No more security questionnaires, manually reading documents and matching information. You are now able to assess and monitor all your vendors at once, not only the 10% you have time.
75% of companies were hit by a supply chain attack last year. Every company has a digital supply chain, and every company is part of someone else’s. You probably know your ten direct suppliers, but the two hundred to four hundred behind them stay in the dark. Nobody expects another dependency to be critical for their operations, until it is.
Taking control starts with having insights.
Aikido is the no-nonsense security platform for developers. The all-in-one security platform that covers you from code-to-cloud and helps you get security done. Engineering teams execute faster with Aikido thanks to centralized scans, aggressive false positive reduction, automatic risk triaging & fixing, risk bundling, and easy step-by-step risk fixes. Aikido makes security simple and doable for developers, so companies can win customers, grow up-market, and ace compliance. Don’t just get security done fast, get it done automatically.
Alistar is een Europese full-service technologiepartner die organisaties helpt om hun digitale ambities waar te maken. Door menselijk inzicht, data en technologie samen te brengen, ontwikkelen we slimme oplossingen die processen versnellen, schaalbaarheid vergroten en duurzame groei mogelijk maken. Altijd strategisch. Altijd mensgericht.
Arda helpt organisaties om medewerkers bewust te maken van cyber security en gegevensbescherming. Het platform combineert e-learning, interactieve films, casuïstiek, expert interviews en serious games. Onze films werken met storytelling op basis van echte Nederlandse acteurs. De verhalen zijn gebaseerd op lokale, herkenbare incidenten en situaties. Door die afwisseling blijft informatiebeveiliging top of mind en leren medewerkers wat ze moeten doen bij bijvoorbeeld phishing, ransomware en datalekken.
Het programma is geschikt voor de hele organisatie, met aanvullende leerlijnen voor rollen die meer specifieke kennis nodig hebben, zoals IT, management en financieel specialisten. Daarmee voldoe je aan wet- en regelgeving en normen zoals de NIS2, CBW, AVG, ISO 27001, NEN 7510, BIO en het normenkader IBP.
Arda wordt ingezet door een grote diversiteit aan organisaties, met een extra focus op onderwijsinstellingen, overheden en zorginstellingen. Deelnemers waarderen de trainingen gemiddeld met een 8,6.
Kom langs op de stand voor een demo en ontdek hoe informatieveilig werken een tweede natuur wordt.
Armis from ServiceNow protects the entire attack surface and manages an organization’s cyber risk exposure in real time. In a rapidly evolving, perimeter-less world, Armis ensures that organizations continuously see, protect and manage all critical assets – from the ground to the cloud. Armis secures Fortune 100, 200 and 500 companies as well as national governments, state and local entities to help keep critical infrastructure, economies and society stay safe and secure 24/7.
Who is BSI?
BSI is one of the world's leading certification bodies, helping organizations achieve and maintain internationally recognized management system certifications.
For organizations looking to strengthen their cybersecurity and information security governance, BSI provides accredited certification against standards such as ISO/IEC 27001, ISO/IEC 27701, ISO 22301 and ISO/IEC 42001. Our independent certification services help organizations demonstrate compliance, meet customer and regulatory requirements and continually improve their management systems.
Alongside certification, BSI delivers comprehensive training courses covering information security, privacy, business continuity, AI governance and auditing. Whether you are new to ISO standards or preparing to become an internal or lead auditor, our expert-led courses provide practical knowledge that can be applied immediately. Interested in a training course with 40% discount? Come by our stand!
Our auditors and trainers work with organizations of all sizes. From fast-growing technology companies to multinational enterprises and public sector organizations.
We're here to help you understand standards, prepare for certification and maintain compliance in an increasingly demanding regulatory landscape.
If you're considering certification, preparing for ISO/IEC 27001, navigating new regulations such as NIS2, or looking to develop your team's expertise, visit the BSI stand to discover how our certification and training services can support your next step.
We're happy to help, even if it's just one conversation.
***
As an organization without shareholders, we reinvest our profits to achieve the difference we want to see in the world. Our purpose-led approach attracts other organizations and thought-leaders to work with us. Our stakeholders and clients value our impartiality, global reach, and leading-edge expertise. We give organizations of all sizes the confidence to explore, grow, and prepare for the challenges ahead. We form strong collaborations and partnerships with experts, businesses, governments, and non-governmental organizations to deliver a positive impact.
CCRC (Cyber Chain Resilience Consortium) is een onafhankelijk platform dat organisaties ondersteunt bij het versterken van hun cyberweerbaarheid door middel van realistische cybercrisisoefeningen, simulaties en kennisdeling. CCRC brengt publieke en private organisaties samen om samenwerking binnen digitale ketens te versterken, risico’s te beperken en organisaties optimaal voor te bereiden op cyberincidenten. Met een praktijkgerichte aanpak draagt CCRC bij aan een veiliger en weerbaarder digitaal Nederland.
