Incident in progress?Call +48 699 587 010

Cybersecurity in expert hands Every action visible on the platform

We prepare your organisation for the requirements of business partners, auditors and NIS2, then look after its security together with you, on the FortCyber platform.

  • 200+institutions and companies trust FortCyber
  • 110+public bodies and local government units prepared for NIS2
  • 30+certified auditors and experts
  • 20 000+users trained on the e-learning platform

Three packages. One path from assessment to ongoing support

Start where you are. You don't have to buy the packages in order — in each one we work on the FortCyber platform, so results and progress stay in one place.

  1. 1Assessment security
  2. 2Rollout of policies and procedures
  3. 3Ongoing support for your security

Cyber/NIS2 Audit

One-off assessment · stage 1

You want to know where you stand and what needs attention — before a business partner's audit, an inspection or a cyberattack.

What we do
We assess security management and technical safeguards.
What you get
A report with gaps, priorities and an action plan.

The audit result and action plan go onto the platform — straight away as a task list.

Services in the package

  • Cyber Audytfrom PLN 3,000
  • Cyber Pentestyfrom PLN 2,000
Order an audit

NIS2 Implementation

Rollout project · stage 2

You already have a list of gaps and want to turn it into the everyday work of your organisation.

What we do
We roll out an ISMS, risk management and business continuity, and prepare your staff.
What you get
Role descriptions, procedures, documentation and working organisational processes.

An ISMS run on the platform: risks, responsibilities and tasks with their deadlines.

Services in the package

  • Cyber SZBIfrom PLN 10,000
  • Cyber Course — trainingfrom PLN 4,000
Plan the rollout

Cybersecurity Outsourcing

Subscription · stage 3 onwards

You are looking for a team to take care of your security day to day — and you want to see what you are paying for.

What we do
We manage security, update documentation, monitor infrastructure and support you during incidents.
What you get
A security manager, access to the FortCyber platform, e-learning, regular security reports and constant audit readiness.

Everything in one place: management dashboard, ISMS, sensors and console, training, and a history of every action.

Services in the package

  • Cyber Carefrom PLN 2,500 / month
  • ISMS officerfrom PLN 2,000 / month
  • + Resilience 24/7 (SOC) for Cyber Carefrom PLN 4,500 / month
See the package

Component service prices from the current price list; package pricing depends on organisation size and scope.All services and prices

A shared platform for your team, our experts and your infrastructure

Open one dashboard and you know which computers are waiting for a patch, which risk needs your decision and what the team did this month. Agents watch your devices around the clock, our experts run your ISMS. You stop digging through emails and spreadsheets.

Hover over or tap an element of the diagram to see the details.

Security status oversight
Cyber emergency response
Threat detection
Operational management (ISMS)
Secure cloud
FortCyber expert teamruns your security
  • Security managerYour dedicated contact
    • coordinates tasks and deadlines
    • runs reviews
    • reports to the board
  • ISMS officerRuns the ISMS
    • coordinates duties set by the board
    • keeps reviews and tasks on schedule
    • supports management decisions
  • ISMS auditorsAssessment and management system
    • review of documentation, procedures and policies
    • keeping the ISMS aligned with regulations
    • management reviews
  • Security analystsResults consulting
    • consult on automated analysis results
    • help prioritise fixes
    • support IT with harder events
  • LawyersIncident support
    • legal support
    • incident reporting to authorities
    • communication with customers and suppliers
  • TrainersPreparing people
    • training and knowledge tests
    • social engineering campaigns
    • simulator exercises
FortCyber platformweb application with agents
  • Management dashboardManagement dashboard
    • real-time view of security status and threats
    • level of formal compliance
    • the team's top tasks
  • ISMSProcesses, procedures, documentation
    • security management automation
    • responsibilities assigned to people and roles
    • task completion tracking
  • Console and agentsIT infrastructure 24/7
    • agents report status continuously
    • automated analysis and vulnerability matching
    • notifications to the right people
  • Incident handlingFast incident support
    • immediate response
    • ready-made document and action templates
    • complete incident documentation
  • Training and simulatorStaff skills
    • automated training and awareness tests
    • social engineering resilience testing
    • isolated practice simulator
  • Action historyAudit readiness
    • continuous record of actions
    • evidence of every step for the auditor
    • board reports
Secure cloudthe platform foundation
  • Browser accessNothing to install on your side
    • fast service start
    • easy to use
    • no investment in your own tools
  • Management and operational rolesEveryone sees their own
    • management — status and decisions
    • IT and ISMS officer — tasks and deadlines
    • staff — training
  • Data centre in PolandData security
    • certified data processing centre
    • data kept in Poland only
    • data and communication security
  • WorkstationsagentAgent on the device
    • reports the system, software and updates
    • checks security controls
    • results go to the platform
  • ServersagentAgent on the server
    • same scope as on workstations
    • vulnerabilities matched to software
    • alert when a patch is missing
  • NetworkIT network elements
    • scope agreed during rollout
    • per the scope: IT network elements
  • StaffPeople
    • training and knowledge tests
    • phishing campaigns
    • results in reports
  • Documentation and processesYour organisation's ISMS
    • policies and procedures
    • risk register
    • roles and responsibilities
  • ManagementDecisions
    • status and compliance
    • recommendations to approve
    • reports on the platform

