Company name | Description and specialisation | Service categories | Certifications | List of VAT taxpayers | REGON register | Legal form |
|---|---|---|---|---|---|---|
| Afine | Offensive security specialist delivering penetration testing, application and cloud security assessments and red teaming for large organisations in regulated sectors. | Penetration Testing & Audits Cloud Security | Loading... | Loading... | Loading... | |
| CA Cybersecurity Analytics | CA Cybersecurity Analytics is a Gdansk-based provider of cybersecurity and risk analytics services that combines expert knowledge with AI-driven automation. It helps organisations turn scattered data into a coherent, measurable risk model. The offer covers three proprietary solutions: UCM, which integrates assets, threats, vulnerabilities and safeguards; RAP, which analyses risk across assets, people, compliance, suppliers and data; and DDM, which supports data correlation and remediation planning. The company provides vulnerability assessment, penetration testing, data protection, network monitoring, incident response and ISMS automation. It supports compliance with NIS2, DORA, the AI Act and the Cyber Resilience Act. It also delivers AI projects, deploying models and governance solutions. A team with more than 20 years of experience serves clients in Poland, the United Kingdom, Germany and other countries. The first consultation is free of charge. | GRC & Compliance Data Protection Infrastructure Security Penetration Testing & Audits Monitoring & SOC | Loading... | Loading... | Loading... | |
| ChangePro | Cybersecurity integrator and advisor delivering NIS2 audits, vCISO services, penetration testing, SOC outsourcing and security awareness programmes. | GRC & Compliance Penetration Testing & Audits Security Training & Awareness Monitoring & SOC | Loading... | Loading... | Loading... | |
| Cloudware Polska | Integrator designing and maintaining IT infrastructure, hybrid cloud and container platforms, with a security unit deploying IGA identity governance, PAM with session recording, SSO and MFA. It also offers SOC security monitoring, application security and DevSecOps, infrastructure and cloud protection, and NIS2, DORA and UKSC compliance support. | Infrastructure Security Monitoring & SOC Cloud Security | Loading... | Loading... | Loading... | |
| CyCommSec | Cybersecurity firm offering penetration testing, red teaming and OSINT alongside NIS2 and DORA audits, including Threat-Led Penetration Testing for financial institutions. | Penetration Testing & Audits GRC & Compliance | Loading... | Loading... | Loading... | |
| DCS.pl | Software, hosting and systems maintenance provider running a security operations centre with SIEM, SOAR and vCISO services, asset management and NIS2, DORA and ISO 27001 support. | Monitoring & SOC GRC & Compliance | Loading... | Loading... | Loading... | |
| Efigo | Cybersecurity and data protection firm running penetration tests of web, mobile and embedded applications, source code review, ISO 27001 and 22301 audits and DevSecOps support, also as PTaaS. | Penetration Testing & Audits GRC & Compliance | ISO 9001 | Loading... | Loading... | Loading... |
| Elementrica | Offense-driven security firm delivering penetration testing, attack simulations, IT security audits and incident response, backed by its own testing and awareness platforms. | Penetration Testing & Audits Monitoring & SOC | Loading... | Loading... | Loading... | |
| Euvic | Parent company of the Euvic technology group from Gliwice, providing software development, outsourcing, IT infrastructure and consulting. It runs a 24/7 SOC with threat analysis and incident response on Microsoft Sentinel and Trend Micro Vision One. | Monitoring & SOC | Loading... | Loading... | Loading... | |
| Galach Consulting | Advisory firm in cybersecurity and information security management, delivering audits, training and implementations aligned with ISO/IEC 27001 and ISO 22301, plus vulnerability management tooling. | GRC & Compliance Security Training & Awareness | Loading... | Loading... | Loading... | |
| Innowise | Innowise is a software development company providing custom software development, team outsourcing and digital transformation services. Its cybersecurity services include penetration testing, a 24/7 SOC, and compliance assessments against requirements including DORA and ISO 27001. | Penetration Testing & Audits Monitoring & SOC GRC & Compliance | Loading... | Loading... | Loading... | |
| ISCG | ISCG is an IT consulting company and integrator implementing IT service management, infrastructure and process solutions. It runs its own ISCG SOC and a threat intelligence service, performs NIS2 and DORA audits and consulting and penetration tests, and deploys EDR/XDR, PAM, MFA, DLP and data encryption. | Monitoring & SOC GRC & Compliance Penetration Testing & Audits Infrastructure Security Data Protection | Loading... | Loading... | Loading... | |
