Cybersecurity for Europe's critical infrastructure.
We help essential and important entities meet NIS2 and ISO 27001 requirements, and verify that their defences hold under independent testing. EU-based delivery from Bucharest, built on German consulting standards.
Our Cybersecurity Services
From technical NIS2 and ISO 27001 measures to independent testing. Led by senior specialists, with a defined scope and a fixed price.
IT Security Audits
A structured assessment of your information security posture, revealing technical weaknesses and compliance gaps.
Learn more ›Penetration Testing
Controlled attacks on your web applications, infrastructure, cloud and APIs to find exploitable weaknesses before others do. Retest included.
Learn more ›NIS2, KRITIS & ISO 27001 Implementation
Technical implementation of the security measures NIS2, KRITIS and ISO 27001 require, with evidence ready for audit. Legal advice through SDG.
Learn more ›Security Training
Awareness programmes and phishing simulations tailored to your organisation, plus the management training NIS2 requires.
Learn more ›Cybersecurity Consulting
Ongoing senior guidance for your management and IT, aligned with your security and compliance obligations.
Learn more ›Vulnerability Management
Continuous vulnerability monitoring with validated findings and a prioritised remediation plan.
Learn more ›Why Choose SDG Tech
Senior-level cybersecurity support, tailored to organisations that cannot afford to get it wrong.
Expert Team
Senior consultants, auditors and penetration testers with years of practice in regulated industries.
German Consulting Standards
Methods and quality assurance from SDG in Regensburg, delivered by our EU-based team in Bucharest.
Tailored Solutions
Security strategies built around your sector, your risks and your regulatory obligations.
Regulatory Know-how
Technical measures mapped to ISO 27001, KRITIS and NIS2. Legal and compliance questions covered by our sister company SDG.
Proactive and Discreet
We address weaknesses before they become incidents, under strict confidentiality and NDA as standard.
Clear Communication
Complex findings explained in business terms, with fixed-scope offers and no surprises.
Organisations society depends on.
Mid-sized and large operators in the sectors covered by NIS2 Annex I and II, and their suppliers.
Four steps, one clear outcome.
Define scope, applicable requirements and current state with your stakeholders.
Review documents, interview owners, test systems. Every finding is evidenced.
An executive summary for management and technical detail for your teams.
A prioritised roadmap, implementation support and verification of the fixes.
Know where you stand.
A confidential 30-minute call with a senior consultant to clarify your obligations, priorities and a sensible first scope.