↑ data from agents and your organisation↓ experts' actions and recommendations

Compliance you can demonstrate

The platform collects the documents and evidence that auditors, business partners and regulators ask for as you go — with no need to prepare them before an inspection.

Risk register and risk treatment plan
assessment, owner, management decision and actions with deadlines
Statement of Applicability
ISO/IEC 27001 controls with implementation status and evidence from devices
Annual ISMS plan
every activity with a deadline and an owner
Incident reporting
KSC deadlines of 24 h and 72 h from detection, a separate data protection path
Technical policies
results from devices: met, not met, exceptions

A security team you don’t have to hire yourself

We tailor our support to your organisation: from an ISMS officer to an ISMS Office and specialist support. We work as your external team on a subscription basis, with tasks and progress visible on the platform.

Your external FortCyber team
  • Security manager

    Your dedicated contact: supports your organisation, coordinates tasks and reports to the board.

  • ISMS officer

    Runs the ISMS on behalf of management and keeps track of duties set by the board.

  • ISMS Office

    Supports the ISMS officer in running the ISMS day to day and keeps the documentation on the platform up to date.

  • ISMS auditors and consultants

    Assessment, rollout and system reviews.

  • Security analysts

    Consult on automated analysis results and recommend fixes.

  • Lawyers and incident handling

    Notifications, documentation and communication during a crisis.

  • Trainers

    Training, social engineering campaigns and simulator exercises.

Your organisationmanagement · IT admins · ISMS officer · staff
FortCyber platform
  • Management dashboard

    Status, a map of requirements met, and decisions — for management, IT admins and the ISMS officer.

  • ISMS

    Risks, roles and tasks with assigned owners.

  • Console and agents

    Device status reported 24/7, automated analysis and notifications.

  • Tests and vulnerabilities

    Test results and detected vulnerabilities with priorities and recommendations.

  • Training and awareness

    Training paths, knowledge tests, phishing campaigns and a simulator.

  • Action history

    Evidence of every step — for auditors and business partners.

What you get out of it

  • Ready to meet the requirementsfrom business partners, auditors and NIS2 — with evidence.
  • Security in orderroles, procedures and tasks that someone is accountable for.
  • Fast incident responsepeople, a procedure and prepared documents.
  • A transparent subscriptionyou see what was done and what you're paying for.
The FortCyber team at work

Our experts. Your decisions.

FortCyber means auditors and security practitioners with experience in commercial companies and the public sector. You set the priorities. We go through the gaps with your IT.

Meet FortCyber
  • ISO/IEC 27001Information security management system
  • KSC auditorsQualified under the 2018 Polish National Cybersecurity System Act (KSC)
  • ABW clearancePersonal security clearance (Internal Security Agency)

Team expertise

  • ISO/IEC 27001 lead auditors
  • Information systems security auditors (KSC)
  • ABW security clearances
  • Experienced CISOs and security officers
  • Security testers and a SOC team
  • Law firm

Trusted by

  • PSE
  • PGE
  • ZUS
  • Polish Development Fund
  • Polish Space Agency
  • Educational Research Institute
  • CERRAD
See references

Understand first. Then decide

We explain security without jargon — from the perspective of the board, IT and heads of public bodies.

All articles