How FC Bayern Munich Secures 75,000 Fans on Match Day

TL;DR

FC Bayern Munich runs a complex digital ecosystem that directly affects the safety of 75,000 fans on match day - and periodic security checks couldn't keep pace with it. The company uses XM Cyber to continuously map every attack path across those connected systems, showing the IT team exactly which channels lead to critical infrastructure and where new gaps appear. The team now closes exposures before they put fans, operations, or the club's reputation at risk.

The Challenge

FC Bayern Munich selected the XM Cyber exposure management platform, hosted on STACKIT’s sovereign As one of the world’s most successful football clubs, FC Bayern Munich owns and operates the Allianz Arena, a sprawling 75,000-seat stadium in Munich. On match days, the club manages a complex ecosystem of operations—from ticketing and broadcasting to stadium lighting and access control. Crucially, it is solely responsible for its own extensive digital infrastructure and the corresponding cybersecurity.

Many of the fan experiences are technology-driven, from the real-time updates on the scoreboard to announcements over the loudspeakers. Michael Fichtner, CIO of FC Bayern Munich, deeply understands the gravity of this responsibility: “It is not just about system availability, reputation or loss of revenue. Rather, it is about ensuring the safety and health of our visitors and preventing even a single person from being harmed.”

To guarantee safe and uninterrupted operations, FC Bayern Munich required a solution that could continuously identify and map every possible risk channel within its digital environment.

The Solution

FC Bayern Munich selected the XM Cyber exposure management platform, hosted on STACKIT’s sovereign European cloud, to detect and prioritize exposures across all connected systems. The platform continuously maps every potential attack path so that protective measures can be taken at an early stage. According to Michael Fichtner:

“XM Cyber showed us how attackers could reach our critical assets. It gave us real knowledge – not just where we had vulnerabilities, but what to fix first.” 

Michael Fichtner, CIO, FC Bayern Munich

This continuous, real-time visibility replaced the limitations of periodic checks and reactive fixes. The IT team now sees exactly how risks evolve day-to-day, allowing them to proactively close new gaps as they appear. This approach significantly strengthened FC Bayern Munich’s operational resilience without causing disruption to high-performance match-day systems.

Benefits & Outcomes

XM Cyber provides FC Bayern Munich with a live, comprehensive view of its exposure landscape and enables experts to respond appropriately to changing conditions. This can lead to positive developments in risk management. CIO Michael Fichtner summed up the personal and organizational difference:

“By using XM Cyber I sleep differently – because today we can recognize risks, before we often had a false sense of security. Today we recognize weak points and the resulting risks, and can address them more quickly and in a more targeted manner.”

Michael Fichtner, CIO, FC Bayern Munich

The measurable result is stronger resilience, sharper risk awareness, and the confidence that every match can proceed safely under continuous, real-time protection.

Key Takeaways

• FC Bayern Munich is solely responsible for the digital infrastructure behind the Allianz Arena’s match-day operations - ticketing, broadcasting, lighting, access control - and treats cybersecurity as a direct matter of fan safety.
• XM Cyber replaced periodic checks with continuous attack path mapping across all connected systems, letting the IT team close exposures as they appear rather than after the fact.
• The CIO describes XM Cyber as the only tool that shows exactly which channels lead to critical infrastructure, giving the team the knowledge to act and to train the people who use those channels.
• The club views XM Cyber as part of its social responsibility - protecting 75,000 fans on match day, not just protecting systems.
• Digital sovereignty is a club priority. FC Bayern runs XM Cyber on STACKIT’s European cloud to maintain full data ownership under strict European standards.