Company name | Profile | Service categories | List of VAT taxpayers | REGON register | Legal form | PKD | Certifications |
|---|---|---|---|---|---|---|---|
| Afine Offensive security specialist delivering penetration testing, application and cloud security assessments and red teaming for large organisations in regulated sectors. | Core offering | Cloud Security Penetration Testing & Audits | Loading... | Loading... | Loading... | Loading... | |
| CA Cybersecurity Analytics CA Cybersecurity Analytics is a Gdansk-based provider of cybersecurity and risk analytics services that combines expert knowledge with AI-driven automation. It helps organisations turn scattered data into a coherent, measurable risk model. The offer covers three proprietary solutions: UCM, which integrates assets, threats, vulnerabilities and safeguards; RAP, which analyses risk across assets, people, compliance, suppliers and data; and DDM, which supports data correlation and remediation planning. The company provides vulnerability assessment, penetration testing, data protection, network monitoring, incident response and ISMS automation. It supports compliance with NIS2, DORA, the AI Act and the Cyber Resilience Act. It also delivers AI projects, deploying models and governance solutions. A team with more than 20 years of experience serves clients in Poland, the United Kingdom, Germany and other countries. The first consultation is free of charge. | Core offering | Data Protection GRC & Compliance Infrastructure Security Monitoring & SOC Penetration Testing & Audits | Loading... | Loading... | Loading... | Loading... | |
| ChangePro Cybersecurity integrator and advisor delivering NIS2 audits, vCISO services, penetration testing, SOC outsourcing and security awareness programmes. | Core offering | GRC & Compliance Monitoring & SOC Penetration Testing & Audits Security Training & Awareness | Loading... | Loading... | Loading... | Loading... | |
| Cloudware Polska Integrator designing and maintaining IT infrastructure, hybrid cloud and container platforms, with a security unit deploying IGA identity governance, PAM with session recording, SSO and MFA. It also offers SOC security monitoring, application security and DevSecOps, infrastructure and cloud protection, and NIS2, DORA and UKSC compliance support. | Part of the offering | Cloud Security Infrastructure Security Monitoring & SOC | Loading... | Loading... | Loading... | Loading... | |
| CyCommSec Cybersecurity firm offering penetration testing, red teaming and OSINT alongside NIS2 and DORA audits, including Threat-Led Penetration Testing for financial institutions. | Core offering | GRC & Compliance Penetration Testing & Audits | Loading... | Loading... | Loading... | Loading... | |
| DCS.pl Software, hosting and systems maintenance provider running a security operations centre with SIEM, SOAR and vCISO services, asset management and NIS2, DORA and ISO 27001 support. | Part of the offering | GRC & Compliance Monitoring & SOC | Loading... | Loading... | Loading... | Loading... | |
| Efigo Cybersecurity and data protection firm running penetration tests of web, mobile and embedded applications, source code review, ISO 27001 and 22301 audits and DevSecOps support, also as PTaaS. | Core offering | GRC & Compliance Penetration Testing & Audits | Loading... | Loading... | Loading... | Loading... | ISO 9001 |
| Elementrica Offense-driven security firm delivering penetration testing, attack simulations, IT security audits and incident response, backed by its own testing and awareness platforms. | Core offering | Monitoring & SOC Penetration Testing & Audits | Loading... | Loading... | Loading... | Loading... | |
| Euvic Parent company of the Euvic technology group from Gliwice, providing software development, outsourcing, IT infrastructure and consulting. It runs a 24/7 SOC with threat analysis and incident response on Microsoft Sentinel and Trend Micro Vision One. | Part of the offering | Monitoring & SOC | Loading... | Loading... | Loading... | Loading... | |
| Galach Consulting Advisory firm in cybersecurity and information security management, delivering audits, training and implementations aligned with ISO/IEC 27001 and ISO 22301, plus vulnerability management tooling. | Core offering | GRC & Compliance Security Training & Awareness | Loading... | Loading... | Loading... | Loading... | |
| Innowise Innowise is a software development company providing custom software development, team outsourcing and digital transformation services. Its cybersecurity services include penetration testing, a 24/7 SOC, and compliance assessments against requirements including DORA and ISO 27001. | Part of the offering | GRC & Compliance Monitoring & SOC Penetration Testing & Audits | Loading... | Loading... | Loading... | Loading... | |
| ISCG ISCG is an IT consulting company and integrator implementing IT service management, infrastructure and process solutions. It runs its own ISCG SOC and a threat intelligence service, performs NIS2 and DORA audits and consulting and penetration tests, and deploys EDR/XDR, PAM, MFA, DLP and data encryption. | Part of the offering | Data Protection GRC & Compliance Infrastructure Security Monitoring & SOC Penetration Testing & Audits | Loading... | Loading... | Loading... | Loading... | |
