0.1 – 10 THZ · THE BAND THAT SEES THROUGH THINGS
Every breach begins as something small that nobody was watching. We find those first — testing, monitoring and closing the gaps while they are still cheap to close. Twenty-five years of it, run by people who came out of the military and law enforcement.
WHAT WE DO
Everything here is delivered by the same analysts, out of the same operations centre. That is the point: the people who tested your systems are the people watching them.
Analysts watching your estate around the clock, with the tooling and the honeypots to see an intrusion while it is still an intrusion and not yet a breach.
Read more CISOaaSA security executive on subscription: policy, risk register, board reporting and the evidence an auditor asks for — without a six-figure hire.
Read more PenTestA real attack, run by people who have done it for a living, ending in a report your engineers can act on and your auditor will accept.
Read more TPRMaaSYour suppliers are your attack surface, and under NIS2 they are also your legal responsibility. We inventory them, rate them and keep watching.
Read more VMContinuous discovery, prioritised by what is actually reachable and actually exploited — not by a scanner dumping ten thousand findings on your team.
Read more IoT / OTCameras, controllers and machines that shipped with no security and cannot be patched. We segment them, watch them and stop them talking to strangers.
Read more IRContainment, eradication and recovery, on site if it needs to be. The 24-hour clock in the law starts the moment you notice, not the moment you call.
Read more DFIREvidence handled so it survives a courtroom and an insurer: what was taken, when, by whom, and what has to be disclosed to whom.
Read more NOT SUREMost organisations need two of them and are being sold five. Describe your estate and we will say which two, in writing, before you commit to anything.
Ask usTHE CLOCK
Slovenia's ZInfV-1 took the number of obliged organisations from about a hundred to about a thousand, and put the board personally on the hook. These are the dates that matter and what they cost if you miss them.
Slovenia's Information Security Act, in force since 19 June 2025, took the number of obliged organisations from roughly 100 to roughly 1,000. Risk measures, incident reporting, supply-chain security and training, supervised by URSIV.
Up to €10 M or 2% of turnover
What it means for youAnyone placing hardware or software with digital elements on the EU market: secure by design, secure defaults, signed updates, and reporting of actively exploited vulnerabilities. Reporting duties start first; full compliance follows on 11 December 2027.
Up to €15 M or 2.5% of turnover
What it means for youEvery EU bank, insurer, broker, payment and crypto firm. ICT risk framework with the board accountable, major incidents classified and reported, a register of every ICT provider, and threat-led penetration testing.
Up to 2% of global turnover
What it means for youNot a law but a contract requirement: increasingly the price of bidding at all. SIST EN ISO/IEC 27001:2023 is the Slovenian adoption. We take organisations from gap analysis to a certifiable management system.
Lost tenders
What it means for youCIVIL AND DEFENCE
The organisations Slovenian law designates as essential entities — power, water, transport, health, digital infrastructure — are the same ones the European Commission's counter-drone action plan of February 2026 tells to defend their airspace. Cyber and airspace arrive at the same building, in the same year, from two different regulators. We answer both.
Detection and response, testing, third-party risk and the evidence a regulator or an auditor will accept.
Services DEFENCE & PUBLIC SAFETYDetection and defeat of unmanned aircraft, ISR, blockchain investigation, hardened private networks and counter-spyware for military and police users.
Defence capabilityHOW WE START
WHAT IT RUNS ON
A wall of logos proves nothing. These are the platforms the service is actually delivered on, and what each one is there to do.
A first review takes a fortnight and ends in a document you can take to your board. If you are dealing with an incident right now, call instead — the number is answered around the clock.