A global player
Cegeka has evolved into a global technology provider, serving over 2,500 customers worldwide. Our comprehensive offerings include application services, business solutions, quality engineering, data and AI, digital workplaces, cyber resilience, networking & regulatory, and hybrid cloud.
With a presence in the Benelux, Germany, Austria, Romania, Moldova, Italy, Sweden, Greece, Denmark, France, the United Kingdom, the United States, Colombia, and India, Cegeka boasts a workforce of over 9,000 employees.
Cegeka remains a family-owned company, headquartered in Hasselt, Belgium.
Checkdone IT is an independent IT security partner focused on one core objective: bringing clarity, control and direction to complex security environments. In a market full of noise, overlapping tools and conflicting advice, we help organisations understand where they stand and what truly matters.
Security is often approached as a collection of technologies. In reality, the challenge lies elsewhere. It is about insight into risks, clear policies and procedures, an overview of the full landscape and control over decisions. Without that, organisations invest heavily but still lack confidence.
We work differently. Fully independent, we act solely in your interest. We analyse your environment, identify real risks and translate them into clear, practical steps. From strategy to implementation, we take ownership and ensure that decisions actually work in practice.
Our approach is integrated. Technology, policy and compliance are always connected. By aligning these elements, we help organisations move from fragmented security towards a structured and manageable approach.
The result is simple: clarity in choices, control over risks and confidence in your security.
This event will be hosted together with our partners: SecuMailer, Segura, Torq, Labyrinth and ZeroFox
Cognyte, a global leader in investigative analytics solutions, helps government agencies and other organizations uncover mission-critical insights and make smarter, faster decisions with Actionable Intelligence for a Safer World®.
LUMINAR is an all-in-one external threat intelligence solution for CTI, DRP, and EASM. It combines an AI-powered platform that automates large-scale threat discovery, correlation, and prioritization with an embedded proactive expert human layer that delivers tailored threat intelligence, aligns findings to business risk and priorities, guides response, and supports remediation.
We’re Colt. We own and operate exceptional digital infrastructure which powers the global AI economy, connects societies, builds communities and transforms lives. Thousands of colleagues in 65+ offices across Europe, Asia, and North America share a deep commitment to delivering an outstanding experience and making every interaction effortless for our customers.
Customers and partners choose our award-winning fibre infrastructure, digital platforms and security solutions, delivered across a network that spans continents and crosses oceans. We’re Europe’s largest B2B operator: we connect 40+ countries, 32,000 enterprise buildings, 275+ points of presence, and 12 cable landing stations and we manage eight subsea cable systems. We also co-manage AS3356 – the most widely peered network in the world.
Founded in London over 30 years ago, we’re privately funded and driven by values of fairness, inclusion and equity. We’re known for our urgent call for social and sustainable change and we're guided by our purpose in everything we do: creating effortless connections and extraordinary outcomes for our customers, communities and people. Be a part of our story: come on over to www.colt.net or join our amazing communities at LinkedIn, Instagram, TikTok, Facebook and YouTube. Media enquiry? Email us at pressqueries@colt.net.
We help cybersecurity and risk teams automate up to 80% of their GRC workload (compliance, risk management, audit preparation), which is still often handled manually or across multiple tools.
Our platform allows you to manage multiple frameworks like RGPD, ISO 27001, NIS2 and many others in one place, with controls mapped once and applied across all regulations. This significantly reduces duplication, improves visibility, and makes audit readiness much faster.
Everything is fully no-code, meaning your team can adapt risk models, controls, and reporting in real time without relying on IT or external support.
The goal is simple: less time spent on reporting and compliance, more time actually managing risk and cover the company.
Compumatica secure networks B.V. is een 100% Nederlandse fabrikant en reseller van cybersecurityoplossingen, gespecialiseerd in de bescherming van "data in rest" en "data in transit".
Wij bieden organisaties die autonomie en soevereiniteit nastreven, beveiliging op het hoogste niveau: volledige transparantie over de herkomst van de technologie en over wie er toegang toe heeft – zonder backdoors. Deze uitgangspunten vormen de kern van onze missie: "To protect what matters most."
Onze klanten bevinden zich zowel binnen als buiten Nederland; onze producten worden ingezet in meer dan 180 landen wereldwijd. Compumatica richt zich primair op overheidsmarkten – waaronder Defensie, ministeries en ambassades – evenals op organisaties binnen de kritieke en vitale infrastructuur, zoals olie & gas, manufacturing, energie (inclusief kerncentrales), infrastructuur (bruggen, sluizen en tunnels), maritiem, en de voedselproducerende industrie.