| Iterasec | Penetration testing company covering web, mobile, API, network, Active Directory, cloud, container, IoT and embedded systems, also offering red teaming, threat-led penetration testing, threat modeling and DevSecOps consulting. | Penetration Testing & Audits Cloud Security | Loading... | Loading... | Loading... | |
| JUVO Privacy Compliance | Compliance and information security arm of the JUVO group in Bielsko-Biala: IT security audits, ISO 27001, TISAX, NIS2 and DORA compliance work, GRC as a service, data protection officer outsourcing and penetration testing. | Penetration Testing & Audits GRC & Compliance | Loading... | Loading... | Loading... | |
| Knoxtera | Cybersecurity provider for financial institutions, offering SOC as a service with 24/7 monitoring, SIEM and SOAR, EDR and DLP deployments, vulnerability scanning and penetration testing, security audits, training with phishing simulations, and a virtual security team supporting NIS2 and DORA compliance. | Monitoring & SOC Infrastructure Security Data Protection Penetration Testing & Audits Security Training & Awareness GRC & Compliance | Loading... | Loading... | Loading... | |
| Linux Polska | Linux Polska is an open source technology integrator that supports large organizations with containerization, DevOps, databases, cloud transformation and observability. In IT security it implements DevSecOps with container and Kubernetes security, code and dependency scanning, software supply chain security and SIEM and SOC integration. | Cloud Security Monitoring & SOC | Loading... | Loading... | Loading... | |
| LogicalTrust | Wroclaw-based offensive security firm running web and mobile penetration tests, source code audits, red team exercises, social engineering tests, ransomware simulations and cloud, container, PCI DSS, DORA and NIS2 audits. | Infrastructure Security Penetration Testing & Audits GRC & Compliance Security Training & Awareness Cloud Security OT/ICS Security | Loading... | Loading... | Loading... | |
| M3MCom (M3M Data Protection) | M3M Data Protection from Warsaw focuses on personal data protection and compliance, providing outsourced DPO services, GDPR audits and implementations, and personal data breach handling. It also offers penetration testing of applications, infrastructure and cloud, social engineering tests and DORA and NIS2 compliance support. | GRC & Compliance Penetration Testing & Audits Security Training & Awareness | Loading... | Loading... | Loading... | |
| net-o-logy (Cyber Defence Center) | Cybersecurity center of an IT integrator, providing a 24/7 SOC, an incident response and ransomware recovery team, vulnerability management and penetration testing, dark web monitoring, NIS2, ISO 27001 and DORA compliance support, and security awareness training with phishing simulations. | Monitoring & SOC Penetration Testing & Audits GRC & Compliance Security Training & Awareness | Loading... | Loading... | Loading... | |
| nFlo | Security and infrastructure firm delivering IT audits, penetration testing of applications and networks, ISO 27001 and GDPR programmes and cyber resilience strategies covering technology and staff training. | Cloud Security Penetration Testing & Audits GRC & Compliance Security Training & Awareness | Loading... | Loading... | Loading... |
Cybersecurity service categories
Browse the full list of cybersecurity specialisations available in the directory and find the right partner for your organisation.
Infrastructure security covers the rollout and day-to-day running of endpoint, identity and network defences: EDR, MFA, access control and segmentation. The directory lists providers who run such projects from inventory to handover.
A penetration test is an authorised attack on your own system that shows which flaws an intruder would actually use. Compare providers testing web and mobile apps, networks and source code.
GRC and compliance work turns security into a managed system: risk analysis, policies, continuity planning and the evidence an auditor asks for. Browse the providers who run those projects in Poland.
Security awareness programmes, phishing simulations and certification courses for IT staff - from spotting a fake payment request to exam preparation. Compare training providers delivering in Poland.
OT/ICS security protects the plant network, PLC controllers and SCADA stations from incidents that stop production. See providers who work on the shop floor without shutting the line down.
Cloud security means reviewing and tightening how AWS, Azure and GCP accounts are set up: identity, permissions, encryption, containers and deployment pipelines. Browse Polish firms that examine your estate and help close what they find.
Data protection means inventory and classification of data sets, encryption, DLP and key management in a cloud KMS or an HSM. Compare providers that map where your records sit and cut the risk of them leaving the company.
Continuous security monitoring and incident detection: SOC as a Service, MDR, SIEM rollouts and SOAR automation. Find Polish providers that watch your logs around the clock and escalate real attacks.