Company name | Description and specialisation | Service categories | Certifications | VAT register | REGON register |
|---|---|---|---|---|---|
| Afine | Offensive security specialist delivering penetration testing, application and cloud security assessments and red teaming for large organisations in regulated sectors. | Penetration Testing & Audits Cloud Security | Loading... | Loading... | |
| ChangePro | Cybersecurity integrator and advisor delivering NIS2 audits, vCISO services, penetration testing, SOC outsourcing and security awareness programmes. | GRC & Compliance Penetration Testing & Audits Security Training & Awareness Monitoring & SOC | Loading... | Loading... | |
| Cloudware Polska | Integrator designing and maintaining IT infrastructure, hybrid cloud and container platforms, with a security unit deploying IGA identity governance, PAM with session recording, SSO and MFA. It also offers SOC security monitoring, application security and DevSecOps, infrastructure and cloud protection, and NIS2, DORA and UKSC compliance support. | Infrastructure Security Monitoring & SOC Cloud Security | Loading... | Loading... | |
| CyCommSec | Cybersecurity firm offering penetration testing, red teaming and OSINT alongside NIS2 and DORA audits, including Threat-Led Penetration Testing for financial institutions. | Penetration Testing & Audits GRC & Compliance | Loading... | Loading... | |
| Efigo | Cybersecurity and data protection firm running penetration tests of web, mobile and embedded applications, source code review, ISO 27001 and 22301 audits and DevSecOps support, also as PTaaS. | Penetration Testing & Audits GRC & Compliance | ISO 9001 | Loading... | Loading... |
| Elementrica | Offense-driven security firm delivering penetration testing, attack simulations, IT security audits and incident response, backed by its own testing and awareness platforms. | Penetration Testing & Audits Monitoring & SOC | Loading... | Loading... | |
| Galach Consulting | Advisory firm in cybersecurity and information security management, delivering audits, training and implementations aligned with ISO/IEC 27001 and ISO 22301, plus vulnerability management tooling. | GRC & Compliance Security Training & Awareness | Loading... | Loading... | |
| Innowise | Innowise is a software development company providing custom software development, team outsourcing and digital transformation services. Its cybersecurity services include penetration testing, a 24/7 SOC, and compliance assessments against requirements including DORA and ISO 27001. | Penetration Testing & Audits Monitoring & SOC GRC & Compliance | Loading... | Loading... | |
| ISCG | ISCG is an IT consulting company and integrator implementing IT service management, infrastructure and process solutions. It runs its own ISCG SOC and a threat intelligence service, performs NIS2 and DORA audits and consulting and penetration tests, and deploys EDR/XDR, PAM, MFA, DLP and data encryption. | Monitoring & SOC GRC & Compliance Penetration Testing & Audits Infrastructure Security Data Protection | Loading... | Loading... | |
| JUVO Privacy Compliance | Compliance and information security arm of the JUVO group in Bielsko-Biala: IT security audits, ISO 27001, TISAX, NIS2 and DORA compliance work, GRC as a service, data protection officer outsourcing and penetration testing. | Penetration Testing & Audits GRC & Compliance | Loading... | Loading... | |
| Knoxtera | Cybersecurity provider for financial institutions, offering SOC as a service with 24/7 monitoring, SIEM and SOAR, EDR and DLP deployments, vulnerability scanning and penetration testing, security audits, training with phishing simulations, and a virtual security team supporting NIS2 and DORA compliance. | Monitoring & SOC Infrastructure Security Data Protection Penetration Testing & Audits Security Training & Awareness GRC & Compliance | Loading... | Loading... | |
| LogicalTrust | Wroclaw-based offensive security firm running web and mobile penetration tests, source code audits, red team exercises, social engineering tests, ransomware simulations and cloud, container, PCI DSS, DORA and NIS2 audits. | Infrastructure Security Penetration Testing & Audits GRC & Compliance Security Training & Awareness Cloud Security OT/ICS Security | Loading... | Loading... | |
