PHP2Shell: update PHP on your web servers today
On 21st October, the PHP project released emergency fixes for two critical security flaws in the PHP programming language. PHP runs most of the web, including most WordPress, Drupal, Joomla and Magent
Cybersecurity, with a human edge
Unhack the planet
Senior cybersecurity experts and a 24/7 SOC for organizations that need to take security seriously
We respond to most inquiries within one business day.
Trusted by
How we help
Four services. One team you can rely on
Advisory, offensive security, training, and detection & response. Four services, one team, a complete cybersecurity programme instead of a stack of disconnected tools.
Advisory
vCISO, DPO, risk management, BCP/DR, GDPR, NIS2, DORA and ISO 27001 readiness. Iceland's top InfoSec consultants, embedded in your programme.
Offensive Security
Penetration testing, red and purple teaming, social engineering, and physical intrusion tests by people who build their own tools.
Training
Security developer training, system admin training, executive and staff awareness, NIS2 and DORA training, and the Awergo platform.
Detection & Response
24/7 SOC, threat intelligence, dark web and external attack surface monitoring, incident response and digital forensics. Average 2m15s response, 20m to resolution in 2025.
Syndis in numbers
13 years of building Nordic cybersecurity
Owned outcomes, named experts, measurable response.
400+
Customers
2m
Avg SOC response time
20m
Avg SOC resolution
44%
Incidents handled off-hours
Why Syndis
A team you can rely on. Security built on trust
Most cybersecurity firms sell products. We sell people. Senior experts who name themselves, take responsibility, and explain things clearly.
White-hat hacker DNA
We build our own tools and methodologies. We don't resell a vendor stack. The same people who run our SOC also write our red team payloads.
Full-stack delivery
Advisory, offensive testing, training, and 24/7 detection and response under one roof. One contract, one accountable team.
Proven response performance
2m15s average response time. 20m average resolution. Published, not promised.
Public-sector and critical-infrastructure trust
Banks, energy, transportation, telecom, and parliament rely on us. We hold a 13-year track record in regulated environments.
Human advantage
Iceland's top InfoSec consultants, named on the about page. Not a juniorised global SOC pool.
Insights
Latest from our practitioners
Critical vulnerabilities actively exploited in Danfoss refrigeration controllers (AK-SM 800A)
Responsible Disclosure Disclaimer: Syndis delayed the publication of these results until all identified parties had been notified of the situation and given a chance to remediate. What Companies in th
NIS2 vs DORA: which one applies to you?
Financial entities follow DORA. Most other medium and large organisations in critical sectors follow NIS2. Some follow both. Here is how to tell which applies to you, and what changes when it does.
What buyers usually want to know
Questions, answered
Yes. We operate globally, with 400+ customers and €10M+ revenue. Our Stockholm office covers Nordic and EU clients directly.
Yes. 2m15s average response time and 20m average resolution in 2025. 44% of incidents were handled outside business hours. We publish the numbers.
NIS2, DORA, ISO 27001, SOC 2, PCI DSS, and GDPR. We handle gap analysis, internal audits, and act as your virtual CISO if needed.
Global MSSPs run juniorised analyst pools and standardised playbooks. We use senior named experts, build our own tools, and tailor every engagement. You'll know who is on the keyboard during an incident.
Pricing is bespoke, based on scope and risk profile. Most engagements start with a discovery call and a scoped proposal.
Let's talk
Talk to a senior consultant. Not a sales script
Reykjavík and Stockholm. 13 years of building Nordic cybersecurity. 400+ customers.
We respond to most inquiries within one business day.