Cyber Praxis
EN

Digital evidence that holds up. Systems that hold out.

A registered IT court expert and an ISO/IEC 27001 certified firm, Cyber Praxis investigates incidents, tests your defences and supports your compliance, in Belgium and France.

Describe your situation See our services
  • Registered IT court expertListed in the Belgian Federal Public Service Justice register under number EXP2018610.
  • ISO/IEC 27001 certified by SOCOTEC Certification InternationalISO/IEC 27001:2022 certifiedDigital forensics is within the certified scope.
  • Over 25 years in cybersecurityGovernance and CISO roles in finance, the public sector, energy and industry.

25+years of experience

Why Cyber Praxis

A firm of experts, not a reseller

  • Findings that stand up in court

    Court-approved expert: documented method, chain of custody, conclusions limited to what the traces establish.

  • Your data protected by a certified system

    ISO/IEC 27001:2022 certified firm, with digital forensics within the scope.

  • In Belgium and France, in three languages

    Engagements carried out in French, Dutch and English.

Discuss your situation

This month

Is your smartphone being spied on?

New: Cyber Praxis detects spyware and stalkerware on iPhone and Android, monitors the phones of exposed people and carries the investigation through to an expert report. Check-up €899 excl. VAT, protection from €89 excl. VAT per month.

Protect a smartphone

Four areas, one standard of proof

Whether the task is establishing facts before a judge or demonstrating compliance to a regulator, the work rests on the same discipline: findings that are verifiable, documented and limited to what the evidence supports.

  • Digital forensics and expert witness work

    For lawyers, insurers, companies and individuals facing a dispute, fraud or an incident.

    • Analysis of iOS and Android smartphones, computers and servers
    • Detection of spyware and abusive surveillance on phones
    • Extraction and analysis of CCTV recordings and connected devices
    • Investigation after ransomware or intrusion, timeline reconstruction
    • Court-appointed expertise, or technical adviser to one party
    Discuss a case Learn more

  • Penetration testing

    For organisations that want to know what an attacker would find, before they find it.

    • Web application and API testing
    • External and internal infrastructure testing
    • Vulnerability assessment and remediation priorities
    • Simulated phishing campaigns and awareness
    Schedule a test Learn more

  • Outsourced DPO and CISO

    For organisations that need expert leadership without a full-time hire.

    • Data protection officer (DPO), appointed or in support
    • Records of processing, impact assessments, data subject requests
    • Chief information security officer (CISO): roadmap, policies, risk management
    • Artificial intelligence governance under ISO/IEC 42001
    Discuss support Learn more

  • NIS2, CyFun, ISO 27001 and CRA compliance

    For essential and important entities, local authorities, their suppliers and manufacturers of digital products.

    • Assessment of your NIS2 scope and obligations
    • Audits against the Centre for Cybersecurity Belgium's CyberFundamentals (CyFun) framework
    • Preparation for ISO/IEC 27001 certification
    • Cyber Resilience Act (CRA): security requirements and reporting obligations for manufacturers of digital products
    • Incident response plans and exercises
    Assess your situation Learn more

Specialised services

For a specific question: responding to an incident, checking that no attacker is already inside, securing Microsoft 365, governing the use of AI or meeting DORA.

  • Incident response

    Ransomware, intrusion, hacked mailbox

    Contain the attack without destroying evidence, establish the facts and notify on time. A priority response retainer can organise everything in advance.

    How we respond
  • Fixed scope

    Compromise assessment

    Have we already been hacked?

    An email sent without your knowledge, credentials in a leak: we look for traces of an attacker in your accounts, workstations and servers.

    Discover the offer
  • Fixed scope

    Microsoft 365 security audit

    Your tenant reviewed with read-only access

    MFA, email, sharing, logs and applications: gaps ranked by priority, with step-by-step fixes.

    Discover the offer

  • AI governance

    AI Act and ISO/IEC 42001

    Inventory and classification of your AI uses, acceptable use policy, impact assessments and training, in step with the AI Act deadlines.

    Learn more

  • DORA compliance

    Financial sector and ICT providers

    Gap analysis, register of information, major incidents, ICT providers and resilience testing.

