Accredited by DNSC · Romania
CDI NET is a Romanian cyber security company accredited by DNSC, the national cyber security directorate. We audit, we help you comply, and we attack your defenses before someone else does.
01 — Defensive services
We are accredited by DNSC to audit networks and information systems. That accreditation is the backbone of every defensive engagement we run — from the first gap analysis to a functioning SOC.
We perform cyber security audits as a provider accredited by DNSC, Romania's national authority. The audit measures your real security posture against NIS2 obligations and delivers findings your board can act on — not a checkbox exercise.
A NIS2 risk assessment identifies which of your systems and suppliers can hurt you, and how badly. We run the assessment, build the risk register, then implement the security measures the law expects — on your infrastructure, with your team.
Good governance means management knows the risks and owns the decisions. We build the policy framework, roles and reporting lines that NIS2 and ISO 27001 require, sized to your organization instead of copied from a template.
Detection is a capability, not a product you buy. We design and tune SOC and CSIRT functions: log coverage, detection rules, escalation paths and incident response playbooks that hold up during a real breach.
02 — Offensive services
Offensive assessments answer one question: what can a motivated adversary actually do to you? Every engagement runs under signed rules of engagement and ends with findings you can reproduce and fix.
PENTEST
Controlled attacks against your infrastructure, web applications and cloud environments. You get a report with reproducible steps, risk ratings and concrete fixes — then a retest to confirm the fixes hold.
PURPLE TEAM
Our attackers and your defenders work side by side. We execute known adversary techniques while your SOC watches, then tune detections together until the blind spots close. Measurable improvement, session by session.
RED TEAM
Objective-based adversary simulation against people, processes and technology. No warning to the defenders, one agreed goal — and an honest answer to whether your organization detects and stops a real intrusion.
03 — Accreditations & certifications
Every service on this page is backed by formal accreditation or certification held by CDI NET and its team.
Certification documents available for verification on request — certificate IDs and holder details are not published online.
04 — SURU Platform
SURU is our platform for SOHO and SMB (IMM) companies that need real security without a security department. It turns technical posture into plain-language actions: what is at risk, what to do about it, in what order. Deploy it self-hosted on-premises or as SaaS in the cloud.
OPEN SOURCE
The open-source variant. Free to run, open to inspect, and built to encourage the community to contribute features, detections and translations.
github.com/cybrd0ne/suru-foss →BUILT-IN AI
Adds built-in AI technology on top of the core platform. Findings arrive explained and prioritized in plain language — no analyst required.
CLOUD + AI PROVIDERS
Cloud integration plus connections to major AI providers, for teams that want the deepest analysis and automation the platform offers.
05 — Straight answers
Yes. CDI NET is accredited by DNSC, Romania's national cyber security directorate, to deliver cyber security audit and consultancy services — including audits for entities regulated under NIS2.
Entities designated as essential or important under Romania's transposition of the NIS2 Directive, supervised by DNSC. That includes sectors such as energy, transport, health, digital infrastructure and public administration — and, increasingly, their suppliers.
A scoped engagement against infrastructure, web applications or cloud, under signed rules of engagement. The report contains reproducible findings, risk ratings and concrete remediation steps. A retest of fixed issues is part of the service.
SURU is CDI NET's cyber security platform for non-technical people, SOHO and SMB companies. It runs self-hosted on-premises or as SaaS, in three variants: SURU FOSS (open source), SURU Lite (built-in AI) and SURU AI Plus (cloud integration with major AI providers).
Tell us what you run and what regulation applies to you. We reply with a scoped proposal — audit, NIS2 program, offensive assessment or SURU deployment.
{{ formStatus }}
Prefer email? Email us directly
