Who is covered by NIS2 and the Hungarian Cybersecurity Act?

Act LXIX of 2024 applies to organisations in high-risk and particularly high-risk sectors. Registration, security classification, contracting an auditor within 120 days of registration and biennial cybersecurity audits are mandatory.

What fines can non-compliant companies face?

Under the EU framework the maximum fine can reach EUR 10 million or 2% of annual revenue, and executives can be banned from management for up to 5 years for repeated non-compliance.

What does a penetration test cover?

Certified ethical hackers — with written authorisation — attack your systems the way a real attacker would: external and internal infrastructure, web applications, email protection, password handling. The result is a detailed report with remediation recommendations.

Cybersecurity with an attacker's mindset and auditor certifications

Our certified ethical hackers find the gaps before someone else does. From NIS2 readiness through live penetration testing to incident response, with a team proven on critical infrastructure.

Request a rapid security assessment NIS2: what you need to know

Five pillars

Full-spectrum cybersecurity from one team

Prevention, compliance and response: five pillars covering your organisation's entire security lifecycle.

Audit and compliance

Rapid cybersecurity assessment, full IT audit and risk analysis, NIS2 / Hungarian Cybersecurity Act readiness along the full path: EIS identification and classification, GAP analysis, policies, authority registration, pre-audit (the dress rehearsal of the real audit). GDPR compliance and DPO service, supply chain risk assessment.

Ethical hacking and pentesting

External and internal vulnerability assessment, penetration testing by certified ethical hackers, ransomware readiness testing, load/DDoS testing of critical systems, email security review (SPF / DKIM / DMARC).

Incident response and active defence

Pre-built incident response plans and rehearsed playbooks, immediate expert intervention, backup verification, email and endpoint protection, DDoS protection and 24/7 SLA-based monitoring.

Training and awareness

Realistic phishing simulations, staff awareness training (password handling, 2FA, social engineering), executive training, and drafting your information security policy.

Secure custom development

Security by design: secure development lifecycle, code-level review, closed and auditable systems for sensitive environments, even with on-premises AI solutions.

The first 60 minutes: when things go wrong

Isolation, credential revocation, evidence preservation, backup checks, communication. Rehearsed steps instead of panic, because most of the damage is done by the organisation itself, rushing.

Why now?

The regulatory net has tightened

NIS2, the Hungarian Cybersecurity Act, DORA, the AI Act, GDPR: compliance is no longer optional; it's a condition of doing business.

NIS2 + national law

Act LXIX of 2024

In force since 1 January 2025: registration, classification, an auditor contracted within 120 days, mandatory biennial audits.

Fines

EUR 10M or 2% of revenue

The maximum fine under the EU framework. Executives can be banned for up to 5 years for repeated non-compliance.

Reference

Hungarian power plants · Ministry of the Interior

NIS2 preparation and audits at power plants, defence systems. We know what trust means in critical environments.

Request a quote

Get a cybersecurity quote

Choose what you need. If an incident is in progress, don't fill in a form: call us right away: +36 30 970 9700!

How well protected are your systems? Know for sure.

Our rapid cybersecurity assessment gives you a comprehensive picture within days.

Request an assessment