Ons portfolio omvat onder meer cryptoboxen, data diodes, special purpose firewalls, mailencryptie-oplossingen en hardware security modules (HSM's).
Compumatica is een erkend ABDO/ABRO-bedrijf, levert gecertificeerde oplossingen volgens AIVD/uWBH, en is één van de zeven Nederlandse ondernemingen die deelnemen aan het Nationale Cryptostrategie-programma (NCS) van de Nederlandse overheid.
Crimson7 is an offensive security company built on one premise: point-in-time testing cannot prove you are defended today. A pentest or a one-off red team is a snapshot, and detections drift and break silently the moment the report is filed.
We work in Adversarial Exposure Validation, the Gartner category for validating exposure continuously against real adversary behavior. The discipline is our own: validate behavior, not tools, and prove your detections fire rather than assume they do.
One platform runs that loop from both sides. HackerFlow covers the attack side: it simulates real adversary techniques with live command-and-control infrastructure, confirms whether your EDR and SIEM detections actually fire, and delivers remediation as Detection-as-Code and Response-as-Code instead of a PDF report. 7Hunter covers the defensive side, with threat hunting on Microsoft Sentinel backed by 8,000+ pre-built KQL queries and 75+ investigation runbooks. Around them we run threat-led red teaming, detection engineering and managed continuous purple teaming. Everything maps to MITRE ATT&CK and aligns to DORA and NIS2.
Come by stand 11.C015 and we will look at whether we can run a free proof of value on your own environment. Joey and Atilla present twice in Masterclass theater 2, both days at 12:30: Always Under Attack on Wednesday, Never Hunt Alone on Thursday.
Wie wij zijn
Cyber Security Challengers is een team van cybersecurity-specialisten voor organisaties die cybersecurity serieus nemen. Wij geloven niet in kant-en-klare oplossingen, maar in partnerschap: wij werken naast bestuurders en in security teams, niet los daarvan.
We helpen bestuurders hun verantwoordelijkheid op het cyberdomein daadwerkelijk dragen. Niet uit angst voor boetes, maar om regie te krijgen over de eigen veiligheid.
Hoe wij werken
Wij hanteren een vast groeimodel: van nulmeting, via implementatie van maatregelen, naar duurzame governance. Elke fase bouwt op de vorige. De nulmeting brengt risico's en volwassenheid in kaart, de implementatiefase voert de bijbehorende maatregelen door, de governancefase borgt dat die maatregelen blijven werken door periodieke toetsing en bijsturing.
Wij werken risicogebaseerd: niet alles is even urgent. Prioriteiten stellen we organisatorisch, mensgericht, fysiek en technologisch tegelijk, nooit los van elkaar. Een kwetsbaarheid in een kritiek systeem weegt zwaarder dan een verouderd beleidsdocument, en de aanpak volgt die volgorde.
Compliance volgt
Bestuurders dragen verantwoordelijkheid voor cybersecurity. Die kan niet gedelegeerd worden, wel gedragen worden met de juiste kennis, een uitgebreid netwerk en onze praktische inzet. Wanneer het fundament op orde is, volgt naleving van BIO2, ISO 27001 en NIS2/Cbw als vanzelf uit dat fundament, in plaats van als losse exercitie.
CISO-as-a-Service
Voor structurele ondersteuning zetten we CISO-as-a-Service in: een vast aanspreekpunt met een directe lijn naar uw bestuur en uw directie, kwartaalrapportage aan de raad van bestuur, en opschalen bij incidenten. Zo krijgt een organisatie de slagkracht van een ervaren CISO, inclusief het netwerk aan vakgenoten en gespecialiseerde partners dat daarbij hoort, zonder de vaste kosten van een intern team.
Uit deze aanpak ontstaan duurzame relaties: met vakgenoten, klanten en leveranciers die elkaar versterken. Het resultaat is meetbaar: aantoonbare naleving, een werkend fundament en een daadwerkelijk weerbare organisatie die bij de volgende audit niet hoeft te improviseren.
Neutralizing AI- and Quantum-Powered Threats in Real Time.
Our patented, AI- and quantum-resistant technology pre-emptively neutralizes even the most advanced attacks in real time, including zero-day and AI and quantum powered threats, across your entire digital landscape—from endpoint to perimeter and everything in between.Where traditional cybersecurity reacts after a breach,
Cyemptive acts before—isolating and eliminating threats before they can even touch your network.
Cyemptive is EU headquartered at the HSD Campus in The Hague. Our services are delivered from Dutch-based data centers, ensuring full sovereignty and compliance.
We are partnering with TNO/PCSI, HSD Security Delta and the Campus in the Hague community and offer Proof of Concept (POC) services to test specific requirements.Contact us and ask for a live demonstration to see how Cyemptive can help your business to stay ahead of AI- and quantum-powered cyber threats
DataBee®, a Comcast company, helps Global 2000 organizations turn fragmented security, risk, and compliance data into a trusted foundation for cyber risk management, especially important as AI accelerates risk. Its portfolio includes continuous controls monitoring, exposure management, security threats, inventory, user access review, and DataBee RiskFlow™ for AI-powered risk insights.
