Consulting
We offer comprehensive IT security analyses and strategies, support with ISO 27001 certifications and help you comply with the Cyber Resilience Act through targeted advice.
Cyber Resilience Act
From gap analysis to conformity: vulnerability management, SBOM and evidence from a single partner.
Learn moreScroll
Security that keeps pace
Cyber Resilience
Cybersecurity requirements change quickly, we help you in staying up to date and building real resilience.
Who we are
Leon Holub
Software & Security
Leon is an expert software developer with experience in digital health and cybersecurity. Working in various positions around software development for more than 10 years, developing complex applications and managing teams as both a freelancer and permanent employee he brings a lot of experience in software development and management.
Dan Gora
Partner, GRC engineering & cloud security
Dan brings 15 years of experience in cloud and product security, from architecture to pipeline, including roles at different big four-consultancies. He turns regulatory requirements into testable technical rules, so that evidence comes straight out of build and operations.
CISSP · CCSP · CSSLP · CISM · OWASP Frankfurt Chapter Lead
Depending on the project, we extend the team with specialists from our network, from regulatory affairs and quality management to penetration testing. Your project gets exactly the expertise it needs.
Topics we cover
From risk management to threat modeling — the building blocks of a resilient organization.
Focus area
Medical device cybersecurity
The MDR, IEC 62304, ISO 14971 and ISO 13485 already cover a lot. We add cybersecurity so that it fits into your regulatory framework instead of duplicating it, and clarify where the CRA and the AI Act apply on top.
Explore medical device security Focus area
AI security & governance
Your teams already use AI, and perhaps your products do too. We establish clear rules for internal use and protect AI features against prompt injection and data leakage.
Explore AI securityRisk Management
We support cybersecurity risk management by identifying security vulnerabilities, conducting risk analyses, and developing effective mitigation strategies to strengthen your information security.
ISO 27001
We support ISO 27001 certification by providing consulting and hands-on assistance in developing and implementing an Information Security Management System (ISMS).
SBOM
We support you in creating a Software Bill of Materials (SBOM) and in establishing processes that ensure complete visibility into your software landscape.
Threat Modelling
Threat modeling analyzes applications to identify potential threats and close security gaps by examining architecture and data flows.
Let's talk
In a free intro call we clarify where you stand and which entry point fits you.