Cybersecurity and Digital Identity Networks
{{ headerRule }}
Accredited by DNSC · Sibiu, Romania
CDI NET is a Romanian cyber security company accredited by DNSC, the national cyber security directorate. We audit your systems, help you meet NIS2, and test your defences before an attacker does.
01 / Defensive services
DNSC accredits us to audit networks and information systems. That accreditation sits behind every defensive engagement we run, from the first gap analysis to a working SOC.
We run cyber security audits as a DNSC-accredited provider. The audit measures your real security posture against NIS2 obligations. You get findings your board can act on, not a checkbox exercise.
A NIS2 risk assessment shows which systems and suppliers can hurt you, and how badly. We run the assessment and build the risk register. Then we implement the measures the law expects, on your infrastructure and with your team.
Good governance means management knows the risks and owns the decisions. We build the policies, roles and reporting lines that NIS2 and ISO 27001 require. Everything is sized to your organisation, not copied from a template.
Detection is a capability, not a product you buy. We design and tune SOC and CSIRT functions: log coverage, detection rules, escalation paths and incident response playbooks that hold up in a real breach.
02 / Offensive services
Offensive assessments answer one question: what can a motivated adversary actually do to you? Every engagement runs under signed rules of engagement. It ends with findings you can reproduce and fix.
PENTEST
Controlled attacks on your infrastructure, web applications and cloud environments. You get a report with reproducible steps, risk ratings and concrete fixes. Then we retest to confirm the fixes hold.
PURPLE TEAM
Our attackers and your defenders work side by side. We run known adversary techniques while your SOC watches. Then we tune detections together until the blind spots close. You see measurable improvement, session by session.
RED TEAM
Objective-based adversary simulation against people, processes and technology. The defenders get no warning. There is one agreed goal, and an honest answer to whether your organisation detects and stops a real intrusion.
03 / Accreditations & certifications
Every service on this page is backed by a formal accreditation or certification held by CDI NET and its team.
Certification documents are available for verification on request. Certificate IDs and holder details are not published online.
04 / SURU Platform
SURU is our platform for small offices and SMB companies that need real security without a security department. It turns technical posture into plain language actions: what is at risk, what to do about it, and in what order. Run it on your own hardware or as SaaS in the cloud.
Read more: SURU micro-SOC in depth → Read more: why small offices are targets →
OPEN SOURCE · MPL 2.0
The free, open edition. It turns the firewall you already run and a small Linux box into a layered defence and monitoring stack. Your data stays on your hardware.
Suricata · Zeek · pfBlockerNG · Sigma · OpenSearch · Grafana · mTLS
github.com/cdi-net/suru-foss →BUILT-IN AI
Everything in FOSS, plus a detection and response layer that explains itself. Lite is for teams that want answers, not raw alerts.
Built-in AI · Threat intel · Endpoint agents · Automated response · NIS2 reporting
CLOUD + AI PROVIDERS
Everything in Lite, connected to the cloud and to the major AI providers. For teams that want the deepest analysis and the most automation the platform offers.
Cloud · Major AI providers · Managed option
05 / Straight answers
Yes. DNSC, Romania's national cyber security directorate, accredits CDI NET to deliver cyber security audit and consultancy services. That includes audits for entities regulated under NIS2.
Entities designated as essential or important under Romania's transposition of the NIS2 Directive, supervised by DNSC. That includes sectors such as energy, transport, health, digital infrastructure and public administration. More and more, it includes their suppliers too.
A scoped engagement against infrastructure, web applications or cloud, under signed rules of engagement. The report contains reproducible findings, risk ratings and concrete remediation steps. A retest of fixed issues is part of the service.
SURU is our cyber security platform for non-technical people, small offices and SMB companies. It runs self-hosted or as SaaS, in three editions. SURU FOSS is open source and gives you perimeter defences and SIEM monitoring. SURU Lite adds extended threat detection, threat intelligence, automatic notifications, DNSC-aligned NIS2 and CSIRT incident reporting, and agentic AI with automated response. SURU AI Plus adds cloud integration and connections to the major AI providers.
06 / Contact
Tell us what you run and which regulation applies to you. We reply with a scoped proposal: an audit, a NIS2 programme, an offensive assessment or a SURU deployment.
Prefer email? Email us directly
{{ formStatus }}