| Iterasec Penetration testing company covering web, mobile, API, network, Active Directory, cloud, container, IoT and embedded systems, also offering red teaming, threat-led penetration testing, threat modeling and DevSecOps consulting. | Core offering | Cloud Security Penetration Testing & Audits | Loading... | Loading... | Loading... | Loading... | |
| JUVO Privacy Compliance Compliance and information security arm of the JUVO group in Bielsko-Biala: IT security audits, ISO 27001, TISAX, NIS2 and DORA compliance work, GRC as a service, data protection officer outsourcing and penetration testing. | Part of the offering | GRC & Compliance Penetration Testing & Audits | Loading... | Loading... | Loading... | Loading... | |
| Knoxtera Cybersecurity provider for financial institutions, offering SOC as a service with 24/7 monitoring, SIEM and SOAR, EDR and DLP deployments, vulnerability scanning and penetration testing, security audits, training with phishing simulations, and a virtual security team supporting NIS2 and DORA compliance. | Core offering | Data Protection GRC & Compliance Infrastructure Security Monitoring & SOC Penetration Testing & Audits Security Training & Awareness | Loading... | Loading... | Loading... | Loading... | |
| Linux Polska Linux Polska is an open source technology integrator that supports large organizations with containerization, DevOps, databases, cloud transformation and observability. In IT security it implements DevSecOps with container and Kubernetes security, code and dependency scanning, software supply chain security and SIEM and SOC integration. | Part of the offering | Cloud Security Monitoring & SOC | Loading... | Loading... | Loading... | Loading... | |
| LogicalTrust Wroclaw-based offensive security firm running web and mobile penetration tests, source code audits, red team exercises, social engineering tests, ransomware simulations and cloud, container, PCI DSS, DORA and NIS2 audits. | Core offering | Cloud Security GRC & Compliance Infrastructure Security OT/ICS Security Penetration Testing & Audits Security Training & Awareness | Loading... | Loading... | Loading... | Loading... | |
| M3MCom (M3M Data Protection) M3M Data Protection from Warsaw focuses on personal data protection and compliance, providing outsourced DPO services, GDPR audits and implementations, and personal data breach handling. It also offers penetration testing of applications, infrastructure and cloud, social engineering tests and DORA and NIS2 compliance support. | Core offering | GRC & Compliance Penetration Testing & Audits Security Training & Awareness | Loading... | Loading... | Loading... | Loading... | |
| net-o-logy (Cyber Defence Center) Cybersecurity center of an IT integrator, providing a 24/7 SOC, an incident response and ransomware recovery team, vulnerability management and penetration testing, dark web monitoring, NIS2, ISO 27001 and DORA compliance support, and security awareness training with phishing simulations. | Part of the offering | GRC & Compliance Monitoring & SOC Penetration Testing & Audits Security Training & Awareness | Loading... | Loading... | Loading... | Loading... | |
| nFlo Security and infrastructure firm delivering IT audits, penetration testing of applications and networks, ISO 27001 and GDPR programmes and cyber resilience strategies covering technology and staff training. | Part of the offering | Cloud Security GRC & Compliance Penetration Testing & Audits Security Training & Awareness | Loading... | Loading... | Loading... | Loading... |
Cybersecurity service categories
Browse the full list of cybersecurity specialisations available in the directory and find the right partner for your organisation.
Infrastructure security covers the rollout and day-to-day running of endpoint, identity and network defences: EDR, MFA, access control and segmentation. The directory lists providers who run such projects from inventory to handover.
A penetration test is an authorised attack on your own system that shows which flaws an intruder would actually use. Compare providers testing web and mobile apps, networks and source code.
GRC and compliance work turns security into a managed system: risk analysis, policies, continuity planning and the evidence an auditor asks for. Browse the providers who run those projects in Poland.
Security awareness programmes, phishing simulations and certification courses for IT staff - from spotting a fake payment request to exam preparation. Compare training providers delivering in Poland.
OT/ICS security protects the plant network, PLC controllers and SCADA stations from incidents that stop production. See providers who work on the shop floor without shutting the line down.
Cloud security means reviewing and tightening how AWS, Azure and GCP accounts are set up: identity, permissions, encryption, containers and deployment pipelines. Browse Polish firms that examine your estate and help close what they find.
Data protection means inventory and classification of data sets, encryption, DLP and key management in a cloud KMS or an HSM. Compare providers that map where your records sit and cut the risk of them leaving the company.
Continuous security monitoring and incident detection: SOC as a Service, MDR, SIEM rollouts and SOAR automation. Find Polish providers that watch your logs around the clock and escalate real attacks.