Securent
Keep your company under control. Securent protects your data, processes and systems and trains your staff, because most attacks start with an ordinary mistake.
Securent at a glance
Product sheet- Category
Cyber security
- Who it is for
Organisations providing a regulated service under the Czech Cyber Security Act without a security role of their own; whether you fall under it depends on the type of service, size and other criteria.
- How it is paid for
Based on project scope. Depends on scope. The GAP analysis is a one-off project; rented roles and governance run continuously and are billed by the agreed number of days per month. Scope and SLA are set after an initial consultation.
A GAP analysis ends in three documents, not an impression
Securent rests on three services: GAP analysis, rental of security roles and governance. The analysis is the input to the other two, because it provides a structured assessment of the company's information and cyber security, ICT and AI.
It reviews the requirements of the Cyber Security Act and its implementing regulations, the state of processes and documentation, organisational and technical measures, the ICT environment, the supply chain, GDPR, training, physical protection and AI. The output is management reporting for the board, an explanatory report with a detailed gap analysis and a roadmap.
A security role you do not have to fill
The cyber security manager runs security in the organisation, investigates incidents, manages compliance and communication with regulators, and organises committees and training. The architect assesses the ICT and networking environment, introduces standards and takes part in audits and tenders.
The auditor assesses the state of security, runs regular audit activities and prepares the company for ISO 27001 certification. The DPO looks after data protection, the records of processing and the contracts.
Governance runs at the customer every month
Full security operations under the Cyber Security Act run on the customer's premises. They consist of rented roles, preparation or review of controlled documentation and communication with NÚKIB, that is, designation, administrative proceedings, measures and incident reporting. On top of that come organising the Cyber Security Committee, an action implementation plan, training for employees and suppliers, and reporting for management.
The tangible output is an asset map and a risk register, a statement of applicability, an action plan, BCP and DRP plans and more than ten registers kept by the cyber security manager. Coverage extends from corporate compliance through physical protection and GDPR to commercially sensitive information.
Resilience is not claimed, it is tested
Penetration tests are carried out manually and automatically following the OWASP Testing Guide and OWASP Top 10 methodologies, and MASVS for mobile applications. They test authentication, authorisation, input validation, application logic and data protection, including attacks such as SQL Injection, XSS, CSRF, IDOR, SSRF and RCE. The final report categorises the risks and a retest is possible after fixes.
Vulnerability scanning compares systems, devices, applications and services with CVE databases using Greenbone Vulnerability Manager and Shodan. Findings receive a CVSS score and a priority. Monthly scanning is recommended for a production environment, external scans can be automated weekly, and ad hoc scans follow larger changes.
Most attacks start with a person. So that is where we start.
A phishing campaign analyses the environment, designs scenarios, sends simulated emails and tracks the rates of opening, clicking and entering details. The results show where awareness is weak and which groups are at higher risk.
Training then targets them, focused on phishing, BEC attacks and safe behaviour. It is held in person, as a webinar, e-learning or a workshop. For an ordinary user it takes 60 to 90 minutes, in workshop form two to four hours. The training can be evidenced for an audit.
Experience from the sectors regulation reaches first
Securent is a trade name of E LINKX, and its customers include the ČEZ group (energy), CETIN (telecommunications), OVaK (water utilities) and VÍTKOVICE. These are all sectors the Cyber Security Act applies to.
We treat security as a continuous discipline and measure it by whether the company withstands an attack.
How we get it running for you
Four steps from a short call to ongoing security work
Short call
We find out where you stand and what makes sense to tackle first. Only then is it clear whether to start with an analysis, a role or a test.
GAP analysis
We carry out a structured assessment of the company's information and cyber security, ICT and AI. It includes an assessment of whether and how you are affected by the Cyber Security Act, through which the Czech Republic transposed the NIS2 Directive.
Roadmap
The analysis produces a management summary, a detailed gap analysis and a roadmap, that is, a specific order of recommended steps. It is the basis for deciding what is done first.
Security operations
The roadmap is followed by ongoing work: rented roles, documentation, communication with NÚKIB and resilience testing. Scope and SLA are fine-tuned after the initial consultation.
What you get
Security roles, testing and training from one supplier
Findings ranked by risk, documentation for dealing with NÚKIB and training you can evidence for an audit.
Security as an ongoing discipline
The aim is not a certificate and a binder, but a company that actually withstands an attack. That is why the work continues after the documents are issued.
Fill the role without recruiting
You can rent a cyber security manager, architect or auditor and a DPO. You do not have to look for a specialist in a market where there are few of them.
Documentation and support in dealing with NÚKIB
We prepare the documentation for designation, administrative proceedings, measures and incident reporting and, depending on the agreed scope, support or represent you in communication with NÚKIB. The legal obligations remain with your organisation.
Findings ranked by risk
Vulnerabilities receive a CVSS score and a priority, tests a risk categorisation. Fixes follow severity.
Training you can evidence for an audit
Training produces an auditable record that evidences compliance with the training requirement and belongs in the audit records. A campaign adds figures on how people actually perform.
From analysis to delivery with one supplier
Analysis, roles, documentation, testing and training come from one supplier. Responsibility does not get lost between a consultant, an auditor and a tester.
Integrace
Integration with your systems
Fortinet
Network security.
Cisco
Network security on Cisco infrastructure.
GreyCortex
Threat detection and monitoring.
Zabbix
Environment monitoring, with dashboards in Grafana.
Grafana
Dashboards over monitoring data.
Bitdefender
Endpoint protection.
Greenbone
Vulnerability scanning against CVE databases.
Shodan
An overview of which of your systems are visible from outside.
Veeam
Backup.
VMware
Virtualisation.
Microsoft Entra
Review of identities and conditional access.
Frequently asked questions
All questions and answersThat is where the GAP analysis starts: it assesses whether, and under which regime, your company is affected by the Cyber Security Act (No. 264/2025 Coll.), through which the Czech Republic transposed the NIS2 Directive. The output is three documents: management reporting for the board, an explanatory report with the gap analysis and a roadmap with the order of steps.
Not necessarily. A cyber security manager, architect or auditor and a DPO can be rented. The specific scope and SLA are fine-tuned after the initial consultation; for a security manager it is usually a larger number of days per month.
Scanning systematically compares systems, devices, applications and services with databases of known vulnerabilities and is repeated regularly, monthly for a production environment. A penetration test is manual and automated work on a specific application following OWASP methodologies, with findings, recommendations and an optional retest after fixes.
Aggregated statistics on how many people opened the email, clicked and entered their details, plus identification of weak spots and higher-risk groups. Follow-up training then targets them.
Interested in Securent?
- Ozveme se vám a probereme, co potřebujete a co už máte
- Z rozhovoru vzejde návrh řešení a cena
- Poptávka vás k ničemu nezavazuje