HodeiShield is a cyber risk and compliance platform for European companies that need to prove their security, not just claim it, under DORA, NIS2, ENS, ISO 27001, the EU AI Act and more.
It brings together what most teams run across spreadsheets, email and five different tools (compliance, suppliers, exposure, incidents, endpoints and board reporting) into one continuous cycle with four pillars.
SENSE: see your real exposure
External exposure radar. Certificates, ports, headers and CVEs checked from the outside, with nothing asked of the supplier.
Supply chain and SBOM. Get alerted when a new vulnerability affects a component or supplier you depend on.
Endpoint security. A lightweight agent that reports device posture, with signed attestations.
PREDICT: understand the risk before it hits
Third-party risk. Explainable risk scores for every supplier, with the breakdown and the trend.
Multi-framework compliance. Map one control and one piece of evidence across DORA, NIS2, ENS and ISO 27001 instead of documenting it four times.
ACT: respond, with a human in the loop
Incident management. Classify an incident and see the DORA and NIS2 notification deadlines, with the authority report generated from it.
Supplier questionnaires. Answered on a portal, with evidence attached.
AI governance. Register the AI systems your organisation uses and manage your EU AI Act obligations.
Virtual CISO and HodeiAI. Guidance and an AI assistant that work on your own data. They suggest the next step; they don’t act on their own.
ATTEST: prove it to others
DORA Register of Information. Generate it as an xBRL-CSV package with the EBA structure.
Board reports. A readable view of cyber risk for management and the board.
Trust Center and Attest. Publish your security posture, with evidence whose integrity and origin can be verified cryptographically.
Why trust it
Open by design. A public, open-source verifier and a read-only CLI with signed releases (Sigstore, SLSA).
EU and certified. Hosted in the EU. Operated by Hodeitek, certified ISO 27001 and ENS (Medium), with HodeiShield in scope.
For MSSPs: one console for many client tenants, each strictly isolated, with free proof-of-concepts for partners.
The beta is open. Join it and start with your first framework or your first suppliers.
