{"schemaVersion":2,"listingUrl":"https://haycion.com/advisors/istrosec-com","markdownUrl":"https://haycion.com/advisors/istrosec-com.md","jsonUrl":"https://haycion.com/advisors/istrosec-com.json","name":"IstroSec s.r.o.","headline":"European cybersecurity firm helping SMEs, enterprises and governments with incident response, threat intelligence and cyber advisory","firmType":"Consultancy","website":"https://istrosec.com","location":"Bratislava, Bratislava, Slovakia","status":{"trust":"unclaimed","text":"Unclaimed: compiled by Haycion from the firm's public website, not reviewed by the firm"},"updatedAt":"2026-10-15T21:43:37.789Z","extractedAt":"2026-10-15T21:42:08.118Z","dateLine":{"kind":"checked","date":"2026-10-15T21:42:08.118Z"},"about":"Rapid, hands-on containment and cross-border coordination for organisations facing active cyber incidents, backed by an accredited CSIRT and certified specialists. IstroSec favours operational readiness, evidence-led investigations and practical threat knowledge, proven by a public track record of hundreds of incident response engagements, membership of the LockedShields 2016 winning team, and IstroCSIRT accreditation in Trusted Introducer.","intro":"Responds to active intrusions, performs threat hunting and advises on cyber resilience; GRYPHON RPT has protected 11,500+ endpoints since January 2025 with zero ransomware breaches.","titlePhrase":"Incident Response & CSIRT Consultancy","agentUrl":"https://nowen.ai/agents/istrosec-com","contactUrl":"https://haycion.com/advisors/istrosec-com/contact","boonFrontDoor":{"url":"https://boon.ai/agents/istrosec-com","label":"Send IstroSec s.r.o. a request on Boon","sub":"Boon forwards it to IstroSec s.r.o. and invites them to reply."},"facts":[{"label":"Engagement models","value":"Retainer, Project, Workshop or training"},{"label":"Languages","value":"English, Slovak, Polish"},{"label":"Works in","value":"Europe, United States, Global"}],"idealClient":{"stages":["Bootstrapped","Established business","Enterprise"],"sizes":["11 to 50 people","51 to 200 people","More than 1,000 people"]},"fit":{"goodFit":["A bootstrapped company, an established business or an enterprise with 11 to 50 people, 51 to 200 people or More than 1,000 people","In government, public sector or nonprofit","Based anywhere: they work globally"],"engagement":[{"label":"Retainer","definition":"Ongoing work on a recurring basis."},{"label":"Project","definition":"A defined scope with one outcome."},{"label":"Workshop or training","definition":"Sessions that teach your team a method or a skill."}]},"specialisms":[{"slug":"technology-and-data","label":"Technology and data","hubUrl":"https://haycion.com/advisors/specialism/technology-and-data"},{"slug":"ai-adoption","label":"AI adoption","hubUrl":"https://haycion.com/advisors/specialism/ai-adoption"},{"slug":"operations-and-scaling","label":"Operations and scaling","hubUrl":"https://haycion.com/advisors/specialism/operations-and-scaling"},{"slug":"people-and-talent","label":"People and talent","hubUrl":"https://haycion.com/advisors/specialism/people-and-talent"},{"slug":"digital-transformation","label":"Digital transformation","hubUrl":"https://haycion.com/advisors/specialism/digital-transformation"}],"services":[{"name":"Incident Response","description":"Client engages IstroSec to handle active breaches, using a public track record of hundreds of incident response engagements and certified responders."},{"name":"Managed Defense / CSIRT subscription","description":"Client subscribes to accredited IstroCSIRT services (Trusted Introducer) for ongoing managed defense and CSIRT capabilities."},{"name":"Threat Hunting","description":"Client commissions proactive hunts by certified analysts using intelligence derived from the firm's past engagements."},{"name":"Digital Forensics","description":"Client delegates evidence collection and forensic analysis to specialists certified with GCFE, GCFA and GREM for investigations and legal support."},{"name":"Malware Analysis","description":"Client provides samples for reverse engineering and malware capability analysis performed by analysts holding GREM and OSCP certifications."},{"name":"Offensive Security (Vulnerability Assessment, Pentest, Red/Purple Team)","description":"Client orders vulnerability assessments, pentests or red-team style exercises executed by certified offensive specialists to expose exploitable gaps."},{"name":"Audit & Advisory (including CISO-as-a-service)","description":"Client secures audits or CISO-as-a-service informed by public references from governments and enterprises listed on the firm's site."},{"name":"Trainings and Exercises","description":"Client books practical trainings and simulation exercises delivered by practitioners, including those who contributed to the LockedShields 2016 winning team."}],"proofPoints":[{"title":"GRYPHON RPT endpoint protection","url":"https://istrosec.com/gryphon-ews/","metric":"Since January 2025 the foundational GRYPHON RPT has safeguarded over 11,500 endpoints with zero ransomware breaches reported.","summary":"Since January 2025 GRYPHON RPT has protected over 11,500 endpoints with zero ransomware breaches reported."},{"title":"ADFIR EU project funding","url":"https://istrosec.com/eu-projects/adfir/","metric":"Total eligible expenditure: 889 067,09 €; total funding from the mechanism: 820 795,20 €; eligible expenditure for IstroSec: 170 200,80 €.","summary":"Total eligible expenditure: 889 067,09 €; total funding from the mechanism: 820 795,20 €; eligible expenditure for IstroSec: 170 200,80 €."},{"title":"Research & CVE disclosures","url":"https://istrosec.com/about/research-and-vulnerabilities/","metric":"Disclosed CVE-2022-24501, CVE-2021-41330, CVE-2021-34971 and other vulnerabilities.","summary":"Disclosed CVE-2022-24501, CVE-2021-41330 and CVE-2021-34971 among other vulnerabilities."},{"title":"Managed Defense detection of LummaStealer","url":"https://istrosec.com/blog/lumma-stealer-en/","metric":"Managed Defense team's threat-hunting led to timely detection and mitigation of an active LummaStealer attacker campaign.","summary":"Managed Defense threat-hunting led to timely detection and mitigation of an active LummaStealer attacker campaign."},{"title":"Track record of incident response engagements","url":"https://istrosec.com/","metric":"Track record of hundreds of incident response engagements, including responses to APT groups.","summary":"Has a track record of hundreds of incident response engagements, including responses to APT groups."}],"industries":[{"slug":"government","label":"Government","hubUrl":"https://haycion.com/advisors/industry/government"},{"slug":"public-sector","label":"Public Sector","hubUrl":"https://haycion.com/advisors/industry/public-sector"},{"slug":"nonprofit","label":"Nonprofit","hubUrl":"https://haycion.com/advisors/industry/nonprofit"}],"notableClients":["Globsec","Ion Group","Vestberry","YMS","Ministry of Foreign and European Affairs (Slovakia)","Ministry of Labour / Employment (Slovakia)","Sensoneo"],"certifications":["GCFE","GCFA","GREM","GCIH","CISA","CISSP","OSCP"],"faq":[]}