DNV is one of the world’s leading certification bodies. Through management system certification, supply chain assurance and training services, we help companies manage risks, assure compliance and build competence in organizations, supply chains and people. Working with companies in all sectors – from food and beverage to ground and air mobility, ICT and general industries – DNV’s digitally enabled services and customer journey help companies operate sustainably and meet stakeholder demands.
DNV’s digitally enabled certification, assurance and training services help customers manage risks, make critical decisions and continually improve. Whether tackling quality, environmental, safety, social & ethical or security challenges, DNV combines technical, industry and risk management expertise to build confidence, continuity, and resilience.
Driven by its purpose, to safeguard life, property, and the environment, DNV helps tackle the challenges and global transformations facing its customers and the world today and is a trusted voice for many of the world’s most successful and forward-thinking companies.
"Who can access what within my organisation?"
Elimity enables organisations to answer this crucial question within days, not months.
With provable control over user access essential for NIS2, DORA, and ISO 27001 compliance, Elimity gives you the fastest way to see who—human and non-human identities, including AI agents – has access across your IT landscape.
Our Identity Visibility and Intelligence Platform (IVIP), Elimity Insights, is trusted by organisations like Monuta, OceanCo, Liantis, and Belfius:
ESET is de Europese leider in cybersecurity, vertrouwd door meer dan 500.000 bedrijven in 178 landen. Als de grootste EU-gebaseerde leverancier van cybersecurityoplossingen (Gartner Market Share, 2023), is onze missie om vooruitgang te beschermen zonder concessies te doen aan privacy, prestaties of compliance. Met meer dan 30 jaar ervaring combineren wij eigen technologie, threat intelligence en end-to-end diensten tot één krachtig verdedigingssysteem. Ontwikkeld in de EU, lokaal geleverd.
Europe’s Cyber Defense. Made in the EU. Built to protect.
Wij zijn niet zomaar een leverancier, wij zijn uw strategische partner in cybersecurity. Onze oplossingen worden ontwikkeld en beheerd in de EU, in lijn met de strengste Europese regelgeving. Ze worden ondersteund door 9 Europese R&D-centra, een uitgebreid EU-sensornetwerk met 110 miljoen sensoren wereldwijd en directe samenwerkingen met wetshandhavingsinstanties zoals Europol EC3. Bewezen. Compliant. Soeverein.
Regelgevingsnaleving: AVG | NIS2 | ISO27001 | SOC2
Gegevenssoevereiniteit: EU-gehoste cloud | Lokale opslagopties | Autonome Agent
Threat Intelligence: Gericht op APT-groeperingen, botnets en zero day-dreigingen gericht op de EU Vertrouwd door overheid & bedrijfsleven: Adviseur van nationale CERTs en cybercrime-eenheden.
Technology detects threats. People stop them. Firebrand develops the capability and confidence that cyber professionals and teams need to perform when it matters most. Through expert-led, immersive, and flexible cyber security training shaped around real-world threats and roles, we build certified skills that hold up under pressure.
The IT and Technology Certification Specialist
Formalize transforms overwhelming compliance demands into actionable compliance workflows. No chaos, just clarity. Helping you master DORA, NIS2, and whatever comes next.
Our compliance solutions cover more than 5.000.000 employees.
We support companies of all sizes with reliable, user-friendly compliance software. Formalize simplifies NIS2, DORA, risk, and audit management, and our Whistleblower Software helps organizations handle whistleblowing cases.
We work with leading firms such as Fieldfisher, BDO, DLA Piper, and Osborne Clarke to serve customers worldwide.
Performing over 2,500 scans per year, we provide the scale and expertise required to secure your digital infrastructure. We are a trusted cybersecurity partner of Thuiswinkel and perform managed scans for all its member websites.
Why visit our stand (#11.C004)?
Cut AppSec overhead & licensing costs: Buying expensive enterprise licenses often leads to underutilised software and a strained internal team. We eliminate that friction, delivering continuous web application testing at a fraction of the cost.
Get an objective second opinion: True security requires independent validation. We don't just dump automated reports on your desk; our experts manually validate all scan results to provide a clear, prioritised action list your team can execute immediately.
Go beyond web applications: For a complete overview of your cybersecurity, we conduct comprehensive reviews across the areas that matter most to your organisation, including systems, access controls, devices, policies, and staff practices.
Below you can explore the current exhibitor list for Cybersec Netherlands 2026. Our 2026 exhibitor list is still in progress. Make sure to visit this page regularly to stay up to date.