer tailor-made solutions that match the right skills with the right context – always with people at the center. Our clients are in both the public and private sectors, and we deliver resources in Sweden, Germany, Norway and Denmark. With over 1,200 consultants on assignment, we help organizations achieve their goals and visions in a sustainable way.

October is Cyber ​​Awareness Month – a time when cybersecurity is highlighted in everything from technology to culture. For us at Upgraded, it’s about something bigger than firewalls and encryption. It’s about people.

In our everyday lives, we meet developers, architects and technical leaders who shape digital solutions for Northern Europe’s largest companies and organizations, and time and time again we see the same thing: knowledge is one of the strongest lines of defense against cyber threats.

Security starts in the code

Cybersecurity isn’t just built by security departments – it starts in development. Every decision in the code, every dependency added, every API exposed to the outside world is a potential vulnerability.

When developers understand how small choices can have big security consequences, technical competence turns into awareness – and awareness into security.

In the training assignments we conduct, we clearly see how learning creates safety. When developers are given the opportunity to delve deeper, reflect, and understand “why,” not just “how,” both quality and cybersecurity are truly improved.

The people behind the systems

At Upgraded, we often talk about people as the real power behind successful tech organizations. The same goes for security. It’s not the systems that protect the business – it’s the people who build, manage, and evolve them.

Therefore, we see skills development as a strategic investment in cybersecurity. As our consultants and partners grow in knowledge, so does the resilience of the entire ecosystem.

A shared responsibility during Cyber ​​Awareness Month

This month, we want to encourage more organizations to consider skills development as part of their security strategy. Updating knowledge is just as important as updating systems.

At Upgraded, we continue to work to match companies with the right skills – not only to build competitiveness and innovation, but to build security.

Because ultimately, skill development is our common line of defense.