Cyberuptive Europe

An independent Portuguese company in the Cyberuptive network

EN

Services

Three services, designed to work together. We watch your security platforms, make sure they are deployed and tuned well, and help you meet the obligations around them.

  • Managed detection and response

    Monitoring, triage and investigation of the alerts your platforms raise, with agreed escalation to your team. Your telemetry is held on EU infrastructure from the first day of service.

  • Security platform services

    Deployment, migration and tuning of network detection, intrusion prevention, endpoint and XDR platforms, including subcontracted delivery for vendor professional services teams.

  • Compliance and advisory

    Readiness and implementation support for NIS2, DORA, GDPR Article 32 and ISO/IEC 27001, plus internal audit. We do not certify clients, which keeps our advice independent.

How we work

  • Independent

    We do not certify the organisations we advise, and we work across security vendors rather than for one.

  • European

    Client security telemetry is held on EU-owned infrastructure, under EU jurisdiction, from the first day of service.

  • Transparent

    Before we start, we tell you in writing where your data is held, who can reach it, and what we are still building.

  • Measured

    Clear reports in plain language, escalations you can act on, and no alarm for its own sake.

The regulations behind our work

Each service page explains which of these it supports, and how.

NIS2
Directive (EU) 2022/2555, transposed in Portugal by Decreto-Lei n.º 125/2025. It sets risk management and incident reporting duties for essential and important entities, and makes management bodies accountable.
DORA
Regulation (EU) 2022/2554 on digital operational resilience for the financial sector, including ICT incident management and ICT third-party risk.
GDPR
Regulation (EU) 2016/679. Article 32 requires security appropriate to the risk, and Article 33 requires personal data breaches to be notified to the supervisory authority, where feasible within 72 hours.
ISO/IEC 27001
The international standard for information security management systems, and the basis for certification by accredited bodies.
Cyber Resilience Act
Regulation (EU) 2024/2847, which sets security requirements for products with digital elements and for their manufacturers.

Building our team in Aveiro

Alongside these services, we are establishing a supervised analyst development programme in Aveiro, so that more of our work is done by qualified people employed in Portugal.

Talent and Aveiro

Not sure where to start?

Tell us what you run and what you must comply with. We will suggest which service fits, or whether you need one at all.

Arrange a conversation