Services
Build the capability, not the dependency
Our consultants do cybersecurity work across product security, secure development and management systems, and they help teams adopt Cyberismo and make it their own. Either way the aim is the same: a team that ends up running its own cybersecurity management, rather than depending on us to run it.
Most common starting point
EU CRA kickstart
For teams that know the Cyber Resilience Act is coming and need to turn it into a plan they can budget and staff. Run by the consultants behind the certification projects on our references page.
- 01
Scope your portfolio
Which of your products are in scope, which category each falls into, and which conformity route that implies.
- 02
Current state analysis
What you already do against the essential requirements and the vulnerability handling requirements, and what is missing.
- 03
A roadmap with dates
The work sequenced against 11 September 2026 and 11 December 2027, with the effort it takes from your own teams.
Getting Cyberismo working for you
Adoption kickstart
We set up your first Cyberismo project with the modules that fit your situation, get your team working in it, and stay close during the first weeks. After that, your team runs it.
Content tailoring
We adapt card types, workflows, templates and the logic rules to how your organisation works, and teach your people to keep adapting them.
Pipeline integration
Getting Cyberismo running in your CI/CD, wiring up connectors to Jira or Dependency-Track, and turning your checks and evidence publishing into build steps.
Certification preparation
Preparing for an IEC 62443-4-1, ISO 27001 or ISASecure audit with the evidence coming out of your own Cyberismo project rather than a last-minute document hunt.
Technical support
Support and maintenance for your Cyberismo tool chain, including help when you extend it with new modules, new reports or new connectors.
Training
Instructor-led sessions for your team, on the platform itself or on the underlying practice. See Cyberismo learning for the course catalogue.
Cybersecurity consulting
Our consultants are experts in product security, cloud security, secure development, security testing and inspections, and information security management systems. This is the practice the content modules came out of, and it is available on its own, with or without the platform.
Product and solution security
- Product security strategy: a business-driven plan for the cybersecurity of your products and customer-facing solutions.
- Secure development kickstart: getting started with secure development in your teams without wasting time or money.
- IEC 62443-4-1: preparing for an audit and getting your secure development process certified.
- DevSecOps: integrating cybersecurity and compliance into your CI/CD pipelines and practices.
- Security architecture: a cybersecurity architecture and roadmap for your products and solutions.
- IEC 62443-3-3 and 4-2: building security capabilities into products based on the standards' requirements.
Technical inspection and security testing
- Threat modelling: building a threat model of your product together with our consultants, and learning the process along the way.
- Penetration testing: an experienced security tester inspecting your product or solution.
- Security testing strategy: planning how to integrate continuous security testing into your organisation.
Information security management
- ISO 27001 kickstart: starting your ISO 27001 project on the right foot.
- ISO 27001 boost: sparring sessions to make sure an ongoing project is on the right track.
- Internal audit: finding out what is still needed to be compliant or audit-ready.
- EU NIS2: making sure your management practices are up to date with laws based on the directive.
Contact
- 01
A short conversation
Thirty minutes on what you are trying to achieve and which standards apply.
- 02
A concrete proposal
Which modules, hosted or self-run, what adoption support you would want, and what it costs.
- 03
You try it first
We recommend that your team tries the open-source version before you buy anything.
Cyberismo is based in Tampere, Finland. We work smoothly with teams anywhere in the world.