| M3MCom (M3M Data Protection) | M3M Data Protection from Warsaw focuses on personal data protection and compliance, providing outsourced DPO services, GDPR audits and implementations, and personal data breach handling. It also offers penetration testing of applications, infrastructure and cloud, social engineering tests and DORA and NIS2 compliance support. | GRC & Compliance Penetration Testing & Audits Security Training & Awareness | Loading... | Loading... | |
| net-o-logy (Cyber Defence Center) | Cybersecurity center of an IT integrator, providing a 24/7 SOC, an incident response and ransomware recovery team, vulnerability management and penetration testing, dark web monitoring, NIS2, ISO 27001 and DORA compliance support, and security awareness training with phishing simulations. | Monitoring & SOC Penetration Testing & Audits GRC & Compliance Security Training & Awareness | Loading... | Loading... | |
| nFlo | Security and infrastructure firm delivering IT audits, penetration testing of applications and networks, ISO 27001 and GDPR programmes and cyber resilience strategies covering technology and staff training. | Cloud Security Penetration Testing & Audits GRC & Compliance Security Training & Awareness | Loading... | Loading... | |
| NT Group Systemy Informatyczne | IT and cybersecurity provider delivering NIS2 and DORA audits, penetration testing, GRC and data protection. It designs and maintains infrastructure and cloud environments, and runs cybersecurity training and social-engineering assessments. | Infrastructure Security Cloud Security Penetration Testing & Audits GRC & Compliance Security Training & Awareness Data Protection | Loading... | Loading... | |
| Omnilogy | Observability and cybersecurity provider and Dynatrace partner, monitoring the performance and security of IT, cloud and container environments and surfacing vulnerabilities and threats. | Monitoring & SOC Cloud Security | Loading... | Loading... | |
| Onex Group | Onex Group is a company deploying cloud solutions, data platforms, AI assistants and communication tools. Within its secure cloud infrastructure offering it audits IT environments for NIS2 and DORA compliance and deploys Microsoft Defender, Intune, Purview (DLP and data classification), MFA and Microsoft Sentinel. | GRC & Compliance Data Protection Infrastructure Security Monitoring & SOC | Loading... | Loading... | |
| PBSG | Advisory firm specialising in risk management, regulatory compliance (ISO 27001, GDPR, DORA) and cybersecurity training. | Security Training & Awareness GRC & Compliance | Loading... | Loading... | |
| PCSecure | Cybersecurity firm providing advisory, deployment and supply of IT solutions that protect data and infrastructure, with support for GDPR, NIS2 and DORA compliance. | GRC & Compliance | Loading... | Loading... |
Cybersecurity service categories
Browse the full list of cybersecurity specialisations available in the directory and find the right partner for your organisation.
Infrastructure security covers the rollout and day-to-day running of endpoint, identity and network defences: EDR, MFA, access control and segmentation. The directory lists providers who run such projects from inventory to handover.
A penetration test is an authorised attack on your own system that shows which flaws an intruder would actually use. Compare providers testing web and mobile apps, networks and source code.
GRC and compliance work turns security into a managed system: risk analysis, policies, continuity planning and the evidence an auditor asks for. Browse the providers who run those projects in Poland.
Security awareness programmes, phishing simulations and certification courses for IT staff - from spotting a fake payment request to exam preparation. Compare training providers delivering in Poland.
OT/ICS security protects the plant network, PLC controllers and SCADA stations from incidents that stop production. See providers who work on the shop floor without shutting the line down.
Cloud security means reviewing and tightening how AWS, Azure and GCP accounts are set up: identity, permissions, encryption, containers and deployment pipelines. Browse Polish firms that examine your estate and help close what they find.
Data protection means inventory and classification of data sets, encryption, DLP and key management in a cloud KMS or an HSM. Compare providers that map where your records sit and cut the risk of them leaving the company.
Continuous security monitoring and incident detection: SOC as a Service, MDR, SIEM rollouts and SOAR automation. Find Polish providers that watch your logs around the clock and escalate real attacks.