    Learn more

Solutions to fix what the audit uncovers

Identifying a gap is not enough. We deploy and support tools chosen for their auditability and controlled cost. Which tool for which audit finding? See the table

  • New

    SOC as a Service

    24/7 monitoring and response, operated in France

    Analysts based in France monitor your workstations, servers, email and accounts day and night, with incident response included. Designed for SMEs, mid-sized companies, municipalities, public social welfare centres and public services.

    Discover the service
  • New

    Mobile security and spyware detection

    Check-up, continuous protection and investigation, on iPhone and Android

    Security analysis, threat detection and monitoring of your smartphones, interpreted by a digital forensics expert. Check-up €899 excl. VAT, protection from €89 excl. VAT per month.

    Discover the service
  • Partner

    VEEZO

    Sovereign network cybersecurity, automated and managed

    VEEZO continuously checks that your defences work, alerts, attests and blocks network threats, with no agents or in-house SOC team. Two offers, Auditor and Officer, and a strong contribution to NIS2, CyFun and ISO 27001 detection and response.

    Discover VEEZO
  • Partner

    Vauban

    Open-source privileged access management (PAM) bastion

    Controls, records and monitors administrator and contractor access to servers, workstations and industrial equipment. Directly addresses the privileged access requirements of NIS2, ISO 27001 and CyFun.

    Discover Vauban
  • Partner

    Action1

    Cloud patch management and vulnerability remediation

    A lightweight agent on every device installs Windows and third-party updates within deadlines set by severity, and shows what is still exposed. A direct answer to the NIS2 vulnerability handling requirement.

    Discover Action1
  • Partner

    OutKept

    Phishing simulations and staff awareness

    Test emails written by local ethical phishers, automated campaigns, a report button and more than 100 training items. Measurable indicators for the NIS2 and CyFun training requirement.

    Discover OutKept

Train and get certified

Official certified training, delivered by practitioners who apply these frameworks in the field. Exam included, from €799 excl. VAT.

  • PECB training

    Certified training on ISO, NIS 2 and AI governance

    Official PECB courses delivered by audit and compliance practitioners, certification exam included. From €799 excl. VAT.

    See the courses

How an engagement works

Every engagement follows the same sequence, so you always know what is being done, why, and at what cost.

  1. First conversation

    You describe the situation in confidence. We check for conflicts of interest and what can be established.

  2. Written proposal

    Scope, method, timing and budget are agreed in writing before any work begins.

  3. Fieldwork

    Acquisition, testing or audit following a documented method, with traceability of media and operations.

  4. Report and debrief

    A clear report for decision-makers and technical staff, walked through with you.

Latest articles

Analysis and field experience on digital forensics, regulation and systems security. All articles

Frequently asked questions

The questions we hear most often at a first contact.

Can a privately commissioned expert report be submitted in court?

Yes. A report prepared at a party's request can be filed as evidence. The judge freely assesses its probative value, which depends mainly on the method: documented acquisition, hash values of the media, chain of custody, identified tools, and conclusions limited to what the traces establish.

What is the difference between a court-appointed expert and a technical adviser?

The court-appointed expert is designated by the judge and works for the court, independently of the parties. A technical adviser is retained by one party to analyse the evidence, attend the expert's operations and make observations. Cyber Praxis can act in either role, never both in the same case.

Is my organisation covered by NIS2 in Belgium?

The Belgian law of 26 April 2024 transposes the NIS2 Directive. It applies to essential and important entities across many sectors, depending on their activity and size. The Centre for Cybersecurity Belgium's CyberFundamentals (CyFun) framework helps structure compliance. A first conversation is usually enough to determine whether and how you are covered.

How is the data you entrust to us protected during an engagement?

Cyber Praxis is ISO/IEC 27001:2022 certified, and digital forensics is within the certified scope. Media and copies are tracked, stored securely and returned or destroyed at the end of the engagement as agreed.

Do you work in France and in other languages?

Yes. Cyber Praxis works in Belgium and France, in French, Dutch and English.

Describe your situation

Briefly describe what you need. Please do not include sensitive details of an ongoing case here: we will discuss them by phone.

Office
Chaussée de Louvain 498 boîte C5
1380 Lasne, Belgium

By clicking “Send request”, you acknowledge the information on how your data is processed to handle your request. Submitting this form does not automatically subscribe you to our marketing communications. See our privacy policy.