Protect//cybersecurity · SMEs

Cybersecurity for small and mid-sized companies

You don't have to be a bank or a corporation to be targeted. More often than not, small companies are the most exposed and the least prepared. We find where you are vulnerable, fix what matters first and, where the law requires it, take you through compliance. No jargon and no oversized solutions.

Request an assessment conformitate-cibernetica.ro
  • ISO/IEC 27001
  • NIST CSF
  • CIS Controls

01What we do

Real protection, not just paperwork

01
Assessment and vulnerabilities
We look at your network, devices, accounts and processes and tell you clearly where you are vulnerable, what's at risk and where to start. No 100-page report nobody reads.
02
Technical controls and hardening
Firewall and network segmentation, access control, MFA, updates, email and endpoint protection, IoT isolation. Configurations that actually stop an incident.
03
Backup and continuity
Backups tested with a real restore and a simple recovery plan. Ransomware or a failed disk shouldn't stop your business for days.
04
Incidents and training
Clear procedures for "what do we do when it happens" and phishing training for your team, because people are the first line of defence.
05
Monitoring and upkeep
Updates, periodic checks and alerts when something isn't right. Security is an ongoing process, not a one-off checkbox.
06
NIS2 and CRA compliance
If you have legal obligations, we take you through NIS2 compliance, with a DNSC-certified NIS Officer. Details on the NIS2 page.

02Who it's for

Does this sound like you?

Companies of 5–250 people without a dedicated security team
You handle customer data, invoices or sensitive information
You supply a company that requires security measures by contract
You make hardware or software with digital elements (Cyber Resilience Act)
You've already had a compromised mailbox, ransomware or a close call
You fall under NIS2 and need a realistic plan

03How we work

We start with what matters most

  1. 01

    Assessment

    We look at the real situation: network, accounts, backup, processes.

  2. 02

    Prioritisation

    You get a short list of measures, ordered by risk and cost.

  3. 03

    Implementation

    We put them in place ourselves, instead of leaving you with recommendations.

  4. 04

    Monitoring

    We keep protection current and re-check periodically.

04FAQ

What companies ask us

We're a small company. Are we really a target?

Yes. Most attacks are automated and simply look for unprotected systems, regardless of who owns them. Small companies are easy targets precisely because they have fewer protections in place.

What do we get after the assessment?

A short, clear document: what we found, how serious it is and what we recommend, in order of priority, with effort and cost estimates. You can use it even if you choose to implement with someone else.

Do we need to replace our equipment?

Usually not. A large part of the risk is solved through configuration, separate accounts, MFA and proper backup. We recommend new equipment only when the existing devices can no longer be secured.

What is the Cyber Resilience Act and does it apply to us?

The CRA (EU Regulation 2024/2847) sets security requirements for products with digital elements placed on the EU market: reporting of actively exploited vulnerabilities and severe incidents from 11 September 2026, and full requirements from 11 December 2027. It applies to you if you make or import hardware or software. Details on conformitate-cibernetica.ro.

05Certifications

Security and networking, certified

Personal certifications held by our founder, who technically leads every project.

NIS · DNSC

DNSC-certified NIS Officer

Cybersecurity specialisation certificate issued by the Romanian National Cyber Security Directorate (DNSC), NIS Officer programme. Backed by more than five years of hands-on cybersecurity work.

Ubiquiti Full Stack Professional (UFSP)
UFSP · Ubiquiti

Ubiquiti Full Stack Professional

Design and administration of the full UniFi ecosystem: routing and firewall, switching, Wi-Fi and centralized network management.

Ubiquiti Wireless Admin (UWA)
UWA · Ubiquiti

Ubiquiti Wireless Admin

Planning, deploying and tuning Wi-Fi networks: coverage, channels, roaming and performance in crowded spaces.

How exposed is your company?

We start with a short conversation and an assessment of your situation, then tell you exactly what is worth doing, in the right order.

Request an assessment We reply within 24h